Database management as a service

Challenges and opportunities

Divyakant Agrawal, Amr El Abbadi, Fatih Emekci, Ahmed Metwally

Research output: Chapter in Book/Report/Conference proceedingConference contribution

95 Citations (Scopus)

Abstract

Data outsourcing or database as a service is a new paradigm for data management in which a third party service provider hosts a database as a service. The service provides data management for its customers and thus obviates the need for the service user to purchase expensive hardware and software, deal with software upgrades and hire professionals for administrative and maintenance tasks. Since using an external database service promises reliable data storage at a low cost it is very attractive for companies. Such a service would also provide universal access, through the Internet to private data stored at reliable and secure sites. However, recent governmental legislations, competition among companies, and database thefts mandate companies to use secure and privacy preserving data management techniques. The data provider, therefore, needs to guarantee that the data is secure, be able to execute queries on the data, and the results of the queries must also be secure and not visible to the data provider. Current research has been focused only on how to index and query encrypted data. However, querying encrypted data is computationally very expensive. Providing an efficient trust mechanism to push both database service providers and clients to behave honestly has emerged as one of the most important problem before data outsourcing to become a viable paradigm. In this paper, we describe scalable privacy preserving algorithms for data outsourcing. Instead of encryption, which is computationally expensive, we use distribution on multiple data provider sites and information theoretically proven secret sharing algorithms as the basis for privacy preserving outsourcing. The technical contributions of this paper is the establishment and development of a framework for efficient fault-tolerant scalable and theoretically secure privacy preserving data outsourcing that supports a diversity of database operations executed on different types of data, which can even leverage publicly available data sets.

Original languageEnglish
Title of host publicationProceedings - International Conference on Data Engineering
Pages1709-1716
Number of pages8
DOIs
Publication statusPublished - 8 Jul 2009
Externally publishedYes
Event25th IEEE International Conference on Data Engineering, ICDE 2009 - Shanghai, China
Duration: 29 Mar 20092 Apr 2009

Other

Other25th IEEE International Conference on Data Engineering, ICDE 2009
CountryChina
CityShanghai
Period29/3/092/4/09

Fingerprint

Outsourcing
Information management
Industry
Data privacy
Cryptography
Internet
Hardware
Data storage equipment
Costs

ASJC Scopus subject areas

  • Information Systems
  • Signal Processing
  • Software

Cite this

Agrawal, D., El Abbadi, A., Emekci, F., & Metwally, A. (2009). Database management as a service: Challenges and opportunities. In Proceedings - International Conference on Data Engineering (pp. 1709-1716). [4812596] https://doi.org/10.1109/ICDE.2009.151

Database management as a service : Challenges and opportunities. / Agrawal, Divyakant; El Abbadi, Amr; Emekci, Fatih; Metwally, Ahmed.

Proceedings - International Conference on Data Engineering. 2009. p. 1709-1716 4812596.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Agrawal, D, El Abbadi, A, Emekci, F & Metwally, A 2009, Database management as a service: Challenges and opportunities. in Proceedings - International Conference on Data Engineering., 4812596, pp. 1709-1716, 25th IEEE International Conference on Data Engineering, ICDE 2009, Shanghai, China, 29/3/09. https://doi.org/10.1109/ICDE.2009.151
Agrawal D, El Abbadi A, Emekci F, Metwally A. Database management as a service: Challenges and opportunities. In Proceedings - International Conference on Data Engineering. 2009. p. 1709-1716. 4812596 https://doi.org/10.1109/ICDE.2009.151
Agrawal, Divyakant ; El Abbadi, Amr ; Emekci, Fatih ; Metwally, Ahmed. / Database management as a service : Challenges and opportunities. Proceedings - International Conference on Data Engineering. 2009. pp. 1709-1716
@inproceedings{1760fd8c721942f99678398903d3549c,
title = "Database management as a service: Challenges and opportunities",
abstract = "Data outsourcing or database as a service is a new paradigm for data management in which a third party service provider hosts a database as a service. The service provides data management for its customers and thus obviates the need for the service user to purchase expensive hardware and software, deal with software upgrades and hire professionals for administrative and maintenance tasks. Since using an external database service promises reliable data storage at a low cost it is very attractive for companies. Such a service would also provide universal access, through the Internet to private data stored at reliable and secure sites. However, recent governmental legislations, competition among companies, and database thefts mandate companies to use secure and privacy preserving data management techniques. The data provider, therefore, needs to guarantee that the data is secure, be able to execute queries on the data, and the results of the queries must also be secure and not visible to the data provider. Current research has been focused only on how to index and query encrypted data. However, querying encrypted data is computationally very expensive. Providing an efficient trust mechanism to push both database service providers and clients to behave honestly has emerged as one of the most important problem before data outsourcing to become a viable paradigm. In this paper, we describe scalable privacy preserving algorithms for data outsourcing. Instead of encryption, which is computationally expensive, we use distribution on multiple data provider sites and information theoretically proven secret sharing algorithms as the basis for privacy preserving outsourcing. The technical contributions of this paper is the establishment and development of a framework for efficient fault-tolerant scalable and theoretically secure privacy preserving data outsourcing that supports a diversity of database operations executed on different types of data, which can even leverage publicly available data sets.",
author = "Divyakant Agrawal and {El Abbadi}, Amr and Fatih Emekci and Ahmed Metwally",
year = "2009",
month = "7",
day = "8",
doi = "10.1109/ICDE.2009.151",
language = "English",
isbn = "9780769535456",
pages = "1709--1716",
booktitle = "Proceedings - International Conference on Data Engineering",

