Protecting encrypted data against key exposure

Speaker : Katarzyna Kapusta
Télécom ParisTech
Date: 12/12/2018
Time: 2:00 pm
Location: LINCS / EIT Digital

Abstract

Hardening data protection using multiple methods rather than solely encryption is of paramount importance when considering continuous and powerful attacks to spy private and confidential information. Our research focuses on reinforcing data protection using a combination of data fragmentation, encryption, and dispersion. Each operation participates in the increasing of the protection level. We aim at minimizing the additional processing costs due to data fragmentation and dispersion.

In this seminar, we will focus on new fragmentation methods protecting encrypted data against the exposure of the encryption key. They all first transform and then fragment a ciphertext in a way that all of its fragments are needed in order to start the decryption process. Theoretical and experimental evaluations demonstrated that the proposed methods achieve the lowest performance overhead of all of the state-of-the-art techniques.

BIO:

Katarzyna Kapusta is currently a PhD candidate and a teaching assistant at Telecom ParisTech in the domain of information security. She is under the supervision of Gerard Memmi. Her work focuses on data protection by means of fragmentation in distributed storage systems. Before starting her PhD, she obtained her master’s degree from AGH Krakow and ‘diplôme d’ingénieur’ from Telecom ParisTech. She gained professional experience by working as a software developer at CERN (Geneva), where she participated in the development of a tool for investigation of network behavior, as well as at Thales Communications & Security (Paris), where she was responsible for security of exchanges inside a solution for the real time security and operation management of complex infrastructures. She has also worked as a security consultant and auditor at E&Y (Paris).