III: Small: Ensuring Integrity and Authenticity of Outsourced Databases

由于与管理数据相关的复杂性和成本，许多组织正在寻求外包他们的数据管理服务。特别是近年来，云计算获得了极大的兴趣。尽管数据外包有着巨大的前景，但它也引发了许多安全和隐私方面的担忧。特别是，由于客户机很少或根本没有对服务器上运行的软件和硬件的直接控制，因此不愿意盲目地信任服务器。服务器可能有意或无意地牺牲客户端的服务质量。此外，还有一个关于服务保真度的问题。数据库具有精确的操作语义，必须由外包数据库保存。迫切需要开发身份验证机制，允许在外包站点上操作数据库（用于查询和更新），同时向数据所有者提供关于数据库事务一致性的保证。这个项目的目标是在动态外包数据库的认证方面取得重大进展。该项目将开发解决方案，使数据所有者和授权客户能够确保外包数据库准确地表示与所有者或客户已执行的有效事务对应的状态。将开发全面而有效的解决方案，以最大限度地减少数据所有者的负担，并减少外包站点用于证明正确执行的开销。欲了解更多信息，请参阅项目网站http://www.cs.purdue.edu/homes/sunil/AuthenticDB

Due to the complexity and cost associated with managing data, many organizations are looking towards outsourcing their data management services. In recent years especially, Cloud Computing has gained significant interest. Although data outsourcing holds great promise, it raises a number of security and privacy concerns. In particular, since the clients have little or no direct control over the software and hardware that is running at the servers, there is a reluctance to blindly trust the server. A server may sacrifice the quality of service for a client either intentionally or inadvertently. In addition, there is a concern about the fidelity of the service. Databases have precise semantics of operation which must be preserved by the outsourced database. There is a critical need to develop authentication mechanisms that allow a database to be operated (for querying and updates) at an outsourcing site while providing guarantees to the data owner regarding transactional consistency of the database.This project aims to make significant advances in the authentication of dynamic outsourced databases. The project will develop solutions that enable a data owner and authorized clients to ensure that the outsourced database represents exactly the state that corresponds to valid transactions that have been executed by the owner or clients. Comprehensive and efficient solutions that minimize the burden on the data owner, and the overhead on the outsourcing site for proving correct execution will be developed. For further information, see the project website http://www.cs.purdue.edu/homes/sunil/AuthenticDB