Side channel attack on a partially encrypted MPEG-G file

Uložené v:
Podrobná bibliografia
Názov: Side channel attack on a partially encrypted MPEG-G file
Autori: Naro, Daniel, Delgado Mercè, Jaime, Llorente Viejo, Silvia
Prispievatelia: Universitat Politècnica de Catalunya. Doctorat en Arquitectura de Computadors, Universitat Politècnica de Catalunya. Departament d'Arquitectura de Computadors, Universitat Politècnica de Catalunya. IMP - Information Modeling and Processing
Zdroj: UPCommons. Portal del coneixement obert de la UPC
Universitat Politècnica de Catalunya (UPC)
Informácie o vydavateľovi: Springer Science and Business Media LLC, 2021.
Rok vydania: 2021
Predmety: Informàtica::Aplicacions de la informàtica::Bioinformàtica [Àrees temàtiques de la UPC], Dades -- Compressió (Informàtica), 0301 basic medicine, 0303 health sciences, Encryption, Genomics, MPEG-G, Genomic information, Xifratge (Informàtica), Information leakage, Genòmica, 03 medical and health sciences, Data compression (Computer science), Àrees temàtiques de la UPC::Informàtica::Aplicacions de la informàtica::Bioinformàtica, Àrees temàtiques de la UPC::Informàtica::Seguretat informàtica::Criptografia, Informàtica::Seguretat informàtica::Criptografia [Àrees temàtiques de la UPC], Data encryption (Computer science)
Popis: New genome sequencing technologies have decreased the cost of generating genomic data, thus increasing storage needs. The International Organization for Standardization (ISO) working group MPEG has developed a standard for genomic data compression with encryption features. The approach taken in standard MPEG-G (ISO/IEC 23092) to compress genomic information was to group similar data into streams. Taking this into account, one of the protection options considered was to encrypt each stream separately. In this paper, we show that an attacker can use an unencrypted stream to deduce the encrypted content if streams are encrypted separately. To do so, we present two different attacks, one based on signal processing and the other one based on neural networks. The signal-based attack only works with unrealistic settings, whereas the neural network-based one recovers data with realistic settings (regarding read length and coverage). The presented results made MPEG reconsider the encryption strategy, before final publication of the standard, discarding separate streams encryption approach.
The work presented in this paper has been partially supported by the Spanish Research Agency/ERDF (EU), through the project Secure Genomic Information Compression (GenCom, TEC2015-67774-C2-1-R, TEC2015-67774-C2-2-R) and by the Generalitat de Catalunya (2017 SGR 1749).
Druh dokumentu: Article
Popis súboru: application/pdf
Jazyk: English
ISSN: 1573-7721
1380-7501
DOI: 10.1007/s11042-021-10720-7
DOI: 10.13039/501100003329
Prístupová URL adresa: https://upcommons.upc.edu/handle/2117/342757
https://link.springer.com/article/10.1007/s11042-021-10720-7
https://dblp.uni-trier.de/db/journals/mta/mta80.html#NaroDL21
https://hdl.handle.net/2117/342757
https://doi.org/10.1007/s11042-021-10720-7
Rights: Springer TDM
Prístupové číslo: edsair.doi.dedup.....14f39bf836d9188899d2a70bcacf35f5
Databáza: OpenAIRE
Popis
Abstrakt:New genome sequencing technologies have decreased the cost of generating genomic data, thus increasing storage needs. The International Organization for Standardization (ISO) working group MPEG has developed a standard for genomic data compression with encryption features. The approach taken in standard MPEG-G (ISO/IEC 23092) to compress genomic information was to group similar data into streams. Taking this into account, one of the protection options considered was to encrypt each stream separately. In this paper, we show that an attacker can use an unencrypted stream to deduce the encrypted content if streams are encrypted separately. To do so, we present two different attacks, one based on signal processing and the other one based on neural networks. The signal-based attack only works with unrealistic settings, whereas the neural network-based one recovers data with realistic settings (regarding read length and coverage). The presented results made MPEG reconsider the encryption strategy, before final publication of the standard, discarding separate streams encryption approach.<br />The work presented in this paper has been partially supported by the Spanish Research Agency/ERDF (EU), through the project Secure Genomic Information Compression (GenCom, TEC2015-67774-C2-1-R, TEC2015-67774-C2-2-R) and by the Generalitat de Catalunya (2017 SGR 1749).
ISSN:15737721
13807501
DOI:10.1007/s11042-021-10720-7