Preserving user query privacy in cloud-based security services.
Saved in:
| Title: | Preserving user query privacy in cloud-based security services. |
|---|---|
| Authors: | Chen, Yen-Chung1, Wu, Yu-Sung1, Tzeng, Wen-Guey1 |
| Source: | Journal of Computer Security. 2014, Vol. 22 Issue 6, p997-1024. 28p. |
| Subjects: | Cloud computing security measures, Computer security research, Data protection research, Intrusion detection systems (Computer security), Uniform Resource Locators |
| Abstract: | Cloud-based security services become popular in protection against security attacks for resource-constrained end-user devices. With abundant hardware at the cloud and strong support by security professionals, cloud-based security services can provide better protection than traditional security monitoring agents. However, security services usually involve the inspection of private system states or user behavior, which should not be disclosed to an untrusted entity, such as a cloud service provider. Maintaining end-user privacy and allowing security services to work on the cloud seem contradictory.In this paper, we present a framework for building privacy-preserving cloud-based security services. The framework consists of an architecture for building cloud-based security services and a technique, called private signature filtering, to preserve end-user privacy. The framework supports security monitoring signatures whose correspondence with end-user device queries can be established through conjunction of keywords and numeric value ranges. The framework also allows a trusted middle layer to do a part of the security monitoring computation for the end-user device to reduce the computation overhead on the end-user device.We implement two prototype systems for the cloud-based network intrusion service and the cloud-based malicious URL detection service, to verify effectiveness of our design. The experimental results show that the framework can indeed ensure end-user privacy with acceptable performance overhead in a practical cloud-based security service setting. [ABSTRACT FROM AUTHOR] |
| Copyright of Journal of Computer Security is the property of Sage Publications Inc. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) | |
| Database: | Engineering Source |
| FullText | Links: – Type: pdflink Text: Availability: 0 |
|---|---|
| Header | DbId: egs DbLabel: Engineering Source An: 99988668 AccessLevel: 6 PubType: Academic Journal PubTypeId: academicJournal PreciseRelevancyScore: 0 |
| IllustrationInfo | |
| Items | – Name: Title Label: Title Group: Ti Data: Preserving user query privacy in cloud-based security services. – Name: Author Label: Authors Group: Au Data: <searchLink fieldCode="AR" term="%22Chen%2C+Yen-Chung%22">Chen, Yen-Chung</searchLink><relatesTo>1</relatesTo><br /><searchLink fieldCode="AR" term="%22Wu%2C+Yu-Sung%22">Wu, Yu-Sung</searchLink><relatesTo>1</relatesTo><br /><searchLink fieldCode="AR" term="%22Tzeng%2C+Wen-Guey%22">Tzeng, Wen-Guey</searchLink><relatesTo>1</relatesTo> – Name: TitleSource Label: Source Group: Src Data: <searchLink fieldCode="JN" term="%22Journal+of+Computer+Security%22">Journal of Computer Security</searchLink>. 2014, Vol. 22 Issue 6, p997-1024. 28p. – Name: Subject Label: Subjects Group: Su Data: <searchLink fieldCode="DE" term="%22Cloud+computing+security+measures%22">Cloud computing security measures</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+security+research%22">Computer security research</searchLink><br /><searchLink fieldCode="DE" term="%22Data+protection+research%22">Data protection research</searchLink><br /><searchLink fieldCode="DE" term="%22Intrusion+detection+systems+%28Computer+security%29%22">Intrusion detection systems (Computer security)</searchLink><br /><searchLink fieldCode="DE" term="%22Uniform+Resource+Locators%22">Uniform Resource Locators</searchLink> – Name: Abstract Label: Abstract Group: Ab Data: Cloud-based security services become popular in protection against security attacks for resource-constrained end-user devices. With abundant hardware at the cloud and strong support by security professionals, cloud-based security services can provide better protection than traditional security monitoring agents. However, security services usually involve the inspection of private system states or user behavior, which should not be disclosed to an untrusted entity, such as a cloud service provider. Maintaining end-user privacy and allowing security services to work on the cloud seem contradictory.In this paper, we present a framework for building privacy-preserving cloud-based security services. The framework consists of an architecture for building cloud-based security services and a technique, called private signature filtering, to preserve end-user privacy. The framework supports security monitoring signatures whose correspondence with end-user device queries can be established through conjunction of keywords and numeric value ranges. The framework also allows a trusted middle layer to do a part of the security monitoring computation for the end-user device to reduce the computation overhead on the end-user device.We implement two prototype systems for the cloud-based network intrusion service and the cloud-based malicious URL detection service, to verify effectiveness of our design. The experimental results show that the framework can indeed ensure end-user privacy with acceptable performance overhead in a practical cloud-based security service setting. [ABSTRACT FROM AUTHOR] – Name: AbstractSuppliedCopyright Label: Group: Ab Data: <i>Copyright of Journal of Computer Security is the property of Sage Publications Inc. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.) |
| PLink | https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=99988668 |
| RecordInfo | BibRecord: BibEntity: Identifiers: – Type: doi Value: 10.3233/JCS-140520 Languages: – Code: eng Text: English PhysicalDescription: Pagination: PageCount: 28 StartPage: 997 Subjects: – SubjectFull: Cloud computing security measures Type: general – SubjectFull: Computer security research Type: general – SubjectFull: Data protection research Type: general – SubjectFull: Intrusion detection systems (Computer security) Type: general – SubjectFull: Uniform Resource Locators Type: general Titles: – TitleFull: Preserving user query privacy in cloud-based security services. Type: main BibRelationships: HasContributorRelationships: – PersonEntity: Name: NameFull: Chen, Yen-Chung – PersonEntity: Name: NameFull: Wu, Yu-Sung – PersonEntity: Name: NameFull: Tzeng, Wen-Guey IsPartOfRelationships: – BibEntity: Dates: – D: 01 M: 12 Text: 2014 Type: published Y: 2014 Identifiers: – Type: issn-print Value: 0926227X Numbering: – Type: volume Value: 22 – Type: issue Value: 6 Titles: – TitleFull: Journal of Computer Security Type: main |
| ResultId | 1 |
