SDB - A Secure Query Processing System for Cloud Databases

What is SDB

SecureDB is a system that allows query processing on encrypted data in cloud environment.

As Database-as-a-service(DBaaS) such as Amazon Web Service and Microsoft Azure gets more economically available, security issue becomes one of the major reasons that prevent data owners from enjoying such service. Despite the advantages of computation elasticity and scalability provided by the cloud service provider, data owner cannot afford the risk of having highly sensitive data compromised on the cloud, such as clients’ credit card information, since attackers may gain accesses to disk-resident data, or observe the query results returned to data owners.

In this project, we implement a secret-sharing scheme between a data owner and service provider such that a wide range of SQL queries can be executed on the service provider, without revealing sensitive information.

Feature

Security

SDB is secure against database knowledge threat, query result threat and chosen ciphertext threat.

Performance

Since secure operators are implemented as User Defined Functions, there's no inter-process communication, less memory copy and network transfer.

Extensibility

SecureDB components are developed as add-ons on top of an existing DB such that we leverage as much advanced techniques provided by a DB as possible(e.g. normal query optimization, parallel processing, cluster management).