CT-ISG: Diaspora: A Secure, Reliable Federated Execution Platform and Object Store

题目CT-ISG: Diaspora：一个安全、可靠、联合执行平台和信息存储，很难协调计算和管理跨组织边界和广域网的信息。为了解决这个问题，这个项目开发了一个分布式的联合平台，用于在一致的、持久的对象上进行安全的、分布式的计算。该平台是一个通用系统，用于管理结构化信息并在其上进行安全计算，允许代表许多互不信任的用户将大量对象链接在一起，同时让用户控制对象的存储位置。这使得组织能够以一种细粒度的、低成本的方式进行合作，这对许多活动都有好处，包括教育、医药、企业对企业交易、企业和军事信息系统，以及大规模的合作信息资源。该项目在几个方面超越了以前的分布式系统平台。它为分布式存储和分布式计算提供了集成支持，而以前的平台只关注其中一个。它支持信息和计算的协作共享，即使在协作实体彼此不完全信任的情况下。它旨在自动执行更大类别的理想系统属性：不仅仅是狭义定义的安全性或可用性，还包括一致性、机密性、完整性、效率和持久性等属性。复制、加密和分布式提交协议使得自动确保持久性信息的一致性、完整性和可用性成为可能。具有安全性和一致性注释的高级语言使程序员能够轻松地为该系统编写代码，使用编译器转换代码和数据以产生安全，可靠和高效的系统。

NSF-0627649TITLE CT-ISG: Diaspora: A Secure, Reliable, Federated Execution Platform andInformation StorePI Andrew MyersIt is difficult to coordinate computation and to manage informationacross organizational boundaries and wide-area networks. To address thisproblem, this project develops a distributed, federated platformfor secure, distributed computation over consistent, durable objects.The platform is a universal system for managing structuredinformation and securely computing on it, allowing allow very largenumbers of objects to be linked together on behalf of many mutuallydistrusting users, while giving users control over where objects arestored. This enables organizations to cooperate in a fine-grained,low-cost way, with benefits for many activities including education,medicine, business-to-business transactions, corporate and militaryinformation systems, and large-scale cooperative information resources.The project goes beyond previous distributed systems platforms inseveral ways. It provides integrated support for both distributedstorage and distributed computation, whereas previous platforms havefocused on one or the other. It supports cooperative sharing ofinformation and computation even when the cooperating entities donot fully trust each other. And it aims to automatically enforce alarger class of desirable system properties: not just security oravailability narrowly defined, but also properties such as consistency,confidentiality, integrity, efficiency, and durability. Replication,encryption, and distributed commit protocols make it possible toautomatically ensure the consistency, integrity, and availabilityof persistent information. A high-level language with security andconsistency annotations enables programmers to easily write code forthis system, using a compiler that transforms code and data to produce asecure, reliable, and efficient system.