面向连接关键词可搜索加密的查询恢复攻击  

Query recovery attacks against conjunctive keyword searchable encryption

作　　者：杜瑞颖[1] 沈蓓 何琨[1] 赵陈斌 王贝宁 陈晶[1] DU Ruiying;SHEN Bei;HE Kun;ZHAO Chenbin;WANG Beining;CHEN Jing(School of Cyber Science and Engineering,Wuhan University,Wuhan 430040,China)

机构地区：[1]武汉大学国家网络安全学院,湖北武汉430040

出　　处：《通信学报》2024年第8期125-135,共11页Journal on Communications

基　　金：国家重点研发计划基金资助项目(No.2021YFB2700200);中央高校基本科研业务费专项资金资助项目(No.2042022kf1195);国家自然科学基金资助项目(No.62172303);湖北省重点研发计划基金资助项目(No.2021BAA190,No.2022BAA039);山东省重点研发计划基金资助项目(No.2022CXPT055)。

摘　　要：为了恢复连接关键词可搜索加密方案中的用户查询,提出了2种针对连接查询可搜索加密方案的攻击方法,分别是交叉泄露攻击和频率匹配攻击。首先,从泄露中提取候选关键词集合;然后,分别利用关键词对结果模式泄露和查询频率信息进行过滤。结果表明,在交叉泄露攻击中,当攻击者仅掌握10%的数据集时,若关键词在空间为100,查询恢复的准确率可高达90%,将关键词空间扩大至1000,攻击者依然能够恢复50%以上的查询;在频率匹配攻击中,即使攻击者仅已知不准确的频率分布信息,也至少可以准确恢复70%的查询。In order to recover user’s queries in conjunctive keyword searchable encryption schemes,two attacks against the conjunctive keyword searchable encryption schemes were proposed,such as cross leakage attack and frequency matching attack.Firstly,a set of candidate keywords were extracted from the leakage.Then the keywords were filtered according to the keyword pair result pattern leakage and query frequency information respectively.Results show that in the cross leakage attack,with knowledge of only 10%of the dataset,the accuracy of query recovery can reach up to 90%if the keyword space is 100.And more than 50%of the queries are still able to recovered by the attacker if the keyword space is expanded to 1000.In frequency matching attack,even with only inaccurate frequency distribution information known to the attacker,at least 70%of queries can be accurately recovered.

关 键 词：云存储 可搜索加密 连接关键词查询 查询恢复攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]