Student or educator? Sign up with your school email and get 6 months of Pro free.
Cited by 595

The DOI matches its Crossref record; 2 of the 2 references it cites were found in a registry or an index.

VC3: Trustworthy Data Analytics in the Cloud Using SGX

Open access
Schuster, Felix, Costa, Manuel, Fournet, Cedric, Gkantsidis, Christos, Peinado, Marcus, Mainar-Ruiz, Gloria, Russinovich, Mark·2015·2015 IEEE Symposium on Security and Privacy

Abstract

We present VC3, the first system that allows users to run distributed MapReduce computations in the cloud while keeping their code and data secret, and ensuring the correctness and completeness of their results. VC3 runs on unmodified Hadoop, but crucially keeps Hadoop, the operating system and the hyper visor out of the TCB, thus, confidentiality and integrity are preserved even if these large components are compromised. VC3 relies on SGX processors to isolate memory regions on individual computers, and to deploy new protocols that secure distributed MapReduce computations. VC3 optionally enforces region self-integrity invariants for all MapReduce code running within isolated regions, to prevent attacks due to unsafe memory reads and writes. Experimental results on common benchmarks show that VC3 performs well compared with unprotected Hadoop: VC3's average runtime overhead is negligible for its base security guarantees, 4.5% with write integrity and 8% with read/write integrity.

