On the Trade-Offs of Combining Multiple Secure Processing Primitives for Data Analytics

dc.contributor.author Cruz,D en
dc.contributor.author Oliveira,R en
dc.contributor.author Carvalho,H en
dc.contributor.author João Tiago Paulo en
dc.contributor.author Pontes,R en
dc.contributor.other 5621 en
dc.date.accessioned 2020-07-06T14:36:35Z
dc.date.available 2020-07-06T14:36:35Z
dc.date.issued 2020 en
dc.description.abstract Cloud Computing services for data analytics are increasingly being sought by companies to extract value from large quantities of information. However, processing data from individuals and companies in third-party infrastructures raises several privacy concerns. To this end, different secure analytics techniques and systems have recently emerged. These initial proposals leverage specific cryptographic primitives lacking generality and thus having their application restricted to particular application scenarios. In this work, we contribute to this thriving body of knowledge by combining two complementary approaches to process sensitive data. We present SafeSpark, a secure data analytics framework that enables the combination of different cryptographic processing techniques with hardware-based protected environments for privacy-preserving data storage and processing. SafeSpark is modular and extensible therefore adapting to data analytics applications with different performance, security and functionality requirements. We have implemented a SafeSpark’s prototype based on Spark SQL and Intel SGX hardware. It has been evaluated with the TPC-DS Benchmark under three scenarios using different cryptographic primitives and secure hardware configurations. These scenarios provide a particular set of security guarantees and yield distinct performance impact, with overheads ranging from as low as 10% to an acceptable 300% when compared to an insecure vanilla deployment of Apache Spark. © IFIP International Federation for Information Processing 2020. en
dc.identifier.uri http://repositorio.inesctec.pt/handle/123456789/11370
dc.identifier.uri http://dx.doi.org/10.1007/978-3-030-50323-9_1 en
dc.language eng en
dc.rights info:eu-repo/semantics/openAccess en
dc.title On the Trade-Offs of Combining Multiple Secure Processing Primitives for Data Analytics en
dc.type Publication en
dc.type conferenceObject en
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
480.38 KB
Adobe Portable Document Format