University of Twente Student Theses
Experimental review of the IKK query recovery attack : Assumptions, recovery rate and improvements
Groot Roessink, R. (2020) Experimental review of the IKK query recovery attack : Assumptions, recovery rate and improvements.
|
PDF
928kB |
| Abstract: | In light of more data than ever being stored online and the request by the public for secure, privacy-enhanced, and easy-to-use systems, Searchable Encryption (SE) was introduced. SE schemes enable search among encrypted documents yet disclose (encrypted) queries and responses. The first query recovery attack, the IKK attack, uses the disclosed information to (partly) recover what plaintext words the client searched for. This can also leak information on the plaintext contents of the encrypted documents. We empirically review the IKK query recovery attack to improve the understanding of its feasibility and potential security damage. In order to do so, we vary the assumed query distribution, showing a negative impact on the accuracy of the attack, and the input parameters of the attack to find a correlation between these parameters and its accuracy. Furthermore, we show that the recovery rate of the attack can be increased, while decreasing the variance of the recovery rate by combining the results of multiple attack runs. We also show that the including deterministic components in the probabilistic IKK attack can increase the accuracy of the attack as well. We empirically review the IKK query recovery attack to improve the understanding of its feasibility and potential security damage. In order to do so, we vary the assumed query distribution, which is shown to have a severe (negative) impact on the accuracy of the attack, and the input parameters of the IKK attack to find a correlation between these parameters and the accuracy of the IKK attack. Furthermore, we show that the recovery rate of the attack can be increased up to 10 percentage points, while decreasing the variance of the recovery rate up to 78 percentage points by combining the results of multiple attack runs. We also show that the including deterministic components in the probabilistic IKK attack can increase the recovery rate up to 21 percentage points and decrease its variance up to 57 percentage points. |
| Item Type: | Essay (Master) |
| Faculty: | EEMCS: Electrical Engineering, Mathematics and Computer Science |
| Subject: | 54 computer science |
| Programme: | Computer Science MSc (60300) |
| Link to this item: | https://purl.utwente.nl/essays/82324 |
| Export this item as: | BibTeX EndNote HTML Citation Reference Manager |
Show download statistics for this publication
Show download statistics for this publicationRepository Staff Only: item control page