SHF: Small: EAGER: Architectural Support for Improving Cloud Computing Security

SHF：小型：EAGER：提高云计算安全性的架构支持

• 批准号: 1037987
• 负责人: Sushil Jajodia
• 金额: $ 20万
• 依托单位: George Mason University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-06-01 至 2012-05-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1037987&HistoricalAwards=false
• 关键词: SHF; Small; EAGER; Architectural; Support

The rapid deployment of cloud computing services and their attraction for small and medium businesses requires a thorough examination of security issues. Indeed cloud computing brings a host of new security issues that have not been addressed in the past research, namely the lack of trust between the infrastructure provider and customers (e.g., service providers) and potential for misuse of cloud computing resources for data exposure or service disruption. In this research, the PI addresses major security issues brought about by cloud computing. In particular, it plans to investigate underlying hardware/architectural mechanisms for three main issues related to cloud computing security: (a) simultaneous encryption and access control to protect service provider's data from infrastructure provider, (b) securing cloud resident data by scattering the data, meta-data, or encryption keys in the cloud, and (c) coordinated monitoring of both incoming and outgoing traffic of VMs in the cloud in order to detect any spyware installed in the cloud. The research could have a significant impact on providing security for cloud computing. The other broader impacts of the research include graduate student training and integration of the research findings into graduate courses. The scholarly discovery of this project will be disseminated broadly through publications and, where appropriate, technology transfer to industry.

云计算服务的快速部署及其对中小型企业的吸引力需要对安全问题进行彻底的检查。事实上，云计算带来了许多在过去的研究中尚未解决的新的安全问题，即基础设施提供商和客户之间缺乏信任（例如，服务提供商）以及滥用云计算资源导致数据泄露或服务中断的可能性。在这项研究中，PI解决了云计算带来的主要安全问题。特别是，它计划调查与云计算安全相关的三个主要问题的底层硬件/架构机制：（a）同时加密和访问控制以保护服务提供商的数据免受基础设施提供商的影响，（B）通过将数据、元数据或加密密钥分散在云中来保护云驻留数据，以及（c）协调监视云中VM的传入和传出业务，以便检测云中安装的任何间谍软件。这项研究可能会对云计算的安全性产生重大影响。研究的其他更广泛的影响包括研究生培训和研究成果融入研究生课程。该项目的学术发现将通过出版物广泛传播，并酌情向工业界转让技术。