{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,24]],"date-time":"2026-01-24T14:21:15Z","timestamp":1769264475408,"version":"3.49.0"},"reference-count":59,"publisher":"Association for Computing Machinery (ACM)","issue":"11","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2017,8]]},"abstract":"<jats:p>\n            Network accountability, forensic analysis, and failure diagnosis are becoming increasingly important for network management and security.\n            <jats:italic>Network provenance<\/jats:italic>\n            significantly aids network administrators in these tasks by explaining system behavior and revealing the dependencies between system states. Although resourceful, network provenance can sometimes be too rich, revealing potentially sensitive information that was involved in system execution. In this paper, we propose a cryptographic approach to preserve the confidentiality of provenance (sub)graphs while allowing users to query and access the parts of the graph for which they are authorized. Our proposed solution is a novel application of searchable symmetric encryption (SSE) and more generally structured encryption (SE). Our SE-enabled provenance system allows a node to enforce access control policies over its provenance data even after the data has been shipped to remote nodes (\n            <jats:italic>e.g.<\/jats:italic>\n            , for optimization purposes). We present a prototype of our design and demonstrate its practicality, scalability, and efficiency for both provenance maintenance and querying.\n          <\/jats:p>","DOI":"10.14778\/3137628.3137661","type":"journal-article","created":{"date-parts":[[2017,9,7]],"date-time":"2017-09-07T13:35:53Z","timestamp":1504791353000},"page":"1550-1561","source":"Crossref","is-referenced-by-count":14,"title":["Privacy-preserving network provenance"],"prefix":"10.14778","volume":"10","author":[{"given":"Yuankai","family":"Zhang","sequence":"first","affiliation":[{"name":"Georgetown University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Adam","family":"O'Neill","sequence":"additional","affiliation":[{"name":"Georgetown University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Micah","family":"Sherr","sequence":"additional","affiliation":[{"name":"Georgetown University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenchao","family":"Zhou","sequence":"additional","affiliation":[{"name":"Georgetown University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,8]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"PPNP Code Release. http:\/\/security.cs.georgetown.edu\/yuankai\/ppnp-code.tar.gz.  PPNP Code Release. http:\/\/security.cs.georgetown.edu\/yuankai\/ppnp-code.tar.gz."},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1807167.1807244"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1989323.1989375"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435389"},{"key":"e_1_2_1_5_1","volume-title":"USENIX Security","author":"Bates A.","year":"2015"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-014-0322-7"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/645504.656274"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1142473.1142574"},{"key":"e_1_2_1_9_1","doi-asserted-by":"crossref","unstructured":"D. Cash J. Jaeger S. Jarecki C. S. Jutla H. Krawczyk M.-C. Rosu and M. Steiner. Dynamic searchable encryption in very-large databases: Data structures and implementation. IACR Cryptology ePrint Archive 2014.  D. Cash J. Jaeger S. Jarecki C. S. Jutla H. Krawczyk M.-C. Rosu and M. Steiner. Dynamic searchable encryption in very-large databases: Data structures and implementation. IACR Cryptology ePrint Archive 2014.","DOI":"10.14722\/ndss.2014.23264"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-17373-8_33"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934910"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1322263.1322281"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.5555\/1350745.1350752"},{"key":"e_1_2_1_14_1","unstructured":"Crypto++. https:\/\/www.cryptopp.com.  Crypto++. https:\/\/www.cryptopp.com."},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180417"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1989284.1989305"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1938551.1938554"},{"key":"e_1_2_1_18_1","volume-title":"USENIX Security","author":"Dietz M.","year":"2011"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SSDM.2002.1029704"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/2442626.2442634"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2009.15"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1247480.1247631"},{"key":"e_1_2_1_23_1","unstructured":"P. Groth and L. Moreau. Prov-overview. an overview of the prov family of documents. 2013.  P. Groth and L. Moreau. Prov-overview. an overview of the prov family of documents. 2013."},{"key":"e_1_2_1_24_1","unstructured":"GT-ITM. http:\/\/www.cc.gatech.edu\/projects\/gtitm\/.  GT-ITM. http:\/\/www.cc.gatech.edu\/projects\/gtitm\/."},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314313.1314318"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629080.1629082"},{"key":"e_1_2_1_27_1","volume-title":"Proceedings of CIDR","author":"Ikeda R.","year":"2011"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.14778\/2850583.2850595"},{"key":"e_1_2_1_29_1","unstructured":"S. Kamara. How to Search on Encrypted Data. https:\/\/cs.brown.edu\/seny\/slides\/encryptedsearch-full.pdf.  S. Kamara. How to Search on Encrypted Data. https:\/\/cs.brown.edu\/seny\/slides\/encryptedsearch-full.pdf."},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590339"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIS.2006.119"},{"key":"e_1_2_1_32_1","volume-title":"CIDR","author":"Kot L.","year":"2015"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2011.2165851"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095818"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080126"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1142473.1142485"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/1592761.1592785"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1544012.1544017"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557586"},{"key":"e_1_2_1_40_1","volume-title":"2nd Workshop on the Theory and Practice of Provenance (TAPP)","author":"McDaniel P.","year":"2010"},{"key":"e_1_2_1_41_1","doi-asserted-by":"crossref","unstructured":"L. Moreau J. Freire J. Futrelle R. McGrath J. Myers and P. Paulson. The open provenance model. 2007.  L. Moreau J. Freire J. Futrelle R. McGrath J. Myers and P. Paulson. The open provenance model. 2007.","DOI":"10.1007\/978-3-540-89965-5_31"},{"key":"e_1_2_1_42_1","volume-title":"Proceedings of USENIX ATC","author":"Muniswamy-Reddy K.-K.","year":"2006"},{"key":"e_1_2_1_43_1","volume-title":"Proceedings of FAST","author":"Muniswamy-Reddy K.-K.","year":"2010"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.33"},{"key":"e_1_2_1_45_1","unstructured":"Netsil. http:\/\/netsil.com\/.  Netsil. http:\/\/netsil.com\/."},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/bth361"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2007.367934"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1007\/11426639_27"},{"key":"e_1_2_1_49_1","volume-title":"Proceedings of NDSS","author":"Sherr M.","year":"2010"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2014.2312291"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/383059.383071"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1007\/11890850_14"},{"key":"e_1_2_1_53_1","volume-title":"Proceedings of CIDR","author":"Widom J.","year":"2005"},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2626335"},{"key":"e_1_2_1_55_1","unstructured":"Y. Zhang A. O'Neill M. Sherr and W. Zhou. Privacy-preserving network provenance. Technical report. Available at https:\/\/security.cs.georgetown.edu\/yuankai\/ppnp-tr.pdf.  Y. Zhang A. O'Neill M. Sherr and W. Zhou. Privacy-preserving network provenance. Technical report. Available at https:\/\/security.cs.georgetown.edu\/yuankai\/ppnp-tr.pdf."},{"key":"e_1_2_1_56_1","volume-title":"Provenance-Aware Secure Networks. In International Conference on Data Engineering Workshop (ICDEW)","author":"Zhou W.","year":"2008"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/1807167.1807234"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043584"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.14778\/2535568.2448939"}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/3137628.3137661","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,28]],"date-time":"2022-12-28T09:55:46Z","timestamp":1672221346000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/3137628.3137661"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,8]]},"references-count":59,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2017,8]]}},"alternative-id":["10.14778\/3137628.3137661"],"URL":"https:\/\/doi.org\/10.14778\/3137628.3137661","relation":{},"ISSN":["2150-8097"],"issn-type":[{"value":"2150-8097","type":"print"}],"subject":[],"published":{"date-parts":[[2017,8]]}}}