acm transactions on privacy and securityacm transactions on privacy and security

ACM Transactions on Privacy and Security - ACM Digital Library 7. This article also makes PHE and PPE schemes applicable to resource-constrained IoT devices through the use of novel optimizations and presents additional empirical evaluation results, in particular with respect to encryption (and associated optimizations) on IoT devices and key management. ACM Transactions on Privacy and Security - ACM Digital Library 8. In ACM Conf. Please download or close your previous search result export first before starting a new bulk export. To complete such queries, C3PO keeps track of each device group and saves query results of each group separately. However, this trend is fueling concerns over data confidentiality and is becoming one of the major factors preventing further widespread adoption of IoT solutions. To keep track of what keys are sent to each device and to be able to identify which devices need to be sent new keys during key rotation, the key manager keeps a map of key IDs per device (key metadata). The client device emits a message every time the client requests to see a specific data point, in response to which, the requested values are retrieved. We assume that the adversary cannot make changes in the queries, results, or data stored in the cloud and consider integrity and availability attacks to be out of scope for our system. EXCLUSIVE SUBMISSION. Check if you have access through your login credentials or your institution to get full access on this article. The results show that on average C3PO operates with only \(23\%\) higher latency than running the same computation over plaintext data. Tracking of data lineages becomes complex, yet it is necessary to determine which PHE or PPE schemes need to be applied to initial input data. (12) \[\begin{equation} R= \Bigl \lfloor \frac{K}{T} \Bigr \rfloor - 1 \Rightarrow R\approx \Bigl \lfloor \frac{\sqrt {M^2+4MK}-M}{2M} \Bigr \rfloor . A programmer simply annotates the stream with the desired operation and C3PO deduces the cryptosystem that needs to be used at the source IoT devices. Homomorphic addition can be carried out when ciphertexts contain packed values, because arithmetically \((a_1 \circ \cdots \circ a_n) + (b_1 \circ \cdots \circ b_n) = (a_1 + b_1) \circ \cdots \circ (a_n+ b_n)\). C3POs processes in the cloud are implemented by modifying Apache Storm. We use post-encryption packing to pack these four values into a single ciphertext, thereby reducing the ciphertext size by 4. [29] describe the design of SecureStreams, a streaming system that uses SGX to preserve confidentiality. 16. Heartbeat analysis response time. 8. 8. TOPS can therefore reject perfectly good papers that are appropriate for theory-oriented journals. The main security objective of C3PO is to preserve the confidentiality of data at rest and data in use in the presence of a semi-honest adversary. We create a vector of these values and invert them to get the vector \([1, 1/3,1/2,1/6]\), normalized to \([6, 2, 3, 1]\). Droplet [55] proposes a decentralized access control mechanism to access encrypted data present on the cloud using blockchain technology. Call for Papers: Special Issue on Computational Advances for Industrial Transformation Towards Smart and Sustainable Society. Google Scholar; Poulami Das, Sebastian Faust, and Julian Loss. Perform Grammar Check & more. 4. Authors should submit a brief statement of compliance with this policy. The ACM Digital Library is published by the Association for Computing Machinery. 26, No. The upper limit within which the system needs to report tolls and accidents is 5 s. The benchmark rates the system by the highest number of expressways (L) the system can support while maintaining these invariants. Fig. The Editor-in-Chief forwards the paper to an Editor for processing. In the general case (single-group mode), there is simply a single all-encompassing group. Section 4 gives more details about the C3PO API. C3PO supports key rotations without disrupting the output. Publication of such work in TOPS usually requires consolidation of several conference papers and significant additional new material which has not been previously published. Fig. 20. When tasks are delivered to the trusted tier for execution, the trusted tier first computes a hash of the task class and compares it with the hash generated before deployment. C3PO then performs homomorphism analysis on the graph to generate an encryption strategy, containing the cryptosystems required to execute the graph in a confidential manner. To reduce ciphertext size overhead, C3PO adapts a technique introduced by Ge et al. The ACM Digital Library is published by the Association for Computing Machinery. 2019. Response time for LRB on Storm. In other words, spouts produce the data streams upon which the bolts operate. TIME LINE. Copyright 2023 ACM, Inc. front matter (TOC, masthead, submission information), Differentially Private Real-Time Release of Sequential Data, Contact Discovery in Mobile Messengers: Low-cost Attacks, Quantitative Analyses, and Efficient Mitigations, A Systematic Analysis of the Capital One Data Breach: Critical Lessons Learned, Industrial Control Systems Security via Runtime Enforcement, What Users Want From Cloud Deletion and the Information They Need: A Participatory Action Study, Pump Up Password Security! However, a major barrier for cloud adoption is real and perceived lack of security. 5 https://github.com/ssavvides/homomorphic-c. Management and querying of encrypted data. The number of items that the map can hold is configurable and adjusted depending on the memory capacity of each IoT device. Evaluating and Enhancing Risk-Based Authentication on a Real-World Large-Scale Online Service. Effect of varying the number of key groups. For instance, the seminal CryptDB [48] was implemented on top of the MySQL database, while Crypsis [59] was implemented in Apache Hadoop (Pig), and Cuttlefish [51, 53] and Symmetria [52] were implemented in Apache Spark. Since an unused field may be at any index within a tuple, if we simply drop the field, then program logic that accesses other fields using their indices may fail. ACM Transactions on Privacy and Security, Volume 25 - dblp Key rotation. acm transactions on privacy and securityissn2471-2566 e-issn2471-2574 4jcr:q1 1.974 article sci 3 assoc If privacy concerns are addressed, then individuals may be more open to sharing their data, which is critical for contact tracing applications to help mitigate pandemics or epidemics [12]. The stream emitted by each vertex is declared explicitly in the vertex itself. ACMhas partnered withhttps://www.overleaf.com/, a free cloud-based, authoring tool, to provide anACMLaTeX authoring template. ACM authoring templates and detailed instructions on formatting can be found athttp://www.acm.org/publications/authors/submissions. Our evaluations show that we can meet latency requirements even with high volumes of encrypted traffic. 