EncryptedCassandra - Client-Side Encryption through Query-Rewriting of CQL

Cloud services offer attractive benefits to businesses, yet their adoption remains hampered by confidentiality concerns. The scope of this thesis is to present a cloud-compatible encryption scheme for NoSQL databases, as well as to provide a sample implementation for Cassandra. The encryption occurs on the client side, thus ensuring that only encrypted data will be shared with the cloud provider in order to maintain its privacy. In addition to this, the encryption is designed with the goal of avoiding plain text data patterns leaking through it. To achieve this, various tradeoffs between performance, functionality and security need to be made.