III-COR Medium: Collaborative Research: Achieving Compliant Databases

III-COR 媒介：协作研究：实现合规数据库

• 批准号: 0803197
• 负责人: Radu Sion
• 金额: $ 24.95万
• 依托单位: SUNY at Stony Brook
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2013-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0803197&HistoricalAwards=false
• 关键词: III; COR; Medium; Collaborative; Research

Spurred by financial scandals and privacy concerns, governments worldwide have moved to ensure confidence in digital records by regulating their retention and deletion. The goal of this project is to develop and explore a database management system (DBMS) architecture that supports a spectrum of approaches to regulatory compliance, thereby extending the level of protection afforded by conventional file-based compliance storage servers to the vast amounts of structured data residing in databases. The key challenge of this work is to provide compliance assurances for the DBMS, even against insiders with super-user powers, while balancing the need for trustworthiness against the conflicting requirements for scalable performance guarantees and low cost. The resulting architecture provides tunable tradeoffs between security and performance, through a spectrum of techniques ranging from tamper detection to tamper prevention for data, indexes, logs, and metadata; tunable vulnerability windows; tunable granularities of protection; careful use of magnetic disk as a cache and of secure coprocessors on the DBMS platform and compliance storage server platform; and judicious retargeting of an on-disk encryption unit. This work enables compliance laws to be applied to business, government, and personal data now stored in databases, increasing societal confidence in such data. A new web course on compliance data management will raise the computer science community's awareness of compliance issues and will help train a new generation of professionals cognizant of these challenges and solutions. The software prototypes and technical papers describing them will be disseminated through the project's web site http://web.crypto.cs.sunysb.edu/cdb/

在金融丑闻和隐私问题的刺激下，世界各国政府已经采取行动，通过规范数字记录的保留和删除来确保对数字记录的信心。该项目的目标是开发和探索一种数据库管理系统（DBMS）体系结构，该体系结构支持一系列监管合规性方法，从而将传统基于文件的合规性存储服务器提供的保护级别扩展到驻留在数据库中的大量结构化数据。这项工作的关键挑战是为DBMS提供合规性保证，即使是针对具有超级用户权限的内部人员，同时平衡可扩展性能保证和低成本的相互冲突的要求对可信度的需求。由此产生的架构提供了可调的安全性和性能之间的权衡，通过一系列的技术，从篡改检测到篡改预防的数据，索引，日志和元数据;可调的漏洞窗口;可调粒度的保护;谨慎使用磁盘作为缓存和安全协处理器的DBMS平台和合规性存储服务器平台;和明智的重定向磁盘上的加密单元。这项工作使合规法律适用于目前存储在数据库中的企业、政府和个人数据，提高了社会对这些数据的信心。一个关于合规数据管理的新网络课程将提高计算机科学界对合规问题的认识，并将有助于培训认识到这些挑战和解决方案的新一代专业人员。软件原型和说明这些原型的技术文件将通过该项目的网址http://web.crypto.cs.sunysb.edu/cdb/散发