170 likes | 333 Views
BigSecret : A Secure Data Management Framework for Key-Value Stores. Erman Pattuk Murat Kantarcioglu Vaibhav Khadilkar Huseyin Ulusoy Sharad Mehrotra (Univ. of California at Irvine). Introduction. I ncreas ing amount of internet usage Number of active users
E N D
BigSecret: A Secure Data Management Framework for Key-Value Stores ErmanPattuk Murat Kantarcioglu VaibhavKhadilkar HuseyinUlusoy SharadMehrotra (Univ. of California at Irvine)
Introduction • Increasing amount of internet usage • Number of active users • Number of transactions per unit time • Size of the stored data • A new concept: BigData • Existing techniques failed to satisfy new requirements • To cope with BigData, Key-Value Stores emerge as a popular option • Efficiency and Scalability
Introduction Amazon SimpleDB Google BigTable Microsoft Azure …
Proposed Framework: BigSecret Public Amazon SimpleDB Google BigTable Microsoft Azure … BigSecret Private Dept 2 Dept 1
Outline • Partitioning data among multiple cloud providers • Storing data on a provider, while protecting efficiency and privacy • Querying outsourced data • Experiments
Data and Workload Sharing Provider-1 BigSecret Provider-2 Constraints Data Owner Provider-3
Constraints in Partitioning Provider-1 10% Data 20% Workload Provider-2 BigSecret 20% Data 10% Workload 15% Data 13% Workload Monetary Cost < 10 Security Disclosure < 5% Optimize Execution Time … Provider-N
Storing Data in Secure Form • Transform data using Encryption Models
Query Execution GET: “John” – “traits” – “height” GET: A12C04 – BF2139 – 51231D Provider-1 BigSecret RESULT: “170 cm” RESULT: 1295DC10
Experiments • Performed experiments using Yahoo! Cloud Serving Benchmark • Created tables consisting of 1,2,4,8,16, and 32 Millions of rows • Each row has 10 Key-Value entries of 100B • Created 3 different workloads • 1K queries for single-cloud experiments • 100K queries for multi-cloud experiments
Single-Cloud Experiments Workload – 1 (Get intensive)
Single-Cloud Experiments Workload – 2 (Put intensive)
Single-Cloud Experiments Workload – 3 (Scan intensive)
Multi-Cloud Experiments Workload – 3 (Scan intensive)
Conclusion • If Scan is needed, Model-1 can be used • Otherwise, it’s not so efficient • May use other techniques to support Scan • Model-2 and 3 perform well with minor overhead • We plan to add support for other Key-Value stores • BigSecret is open source • https://github.com/ermanpattuk/BigSecret
Q&A Thank You