TY - GEN
T1 - SafeBox
T2 - 2017 International Conference on Security, Pattern Analysis, and Cybernetics, SPAC 2017
AU - Wang, Guofeng
AU - Liu, Chuanyi
AU - Dong, Yingfei
AU - Pan, Hezhong
AU - Han, Peiyi
AU - Fang, Binxing
N1 - Publisher Copyright:
© 2017 IEEE.
PY - 2017/7/2
Y1 - 2017/7/2
N2 - Confidential data is often encrypted before it is uploaded to cloud servers. However, client-controlled encryption often poses a major barrier towards the full functionalities of cloud services. This paper presents SafeBox, a new Cloud Access Security Broker (CASB)-based approach that protects sensitive information against attackers with full control of cloud servers, and allows clients to search and share encrypted data transparently. It addresses the following challenges: First, SafeBox brings almost no loss of functionalities for protecting sensitive information in cloud applications. It safeguards not only textual input data but also uploaded files. Second, it allows a server to perform keyword-based searching over encrypted contents, and does not modify the current cloud interfaces or users' habits. Finally, it enables encrypted data sharing between different brokers efficiently. Our experimental evaluations on multiple cloud applications show that SafeBox has modest overheads and can be applied to practical use.
AB - Confidential data is often encrypted before it is uploaded to cloud servers. However, client-controlled encryption often poses a major barrier towards the full functionalities of cloud services. This paper presents SafeBox, a new Cloud Access Security Broker (CASB)-based approach that protects sensitive information against attackers with full control of cloud servers, and allows clients to search and share encrypted data transparently. It addresses the following challenges: First, SafeBox brings almost no loss of functionalities for protecting sensitive information in cloud applications. It safeguards not only textual input data but also uploaded files. Second, it allows a server to perform keyword-based searching over encrypted contents, and does not modify the current cloud interfaces or users' habits. Finally, it enables encrypted data sharing between different brokers efficiently. Our experimental evaluations on multiple cloud applications show that SafeBox has modest overheads and can be applied to practical use.
KW - Cloud Data Security
KW - Encrypted Data Sharing
KW - Searchable Encryption
UR - https://www.scopus.com/pages/publications/85050632676
U2 - 10.1109/SPAC.2017.8304356
DO - 10.1109/SPAC.2017.8304356
M3 - 会议稿件
AN - SCOPUS:85050632676
T3 - 2017 International Conference on Security, Pattern Analysis, and Cybernetics, SPAC 2017
SP - 648
EP - 653
BT - 2017 International Conference on Security, Pattern Analysis, and Cybernetics, SPAC 2017
PB - Institute of Electrical and Electronics Engineers Inc.
Y2 - 15 December 2017 through 17 December 2017
ER -