Overview

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1109/sp.2015.10

Cites

2 of 2 references verified0 citation errors · 0 not checkable

Statistics

Verification

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Citations

Cites

Show all 2 references

Research works printed but not linked: 65

  1. 10.1145/1352592.1352625 · DOI · Paper page
  2. 10.1109/SP.2010.17 · DOI · Paper page
  3. ko, 0, The Hybrex model for confidentiality and privacy in cloud computing, USENIX Workshop on Hot Topics in Cloud Computing (HotCloud)
  4. 2013, Intel Corp Software guard extensions programming reference
  5. 2013, Intel Corp Intel trusted execution technology software development guide
  6. 2013, Intel Corp Intel 64 and IA-32 architectures software developer's manual-combined volumes 1 2a 2b 2c 3a 3b and 3c
  7. lie, 2000, Architectural support for copy and tamper resistant software, International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)
  8. li, 2014, MiniBox: A two-way sandbox for x86 native code, USENIX ATC
  9. li, 2004, Secure untrusted data repository (SUNDR), USENIX Symposium on Operating Systems Design and Implementation (OSDI)
  10. kuznetsov, 2014, Code-pointer integrity, USENIX Symposium on Operating Systems Design and Implementation (OSDI)
  11. 10.1109/SP.2013.13 · DOI · Paper page
  12. 2007, Trusted Computing Group Trusted computing platform module main specification version 1 2 revision 94
  13. 10.1145/2509136.2509554 · DOI
  14. 10.1109/FPGA.2002.1106657 · doi:10.1109/fpga.2002.1106657
  15. 10.1145/2451116.2451146 · DOI · Paper page
  16. tu, 0, Processing analytical queries over encrypted data
  17. 10.1145/2487726.2488370 · DOI · Paper page
  18. van dijk, 2010, On the impossibility of cryptography alone for privacy-preserving cloud computing, USENIX Workshop on Hot Topics in Security (HotSec)
  19. 10.1145/168619.168635 · DOI · Paper page
  20. huang, 2011, Faster secure two-party computation using garbled circuits, USENIX Security Symposium
  21. 10.1109/ACSAC.2009.17 · doi:10.1109/acsac.2009.17
  22. wright, 2008, Spot me if you can: Uncovering spoken phrases in encrypted VoIP conversations, IEEE Symposium on Security and Privacy
  23. 10.1145/2043556.2043576 · DOI · Paper page
  24. akritidis, 2008, Preventing memory error exploits with WIT, IEEE Symposium on Security and Privacy
  25. abadi, 2005, Control-Flow Integrity: Principles, Implementations, and Applications, ACM Conference on Computer and Communications Security (CCS)
  26. 10.1145/1327452.1327492 · DOI · Paper page
  27. 10.1145/1536414.1536440 · DOI · Paper page
  28. fournet, 2013, ZQL: A compiler for privacy-preserving data processing, USENIX Security Symposium
  29. gökta§, 2014, Out of control: Overcoming control-flow integrity, IEEE Symposium on Security and Privacy
  30. gentry, 0, Implementing Gentry's Fully-homomorphic Encryption Scheme
  31. hawblitzel, 2014, Ironclad Apps: End-to-end security via automated full-system verification, USENIX Symposium on Operating Systems Design and Implementation (OSDI)
  32. gueron, 2010, Intel carry-less multiplication instruction and its usage for computing the GCM mode
  33. 10.1145/2043556.2043566 · DOI · Paper page
  34. popa, 2014, Building web applications on top of encrypted data using Mylar, USENIX Symposium on Networked Systems Design and Implementation (NSDI)
  35. 10.1145/782814.782838 · DOI · Paper page
  36. 10.1145/2382196.2382200 · DOI
  37. 10.1145/2664243.2664259 · doi:10.1145/2664243.2664259
  38. song, 2001, Timing analysis of keystrokes and SSH timing attacks, USENIX Security Symposium
  39. schuster, 2014, VG3 Trustworthy data analytics in the cloud Technical Report MSR-TR-2014–39
  40. santos, 2012, Policy-sealed data: A new abstraction for building trusted cloud services, USENIX Security Symposium
  41. russinovich, 2012, Windows Internals Partl
  42. roy, 2010, Airavat: Security and privacy for MapReduce, USENIX Symposium on Networked Systems Design and Implementation (NSDI)
  43. bellare, 1998, Relations among notions of security for public-key encryption schemes, Advances in Cryptology-CRYPTO, 10.1007/BFb0055718 · DOI · Paper page
  44. bellare, 2000, Authenticated encryption: Relations among notions and analysis of the generic composition paradigm, Advances in Cryptology-Asiacrypt
  45. mcgrew, 2004, The Galois/counter mode of operation (GCM), Submission to NIST Modes of Operation Process
  46. blass, 2012, Prism-privacy-preserving search in MapReduce, Privacy Enhancing Technologies, 7384, 10.1007/978-3-642-31680-7_10 · DOI
  47. 10.1145/2517349.2522733 · DOI · Paper page
  48. brenner, 2014, Running ZooKeeper coordination services in untrusted clouds
  49. 10.1109/SocialCom.2010.118 · DOI
  50. 10.1109/SP.2010.20 · DOI · Paper page
  51. 10.1145/1346281.1346284 · DOI · Paper page
  52. 10.1145/2541940.2541986 · DOI
  53. anati, 2013, Innovative technology for CPU based attestation and sealing, Hardware and Architectural Support for Security and Privacy (HASP)
  54. arasu, 2013, Orthogonal security with Cipherbase, Conference on Innovative Data Systems Research (CIDR)
  55. 10.1145/945461.945462 · DOI · Paper page
  56. 10.1109/TKDE.2013.38 · DOI · Paper page
  57. 10.1145/1559845.1559865 · DOI · Paper page
  58. baumann, 2014, Shielding applications from an untrusted cloud with haven, USENIX Symposium on Operating Systems Design and Implementation (OSDI)
  59. owusu, 2013, Oasis: On achieving a sanctuary for integrity and secrecy on untrusted platforms, ACM Conference on Computer and Communications Security (CCS)
  60. ohrimenko, 2014, The Melbourne shuffle: Improving oblivious storage in the cloud, International Colloquium on Automata Languages and Programming (ICALP)
  61. parno, 2008, Bootsrapping trust in a trusted platform, USENIX Workshop on Hot Topics in Security (HotSec)
  62. 10.1109/FPL.2007.4380617 · doi:10.1109/fpl.2007.4380617
  63. 10.1145/2487726.2488368 · DOI · Paper page
  64. 10.1145/1806651.1806657 · DOI
  65. 10.1145/1542476.1542504 · DOI · Paper page

Cited by

See all 595

Metadata

Authors
Schuster, F., Costa, M., Fournet, C., Gkantsidis, C., Peinado, M., Mainar-Ruiz, G., & Russinovich, M.
Venue
2015 IEEE Symposium on Security and Privacy
Publisher
IEEE
Published
2015-05
Pages
38-54
ISSN
1081-6011 (ISSN-L)
OpenAlex
W1569778844
Cited by
595
References
2
FWCI
42.42
Type
conference paper
Language
en
Open access
bronze

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

How to cite

Cite CoChat for the checks on this page, and the paper for its own findings.

This page
CoChat. (2026). Citation check: VC3: Trustworthy Data Analytics in the Cloud Using SGX. https://app.cochat.ai/papers/10.1109/sp.2015.10
The paper
Schuster, F., Costa, M., Fournet, C., Gkantsidis, C., Peinado, M., Mainar-Ruiz, G., & Russinovich, M. (2015). VC3: Trustworthy Data Analytics in the Cloud Using SGX. 2015 IEEE Symposium on Security and Privacy. https://doi.org/10.1109/sp.2015.10

Data sources

Bibliographic data: Semantic Scholar, OpenAlex, Crossref.

Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).

Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.