Agile Security for Storing Sensitive and Critical Information

随着计算机的普及，越来越多的信息丰富的应用程序被部署用于创建、存储和访问敏感和关键信息。可用于存储和访问此类信息的启用服务必须同时满足安全性和性能需求，即使在实现该服务的某些节点受到威胁或某些客户机恶意行为时也是如此。这个研究项目的重点是一些新的技术，用于构建一个敏捷和安全的存储，可以满足未来应用程序的需求。首先，研究了分布式存储的灵活敏捷架构，以允许应用程序动态调整其所需的安全性和性能级别。其次，商店的敏捷特性要求检测潜在的危害和恶意活动。适应这种可疑攻击的新协议正在探索中。最后，研究了各种需要访问敏感信息的无处不在的应用程序。此类应用程序的特征可以帮助量化在必须协调相互冲突的安全和性能目标时所固有的开销。

As computers become pervasive, an increasing number of information rich applications are being deployed that create, store and access sensitive and critical information. An enabling service that can be used to store and access such information must meet both security and performance requirements even when some nodes that implement the service are compromised or when some clients behave maliciously. This research project focuses on a number of novel techniques for building an agile and secure store that can meet the needs of future applications. First, a flexible and agile architecture for a distributed store is investigated to allow applications to dynamically adapt their desired security and performance levels. Second, the agile nature of the store requires the detection of potential compromises and malicious activity. New protocols that adapt to such suspected attacks are explored. Finally, a variety of ubiquitous applications that need to access sensitive information are investigated. The characteristics of such applications can help quantify the overheads that are inherent when the conflicting goals of security and performance have to be reconciled.