CRI: IAD: Acquisition of a Trusted Hardware Infrastructure for Secure Data Management

0708025CRI-IAD：获取用于安全数据管理的可信硬件基础设施本项目将获得设计和实施可信、高效和可扩展数据管理所需的安全防篡改硬件。具体来说，基础设施将包括一个可信的计算和存储集群，以支持三个正在进行的研究项目，解决网络文件系统（NSF CyberTrust NS3）、关系数据外包（安全查询接口SQi）和监管方面的安全保证。兼容存储（SecureWORM）。集群将由一组服务器、相关的兼容可信协处理器、一个存储子系统和一组磁盘上加密硬盘驱动器组成。这种硬件是目标项目中的基本需求。例如，在NS3项目中，在最近的结果中，研究人员已经表明，在缺乏服务器端可信硬件支持的情况下，数据访问模式隐私无法有效实现，这主要是由于所需服务器端工作的可证明的禁止下限。在SecureWORM项目中，研究人员还表明，由于缺乏强大的抗篡改能力，现有的WORM系统容易受到简单攻击者的攻击。在安全查询接口（SQi）框架中，受信任的服务器托管硬件与服务器关系查询处理器密切合作，为客户机提供执行保证和查询隐私。

0708025CRI-IAD: Acquisition of a Trusted Hardware Infrastructure for Secure Data ManagementRadu SionThis project will acquire secure tamper-proof hardware required in the design and implementation of trusted, efficient, and scalable data management. Specifically, the infrastructure will consist of a trusted computing and storage cluster to support three ongoing research projects that address such security assurances in networked file-systems (NSF CyberTrust NS3), relational data outsourcing (Secure Query Interface SQi), and regulatory ? compliant storage (SecureWORM). The cluster will be composed of a set of servers, associated compatible trusted co-processors, a storage sub-system, and a set of On-Disk Encryption hard drive.This hardware is an essential requirement in the target projects. For example, in the NS3 project, in recent results the researchers have shown that data access pattern privacy cannot be achieved efficiently in the absence of server-side trusted hardware support, mainly due to provable prohibitive lower bounds on required server-side work. In the SecureWORM project, the researchers have also shown that existing WORM systems are vulnerable to simple attackers due to the lack of strong tamper-resistance. In the Secure Query Interface (SQi) framework, trusted server-hosted hardware closely cooperates with the server relational query processor to provide clients with execution assurances and query privacy.