CryptSQLite: SQLite with High Data Security
IEEE Transactions on Computers(2020)
摘要
SQLite, one of the most popular light-weighted database system, has been widely used in various systems. However, the compact design of SQLite did not make enough consideration on user data security. Specifically, anyone who has obtained the access to the database file will be able to read or tamper the data. Existing encryption-based solutions can only protect data on storage, while still exposing data when in computation. In this article, we combine the
Trusted Execution Environment
(
TEE
) technology and the authenticated encryption scheme, proposed and developed the
CryptSQLite
, a high security SQLite database system, which protects both the confidentiality and integrity of users’ data. Our security analysis proves that CryptSQLite can protect data confidentiality and integrity. Our implementation and experiments indicate that CryptSQLite incurs an average of 21 percent of extra time for SQL statement executions, compared with traditional encryption-based solutions that failed to offer rigorous security guarantees.
更多查看译文
关键词
Database security,SQLite,trusted execution environment,authenticated encryption,intel SGX
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要