III: Medium: Scalable and Secure Database as a Service

III：中等：可扩展且安全的数据库即服务

• 批准号: 1065219
• 负责人: Samuel Madden
• 金额: $ 120万
• 依托单位: Massachusetts Institute of Technology
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-04-01 至 2016-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1065219&HistoricalAwards=false
• 关键词: III; Medium; Scalable; Secure; Database

The CirrusDB project seeks to address several key challenges that arise when building a "database as a service". The goal of such a service is to provide a SQL interface to many applications, storing data that today might be spread across hundreds or thousands of separate database management systems. This is attractive because the costs incurred by individual users in the form of software licensing, hardware, management, and energy can be substantially lowered because it will be possible to multiplex many different databases onto a smaller footprint. Moreover, the costs can be made proportional to actual usage, saving significant up-front investments by application developers. The intellectual merit of CirrusDB relates to three key challenges in this area:1) Multi-tenancy, in which the resource use of a complex set of database workloads are monitored and the databases are consolidated on to a minimum number of physical machines while ensuring performance isolation and live migration with no downtime. Unlike existing work on large-scale multi-tenancy, which has focused on co-locating tenants with similar schemas, CirrusDB attempts to co-locate tenants which have resource utilization profiles that will not exceed the capacity of the machine on which they are hosted.2) Scalability in which the responsibility for query processing (and the corresponding data) is partitioned amongst multiple nodes in the service to achieve high throughput, using a novel graph partitioning strategy.3) In which the DBaaS infrastructure executes SQL queries issued by applications over encrypted data, enabling complete SQL processing over fully private data. The key idea is to use the notion of "adjustable security" by encrypting the data in layers in a way that allows not just equality checks but also range queries, sorting operations, and joins to be executed efficiently.CirrusDB will have broad impact in that it will result in database solutions that will a enable large, multi-node database service to be deployed both on a public cloud as well as in private data centers, providing multi-tenancy, scale-out using automatic partitioning, and privacy for SQL query execution. This will result in significantly lower administrative and capital costs required to run large-scale databases. CirrusDB will also reduce the barrier to entry for applications that use databases, because it will not be necessary to have in-house database expertise even when one needs high transactional performance.For further information see the project web site at the URL: http://db.csail.mit.edu/cirrusdb/

CirrusDB项目旨在解决构建“数据库即服务”时出现的几个关键挑战。这种服务的目标是为许多应用程序提供SQL接口，存储今天可能分布在数百或数千个独立数据库管理系统中的数据。 这是有吸引力的，因为单个用户在软件许可证、硬件、管理和能源方面的成本可以大大降低，因为它可以将许多不同的数据库复用到更小的占地面积上。此外，成本可以与实际使用量成比例，从而节省应用程序开发人员的大量前期投资。 CirrusDB的智力优势与该领域的三个关键挑战有关：1）多租户，其中监控一组复杂的数据库工作负载的资源使用，并将数据库整合到最少数量的物理机器上，同时确保性能隔离和实时迁移而不会停机。 与大规模多租户的现有工作不同，该工作集中在共同定位具有类似模式的租户，CirrusDB尝试共同定位具有资源利用率配置文件的租户，这些配置文件不会超过它们所占用的机器的容量。（以及相应的数据）在服务中的多个节点之间被划分以实现高吞吐量，3）其中DBaaS基础架构执行由应用程序对加密数据发出的SQL查询，从而实现对完全私有数据的完整SQL处理。 CirrusDB的核心思想是使用“可调安全性”的概念，通过分层加密数据，不仅允许相等性检查，还允许有效执行范围查询，排序操作和连接。CirrusDB将产生广泛的影响，因为它将产生数据库解决方案，使大型多节点数据库服务能够部署在公共云和私有数据中心，为SQL查询执行提供多租户、使用自动分区的横向扩展和隐私。 这将大大降低运行大型数据库所需的行政和资本费用。 CirrusDB还将降低使用数据库的应用程序的进入门槛，因为即使需要高事务性能，也不需要内部数据库专业知识。有关更多信息，请参阅项目网站，网址为：http://db.csail.mit.edu/cirrusdb/