TWC TTP: Small: Mitigating Insider Attacks in Provenance Systems

数字对象的数字起源提供了其生命周期的历史，包括其创建、更新和访问。因此，它提供了有关导致对象的当前版本的事件序列以及其保管链的元级信息。这种来源信息可用于各种目的，例如识别文件的来源、评估数据的质量或可靠性，以及检测诸如伪造或未经授权更改数据等不良行为。然而，所有这些来源信息的实际使用都以来源系统是安全的为前提，即以确保其机密性和完整性的方式收集、处理和存储来源数据。如果没有这样的保证，用户可能会对文档的真实性产生错误的印象，这可能会对现实世界产生重大影响。该项目研究了安全来源收集系统的设计，其中收集的元数据即使在现实的内部攻击模型下也可以依赖。然而，安全是不够的；一个实用的系统还必须是有效的，即使在需要存储和处理大量细粒度的来源数据时也是如此。该项目旨在通过以下三个目标解决这两个问题。(1)可持续更新的软件防篡改技术，以确保系统本身的完整性。(2)健壮、连续标记、无合谋的文本指纹技术，以减少文档泄漏。(3)用于在不可信的存储服务器上匿名存储的技术，以允许高效地存储和访问细粒度的来源数据。

The digital provenance of a digital object gives a history of its life cycle including its creation, update, and access. It thus provides meta-level information about the sequence of events that lead up to the current version of the object, as well as its chain of custody. Such provenance information can be used for a variety of purposes, such as identifying the origins of a document, assessing the quality or reliability of data, and detecting undesirable actions such as forgery or unauthorized alteration of data. However, all of these practical uses of provenance information presuppose that the provenance system is secure, i.e. that provenance data is collected, processed, and stored in a manner that ensures its confidentiality and integrity. Without such guarantees, users can get an incorrect impression of document authenticity, potentially with significant real-world consequences.This project investigates the design of secure provenance collection systems where the collected meta-data can be relied upon even in light of realistic insider attack models. Security, however, is not sufficient; a practical system must also be efficient even when large amounts of fine-grained provenance data needs to be stored and processed. The project is aimed at addressing both issues through the following three objectives. (1) Techniques for continuously updatable software tamperproofing to ensure the integrity of the system itself. (2) Techniques for robust, continuous marking, collusion-free, text fingerprinting to mitigate document leakage. (3) Techniques for anonymous storage on untrusted storage servers to allow for efficient storage and access of fine-grained provenance data.