CT-ISG: Diaspora: A Secure, Reliable Federated Execution Platform and Object Store

NSF-0627649标题CT-ISG：离散：一个安全、可靠的联合执行平台和信息存储PI Andrew Myers跨组织边界和广域网协调计算和管理信息是困难的。为了解决这个问题，这个项目开发了一个分布式的，联邦的平台，用于在一致的，持久的对象上进行安全的，分布式的计算。这个平台是一个通用的系统，用于管理结构化信息和安全地在上面计算，允许大量的对象代表许多相互不信任的用户链接在一起，同时让用户控制对象的存储位置。这使得组织能够以细粒度、低成本的方式进行协作，这对许多活动都有好处，包括教育、医疗、企业对企业交易、企业和军事信息系统以及大规模协作信息资源。该项目在几个方面超越了以前的分布式系统平台。它为分布式存储和分布式计算提供了集成支持，而以前的平台只关注其中一个。 它支持在协作实体之间不完全信任的情况下进行信息和计算的协作共享。 它的目标是自动执行更大类的理想系统属性：不仅是狭义的安全性或可用性，而且还包括一致性、机密性、完整性、效率和持久性等属性。 复制、加密和分布式提交协议使得自动确保持久信息的一致性、完整性和可用性成为可能。 带有安全性和一致性注释的高级语言使程序员能够轻松地为该系统编写代码，使用编译器转换代码和数据以生成安全，可靠和高效的系统。

NSF-0627649TITLE CT-ISG: Diaspora: A Secure, Reliable, Federated Execution Platform andInformation StorePI Andrew MyersIt is difficult to coordinate computation and to manage informationacross organizational boundaries and wide-area networks. To address thisproblem, this project develops a distributed, federated platformfor secure, distributed computation over consistent, durable objects.The platform is a universal system for managing structuredinformation and securely computing on it, allowing allow very largenumbers of objects to be linked together on behalf of many mutuallydistrusting users, while giving users control over where objects arestored. This enables organizations to cooperate in a fine-grained,low-cost way, with benefits for many activities including education,medicine, business-to-business transactions, corporate and militaryinformation systems, and large-scale cooperative information resources.The project goes beyond previous distributed systems platforms inseveral ways. It provides integrated support for both distributedstorage and distributed computation, whereas previous platforms havefocused on one or the other. It supports cooperative sharing ofinformation and computation even when the cooperating entities donot fully trust each other. And it aims to automatically enforce alarger class of desirable system properties: not just security oravailability narrowly defined, but also properties such as consistency,confidentiality, integrity, efficiency, and durability. Replication,encryption, and distributed commit protocols make it possible toautomatically ensure the consistency, integrity, and availabilityof persistent information. A high-level language with security andconsistency annotations enables programmers to easily write code forthis system, using a compiler that transforms code and data to produce asecure, reliable, and efficient system.