{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,3]],"date-time":"2026-05-03T10:59:54Z","timestamp":1777805994654,"version":"3.51.4"},"reference-count":34,"publisher":"SAGE Publications","issue":"3","license":[{"start":{"date-parts":[[2016,3,3]],"date-time":"2016-03-03T00:00:00Z","timestamp":1456963200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/journals.sagepub.com\/page\/policies\/text-and-data-mining-license"}],"content-domain":{"domain":["journals.sagepub.com"],"crossmark-restriction":true},"short-container-title":["Journal of Computer Security"],"published-print":{"date-parts":[[2016,6,8]]},"abstract":"<jats:p>Cloud computing is receiving massive interest from users and companies for its convenient support of scalable access to data and services. The variety and diversification of offers by cloud providers allow users to selectively adopt storage and computational services as they best suit their needs, including cost saving considerations. In such an open context, security remains a major concern, as confidentiality and integrity of data and queries over them can be at risk. In this paper, we present efficient techniques to verify the integrity of join queries computed by potentially untrusted cloud providers, while also protecting data and computation confidentiality. Our techniques support joins among multiple data sources and introduce a limited overhead in query computation, enabling also economical savings, as the ability to assess integrity increases the spectrum of offers that can be considered for performing the computation. Formal analysis and experimental evaluations confirm the effectiveness and efficiency of our solutions.<\/jats:p>","DOI":"10.3233\/jcs-160545","type":"journal-article","created":{"date-parts":[[2016,6,3]],"date-time":"2016-06-03T09:51:25Z","timestamp":1464947485000},"page":"347-378","update-policy":"https:\/\/doi.org\/10.1177\/sage-journals-update-policy","source":"Crossref","is-referenced-by-count":15,"title":["Efficient integrity checks for join queries in\u00a0the cloud"],"prefix":"10.1177","volume":"24","author":[{"given":"Sabrina","family":"De Capitani di Vimercati","sequence":"first","affiliation":[{"name":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, 26013 Crema, Italy. E-mails:\u00a0,\u00a0,\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sara","family":"Foresti","sequence":"additional","affiliation":[{"name":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, 26013 Crema, Italy. E-mails:\u00a0,\u00a0,\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sushil","family":"Jajodia","sequence":"additional","affiliation":[{"name":"Center for Secure Information Systems, George Mason University, 22030-4422 Fairfax, VA, USA. E-mail:\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stefano","family":"Paraboschi","sequence":"additional","affiliation":[{"name":"Dipartimento di Ingegneria Gestionale, dell\u2019Informazione e della Produzione, Universit\u00e0 degli Studi di Bergamo, 24044 Dalmine, Italy. E-mail:\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pierangela","family":"Samarati","sequence":"additional","affiliation":[{"name":"Dipartimento di Informatica, Universit\u00e0 degli Studi di Milano, 26013 Crema, Italy. E-mails:\u00a0,\u00a0,\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"179","published-online":{"date-parts":[[2016,3,3]]},"reference":[{"key":"ref001","doi-asserted-by":"crossref","unstructured":"G.Ateniese, R.Di Pietro, L.Mancini and G.Tsudik, Scalable and efficient provable data possession, in: Proc. of SECURECOMM, Istanbul, Turkey, 2008.","DOI":"10.1145\/1460877.1460889"},{"key":"ref002","doi-asserted-by":"crossref","unstructured":"A.Basu, J.Vaidya, H.Kikuchi and T.Dimitrakos, Privacy-preserving collaborative