Side Channels in Cloud Services: Deduplication in Cloud Storage

By Danny Harnik, Benny Pinkas, Alexandra Shulman-Peleg. IEEE Security and Privacy, 2010

564 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems

View Paper: https://www.semanticscholar.org/paper/fcb3a9a1b4cef855445084ab7e585b32b7b6be59

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

Citations in the corpus

A Comprehensive Study of the Past, Present, and Future of Data Deduplication (2016, background): “2) Side-channel attacks: the occurrence of cross-user deduplication can be used as a side channel to reveal a user’s private information by three types of attacks: identifying files, learning the contents of files, and establishing a covert channel [147].”
DupLESS: Server-Aided Encryption for Deduplicated Storage (2013, background): “Malicious clients can take advantage of an SS that performs client-side deduplication to mount a side-channel attack [46].”
Inside dropbox: understanding personal cloud storage services (2012, background): “Considering storage systems in general, [8, 9] study security and privacy implications of the deployment of data deduplication – the mechanism in place in Dropbox for avoiding the storage of duplicate data.”
Flip Feng Shui: Hammering a Needle in the Software Stack (2016, background): “On the software side, widespread features such as memory or storage deduplication may serve as side channels for attackers [8, 12, 31].”
An analysis of security issues for cloud computing (2013, background): “Moreover, [69] describes that encryption can be used to stop side channel attacks on cloud storage de-duplication, but it may lead to offline dictionary attacks reveling personal keys.”
Message-Locked Encryption and Secure Deduplication (2013, background): “Recent work showed that client-side deduplication gives rise to side-channel attacks because users are told if another user already uploaded a file [32].”
Blockchain Meets Cloud Computing: A Survey (2020, methodology): “By intruding the TTP, attackers could obtain ﬁle tags for further side-channel attacks in source-based deduplication system [123].”
Message-Locked Encryption for Lock-Dependent Messages (2013, unknown): “[20] where the deduplication event was observable via traffic analysis).”