CSR: Small: Privacy and Security for MapReduce Clouds with PASMAC

CSR：小：使用 PASMAC 实现 MapReduce 云的隐私和安全

• 批准号: 1218197
• 负责人: Guevara Noubir
• 金额: $ 49.44万
• 依托单位: Northeastern University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1218197&HistoricalAwards=false
• 关键词: CSR; Small; Privacy; Security; MapReduce

This research targets the design and evaluation of protocols forsecure, privacy-preserving data analysis in an untrustedcloud. Therewith, the user can store and query data in the cloud,preserving privacy and integrity of outsourced data and queries. ThePIs specifically address a real-world cloud framework: Google'sprominent MapReduce paradigm.Traditional solutions for single server setups and related work on,e.g., fully homomorphic encryption, are computationally too heavy anduneconomical and offset cloud advantages. The PIs' rationale is todesign new protocols tailored to the specifics of the MapReducecomputing paradigm. The PIs' methodology is twofold. First, the PIsdesign new protocols that allow the cloud user to specify dataanalysis queries for typical operations such as searching, patternmatching or counting. For this, the PIs extend privacy-preservingtechniques, e.g., private information retrieval or order preservingencryption. Second, the PIs design protocols guaranteeing genuinenessof data retrieved from the cloud. Using cryptographic accumulators,users can verify whether data has not been tampered with. Besidesdesign, the PIs also implement a prototype that is usable in arealistic setting with MapReduce.The outcome of this project enables privacy-preserving operations andsecure data storage in a widely-used cloud computing framework, thusremove one major adoption obstacle, and make cloud computing availablefor a larger community.

这项研究针对不信任性云中的规程和评估，对公开保护的方案，保护隐私的数据分析。因此，用户可以在云中存储和查询数据，从而保留外包数据和查询的隐私和完整性。 ThePIS专门针对现实世界的云框架：Google占有的MapReduce Paradigm.Traditional Solutions用于单个服务器设置和相关工作，例如，完全同型的加密，在计算上太重了，不经济和偏移云优势。 PIS的理由是根据MAPREDECOCOCOCTING范式的细节量身定制的Todesign新协议。 PIS的方法是双重的。首先，Pisdesign的新协议允许云用户为诸如搜索，模式比较或计数之类的典型操作指定数据分析查询。为此，PI扩展了隐私权技术，例如私人信息检索或订单保存。 其次，PIS设计协议保证了从云检索到数据的真实性。使用加密蓄能器，用户可以验证数据是否尚未篡改。 除了设计外，PIS还实施了一个原型，该原型可在MapReduce中使用。该项目的结果可以在广泛使用的云计算框架中提供隐私的操作和确保数据存储，从而使一个主要的采用术语促进了一个主要的采用术语，并使云计算可用于更大的社区。