云环境下数据库机密性保护技术研究综述

发布时间：2018-09-17 13:49

【摘要】：随着云计算的迅猛发展,越来越多的企业和个人把数据外包到位于公有云的数据库系统上管理.然而,数据安全和隐私保护方面的顾虑已经成为阻碍用户更广泛采用云计算和云数据库的一大因素.在云数据外包业务和云数据安全需求的强力驱动下,云环境下数据库的机密性保护成为了重要的研究课题.该综述首先提出了云数据库机密性保护的五级安全模型,使得该文中涉及的众多跨领域、跨问题的安全技术得以在统一的框架中讨论;然后,针对该安全模型中的3级至5级的机密性威胁(云环境下的新型威胁),系统性地总结和分析了对其相应的三项机密性保护的关键技术——密文查询(3级),可信硬件(4级)和访问模式保护(5级);进而在此基础上,介绍和比较了目前最先进的安全云数据库系统;最后,展望了云数据库机密性保护技术的研究趋势,指出了若干研究方向.
[Abstract]:With the rapid development of cloud computing, more and more enterprises and individuals outsource data to the database system located in the public cloud. However, data security and privacy concerns have become a major obstacle to the wider adoption of cloud computing and cloud databases. Driven by cloud data outsourcing and cloud data security requirements, database confidentiality protection in cloud environment has become an important research topic. This review first proposes a five-level security model for cloud database confidentiality protection, which makes many cross-domain and cross-problem security techniques involved in this paper discussed in a unified framework. Aiming at the 3 to 5 levels of classified threats (new threats in cloud environment) in the security model, this paper systematically summarizes and analyzes the key technology of the corresponding three items of confidentiality protection-ciphertext query (level 3), trusted hard Component (level 4) and access mode protection (level 5); on this basis, This paper introduces and compares the most advanced secure cloud database systems at present, and finally, looks forward to the research trend of cloud database confidentiality protection technology and points out some research directions.
【作者单位】：清华大学计算机科学与技术系;清华大学信息技术研究院;清华信息科学与技术国家实验室;
【基金】：国家自然科学基金(91646202) 国家“八六三”高技术研究发展计划项目基金(SS2015AA020102) 千人计划清华大学自主科研计划资助~~
【分类号】：TP309;TP311.13

【相似文献】