EVSEB: Efficient and Verifiable Searchable Encryption With Boolean Search for Encrypted Cloud Logs
With the growing adoption of cloud services, organizations are increasingly outsourcing their system log management to cloud service providers (CSPs). While this approach offers cost efficiency and scalability, it introduces critical challenges related to the confidentiality, searchability, and inte...
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2025-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/11027066/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1850100947402883072 |
|---|---|
| author | Somchart Fugkeaw Jirakit Deevijit Prapachai Ueasathitwong Thanapoom Thanyasukpaisal |
| author_facet | Somchart Fugkeaw Jirakit Deevijit Prapachai Ueasathitwong Thanapoom Thanyasukpaisal |
| author_sort | Somchart Fugkeaw |
| collection | DOAJ |
| description | With the growing adoption of cloud services, organizations are increasingly outsourcing their system log management to cloud service providers (CSPs). While this approach offers cost efficiency and scalability, it introduces critical challenges related to the confidentiality, searchability, and integrity of sensitive log data. Specifically, existing solutions fall short in supporting fine-grained Boolean keyword search, dynamic access control, and verifiable result integrity over encrypted log records. To address these challenges, we propose EVSEB—an efficient and verifiable searchable encryption framework for encrypted cloud-hosted logs. EVSEB supports fine-grained multi-keyword Boolean search, privacy-preserving access control, and per-file integrity verification with minimal overhead. At its core, EVSEB introduces a hybrid indexing model that integrates a hierarchical log-type classification tree, Bloom filters, and inverted indexes to reduce search space and accelerate query execution. Access control is enforced through blockchain-based smart contracts that securely validate encrypted user tokens. For integrity assurance, EVSEB combines an off-chain distributed hash table (DHT) and an on-chain Merkle root to detect tampering at the level of individual log files. Experimental evaluion demonstrates that our proposed EVSEB outperforms existing solutions in terms of search under increasing keyword and file load, and integrity verification. This substantiates the practicality of our proposed scheme in implementing a searchable encryption and access solution for large-scale encrypted log management in cloud environments. |
| format | Article |
| id | doaj-art-0386534c5f6c4265aa01b45da93b2799 |
| institution | DOAJ |
| issn | 2169-3536 |
| language | English |
| publishDate | 2025-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj-art-0386534c5f6c4265aa01b45da93b27992025-08-20T02:40:10ZengIEEEIEEE Access2169-35362025-01-011310117710119510.1109/ACCESS.2025.357746611027066EVSEB: Efficient and Verifiable Searchable Encryption With Boolean Search for Encrypted Cloud LogsSomchart Fugkeaw0https://orcid.org/0000-0001-7156-184XJirakit Deevijit1https://orcid.org/0009-0001-5786-7196Prapachai Ueasathitwong2Thanapoom Thanyasukpaisal3Sirindhorn International Institute of Technology, Thammasat University, Pathum Thani, ThailandSirindhorn International Institute of Technology, Thammasat University, Pathum Thani, ThailandSirindhorn International Institute of Technology, Thammasat University, Pathum Thani, ThailandSirindhorn International Institute of Technology, Thammasat University, Pathum Thani, ThailandWith the growing adoption of cloud services, organizations are increasingly outsourcing their system log management to cloud service providers (CSPs). While this approach offers cost efficiency and scalability, it introduces critical challenges related to the confidentiality, searchability, and integrity of sensitive log data. Specifically, existing solutions fall short in supporting fine-grained Boolean keyword search, dynamic access control, and verifiable result integrity over encrypted log records. To address these challenges, we propose EVSEB—an efficient and verifiable searchable encryption framework for encrypted cloud-hosted logs. EVSEB supports fine-grained multi-keyword Boolean search, privacy-preserving access control, and per-file integrity verification with minimal overhead. At its core, EVSEB introduces a hybrid indexing model that integrates a hierarchical log-type classification tree, Bloom filters, and inverted indexes to reduce search space and accelerate query execution. Access control is enforced through blockchain-based smart contracts that securely validate encrypted user tokens. For integrity assurance, EVSEB combines an off-chain distributed hash table (DHT) and an on-chain Merkle root to detect tampering at the level of individual log files. Experimental evaluion demonstrates that our proposed EVSEB outperforms existing solutions in terms of search under increasing keyword and file load, and integrity verification. This substantiates the practicality of our proposed scheme in implementing a searchable encryption and access solution for large-scale encrypted log management in cloud environments.https://ieeexplore.ieee.org/document/11027066/Searchable encryptionmultiple keyword searchbloom filterlog fileskeyword searchblockchain |
| spellingShingle | Somchart Fugkeaw Jirakit Deevijit Prapachai Ueasathitwong Thanapoom Thanyasukpaisal EVSEB: Efficient and Verifiable Searchable Encryption With Boolean Search for Encrypted Cloud Logs IEEE Access Searchable encryption multiple keyword search bloom filter log files keyword search blockchain |
| title | EVSEB: Efficient and Verifiable Searchable Encryption With Boolean Search for Encrypted Cloud Logs |
| title_full | EVSEB: Efficient and Verifiable Searchable Encryption With Boolean Search for Encrypted Cloud Logs |
| title_fullStr | EVSEB: Efficient and Verifiable Searchable Encryption With Boolean Search for Encrypted Cloud Logs |
| title_full_unstemmed | EVSEB: Efficient and Verifiable Searchable Encryption With Boolean Search for Encrypted Cloud Logs |
| title_short | EVSEB: Efficient and Verifiable Searchable Encryption With Boolean Search for Encrypted Cloud Logs |
| title_sort | evseb efficient and verifiable searchable encryption with boolean search for encrypted cloud logs |
| topic | Searchable encryption multiple keyword search bloom filter log files keyword search blockchain |
| url | https://ieeexplore.ieee.org/document/11027066/ |
| work_keys_str_mv | AT somchartfugkeaw evsebefficientandverifiablesearchableencryptionwithbooleansearchforencryptedcloudlogs AT jirakitdeevijit evsebefficientandverifiablesearchableencryptionwithbooleansearchforencryptedcloudlogs AT prapachaiueasathitwong evsebefficientandverifiablesearchableencryptionwithbooleansearchforencryptedcloudlogs AT thanapoomthanyasukpaisal evsebefficientandverifiablesearchableencryptionwithbooleansearchforencryptedcloudlogs |