Speaker: Andreas Schaad (SAP, DE)
Andreas Schaad is a Research Manager at SAP, Germany. He holds a PhD from the University of York and has been active in the Security Research Community for over 10 years.
Title: SEEED - Searching over Encrypted Data in the SAP HANA database.
This talk presents an industrial report on the implementation of a system that supports execution of queries over encrypted data. While this idea is not new, the implementation in a real world large scale in-memory database is still challenging. We will provide an overview of our architecture and detail two use cases to give the audience an insight into how we technically realized the implementation.
We then provide three main contributions, reporting that:
a) We significantly improve functionality by intelligently splitting query execution, i.e. which parts of a query can be performed in the cloud and which on the client.
b) We share some initial performance measurements with the community on basis of the TPCH benchmark.c) We present a domain-specific analysis of three data sets that shows the effects of executing queries over encrypted data and what adjustments are required with respect to the encryption of individual columns.
The three made observations on query execution, execution time measurements and domain-specific query analysis will lead us to the conclusion that although searching over outsourced encrypted data is always a trade off between functionality, performance and security, it is realistic to assume that working solutions can be provided in the not too distant future to the market.