}

TY - GEN

T1 - Database management as a service

T2 - Challenges and opportunities

AU - Agrawal, Divyakant

AU - El Abbadi, Amr

AU - Emekci, Fatih

AU - Metwally, Ahmed

PY - 2009/7/8

Y1 - 2009/7/8

N2 - Data outsourcing or database as a service is a new paradigm for data management in which a third party service provider hosts a database as a service. The service provides data management for its customers and thus obviates the need for the service user to purchase expensive hardware and software, deal with software upgrades and hire professionals for administrative and maintenance tasks. Since using an external database service promises reliable data storage at a low cost it is very attractive for companies. Such a service would also provide universal access, through the Internet to private data stored at reliable and secure sites. However, recent governmental legislations, competition among companies, and database thefts mandate companies to use secure and privacy preserving data management techniques. The data provider, therefore, needs to guarantee that the data is secure, be able to execute queries on the data, and the results of the queries must also be secure and not visible to the data provider. Current research has been focused only on how to index and query encrypted data. However, querying encrypted data is computationally very expensive. Providing an efficient trust mechanism to push both database service providers and clients to behave honestly has emerged as one of the most important problem before data outsourcing to become a viable paradigm. In this paper, we describe scalable privacy preserving algorithms for data outsourcing. Instead of encryption, which is computationally expensive, we use distribution on multiple data provider sites and information theoretically proven secret sharing algorithms as the basis for privacy preserving outsourcing. The technical contributions of this paper is the establishment and development of a framework for efficient fault-tolerant scalable and theoretically secure privacy preserving data outsourcing that supports a diversity of database operations executed on different types of data, which can even leverage publicly available data sets.

AB - Data outsourcing or database as a service is a new paradigm for data management in which a third party service provider hosts a database as a service. The service provides data management for its customers and thus obviates the need for the service user to purchase expensive hardware and software, deal with software upgrades and hire professionals for administrative and maintenance tasks. Since using an external database service promises reliable data storage at a low cost it is very attractive for companies. Such a service would also provide universal access, through the Internet to private data stored at reliable and secure sites. However, recent governmental legislations, competition among companies, and database thefts mandate companies to use secure and privacy preserving data management techniques. The data provider, therefore, needs to guarantee that the data is secure, be able to execute queries on the data, and the results of the queries must also be secure and not visible to the data provider. Current research has been focused only on how to index and query encrypted data. However, querying encrypted data is computationally very expensive. Providing an efficient trust mechanism to push both database service providers and clients to behave honestly has emerged as one of the most important problem before data outsourcing to become a viable paradigm. In this paper, we describe scalable privacy preserving algorithms for data outsourcing. Instead of encryption, which is computationally expensive, we use distribution on multiple data provider sites and information theoretically proven secret sharing algorithms as the basis for privacy preserving outsourcing. The technical contributions of this paper is the establishment and development of a framework for efficient fault-tolerant scalable and theoretically secure privacy preserving data outsourcing that supports a diversity of database operations executed on different types of data, which can even leverage publicly available data sets.

UR - http://www.scopus.com/inward/record.url?scp=67649635197&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=67649635197&partnerID=8YFLogxK

U2 - 10.1109/ICDE.2009.151

DO - 10.1109/ICDE.2009.151

M3 - Conference contribution

SN - 9780769535456

SP - 1709

EP - 1716

BT - Proceedings - International Conference on Data Engineering

ER -