II-New: Secure and Efficient Cloud Infrastructure and Accessibility Services

II-新：安全高效的云基础设施和无障碍服务

• 批准号: 1405641
• 负责人: Michael Ferdman
• 金额: $ 19.99万
• 依托单位: SUNY at Stony Brook
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-09-01 至 2018-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1405641&HistoricalAwards=false
• 关键词: II; New; Secure; Efficient; Cloud

This project will create an experimental infrastructure for studying cloud computing at Stony Brook University. Cloud computing is the predominant approach for organizing and managing servers for online services such as Amazon, Google, Facebook, and Twitter. Although cloud computing providers are rapidly expanding, very little is clearly understood in the research literature about how best to build and use a cloud. This disparity arises primarily from the extreme secrecy in which cloud computing operators conduct their business, limiting the dissemination of such knowledge to retain competitive advantage. This project will advance the principled study of cloud computing hardware, software, and applications, by giving researchers the ability to directly experiment with a complete cloud infrastructure. The funding for this project enables the purchase of a small computing cloud to be hosted in the Computer Science building at Stony Brook University, configured to mimic a state-of-the-art datacenter. Users of commercial clouds cannot study many aspects of cloud system design. This project provides researchers with complete physical access to the cloud infrastructure, enabling measurement of the physical characteristics such as power consumption, temperature, and air flow; access to the entire software stack will enable experimentation on cloud resource management and hypervisor implementation; unrestricted access to the cloud resources will enable rapid flexible benchmark and application development and integration. Moreover, direct access to the complete cloud environment, including the locally-developed applications and management infrastructure, will provide researchers with full introspection that enables end-to-end studies of cloud behavior.This proposal brings together a group of PIs who will conduct cloud-related research with a new level of empirical rigor. Because researchers and educators at Stony Brook have a long list of anticipated projects, the infrastructure should immediately garner heavy use. Among the first projects will be a characterization study of virtualization on the scaling efficiency of cloud applications, which will identify the pressing research opportunities in cloud architecture. Another will begin at-scale measurement and testing of lightweight virtualization techniques. This infrastructure will be leveraged to develop and deploy a cloud-based Accessibility as a Service model for delivering accessible digital content to people with disabilities. This project brings together researchers working at all layers of the cloud computing stack---creating the potential for crosscutting insights from study in a realistic deployment with an active user community.

该项目将为斯托尼布鲁克大学的云计算研究创建一个实验基础设施。 云计算是组织和管理亚马逊、谷歌、Facebook和Twitter等在线服务的服务器的主要方法。 尽管云计算提供商正在迅速扩张，但在研究文献中，关于如何最好地构建和使用云的了解很少。 这种差异主要源于云计算运营商开展业务的极端保密性，限制了此类知识的传播以保持竞争优势。 该项目将推进云计算硬件、软件和应用程序的原则性研究，使研究人员能够直接对完整的云基础设施进行实验。该项目的资金支持购买一个小型计算云，托管在斯托尼布鲁克大学的计算机科学大楼，配置为模仿最先进的数据中心。 商业云的用户无法学习云系统设计的许多方面。 该项目为研究人员提供了对云基础设施的完整物理访问，可以测量功耗，温度和气流等物理特性;访问整个软件堆栈将允许对云资源管理和虚拟机管理程序实施进行实验;不受限制地访问云资源将实现快速灵活的基准测试和应用程序开发和集成。 此外，直接访问完整的云环境，包括本地开发的应用程序和管理基础设施，将为研究人员提供全面的内省，从而实现对云行为的端到端研究。这一提议汇集了一组PI，他们将以新的经验严谨性进行云相关研究。 由于斯托尼布鲁克的研究人员和教育工作者有一长串预期的项目，基础设施应该立即获得大量使用。 第一批项目将是对云应用程序扩展效率的虚拟化表征研究，这将确定云架构中紧迫的研究机会。 另一个项目将开始对轻量级虚拟化技术进行大规模测量和测试。 该基础设施将被用于开发和部署基于云的无障碍即服务模式，以向残疾人提供无障碍数字内容。 该项目汇集了在云计算堆栈的所有层工作的研究人员-在一个活跃的用户社区的现实部署中创造了研究横切见解的潜力。

项目成果

Civet: An Efficient Java Partitioning Framework for Hardware Enclaves

• 发表时间: 2020
• 作者: Chia-che Tsai;Jeongseok Son;Bhushan Jain;John McAvey;Raluca A. Popa;Donald E. Porter