CryptDB

Online applications are vulnerable to theft of sensitive information because adversaries can exploit software bugs to gain access to private data, and because curious or malicious administrators may capture and leak data. CryptDB is a system that provides practical and provable confidentiality in the face of these attacks for applications backed by SQL databases. It works by executing SQL queries over encrypted data using a collection of efficient SQL-aware encryption schemes. CryptDB can also chain encryption keys to user passwords, so that a data item can be decrypted only by using the password of one of the users with access to that data. As a result, a database administrator never gets access to decrypted…

• NS
  National Science Foundation

  Awards: 0716273, 1065219
• DO
  Division of Computer and Network Systems

  Award: CNS-0716273 IIS-1065219
• DO
  Division of Information and Intelligent Systems

  Award: CNS-0716273 IIS-1065219