Data Leakage Mitigation of User-Defined Functions on Secure Personal Data Management Systems - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2022

Data Leakage Mitigation of User-Defined Functions on Secure Personal Data Management Systems

Robin Carpentier
Iulian Sandu Popa
Nicolas Anciaux

Abstract

Personal Data Management Systems (PDMSs) arrive at a rapid pace providing individuals with appropriate tools to collect, manage and share their personal data. At the same time, the emergence of Trusted Execution Environments (TEEs) opens new perspectives in solving the critical and conflicting challenge of securing users' data while enabling a rich ecosystem of data-driven applications. In this paper, we propose a PDMS architecture leveraging TEEs as a basis for security. Unlike existing solutions, our architecture allows for data processing extensiveness through the integration of any userdefined functions, albeit untrusted by the data owner. In this context, we focus on aggregate computations of large sets of database objects and provide a first study to mitigate the very large potential data leakage. We introduce the necessary security building blocks and show that an upper bound on data leakage can be guaranteed to the PDMS user. We then propose practical evaluation strategies ensuring that the potential data leakage remains minimal with a reasonable performance overhead. Finally, we validate our proposal with an Intel SGX-based PDMS implementation on real data sets.
Fichier principal
Vignette du fichier
Data Leakage Mitigation of User-Defined Functions on Secure Personal Data Management Systems.pdf (1.11 Mo) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03941879 , version 1 (16-01-2023)

Identifiers

  • HAL Id : hal-03941879 , version 1

Cite

Robin Carpentier, Iulian Sandu Popa, Nicolas Anciaux. Data Leakage Mitigation of User-Defined Functions on Secure Personal Data Management Systems. BDA 2022 - 38ème Conférence sur la Gestion de Données - Principes, Technologie et Applications, Oct 2022, Clermont-Ferrand, France. ⟨hal-03941879⟩
24 View
39 Download

Share

Gmail Facebook X LinkedIn More