SBIR Phase I: SecureVault Cloud Platform

SBIR 第一阶段：SecureVault 云平台

• 批准号: 1212631
• 负责人: Radu Sion
• 金额: $ 15万
• 依托单位: Private Machines Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-07-01 至 2013-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1212631&HistoricalAwards=false
• 关键词: SBIR; Phase; SecureVault; Cloud; Platform

This Small Business Innovation Research Phase I project will design and build SecureVault, a technology platform that allows cloud infrastructures to run clients' tasks with full computation privacy. The cloud provider itself is unable to access to customers' workloads even in the presence of malicious-intent direct physical access to the hardware itself. SecureVault significantly increases cloud defense capabilities, and provides strong computation privacy, and regulatory compliance guarantees to any regulatory- and security-sensitive customers. SecureVault achieves this by (i) endowing a traditional infrastructure with a collaborative security layer of active transparent defense and control, a cloud ?immune system?, and (ii) new mechanisms that allow full computation privacy for outsourced tasks. The immune system has its own control network and can instantly share critical information and react independently for meaningful operation and fast recovery even under sustained attack and severe compromise. It also transparently monitors and accesses the server runtimes and can strongly react and immediately present a united defense across the entire cloud. Moreover, inherent privacy and confidentiality assurances allow SecureVault clouds to safely execute computation and host data with full security, even in the case of a compromised curious service provider with full physical access to the infrastructure.The broader impact/commercial potential of this project will manifest itself in all dimensions of our increasingly internet and cloud-reliant society and technology. Because clouds introduce significant risks, technology-backed comprehensive security and privacy assurances are essential to establish cloud computing as a truly viable alternative to in-house IT. Unfortunately, these guarantees are not achievable with any of today's offerings or research efforts, despite being direly needed by all major potential cloud adopters, including financial, governmental and healthcare markets, heavily governed by security, regulatory compliance and intellectual property constraints. As a result, rather than risk regulatory compliance breaches, and unauthorized access to proprietary business logic, these major markets have simply not adopted the cloud. Countless surveys outline security and privacy consistently as the top concern preventing adoption, and markets have reacted with strong reservations. In a recent ISACA survey, 45% of over 1,800 corporate IT decision makers affirmed that cloud risks outweigh benefits. SecureVault is a disruptive technology that will bridge this gap and make cloud adoption secure and attractive in all these markets. As a result it will lead to exponential cross-market growth. Finally, enabling cloud deployment with full computation privacy, regulatory compliance and data confidentiality will significantly increase enterprise agility and competitiveness.

这个小型企业创新研究阶段I项目将设计和构建SecureVault，这是一个技术平台，允许云基础架构通过完整的计算隐私来运行客户的任务。即使存在恶意直接对硬件本身的直接物理访问，云提供商本身也无法访问客户的工作负载。 SecureVault大大提高了云防御能力，并为任何监管和安全敏感的客户提供了强大的计算隐私和法规合规性保证。 SecureVault通过（i）使用主动透明防御和控制，云？免疫系统的协作安全层来赋予传统基础架构，以及（ii）允许外包任务完全计算隐私的新机制。免疫系统具有自己的控制网络，即使在持续的攻击和严重的妥协下，也可以立即共享关键信息，并为有意义的操作和快速恢复做出独立反应。它还可以透明地监视并访问服务器运行时，并可以强烈反应并立即在整个云中呈现曼联防御。此外，固有的隐私和机密性保证使SecureVault Cloud可以安全地执行计算并具有完整安全性的主机数据，即使在受到损害的好奇服务提供商的情况下，可以完全访问基础设施。该项目的更广泛的影响/商业潜力也会在我们日益增加的Internet和Cloud-Reliant Society和Clough-Reliant社会和技术方面表现出来。由于云引入了重大风险，因此技术支持的综合安全性和隐私保证对于建立云计算作为内部内部的真正可行替代方案至关重要。不幸的是，尽管所有主要潜在的云采用者都非常需要，包括金融，政府和医疗保健市场，但受到安全，法规合规性和知识产权限制的严格影响，这些保证是无法实现的。结果，这些主要市场根本没有采用云。无数的调查概述概述安全性和隐私始终是阻止采用的最大关注点，并且市场对强烈的保留产生了反应。在最近的伊萨卡（Isaca）调查中，有1,800多家公司IT决策者中有45％确认云风险超过了收益。 SecureVault是一项破坏性的技术，它将弥合这一差距，并使云采用在所有这些市场中都具有安全和吸引力。结果，这将导致指数式跨市场增长。最后，通过完整的计算隐私，监管合规性和数据机密性实现云部署将大大提高企业敏捷性和竞争力。