TWC: Frontier: Collaborative: Rethinking Security in the Era of Cloud Computing

TWC：前沿：协作：重新思考云计算时代的安全性

• 批准号: 1330599
• 负责人: Michael Reiter
• 金额: $ 158.56万
• 依托单位: University of North Carolina at Chapel Hill
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1330599&HistoricalAwards=false
• 关键词: TWC; Frontier; Collaborative; Rethinking; Security

There are at least two key features of the move to cloud computing that introduce the opportunity for significant leaps forward in computer security for tenant services. First, a compute cloud provides a common software, hardware and management basis for rolling out cross-cutting services en masse that have resisted incremental deployment in a one-service-at-a-time fashion. Second, compute clouds offer providers a broad view of activity across an unprecedented diversity of tenant services. This research project leverages these features to develop new approaches to a wide array of fundamental problems in computer security. By convening Cloud Security Horizons summits with industry stakeholders, this project further seeks to both contribute to industry directions in cloud computing and to be informed by them.Particular longstanding security challenges addressed in this project include secure transport, authorization, user and software authentication, security monitoring, and incident analysis. Moreover, since modern clouds are not sufficiently extensible to support the envisioned capabilities, this project is constructing cloud software platforms that enable the flexibility, extensibility and security needed for this research to come to fruition in practice.

迁移到云计算至少有两个关键特性，它们为租户服务的计算机安全带来了重大飞跃。首先，计算云提供了一个通用的软件、硬件和管理基础，用于大规模推出横切服务，这些服务一直抵制以一次一个服务的方式进行增量部署。其次，计算云为提供商提供了跨越前所未有的租户服务多样性的广泛活动视图。这个研究项目利用这些特征来开发新的方法来解决计算机安全中的一系列基本问题。通过与行业利益相关者召开云安全地平线峰会，该项目进一步寻求为云计算的行业方向做出贡献，并从中获得信息。该项目解决的长期安全挑战包括安全传输、授权、用户和软件身份验证、安全监控和事件分析。此外，由于现代云没有足够的可扩展性来支持设想的功能，因此该项目正在构建云软件平台，以实现本研究在实践中取得成果所需的灵活性、可扩展性和安全性。