EAGER: Holistic Security for Cloud Computing: Verifiable Computation

外包计算服务固有的一个基本安全问题是保证从云接收的信息的完整性。这种关切既涉及外包数据存储，也涉及外包计算的结果。这个问题有几个方面，如确保软件的正确性，防止故意的偏差和捷径，维护数据出处，并保证来自相互不信任的源的分布式计算的结果。 此外，这是不够的，在每个轴上提供单独的保证，解决这些问题必须组成。这一建议集中在设计机制，使客户能够验证外包计算结果的正确性，远程存储数据的真实性和出处，以及两者的结合。特别强调的机制，提供可组合的安全保证，其中一个可以联合收割机的几个单独的机制，以一个联合的，整体的安全保证的安全属性，并进一步作出明智的和有意义的性能和可验证性之间的权衡。这些新功能必将大大提高云计算的接受度和实用性，特别是将其开放给新的应用程序和市场。

A basic security concern inherent to outsourced computating services is guaranteeing the integrity of the information received from the cloud. The concern relates both to outsourced data storage and to the results of outsourced computations. There are several aspects to this problem like ensuring software correctness, protecting against intentional deviation and shortcuts, maintaining data provenance, and guaranteeing results of distributed computation from mutually distrusted sources. Moreover, it is not enough to provide separate guarantees on each axis, solutions to these concerns must compose.This proposal concentrates on the design of mechanisms that enable clients to verify the correctness of the results of outsourced computations, authenticity and provenance of remotely stored data, and the combination of the two. Particular emphasis is given to mechanisms that provide composable security guarantees, where one can combine the security properties of several individual mechanisms to a joint, holistic security guarantee, and furthermore make informed and meaningful tradeoffs between performance and verifiability. These new abilities are bound to greatly enhance the acceptance and usefulness of cloud computing, and in particular open it up to new classes of applications and markets.