Defending against attribute-correlation attacks in privacy-aware information brokering

Research output: Chapter in Book/Report/Conference proceedingConference contribution

2 Scopus citations

Abstract

Nowadays, increasing needs for information sharing arise due to extensive collaborations among organizations. Organizations desire to provide data access to their collaborators while preserving full control over the data and comprehensive privacy of their users. A number of information systems have been developed to provide efficient and secure information sharing. However, most of the solutions proposed so far are built atop of conventional data warehousing or distributed database technologies. Recently, information brokering systems have been proposed to provide privacy-preserving information sharing among loosely federated data sources. However, they are still vulnerable to attribute-correlation attacks during query routing, due to the lack of protection of the routed queries. In this paper, we investigate the problems caused by such an attack, and propose a countermeasure by limiting the view of query content at each intermediate broker.We show that the proposed content-basedXPath query routing scheme with level-based encryption and commutative encryption can effectively prevent an attribute-correlation attack originated by ompromised brokers, with reasonable overhead.

Original languageEnglish (US)
Title of host publicationCollaborative Computing
Subtitle of host publicationNetworking, Applications and Worksharing - 4th International Conference, CollaborateCom 2008, Revised Selected Papers
Pages100-112
Number of pages13
DOIs
StatePublished - 2009
Event4th International Conference on Collaborative Computing: Networking, Applications and Worksharing, CollaborateCom 2008 - Orlando, FL, United States
Duration: Nov 13 2008Nov 16 2008

Publication series

NameLecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering
Volume10 LNICST
ISSN (Print)1867-8211

Other

Other4th International Conference on Collaborative Computing: Networking, Applications and Worksharing, CollaborateCom 2008
Country/TerritoryUnited States
CityOrlando, FL
Period11/13/0811/16/08

All Science Journal Classification (ASJC) codes

  • Computer Networks and Communications

Fingerprint

Dive into the research topics of 'Defending against attribute-correlation attacks in privacy-aware information brokering'. Together they form a unique fingerprint.

Cite this