A secure two-phase data deduplication scheme - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

A secure two-phase data deduplication scheme

Résumé

—Data grows at the impressive rate of 50% per year, and 75% of the digital world is a copy 1 ! Although keeping multiple copies of data is necessary to guarantee their availability and long term durability, in many situations the amount of data redundancy is immoderate. By keeping a single copy of repeated data, data deduplication is considered as one of the most promising solutions to reduce the storage costs, and improve users experience by saving network bandwidth and reducing backup time. However, this solution must now solve many security issues to be completely satisfying. In this paper we target the attacks from malicious clients that are based on the manipulation of data identifiers and those based on backup time and network traffic observation. We present a deduplication scheme mixing an intra-and an inter-user deduplication in order to build a storage system that is secure against the aforementioned type of attacks by controlling the correspondence between files and their identifiers, and making the inter-user deduplication unnoticeable to clients using deduplication proxies. Our method provides global storage space savings, per-client bandwidth network savings between clients and deduplication proxies, and global network bandwidth savings between deduplication proxies and the storage server. The evaluation of our solution compared to a classic system shows that the overhead introduced by our scheme is mostly due to data encryption which is necessary to ensure confidentiality.
Fichier principal
Vignette du fichier
css20140_submission_9.pdf (452.63 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01076918 , version 1 (23-10-2014)

Identifiants

  • HAL Id : hal-01076918 , version 1

Citer

Pierre Meye, Philippe Raipin, Frédéric Tronel, Emmanuelle Anceaume. A secure two-phase data deduplication scheme. 6th International Symposium on Cyberspace Safety and Security (CSS), Aug 2014, Paris, France. ⟨hal-01076918⟩
273 Consultations
586 Téléchargements

Partager

Gmail Facebook X LinkedIn More