The availability of cloud services offered by different providers brings several advantages to users and companies, facilitating the storage, sharing, and processing of data. At the same time, the adoption of cloud services brings new security and privacy risks and challenges. As a matter of fact when leveraging cloud-based services for data storage and processing, data owners loose direct control on their data. Data and queries over them could then be at risk for both potentially improper exposure, compromising their confidentiality, or tampering, compromising their integrity. In this paper, we discuss the main issues to be addressed for guaranteeing data security and privacy in cloud-based storage and processing. We illustrate the different challenges to be considered and the research directions toward their solutions.

Protecting Data and Queries in Cloud-Based Scenarios / S. De Capitani di Vimercati, S. Foresti, P. Samarati. - In: SN COMPUTER SCIENCE. - ISSN 2662-995X. - 4:5(2023 Sep), pp. 440.1-440.21. [10.1007/s42979-023-01862-6]

Protecting Data and Queries in Cloud-Based Scenarios

S. De Capitani di Vimercati
Primo
;
S. Foresti
Penultimo
;
P. Samarati
Ultimo
2023

Abstract

The availability of cloud services offered by different providers brings several advantages to users and companies, facilitating the storage, sharing, and processing of data. At the same time, the adoption of cloud services brings new security and privacy risks and challenges. As a matter of fact when leveraging cloud-based services for data storage and processing, data owners loose direct control on their data. Data and queries over them could then be at risk for both potentially improper exposure, compromising their confidentiality, or tampering, compromising their integrity. In this paper, we discuss the main issues to be addressed for guaranteeing data security and privacy in cloud-based storage and processing. We illustrate the different challenges to be considered and the research directions toward their solutions.
Cloud-based scenario; Data protection; Selective data sharing; Access confidentiality; Querying encrypted Data; Query integrity; Distributed query execution;
Settore INF/01 - Informatica
   Machine Learning-based, Networking and Computing Infrastructure Resource Management of 5G and beyond Intelligent Networks (MARSAL)
   MARSAL
   EUROPEAN COMMISSION
   H2020
   101017171

   Green responsibLe privACy preservIng dAta operaTIONs
   GLACIATION
   EUROPEAN COMMISSION

   SEcurity and RIghts in the CyberSpace (SERICS)
   SERICS
   MINISTERO DELL'UNIVERSITA' E DELLA RICERCA
   codice identificativo PE00000014
set-2023
10-giu-2023
Article (author)
File in questo prodotto:
File Dimensione Formato  
s42979-023-01862-6.pdf

accesso aperto

Tipologia: Publisher's version/PDF
Dimensione 1.76 MB
Formato Adobe PDF
1.76 MB Adobe PDF Visualizza/Apri
Pubblicazioni consigliate

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/2434/975749
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 3
  • ???jsp.display-item.citation.isi??? ND
social impact