大数据安全搜索与共享

摘要/Abstract

摘要： 网络空间存储了海量的用户敏感数据，这些敏感数据的共享有助于企业降低为用户提供个性化服务的成本，实现数据增值，而数据的安全搜索与共享是一个亟待解决的问题.通过分析敏感数据安全现状，对现有的密文搜索技术进行分析，主要从单用户搜索和多用户搜索的模式下可搜索加密在安全模型、搜索表达式扩展和数据动态更新方面分析了研究现状以及存在的不足.针对网络空间大数据特点，提出了网络空间大数据搜索与共享的科学问题与研究内容，主要包括数据动态更新、搜索快速响应、搜索结果可验证性、个性化搜索、搜索权限动态变化5个方面，并对网络空间大数据搜索与共享的研究前景进行了展望.

关键词: 网络空间, 大数据, 安全搜索, 数据共享, 可验证性

Abstract: A great mount of sensitive data is stored in the cyber network. These sensitive data can be shared by the corporations to reduce the cost for serving the clients, which can improve the datas value. However, data searching and sharing is a challenging problem nowadays. In order to preserve the clients privacy, we review the techniques for ciphertext search. We reviewed the research of security model, the search expression and data updating in singleuser searchable encryption and multiuser searchable encryption. Then we present the scientific and research points of secure big data search and sharing in cyber networks, including data updating, fast response, verifiability, search individualism and the search right changing.

Key words: cyber space, big data, secure search, data sharing, verifiable

汪小芬. 大数据安全搜索与共享[J]. 信息安全研究, 2015, 1(3): 217-223.

