CYCLOSA: Decentralizing Private Web Search Through SGX-Based Browser Extensions

Rafael Pires (1) , David Goltzsche (2) , Sonia Ben Mokhtar (3) , Sara Bouchenak (3) , Antoine Boutet (4) , Pascal Felber (5) , Rüdiger Kapitza (2) , Marcelo Pasin (6) , Valerio Schiavoni (5)

1 IIUN - Institut d'Informatique [Neuchâtel]
2 Technische Universität Braunschweig = Technical University of Braunschweig [Braunschweig]
3 DRIM - Distribution, Recherche d'Information et Mobilité
4 PRIVATICS - Privacy Models, Architectures and Tools for the Information Society
5 UNINE - Université de Neuchâtel = University of Neuchatel
6 LaSIGE [Lisboa]

By regularly querying Web search engines, users (unconsciously) disclose large amounts of their personal data as part of their search queries, among which some might reveal sensitive information (e.g. health issues, sexual, political or religious preferences). Several solutions exist to allow users querying search engines while improving privacy protection. However, these solutions suffer from a number of limitations: some are subject to user re-identification attacks, while others lack scalability or are unable to provide accurate results. This paper presents CYCLOSA, a secure, scalable and accurate private Web search solution. CYCLOSA improves security by relying on trusted execution environments (TEEs) as provided by Intel SGX. Further, CYCLOSA proposes a novel adaptive privacy protection solution that reduces the risk of user re-identification. CYCLOSA sends fake queries to the search engine and dynamically adapts their count according to the sensitivity of the user query. In addition, CYCLOSA meets scalability as it is fully decentralized, spreading the load for distributing fake queries among other nodes. Finally, CYCLOSA achieves accuracy of Web search as it handles the real query and the fake queries separately, in contrast to other existing solutions that mix fake and real query results.

Domaines: Web; Calcul parallèle, distribué et partagé [cs.DC]; Ordinateur et société [cs.CY]

Rafael Pires, David Goltzsche, Sonia Ben Mokhtar, Sara Bouchenak, Antoine Boutet, et al.. CYCLOSA: Decentralizing Private Web Search Through SGX-Based Browser Extensions. ICDCS 2018 - 38th IEEE International Conference on Distributed Computing Systems, Jul 2018, Vienne, Austria. pp.467-477, ⟨10.1109/ICDCS.2018.00053⟩. ⟨hal-01882430⟩