TWC: Small: Self-Service Cloud Computing

TWC：小型：自助服务云计算

• 批准号: 1420815
• 负责人: Vinod Ganapathy
• 金额: $ 49.99万
• 依托单位: Rutgers University New Brunswick
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-10-01 至 2018-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1420815&HistoricalAwards=false
• 关键词: TWC; Small; Self; Service; Cloud

Cloud computing poses significant risks to the security of client data. Virtual Machine Monitors (VMMs) that underlie cloud systems typically have all-powerful administrative domains that can be exploited or misused to snoop on client virtual machines (VMs) and steal/modify their data. Moreover, although virtual machine technology enables several novel security services that clients may wish to use, such services are privileged and must be implemented within the administrative domain. This project develops the Self-service Cloud Computing (SSC) model to improve the security of client data. SSC employs privilege separation to reduce the privileges granted to the system-wide administrative domain, and expose new abstractions to clients that give them greater control over their VMs. Thus, SSC mitigates the impact of attacks directed on client VMs via the administrative domain, and allows clients to deploy security services on their own VMs.SSC can have broad impact by ameliorating the threats to client data on the cloud, thus encouraging clients to move to the cloud. The concept of cloud app markets developed in this project is also likely to be of independent interest. The project also includes an educational component that will develop new cloud-related material for inclusion in graduate and undergraduate curricula.

云计算对客户端数据的安全性构成了重大风险。 作为云系统基础的虚拟机管理器（VMM）通常具有全能的管理域，可以被利用或滥用来窥探客户端虚拟机（VM）并窃取/修改其数据。此外，尽管虚拟机技术实现了客户端可能希望使用的几种新颖的安全服务，但这些服务是特权的，必须在管理域内实现。该项目开发了自助服务云计算（SSC）模型，以提高客户端数据的安全性。SSC采用权限分离来减少授予系统范围管理域的权限，并向客户端公开新的抽象，使其能够更好地控制其VM。因此，SSC减轻了经由管理域针对客户端VM的攻击的影响，并且允许客户端在其自己的VM上部署安全服务JSC可以通过改善对云上的客户端数据的威胁而具有广泛的影响，从而鼓励客户端移动到云。在这个项目中开发的云应用程序市场的概念也可能是独立的利益。该项目还包括一个教育组件，该组件将开发新的与云相关的材料，以纳入研究生和本科生课程中。