Ensuring data confidentiality via plausibly deniable encryption and secure deletion – a survey

Cybersecurity

Bo Chen¹  Qionglu Zhang¹  Bing Chang²  Shijie Jia³ 

[1] Data Assurance and Communication Security Research Center, Chinese Academy of Sciences, Beijing, China;School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China;State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China

关键词: Data confidentiality;    Plausibly deniable encryption;    Secure deletion;   

DOI  :  10.1186/s42400-018-0005-8

学科分类：计算机科学（综合）

来源: Springer

【 摘 要 】

Ensuring confidentiality of sensitive data is of paramount importance, since data leakage may not only endanger data owners’ privacy, but also ruin reputation of businesses as well as violate various regulations like HIPPA and Sarbanes-Oxley Act. To provide confidentiality guarantee, the data should be protected when they are preserved in the personal computing devices (i.e., confidentiality during their lifetime); and also, they should be rendered irrecoverable after they are removed from the devices (i.e., confidentiality after their lifetime). Encryption and secure deletion are used to ensure data confidentiality during and after their lifetime, respectively. This work aims to perform a thorough literature review on the techniques being used to protect confidentiality of the data in personal computing devices, including both encryption and secure deletion. Especially for encryption, we mainly focus on the novel plausibly deniable encryption (PDE), which can ensure data confidentiality against both a coercive (i.e., the attacker can coerce the data owner for the decryption key) and a non-coercive attacker.

【 授权许可】

CC BY