filtering on the cloud and practical implementation experiences, in: Proc. of IEEE Cloud, Santa Clara, CA, 2013.","DOI":"10.1109\/CLOUD.2013.109"},{"key":"ref003","doi-asserted-by":"crossref","unstructured":"E.Damiani, S.De Capitani di Vimercati, S.Jajodia, S.Paraboschi and P.Samarati, Balancing confidentiality and efficiency in untrusted relational DBMSs, in: Proc. of CCS, Washington, DC, 2003.","DOI":"10.1145\/948121.948124"},{"key":"ref004","doi-asserted-by":"crossref","unstructured":"S.De Capitani di Vimercati, S.Foresti, S.Jajodia and G.Livraga, Enforcing subscription-based authorization policies in cloud scenarios, in: Proc. of DBSec, Paris, France, 2012.","DOI":"10.1007\/978-3-642-31540-4_24"},{"key":"ref005","doi-asserted-by":"crossref","unstructured":"S.De Capitani di Vimercati, S.Foresti, S.Jajodia, G.Livraga, S.Paraboschi and P.Samarati, Integrity for distributed queries, in: Proc. of CNS, San Francisco, CA, 2014.","DOI":"10.1109\/CNS.2014.6997505"},{"issue":"2","key":"ref006","first-page":"12:1","volume":"35","author":"De Capitani di Vimercati S.","year":"2010","journal-title":"ACM TODS"},{"issue":"2","key":"ref007","first-page":"187","volume":"1","author":"De Capitani di Vimercati S.","year":"2013","journal-title":"IEEE TCC"},{"key":"ref008","doi-asserted-by":"crossref","unstructured":"S.De Capitani di Vimercati, S.Foresti, S.Jajodia, S.Paraboschi and P.Samarati, Optimizing integrity checks for join queries in the cloud, in: Proc. of DBSec, Vienna, Austria, 2014.","DOI":"10.1007\/978-3-662-43936-4_3"},{"key":"ref009","doi-asserted-by":"crossref","unstructured":"S.De Capitani di Vimercati, S.Foresti, S.Jajodia, S.Paraboschi and P.Samarati, Integrity for approximate joins on untrusted computational servers, in: Proc. of SEC, Hamburg, Germany, 2015.","DOI":"10.1007\/978-3-319-18467-8_30"},{"key":"ref010","doi-asserted-by":"crossref","unstructured":"S.De Capitani di Vimercati, S.Foresti and P.Samarati, Managing and accessing data in the cloud: Privacy risks and approaches, in: Proc. of CRiSIS, Cork, Ireland, 2012.","DOI":"10.1109\/CRISIS.2012.6378956"},{"issue":"3","key":"ref011","first-page":"397","volume":"9","author":"Franco-Contreras J.","year":"2014","journal-title":"IEEE TIFS"},{"key":"ref012","doi-asserted-by":"crossref","unstructured":"P.Ghazizadeh, R.Mukkamala and S.Olariu, Data integrity evaluation in cloud database-as-a-service, in: Proc. of IEEE SERVICES, Santa Clara, CA, 2013.","DOI":"10.1109\/SERVICES.2013.40"},{"key":"ref013","doi-asserted-by":"crossref","unstructured":"H.Hacig\u00fcm\u00fcs, B.Iyer and S.Mehrotra, Ensuring integrity of encrypted databases in database as a service model, in: Proc. of DBSec, Estes Park, CO, 2003.","DOI":"10.1007\/1-4020-8070-0_5"},{"key":"ref014","doi-asserted-by":"crossref","unstructured":"H.Hacig\u00fcm\u00fc\u015f, B.Iyer, S.Mehrotra and C.Li, Executing SQL over encrypted data in the database-service-provider model, in: Proc. of SIGMOD, Madison, WI, 2002.","DOI":"10.1145\/564691.564717"},{"key":"ref015","doi-asserted-by":"crossref","unstructured":"R.Jhawar and V.Piuri, Fault tolerance management in IaaS clouds, in: Proc. of ESTEL, Rome, Italy, 2012.","DOI":"10.1109\/ESTEL.2012.6400113"},{"key":"ref016","doi-asserted-by":"crossref","unstructured":"R.Jhawar, V.Piuri and P.Samarati, Supporting security requirements for resource management in cloud computing, in: Proc. of CSE, Paphos, Cyprus, 2012.","DOI":"10.1109\/ICCSE.2012.32"},{"key":"ref017","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2012.2221934"},{"key":"ref018","doi-asserted-by":"crossref","unstructured":"A.Juels and B.S.KaliskiJr., PORs: Proofs of retrievability for large files, in: Proc. of ACM CCS, Alexandria, VA, 2007.","DOI":"10.1145\/1315245.1315317"},{"key":"ref019","doi-asserted-by":"crossref","unstructured":"D.Kossmann, T.Kraska