TWC: TTP Option: Frontier: Collaborative: MACS: A Modular Approach to Cloud Security

云安全模块化方法（MACS）项目的目标是开发构建具有有意义的多层安全保证的信息系统的方法。MACS的模块化方法侧重于由较小和可分离的功能组件构建的系统，其中每个组件的安全性单独声明，并且系统作为一个整体的安全性可以从其组件的安全性中获得。该项目专注于构建外包的、基于云的信息服务，并提供以客户为中心的安全保障。MACS项目解决了一系列不同的安全挑战。这些包括具有内置保密性和完整性属性的硬件设计，提供最小功能但更简单，更易于分析的小型多功能操作系统，外包应用程序的隐私保护和可验证内存访问，安全保护覆盖和软件定义网络，以及隐私保护可验证外包计算和数据库系统的算法。至关重要的是，我们将所有这些安全机制及其零碎的分析结合起来，形成一个全球安全保障。此外，分析是模块化的，允许用其他组件替代组件，这些组件基于不同的技术和信任假设提供潜在的可比保证。 研究团队由信息安全和密码学不同方面的专家组成。这项研究是高度合作的，汇集了关键领域的专业知识，以提供全面的安全保障。该项目的一个关键组成部分是马萨诸塞州开放云，它为研究团队提供了一个测试平台，用于在生产云中部署和测试所开发的机制。该项目包括一个重要的外联部分，有若干目标。目标之一是向技术专业人员介绍网络安全及其对我们社会和经济的核心作用。另一个目标是向K-12学生介绍网络安全，并通过它了解一般的计算机科学。该计划的目标是来自代表性不足的少数民族和具有特殊学术潜力的学生。

The goal of the Modular Approach to Cloud Security (MACS) project is to develop methods for building information systems with meaningful multi-layered security guarantees. The modular approach of MACS focuses on systems that are built from smaller and separable functional components, where the security of each component is asserted individually, and where the security of the system as a whole can be derived from the security of its components. The project concentrates on building outsourced, cloud-based information services with client-centric security guarantees. The MACS project addresses a diverse set of security challenges. These include the design of hardware with built-in secrecy and integrity properties, small and versatile operating systems that offer minimal functionality but are simpler and easier to analyze, privacy-preserving and verifiable memory access for outsourced applications, security-preserving overlay and software-defined networks, and algorithms for privacy-preserving verifiable outsourced computations and database systems. Crucially, we combine all of these security mechanisms with their piecemeal analyses into a global security guarantee. Furthermore, the analysis is modular, allowing the substitution of components with others that provide potentially comparable guarantees based on different techniques and trust assumptions. The research team comprises experts in different aspects of information security and cryptography. The research is highly collaborative and pools together key areas of expertise in order to provide overall security guarantees. A key component of the project is the Massachusetts Open Cloud, which provides the research team with a test-bed for deploying and testing the developed mechanisms in a production cloud. The project involves a significant outreach component with a number of goals. One goal is to introduce technology professionals to cybersecurity and its central role for our society and economy. Another goal is to introduce K-12 students to cybersecurity, and through it to computer science in general. The program targets students from both under-represented minorities and students with exceptional academic potential.