参考文献

［1］Boneh D, Crescenzo G D, Ostrovsky R, et al. Public key encryption with keyword search［G］ LNCS 3027: Proc of Eurocrypt 2004. Berlin: Springer, 2004: 506522 ［2］Abdalla M, Bellare M, Catalano D, et al. Searchable encryption revisited: Consistency properties, relation to anonymous IBE, and extension［J］. Journal of Cryptology, 2008, 21(3): 350391 ［3］Rhee H S, Park J H, Susilo W, et al. Trapdoor security in a searchable publickey encryption scheme with a designated tester［J］. Journal of Systems and Software, 2010, 83(5): 763771 ［4］Fang L, Susilo W, Ge C, et al. Public key encryption with keyword search secure against keyword guessing attacks without random oracle［J］. Information Science, 2013, 238(20): 221241 ［5］Hwang Y H, Lee P J. Public key encryption with conjunctive keyword search and its extension to a multiuser system［G］ LNCS 4757: Proc of Pairing 2007. Berlin: Springer, 2007: 222 ［6］Boneh D, Waters B. Conjunctive, subset, and range queries on encrypted data［G］ LNCS 4392: Proc of the 4th Theory of Cryptography Conf. Berlin: Springer, 2007: 535554 ［7］Shi E, Bethencourt J, Chan H, et al, Multidimensional range query over encrypted data［C］ Proc of the 2007 IEEE Symp on Security and Privacy. Los Alamitos, CA: IEEE Computer Society, 2007: 350364 ［8］Dong C, Russello G, Dulay N. Shared and searchable encrypted data for untrusted servers［G］ LNCS 5094: Proc of DBSec 2008. Berlin: Springer, 2008: 127143 ［9］Sun W, Yu W, Lou W, et al. Protecting your right: Attributebased keyword search with finegrained ownerenforced search authorization in the cloud［C］ Proc of IEEE INFOCOM 2014. Los Alamitos, CA: IEEE Computer Society, 2014: 1851 ［10］Wang P, Wang H, Pieprzyk J. Keyword fieldfree conjunctive keyword searches on encrypted data and extension for dynamic group［G］ LNCS 5339: Proc of CANS 2008. Berlin: Springer, 2008: 178195 ［11］Kamara S, Papamanthou C, Roeder T. Dynamic searchable symmetric encryption［C］ Proc of ACM CCS 2012. New York: ACM, 2012: 965976 ［12］Goh E. Secure Indexes［DBOL］. Cryptology ePrint Archive, Report 2003216. 2003 ［20151104］. http:eprint.iacr.org2003216 ［13］Curtmola R, Garay J, Kamara S, et al. Searchable symmetric encryption: Improved definitions and efficient constructions［C］ Proc of ACM CCS 2006. New York: ACM, 2006: 7988 ［14］Kurosawa K, Ohtaki Y. UCsecure searchable symmetric encryption［G］ LNCS 7397: Proc of the 16th Int Financial Conf. Berlin: Springer, 2012: 285298 ［15］Song D X, Wagner D, Perrig A. Practical techniques for searches on encrypted data［C］ Proc of IEEE Symp on Security and Privacy. Los Alamitos, CA: IEEE Computer Society, 2000: 4455 ［16］Amanatidis G, Boldyreva A, ONeill A. Provablysecure schemes for basic query support in outsourced databases［G］ LNCS 4602: Proc of DBSec 2007. Berlin: Springer, 2007: 1430 ［17］Chase M, Kamara S. Structured encryption and controlled disclosure［G］ LNCS 6477: Proc of ASIACRYPT 2010. Berlin: Springer, 2010: 577594 ［18］Agrawal R, Kiernan J, Srikant R, et al. Orderpreserving encryption for numeric data［C］ Proc of SIGMOD 2004. New York: ACM, 2004: 563574 ［19］Li Rui, Liu A X, Wang A L, et al. Fast range query processing with strong privacy protection for cloud computing［C］ Proc of the 40th VLDB. Berlin: Springer, 2014: 19531964 ［20］Golle P, Staddon J, Waters B. Secure conjunctive keyword search over encrypted data［G］ LNCS 3089: Proc of ACNS. Berlin: Springer, 2004: 3145 ［21］Ballard L, Kamara S, Monrose F. Achieving efficient conjunctive keyword searches over encrypted data［G］ LNCS 3783: Proc of ICICS. Berlin: Springer, 2005: 414426 ［22］Byun J W, Lee D H, Lim J. Efficient conjunctive keyword search on encrypted data storage system［G］ LNCS 4043: Proc of EuroPKI 2006. Berlin: Springer, 2006: 184196 ［23］Cash D, Jarecki S, Jutla C S, et al. Highlyscalable searchable symmetric encryption with support for Boolean queries［G］ LNCS 8042: Proc of CRYPTO 2013. Berlin: Springer, 2013: 353373 ［24］Jarecki S, Jutla C, Krawczyk H, et al. Outsourced symmetric private information retrieval［C］ Proc of ACM CCS 2013. New York: ACM, 2013: 875888 ［25］Shen E, Shi E, Waters B. Predicate privacy in encryption systems［G］  LNCS 5444: Proc of TCC 2009. Berlin: Springer, 2009: 457473 ［26］Cao Ning, Wang Cong, Li Ming, et al. Privacypreserving multikeyword ranked search over encrypted cloud data［C］ Proc of IEEE INFOCOM 2011. Los Alamitos, CA: IEEE Computer Society, 2011: 829837 ［27］Bosch C, Tang Q, Hartel P, et al. Selective document retrieval from encrypted database［G］ LNCS 7483: Proc of ISC 2012. Berlin: Springer, 2012: 224241 ［28］Kuzu M, Saiful Islam M, Kantarcioglu M. Efficient similarity search over encrypted data［C］ Proc of ICDE 2012. Los Alamitos, CA: IEEE Computer Society, 2012: 11561167 ［29］Sun W, Wang B, Cao Ning, et al. Verifiable privacy preserving multikeyword text search in the cloud supporting similaritybased ranking［J］. IEEE Trans on Parallel and Distributed Systems, 2013, 25(11): 30253035［30］Li H, Yang Y, Luan T H, et al. Enabling finegrained multikeyword search supporting classified subdictionaries over encrypted cloud data［J］. IEEE Trans on Dependable and Secure Computing, 2015, 99: 113 ［31］Kamara S, Papamanthou C. Parallel and dynamic searchable symmetric encryption［C］ Proc of Financial Cryptography (FC) 2013. Berlin: Springer, 2013: 258274 ［32］Stefanov E, Papamanthou C, Shi E. Practical dynamic searchable encryption with small leakage［C］ Proc of NDSS 2014. Los Alamitos, CA: IEEE Computer Society, 2014: 212226 ［33］Cash D, Jaeger J, Jarecki S, et al. Dynamic searchable encryption in verylarge databases: Data structures and implementation［C］ Proc of NDSS 2014. Berlin: Springer, 2014: 8892 ［34］Hahn F, Kerschbaum F. Searchable encryption with secure and efficient updates［C］ Proc of ACM CCS 2014. New York: ACM, 2014: 310320 ［35］Bellovin S, Cheswick W. Privacyenhanced searches using encrypted bloom filters［DBOL］. IACR Cryptology ePrint Archive, 2004 ［20151104］. http:eprint.iacr.org2004022 ［36］Raykova M, Vo B, Bellovin S M, et al. Secure anonymous database search［C］ Proc of CCSW 2009. New York: ACM, 2009: 115126 ［37］Yang Y, Lu H, Weng J. Multiuser private keyword search for cloud computing［C］ Proc of IEEE CloudCom 2011. Los Alamitos, CA: IEEE Computer Society, 2011: 264271

