CT-ISG: N3S: Networked Secure Searchable Storage with Privacy and Correctness Assurances

当今的计算和存储服务要求安全性和正确性保证，以检测和阻止恶意攻击或错误行为。这对于网络文件系统等网络存储服务尤其重要。在本项目中，我们将使用三个强大的安全保证为网络数据存储构建健壮、高效和可扩展的内容搜索机制：（1）数据机密性，（2）搜索模式隐私性，以及（3）数据检索的正确性。今天的网络存储服务从根本上来说是不安全的，并且即使是很弱的攻击者也容易受到错误行为的影响，因为它们不能一致地处理所有三个维度。这些保证之间存在着密切的联系。访问模式隐私的缺乏通常会导致统计攻击，从而损害数据的机密性。即使隐私和机密性保证到位，为了实用，网络存储应该允许在外包数据中进行远程搜索，而不会损害其机密性。此外，如果远程存储不能被完全信任，则搜索查询完整性和数据检索完整性（即，（正确性）变得至关重要。因此，单独处理这些方面的解决办法是不完整和不安全的。存储的总拥有成本是硬件成本的5-10倍，每天都有更多的信息以数字方式产生和生活。在未来几年，用户将需要安全、稳健和高效的存储管理。该项目将极大地推进这一领域，为远程存储业务的蓬勃发展创造一个框架，并为所有领域的用户蜂拥使用这些新服务。

Today's computing and storage services mandates security and correctness assurances to detect and deter malicious attacks or faulty behavior. This is particularly relevant for network storage services such as networked file systems.In this project we will build robust, efficient, and scalable content-search mechanisms for networked data storage using three strong security assurances: (1) data confidentiality, (2) search pattern privacy, and (3) data retrieval correctness.Today's networked storage services are fundamentally insecure and vulnerable to faulty behavior by even weak attackers, because they do not handle all three dimensions consistently. There exists a strong relationship between such assurances. The lack of access pattern privacy usually allows for statistical attacks compromising data confidentiality. Even if privacy and confidentiality assurances are in place, to be practical, networked storage should allow remote searching within the outsourced data without compromising its confidentiality. Moreover, if the remote store cannot be fully trusted, search query completeness and data retrieval integrity (i.e., correctness) become essential. Therefore, solutions which address these dimensions separately are incomplete and insecure. We will handle them jointly.The total cost of ownership of storage is 5-10 times greater than the hardware costs, and more information is produced and lives digitally every day. In the coming years, secure, robust, and efficient storage management will be demanded by users. This project will greatly advance this field, creating a framework for remote-storage businesses to flourish, and for users in all fields flocking to use these new services.