SBIR Phase I: SecureVault Cloud Platform

SBIR 第一阶段：SecureVault 云平台

• 批准号: 1212631
• 负责人: Radu Sion
• 金额: $ 15万
• 依托单位: Private Machines Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-07-01 至 2013-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1212631&HistoricalAwards=false
• 关键词: SBIR; Phase; SecureVault; Cloud; Platform

This Small Business Innovation Research Phase I project will design and build SecureVault, a technology platform that allows cloud infrastructures to run clients' tasks with full computation privacy. The cloud provider itself is unable to access to customers' workloads even in the presence of malicious-intent direct physical access to the hardware itself. SecureVault significantly increases cloud defense capabilities, and provides strong computation privacy, and regulatory compliance guarantees to any regulatory- and security-sensitive customers. SecureVault achieves this by (i) endowing a traditional infrastructure with a collaborative security layer of active transparent defense and control, a cloud ?immune system?, and (ii) new mechanisms that allow full computation privacy for outsourced tasks. The immune system has its own control network and can instantly share critical information and react independently for meaningful operation and fast recovery even under sustained attack and severe compromise. It also transparently monitors and accesses the server runtimes and can strongly react and immediately present a united defense across the entire cloud. Moreover, inherent privacy and confidentiality assurances allow SecureVault clouds to safely execute computation and host data with full security, even in the case of a compromised curious service provider with full physical access to the infrastructure.The broader impact/commercial potential of this project will manifest itself in all dimensions of our increasingly internet and cloud-reliant society and technology. Because clouds introduce significant risks, technology-backed comprehensive security and privacy assurances are essential to establish cloud computing as a truly viable alternative to in-house IT. Unfortunately, these guarantees are not achievable with any of today's offerings or research efforts, despite being direly needed by all major potential cloud adopters, including financial, governmental and healthcare markets, heavily governed by security, regulatory compliance and intellectual property constraints. As a result, rather than risk regulatory compliance breaches, and unauthorized access to proprietary business logic, these major markets have simply not adopted the cloud. Countless surveys outline security and privacy consistently as the top concern preventing adoption, and markets have reacted with strong reservations. In a recent ISACA survey, 45% of over 1,800 corporate IT decision makers affirmed that cloud risks outweigh benefits. SecureVault is a disruptive technology that will bridge this gap and make cloud adoption secure and attractive in all these markets. As a result it will lead to exponential cross-market growth. Finally, enabling cloud deployment with full computation privacy, regulatory compliance and data confidentiality will significantly increase enterprise agility and competitiveness.

这个小型企业创新研究第一阶段项目将设计和构建SecureVault，这是一个允许云基础设施在完全计算隐私的情况下运行客户任务的技术平台。即使存在对硬件本身的恶意直接物理访问，云提供商本身也无法访问客户的工作负载。SecureVault显著增强了云防御能力，并为任何对监管和安全敏感的客户提供强大的计算隐私和监管合规性保证。SecureVault通过以下方式实现这一点：(I)赋予传统基础设施主动透明防御和控制的协作安全层、云？免疫系统？，以及(Ii)允许外包任务完全计算隐私的新机制。免疫系统拥有自己的控制网络，即使在持续攻击和严重危害的情况下，也可以立即共享关键信息并独立反应，以实现有意义的操作和快速恢复。它还透明地监控和访问服务器运行时，并可以做出强烈反应，立即在整个云中提供统一的防御。此外，固有的隐私和机密性保证允许SecureVault云安全地执行计算并完全安全地托管数据，即使是在受到威胁的好奇服务提供商拥有对基础设施的完全物理访问权限的情况下也是如此。该项目的更广泛影响/商业潜力将体现在我们日益依赖互联网和云的社会和技术的各个维度。由于云会带来重大风险，因此以技术为后盾的全面安全和隐私保证对于将云计算建立为真正可行的内部IT替代方案至关重要。不幸的是，这些保证无法通过今天的任何产品或研究工作实现，尽管所有主要的潜在云采用者都迫切需要这些保证，包括金融、政府和医疗保健市场，这些市场受到安全、法规遵从性和知识产权限制的严重制约。因此，这些主要市场根本没有采用云，而不是冒着违反监管规定和未经授权访问专有业务逻辑的风险。无数调查一致地将安全和隐私列为阻止采用的首要问题，市场对此持强烈保留态度。在ISACA最近的一项调查中，1800多名企业IT决策者中有45%的人肯定云风险大于收益。SecureVault是一项颠覆性的技术，它将弥合这一差距，并使云在所有这些市场中的采用安全和有吸引力。因此，它将导致跨市场的指数式增长。最后，实现完全计算隐私、合规性和数据机密性的云部署将显著提高企业敏捷性和竞争力。