ObliviStore: High Performance Oblivious Cloud Storage
Authors:
- Emil StefanovESEmil Stefanov
- Elaine ShiESElaine Shi
Top Cited Papers
Open Access
- 1 May 2013
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- No. 10816011,p. 253-267
Abstract
We design and build ObliviStore, a high performance, distributed ORAM-based cloud data store secure in the malicious model. To the best of our knowledge, ObliviStore is the fastest ORAM implementation known to date, and is faster by 10X or more in comparison with the best known ORAM implementation. ObliviStore achieves high throughput by making I/O operations asynchronous. Asynchrony introduces security challenges, i.e., we must prevent information leakage not only through access patterns, but also through timing of I/O events. We propose various practical optimizations which are key to achieving high performance, as well as techniques for a data center to dynamically scale up a distributed ORAM. We show that with 11 trusted machines (each with a modern CPU), and 20 Solid State Drives, ObliviStore achieves a throughput of 31.5MB/s with a block size of 4KB.Keywords
This publication has 26 references indexed in Scilit:
- A secure processor architecture for encrypted computation on untrusted programs2012
- Practical oblivious storage2012
- Privacy-Preserving Group Data Access via Stateless Oblivious RAM Simulation2012
- On the (In)security of Hash-based Oblivious RAM and a New Balancing Scheme2012
- Oblivious RAM simulation with efficient worst-case access overhead2011
- Sedic2011
- Flicker2008
- Protecting Client Privacy with Trusted Computing at the ServerIEEE Security & Privacy, 2005
- Building a high-performance, programmable secure coprocessorComputer Networks, 1999
- Software protection and simulation on oblivious RAMsJournal of the ACM, 1996