On Information Leakage in Deduplicated Storage Systems
Abstract
Most existing cloud storage providers rely on data deduplication in order to significantly save storage costs by storing duplicate data only once. While the literature has thoroughly analyzed client-side information leakage associated with the use of data deduplication techniques in the cloud, no previous work has analyzed the information leakage associated with access trace information (e.g., object size and timing) that are available whenever a client uploads a file to a curious cloud provider. In this paper, we address this problem and analyze information leakage associated with data deduplication on a curious storage server. We show that even if the data is encrypted using a key not known by the storage server, the latter can still acquire considerable information about the stored files and even determine which files are stored. We validate our results both analytically and experimentally using a number of real storage datasets.
People
BibTex
@inproceedings{ritzdorf2016information,
author = {Ritzdorf, Hubert and Karame, Ghassan and Soriente, Claudio and Capkun, Srdjan},
title = {{On Information Leakage in Deduplicated Storage Systems}},
booktitle = {Proceedings of the 2016 ACM on Cloud Computing Security Workshop (CCSW 2016)},
address = {Vienna, Austria},
year = 2016,
month = oct,
publisher = {Association for Computing Machinery},
doi = {10.1145/2996429.2996432},
url = {https://doi.org/10.1145/2996429.2996432}
}Research Collection: 20.500.11850/122878