Encrypted Databases Made Secure Yet Maintainable

Explore a 14-minute conference talk from OSDI '23 that introduces HEDB, a novel approach to encrypted databases (EDBs) that addresses security vulnerabilities and maintainability issues. Learn about the limitations of current EDB types when dealing with malicious database administrators (DBAs) and discover how HEDB's dual-mode design prevents smuggle attacks while preserving database maintainability. Understand the Execution Mode, which isolates DBAs from operators, and the Maintenance Mode, which enables DBMS maintenance and troubleshooting through authenticated and anonymized replay. Gain insights into HEDB's performance, with evaluation results showing its effectiveness in blocking smuggle attacks and supporting common maintenance tasks with minimal runtime and storage costs.