and S.Loesing, An evaluation of alternative architectures for transaction processing in the cloud, in: Proc. of SIGMOD, Indianapolis, IN, 2010.","DOI":"10.1145\/1807167.1807231"},{"key":"ref020","doi-asserted-by":"crossref","unstructured":"F.Li, M.Hadjieleftheriou, G.Kollios and L.Reyzin, Dynamic authenticated index structures for outsourced databases, in: Proc. of SIGMOD, Chicago, IL, 2006.","DOI":"10.1145\/1142473.1142488"},{"key":"ref021","doi-asserted-by":"publisher","DOI":"10.1145\/1880022.1880026"},{"key":"ref022","doi-asserted-by":"publisher","DOI":"10.1145\/1149976.1149977"},{"key":"ref023","doi-asserted-by":"crossref","unstructured":"H.Pang, A.Jain, K.Ramamritham and K.Tan, Verifying completeness of relational query results in data publishing, in: Proc. of SIGMOD, Baltimore, MA, 2005.","DOI":"10.1145\/1066157.1066204"},{"key":"ref024","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2012.14"},{"key":"ref025","doi-asserted-by":"crossref","unstructured":"P.Samarati and S.De Capitani di Vimercati, Cloud security: Issues and concerns, in: Encyclopedia on Cloud Computing, S.Murugesan and I.Bojanova, eds, Wiley, New York, 2016.","DOI":"10.1002\/9781118821930.ch17"},{"key":"ref026","doi-asserted-by":"crossref","unstructured":"G.Sheng, T.Wen, Q.Guo and Y.Yin, Verifying correctness of inner product of vectors in cloud computing, in: Proc. of Cloud Computing, Hangzhou, China, 2013.","DOI":"10.1145\/2484402.2484416"},{"key":"ref027","unstructured":"The transaction processing performance council (TPC) benchmark H, available at: http:\/\/www.tpc.org\/tpch\/."},{"key":"ref028","doi-asserted-by":"crossref","unstructured":"G.Umadevi and A.Saxena, Correctness verification in outsourced databases: More reliable fake tuples approach, in: Proc. of ICISS, Kolkata, India, December, 2013.","DOI":"10.1007\/978-3-642-45204-8_9"},{"key":"ref029","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2011.245"},{"key":"ref030","doi-asserted-by":"crossref","unstructured":"H.Wang, J.Yin, C.Perng and P.S.Yu, Dual encryption for query integrity assurance, in: Proc. of CIKM, Napa Valley, CA, 2008.","DOI":"10.1145\/1458082.1458196"},{"key":"ref031","unstructured":"M.Xie, H.Wang, J.Yin and X.Meng, Integrity auditing of outsourced data, in: Proc. of VLDB, Vienna, Austria, 2007."},{"key":"ref032","doi-asserted-by":"crossref","unstructured":"M.Xie, H.Wang, J.Yin and X.Meng, Providing freshness guarantees for outsourced databases, in: Proc. of EDBT, Nantes, France, 2008.","DOI":"10.1145\/1352431.1352472"},{"key":"ref033","doi-asserted-by":"crossref","unstructured":"Z.Yang, S.Gao, J.Xu and B.Choi, Authentication of range query results in MapReduce environments, in: Proc. of CloudDB, Glasgow, UK, 2011.","DOI":"10.1145\/2064085.2064093"},{"issue":"2","key":"ref034","first-page":"227","volume":"6","author":"Zhu Y.","year":"2013","journal-title":"IEEE TSC"}],"container-title":["Journal of Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.3233\/JCS-160545","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/full-xml\/10.3233\/JCS-160545","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.3233\/JCS-160545","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T20:44:58Z","timestamp":1777495498000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/10.3233\/JCS-160545"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,3,3]]},"references-count":34,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2016,6,8]]}},"alternative-id":["10.3233\/JCS-160545"],"URL":"https:\/\/doi.org\/10.3233\/jcs-160545","relation":{},"ISSN":["0926-227X","1875-8924"],"issn-type":[{"value":"0926-227X","type":"print"},{"value":"1875-8924","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,3,3]]}}}