Data Lineage in Malicious Environments

(2015) Data Lineage in Malicious Environments.

Text TDSC.2015.2399296 - Published Version Download (44kB)

Abstract

Intentional or unintentional leakage of confidential data is undoubtedly one of the most severe security threats that organizations face in the digital era. The threat now extends to our personal lives: a plethora of personal information is available to social networks and smartphone providers and is indirectly transferred to untrustworthy third party and fourth party applications. In this work, we present a generic data lineage framework Lime for data flow across multiple entities that take two characteristic, principal roles (i.e., owner and consumer). We define the exact security guarantees required by such a data lineage mechanism toward identification of a guilty entity, and identify the simplifying non-repudiation and honesty assumptions. We then develop and analyze a novel accountable data transfer protocol between two entities within a malicious environment by building upon oblivious transfer, robust watermarking, and signature primitives. Finally, we perform an experimental evaluation to demonstrate the practicality of our protocol and apply our framework to the important data leakage scenarios of data outsourcing and social networks. In general, we consider Lime, our lineage framework for data transfer, to be an key step towards achieving accountability by design.

Item Type:	Article
Additional Information:	pub_id: 1012 Bibtex: DBLP:journals/tdsc/0001GK16 URL date: None
Uncontrolled Keywords:	accountability
Divisions:	Michael Backes (InfSec) Secure and Privacy-preserving Systems (SPS)
Depositing User:	Sebastian Weisgerber
Date Deposited:	26 Jul 2017 10:29
Last Modified:	18 Jul 2019 12:08
Primary Research Area:	NRA1: Trustworthy Information Processing
URI:	https://publications.cispa.saarland/id/eprint/295

Actions

Actions (login required)

View Item