V-ORAM: A Versatile and Adaptive ORAM Framework with Service Transformation for Dynamic Workloads
Bo Zhang
34th USENIX Security Symposium (USENIX Security '25) · Day 3 · System Security 5: Securing Systems and Protocols
Oblivious RAM (ORAM) is a cryptographic primitive designed to protect against **access pattern attacks**, where an adversary observing the frequency and sequence of data requests can infer sensitive information about the underlying plaintext, even if the data itself is encrypted. While ORAM schemes provide a robust solution for privacy-preserving outsourced storage, their practical deployment has been hampered by a critical limitation: most existing ORAMs are highly optimized for specific, static workloads. However, real-world cloud storage and data processing environments are inherently dynamic, with fluctuating demands, diverse query types, and varying performance requirements.
AI review
Legitimate cryptographic systems research with a clean theoretical contribution — constant-cost ORAM transformation via a pivot ORAM and a lightweight leakage mitigation mechanism. The core result (30,000x cost reduction vs. naive baselines, <5ms / <50KB EU record overhead) is credible and the problem framing is honest about where V-ORAM actually helps. Not a groundbreaking paradigm shift, but it's real work.