EAGER: Holistic Security for Cloud Computing: Verifiable Computation

外包计算服务固有的一个基本安全问题是保证从云接收的信息的完整性。这种担忧既涉及外包数据存储，也涉及外包计算的结果。这个问题有几个方面，比如确保软件的正确性，防止故意的偏差和捷径，维护数据的起源，以及保证来自相互不信任的来源的分布式计算的结果。此外，仅在每个轴上提供单独的保证是不够的，必须针对这些问题制定解决方案。该建议集中于设计机制，使客户能够验证外包计算结果的正确性、远程存储数据的真实性和来源，以及两者的组合。特别强调提供可组合的安全保证的机制，其中可以将几个单独机制的安全属性组合成一个联合的整体安全保证，并进一步在性能和可验证性之间做出知情和有意义的折衷。这些新的能力必然会极大地提高云计算的接受度和有用性，特别是向新的应用类别和市场开放它。

A basic security concern inherent to outsourced computating services is guaranteeing the integrity of the information received from the cloud. The concern relates both to outsourced data storage and to the results of outsourced computations. There are several aspects to this problem like ensuring software correctness, protecting against intentional deviation and shortcuts, maintaining data provenance, and guaranteeing results of distributed computation from mutually distrusted sources. Moreover, it is not enough to provide separate guarantees on each axis, solutions to these concerns must compose.This proposal concentrates on the design of mechanisms that enable clients to verify the correctness of the results of outsourced computations, authenticity and provenance of remotely stored data, and the combination of the two. Particular emphasis is given to mechanisms that provide composable security guarantees, where one can combine the security properties of several individual mechanisms to a joint, holistic security guarantee, and furthermore make informed and meaningful tradeoffs between performance and verifiability. These new abilities are bound to greatly enhance the acceptance and usefulness of cloud computing, and in particular open it up to new classes of applications and markets.