19 Citations Recommend Follow Privacy Policies Across the Ages: Content of Privacy Policies 1996-2021 New Article Isabel Wagner It is well-known that most users do not read privacy policies,. However, ACM encourages you to take the additional step to claim ownership of all your published works via the ORCID site. The journal takes a wide view of this topic and its mission is to publish the best original research in this area. A subset of these keys is shared between multiple IoT devices, since this is a requirement for homomorphic operation correctness. After presenting background information on PHE, PPE, and continuous queries (Section 2) and giving an overview of our solution (Section 3) including the assumed threat model and architecture of C3PO, this article makes the following contributions through C3PO and its features as outlined below: Programming abstractions (Section 4): We propose an abstraction of secure streams, embodied in the C3PO API for typical plaintext streams, to enable programmers to conveniently express confidentiality-preserving continuous query programs. Attack (a) does not compromise confidentiality, since the untrusted cloud does not possess the secret keys required to reveal the plaintext data. Furthermore, in the next few paragraphs, we demonstrate a novel way of ciphertext packing for AHE as well as MHE schemes and a method of packing values after they have been encrypted, which we call post-encryption packing. To avoid this problem, during compile time C3PO keeps track of the indices of unused fields and appropriately adjusts all other indices that appear in program logic. Please download or close your previous search result export first before starting a new bulk export. Please download or close your previous search result export first before starting a new bulk export. 2. ACM Transactions on Privacy and Security, Volume 22 - dblp Next, we benchmark both the Storm topology graph and the transformed C3PO graph for LRB. LRB also specifies latency invariants such as the time within which a toll must be calculated and the time within which an accident has to be identified. You need to opt-in for them to become active. Encryption of PHE and PPE schemes is commonly computationally expensive, and a straightforward use of these schemes on IoT devices with limited resources is unlikely to be practical. MHE packing does not support secondary operations. In most reports about a cyberattack, you will often hear that it succeeded because a single With the advent of Industry 4.0, industrial facilities and critical infrastructures are transforming into an ecosystem of heterogeneous physical and cyber components, such as programmable logic controllers, increasingly interconnected and therefore Current cloud deletion mechanisms fall short in meeting users various deletion needs. The ACM Conflict of Interest (COI) Policy describes what a COI is, who is responsible for being aware of such conflicts, how to manage COIs, and how to report violations. Multiplication between a packed ciphertext and a packed plaintext is not supported but multiplication between a packed ciphertext and a single (unpacked) plaintext value is supported using Equation (4), since mathematically \((a_1 \circ \cdots \circ a_n) \times b = (a_1 \times b) \circ \cdots \circ (a_n \times b)\). The graph running in the cloud keeps track of daily, weekly, monthly, and yearly statistics. For plaintext program graphs, this is usually not a substantial overhead, and the additional computation required for removing unused fields may not always offset the improvement that is observed. TIME LINE. ACMauthoring templates are found at:http://www.acm.org/publications/authors/submissions. In his seminal work, Gentry introduced an implementable FHE scheme [20] that has been becoming more practical since References [21, 37], but is still not suited for encryption-enabled continuous query processing due to its prohibitive cost. Fig. For different field families, C3PO uses a different f, which will generate a different key, even if the cryptosystem is the same. For operations to be performed over encrypted data, fields involved in the same operation must be encrypted using the same key. The journal is intended for professors, practitioners and scientists who are interested in such subjects of scientific research. 4 Volume 24, Issue 4November 2021 Editor: Ninghui Li Publisher: Association for Computing Machinery New York NY United States ISSN: 2471-2566 EISSN: 2471-2574 Tags: Malware and its mitigation + 7 Subscribe to Journal Recommend ACM DL ALREADY A SUBSCRIBER? Authors are required to provide full disclosure of prior publication, prior rejection and current submissions of this line of work by the authors. Field-level key identification: ensure fields that are not part of a common operation do not share encryption keys. Our cryptosystems including the extensions and optimizations described in Section 5 are implemented in C5 and accessed where necessary through the Java native interface (JNI). Matrix A represents how much each vertex amplifies its input. We later relax this requirement and show how encryption keys of IoT devices can be updated in case of a compromise (Section 6). E.g., to perform the operation \(x_1+x_2\) both \(x_1\) and \(x_2\) must be encrypted with the same AHE scheme and using the same key, or the operation will generate a wrong result. To reduce the use of DET and OPE schemes, C3PO issues a warning to the programmer when the application requires to use DET or OPE, giving the option to the programmer to either deploy the parts of the query that would otherwise require DET or OPE operations on the trusted resources at the expense of performance, or deploy the application as is, an option that could be viable if the data requiring DET or OPE holds semi-sensitive or high entropy information such as timestamps. Our masking process itself is very lightweight. Instead, in this work, we introduce another approach where before each packed value we include a series \(P\) of 0 bits so in case of overflow, the preceding value will not be affected: \(P\circ a_1 \circ P\circ a_2 \circ \cdots \circ P\circ a_n\). C3PO uses Paillier [43] as its AHE scheme to avoid high ciphertext expansion and avoid high decryption costs compared to, for example, the Goldwasser-Micali cryptosystem [23] that supports homomorphic addition on single bit inputs leading to higher ciphertext sizes and the Benaloh cryptosystem [5] that has a decryption time dependent on the security parameter, which makes decryption more expensive as that parameter increases.