[1]	王逸鹤黄亦芃. 面向网络安全防御防护的大数据平台架构研究[J]. 信息安全研究, 2021, 7(1): 75-80.
[2]	李新友国强. 美国网络空间可信身份国家战略最新进展研究[J]. 信息安全研究, 2020, 6(7): 575-581.
[3]	刘蓓禄凯程浩闫桂勋. 基于异构数据融合的政务网络安全监测平台设计与实现[J]. 信息安全研究, 2020, 6(6): 0-0.
[4]	刘思博刘鹏. 态势感知在电子政务信息安全中的应用[J]. 信息安全研究, 2020, 6(6): 0-0.
[5]	胡国华孟承韵代志兵孙彬刘振凯俞海波李斌何维群张智奇. 基于大数据安全保障的云安全体系研究[J]. 信息安全研究, 2020, 6(5): 404-420.
[6]	李宁. 数据霸权对国家与个人的危害及应对策略研究 [J]. 信息安全研究, 2020, 6(5): 448-453.
[7]	宣耀. “雪亮工程”中的公安视频网安全防护体系建设[J]. 信息安全研究, 2020, 6(2): 171-180.
[8]	王晓牛邓舜怡李梦颖陈任杰. 大数据时代我国个人信息权利化保护制度探析? ——基于政府数据融合背景[J]. 信息安全研究, 2020, 6(12): 1088-1100.
[9]	郭锡泉陈香锡. 大数据环境下情报驱动的网络安全漏洞管理[J]. 信息安全研究, 2020, 6(1): 85-90.
[10]	孟小峰朱敏杰刘俊旭. 大规模用户隐私风险量化研究[J]. 信息安全研究, 2019, 5(9): 778-788.
[11]	孟小峰朱敏杰刘立新刘俊旭. 数据垄断与其治理模式研究[J]. 信息安全研究, 2019, 5(9): 789-797.
[12]	王广清韩金丽方铁城申彦龙. 北京燃气集团工业互联网安全运营平台建设与实践[J]. 信息安全研究, 2019, 5(8): 734-739.
[13]	孙德刚卢丹王妍. 兰德公司对网络空间安全防御的建议[J]. 信息安全研究, 2019, 5(7): 570-575.
[14]	卢丹孙德刚王妍. 美国国土安全部网络空间安全领域指南及项目[J]. 信息安全研究, 2019, 5(7): 576-581.
[15]	吕彬张悦齐标石志鑫. 大数据在信息安全领域的应用分析[J]. 信息安全研究, 2019, 5(7): 599-607.