[Research] Privacy Preserving Data Services in the Cloud

When you utilize a data service in the cloud to store your business data, among other concerns, there are security and privacy implications. Two key concerns are data confidentiality and access privacy. In this post, I am briefly discussing these two concerns and highlight the related research work.

Data confidentiality - prevent the cloud from seeing the plaintext data.
Access Privacy - prevent the cloud from inferring information about data from the queries made.


Data confidentiality research:

• The challenge is to allow query processing while keeping the data and query oblivious
• Researchers have mainly taken two approaches
• Encrypted database and encrypted query processing
• Projects: CryptDB, DBMask, Monomi
• Trusted computing - keep the sensitive content in a trusted container
• Projects: TrustedDB, CipherBase

Access Privacy research:

• The challenge is to support minimal leakage of query access pattern while keeping the computational cost to reasonably low so that the approach is practical.
• There are two main paths that researchers have taken to solve this problem:
• Private Information Retrieval (PIR) based approaches [1]
• Oblivious RAM (ORAM) based approaches  [1] 

Introduction to Tokenization

In the following presentation, I am going over the basic details of security tokenization starting from its definition.

Introduction to Tokenization from Nabeel Mohamed

I will be going over practical integration and  deployment options for tokenization in another presentation. Please stay tuned!

Introduction to Oracle Transparent Data Encryption (TDE) 12c

The following slide deck gives you an introduction to Oracle TDE. It is by no means a complete introduction. However, it should give you sufficient information to get started with TDE.

Oracle Transparent Data Encryption (TDE) 12c from Nabeel Mohamed

I encourage you to follow Oracle documentation to learn more details.