CT-ISG: N3S: Networked Secure Searchable Storage with Privacy and Correctness Assurances

今天的计算和存储服务要求提供安全和正确性保证，以检测和阻止恶意攻击或错误行为。这与网络文件系统等网络存储服务尤其相关。在这个项目中，我们将使用三个强大的安全保证来构建健壮、高效和可扩展的网络数据存储内容搜索机制：(1)数据机密性，(2)搜索模式隐私，(3)数据检索正确性。目前的网络存储服务从根本上是不安全的，即使是弱攻击者也容易出现错误行为，因为它们不能一致地处理所有这三个维度。这些保证之间存在着很强的联系。缺乏访问模式隐私通常允许危及数据机密性的统计攻击。即使隐私和机密性保证到位，实际上，网络存储也应该允许在不损害其机密性的情况下在外包数据内进行远程搜索。此外，如果不能完全信任远程存储，则搜索查询完整性和数据检索完整性(即正确性)变得至关重要。因此，单独处理这些方面的解决方案是不完整和不安全的。我们将联合处理它们。存储的总拥有成本是硬件成本的5-10倍，每天都有更多的信息以数字方式生产和生活。在接下来的几年里，用户将需要安全、可靠和高效的存储管理。该项目将极大地推动这一领域的发展，为远程存储业务的蓬勃发展以及所有领域的用户蜂拥使用这些新服务创造一个框架。

Today's computing and storage services mandates security and correctness assurances to detect and deter malicious attacks or faulty behavior. This is particularly relevant for network storage services such as networked file systems.In this project we will build robust, efficient, and scalable content-search mechanisms for networked data storage using three strong security assurances: (1) data confidentiality, (2) search pattern privacy, and (3) data retrieval correctness.Today's networked storage services are fundamentally insecure and vulnerable to faulty behavior by even weak attackers, because they do not handle all three dimensions consistently. There exists a strong relationship between such assurances. The lack of access pattern privacy usually allows for statistical attacks compromising data confidentiality. Even if privacy and confidentiality assurances are in place, to be practical, networked storage should allow remote searching within the outsourced data without compromising its confidentiality. Moreover, if the remote store cannot be fully trusted, search query completeness and data retrieval integrity (i.e., correctness) become essential. Therefore, solutions which address these dimensions separately are incomplete and insecure. We will handle them jointly.The total cost of ownership of storage is 5-10 times greater than the hardware costs, and more information is produced and lives digitally every day. In the coming years, secure, robust, and efficient storage management will be demanded by users. This project will greatly advance this field, creating a framework for remote-storage businesses to flourish, and for users in all fields flocking to use these new services.