In this paper, we discuss a security weakness of Shen et al.’s public auditing protocol for cloud data [IEEE Transactions on Information Forensics and Security, 12(10): 2402-2415, 2017.]. Specifically, we point out their protocol is vulnerable to a data privacy breach attack, i.e., an adversary, once he compromises the third-party auditor latently, can also obtain all data owners’ outsourced data by constructing appropriate challenges. As a result, it breaks the property of “privacy preserving”. We hope that by identifying this design flaw, similar weaknesses can be avoided in future designs.

中文翻译：

---

评论__具有新颖的云数据动态结构的公共审计协议_


在本文中，我们讨论了 Shen 等人的云数据公共审计协议的安全弱点 [IEEE Transactions on Information Forensics and Security, 12(10): 2402-2415, 2017.]。具体来说，我们指出他们的协议容易受到数据隐私泄露攻击，即对手一旦潜在地危害了第三方审计师，也可以通过构建适当的挑战来获取所有数据所有者的外包数据。其结果是，它破坏了“隐私保护”的属性。我们希望通过识别这个设计缺陷，可以在未来的设计中避免类似的弱点。