With the recent advances in information technologies, cloud computing has emerged as a new business model due to its various advantages such as cost efficiency, rapid scaling, easier maintenance and high availability. Hence, the research and industrial communities have been showing significant interest in the outsourcing of data and computation to the cloud. Yet, ensuring data security and privacy is a significant challenge that lies in the path of large-scale adoption of the cloud services. Since one has to sacrifice functionality and performance for security and privacy. Thus, the main goal of such outsourced data centric services is to achieve a strong data privacy protection and security while affecting little on functionality and performance.
In this talk, I first present PINED-RQ, a highly efficient and differentially private range query execution framework that constructs a novel differentially private index over an outsourced database. Unlike other differentially private systems, PINED-RQ is extended to support update operations. Second, I will discuss oblivious cloud storage systems and their important security features. To this end, I will present an educational game Guess the Access, which aims to provide an opportunity to appreciate some of the intricate issues involved in the development and understanding of access security, specifically in a distributed cloud-based data management setting. Third, I will discuss interdisciplinary research into enabling privacy-preserving certification of sustainability metrics. Our studies show that the application of privacy preserving techniques is required to preserve the privacy of private data. To this end, I will present algorithms to achieve privacy preserving life cycle assessment computations. I will conclude the talk by discussing the future research directions.