PACE: Proactively Secure Accumulo with Cryptographic Enforcement
MIT Lincoln Laboratory Lexington United States
Pagination or Media Count:
Cloud-hosted databases have many compelling benefits, including high availability, flexible resource allocation, and resiliency to attack, but it requires that cloud tenants cede control of their data to the cloud provider. In this paper, we describe Proactively-secure Accumulo with Cryptographic Enforcement PACE, a client-side library that cryptographically protects a tenants data, returning control of that data to the tenant. PACE is a drop-in replacement for Accumulos APIs and works with Accumulos row-level security model. We evaluate the performance of PACE, discussing the impact of encryption and signatures on operation throughput.
- Computer Systems