基于Hash聚合动态数据持有性方案安全性分析
Security analysis of dynamic provable data possession based on Hash aggregation

为了防止数据丢失、修改或破坏等，需要对存储在云端的远程数据进行持有性验证。云端动态数据可持有性是当前云数据安全领域的研究热点之一。该文针对已有典型基于Hash聚合动态数据持有性证明方案，分析其验证过程存在的安全问题及其产生原因。结果表明：Hash聚合方法能有效减少由于数据动态操作而增加的数据存储量、计算量、传输量等验证成本，但是如果忽略对于数据块位置与数据块值对应关系的验证则会面临替换攻击，导致严重的安全问题。
Abstract：Dynamic provable data possession (DPDP) schemes are important in cloud data security to prevent the data from being lost, modified or corrupted. This paper presents security analyse of some existing schemes based on Hash aggregation and points out some security problems in the known methods and their fundamental reasons. The analyse show that Hash aggregation can effectively reduce storage, computation and transmission costs of verification due for data dynamic operations. One scheme had security vulnerabilities when verifying the relation between the position and the value of a data block that can allow a substitution attack.