CT-ISG: N3S: Networked Secure Searchable Storage with Privacy and Correctness Assurances

CT-ISG：N3S：具有隐私和正确性保证的网络安全可搜索存储

• 批准号: 0627554
• 负责人: Radu Sion
• 金额: $ 30万
• 依托单位: SUNY at Stony Brook
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-09-01 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0627554&HistoricalAwards=false
• 关键词: CT; ISG; N3S; Networked; Secure

Today's computing and storage services mandates security and correctness assurances to detect and deter malicious attacks or faulty behavior. This is particularly relevant for network storage services such as networked file systems.In this project we will build robust, efficient, and scalable content-search mechanisms for networked data storage using three strong security assurances: (1) data confidentiality, (2) search pattern privacy, and (3) data retrieval correctness.Today's networked storage services are fundamentally insecure and vulnerable to faulty behavior by even weak attackers, because they do not handle all three dimensions consistently. There exists a strong relationship between such assurances. The lack of access pattern privacy usually allows for statistical attacks compromising data confidentiality. Even if privacy and confidentiality assurances are in place, to be practical, networked storage should allow remote searching within the outsourced data without compromising its confidentiality. Moreover, if the remote store cannot be fully trusted, search query completeness and data retrieval integrity (i.e., correctness) become essential. Therefore, solutions which address these dimensions separately are incomplete and insecure. We will handle them jointly.The total cost of ownership of storage is 5-10 times greater than the hardware costs, and more information is produced and lives digitally every day. In the coming years, secure, robust, and efficient storage management will be demanded by users. This project will greatly advance this field, creating a framework for remote-storage businesses to flourish, and for users in all fields flocking to use these new services.

今天的计算和存储服务要求安全性和正确性保证，以检测和阻止恶意攻击或错误行为。这与网络存储服务（如网络文件系统）尤其相关。在这个项目中，我们将为网络数据存储构建健壮、高效和可扩展的内容搜索机制，使用三个强大的安全保证：(1)数据机密性，(2)搜索模式隐私性，以及(3)数据检索正确性。今天的网络存储服务从根本上来说是不安全的，即使是脆弱的攻击者也容易出现错误行为，因为它们不能一致地处理所有三个维度。这种保证之间存在着密切的关系。缺乏访问模式隐私通常会导致统计攻击，损害数据机密性。即使隐私和机密性保证已经到位，从实践上讲，网络存储应该允许在外包数据中进行远程搜索，而不会损害其机密性。此外，如果不能完全信任远程存储，那么搜索查询完整性和数据检索完整性（即正确性）就变得至关重要。因此，单独处理这些维度的解决方案是不完整和不安全的。我们将共同处理。存储的总拥有成本是硬件成本的5-10倍，每天都有更多的信息以数字化的方式产生和生活。在未来几年，用户将需要安全、健壮和高效的存储管理。该项目将极大地推动这一领域的发展，为远程存储业务的蓬勃发展和所有领域的用户蜂拥而至使用这些新服务创建一个框架。