Encrypted Databases Made Secure Yet Maintainable
summary
Presents HEDB, a dual‑mode encrypted DB that blocks a newly demonstrated smuggle attack by isolating operators in Execution Mode and enabling safe maintenance via VM fork, record‑and‑replay and template‑checked fixes in Maintenance Mode. Uses concolic execution plus Z3 to generate masked operator inputs for reproducing bugs, supports authenticated replay and anonymized replay for troubleshooting, and shows it prevents the attack with ~5.88% runtime and ~9.26% storage overhead.
AI-written summary · about
chapters (9)
- 0:00Encrypted databases intro
- 0:59Type 1 vs Type 2 EDB
- 3:31SMo attacks on Type 2
- 4:36Secure maintainable EDB challenges
- 5:18Hib architecture for maintenance
- 6:45Fixing DBMS bugs in Hib
- 9:15Stateless operators securely
- 11:46Hib implementation and evaluation
- 13:14Summary and future work
related talks
41mKeeping Secrets: Emerging Practice in Database Encryption
34mWhy your encrypted Database isn't secure: practical attacks against encrypted OSS databases
17mAccelerating Confidential Databases with Crypto-Free Mappings
24mCrypto Secure Data Management with In-Database Blockchain
29mSecure Database Games
31mFast, highly effective database security using searchable encryption (without the yak shave)
38mActiveRecord::Encryption; Stop Hackers from...
40mConfidential Computing and Privacy-Enhancing Technologies - The Landscape