Serge Defrance

Improving the Resistance to Side-Channel Attacks on Cloud Storage Services

Providers of cloud storage services usually apply deduplication across multiple user accounts in order to optimize savings of both upload bandwidth and storage space. However, deduplication can be used as a side channel by an adversary for obtaining sensitive information about other users data. We propose a new gateway-based deduplication model that lets the storage service provider apply efficient deduplication while substantially reducing the risk of information leakage. We suppose that the cloud storage service is provided by a Network Service Provider that also ships advanced gateways to its customers. We discuss why it is much harder for an adversary to infer deduplication from the gateway than from a fully controlled host.

Home networking as a distributed file system view

Devices forming a Home Network have different capabilities and interfaces, discouraging users to organize their large digital content libraries. To help users, we propose to organize the Home Network according to a gateway-centric architecture, where the content access unification is realized at the file system level and where no additional software installation on devices is required. Solutions for realizing this unification individually exist for the various devices making up the Home Network (UPnP/DLNA devices, personal computers, cloud storage systems, etc). Unifying the content access at the file system level offers a powerful lever for many legacy applications, as far as these applications can access all shared data in the Home Network. Users can thus continue to use their PCs file manager or favorite media player to browse or display shared content. An indexing application, running on the gateway, possibly managed by the ISP and accessible from any device via a simple web interface, enables more powerful content retrieval and user experience. Such application may be enriched to offer additional services like content format adaptation, duplication detection or automatic backup. Lastly we describe how this gateway-centric architecture can be leveraged by cloud applications such as distributed storage systems.

Implementation of a TV studio based on Ethernet and the IP protocol stack

ó A small scale TV studio based on an AVB Ethernet network and the IP protocol stack has been presented. ó The main components of this IPTV studio are: the AVB Ethernet network, the management software and its set of protocols, and the synchronization mechanism to GenLock the A/V equipment. ó IP-Studio-Link is a reconfigurable platform used as a bridge between the traditional audio/video equipment and the AVB Ethernet network.