TWC: Small: Coding-based Mechanisms for Building Secure Cloud Storage Systems

TWC：小型：用于构建安全云存储系统的基于编码的机制

• 批准号: 1617335
• 负责人: Onur Ozan Koyluoglu
• 金额: $ 36万
• 依托单位: University of Arizona
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-08-15 至 2017-10-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1617335&HistoricalAwards=false
• 关键词: TWC; Small; Coding; based; Mechanisms

A wide range of cloud services and applications operate on sensitive data such as business, personal, and governmental information. This renders security and privacy as the most critical concerns in the cloud era. The objective of this project is to question the separation approach in the design of security and reliability features of storage systems, and to investigate new, coding-based security mechanisms based on a joint-design principle. The proposed program will result in a myriad of outcomes. The solutions include effective ways of thwarting cyber attacks, ensuring data availability, and establishing trust between the parties of storage architectures. These infrastructures are the backbones of several systems including cloud computing, peer-to-peer, and content delivery networks. The proposed research together with its far-reaching effects ensure the well-being of these critical infrastructures of the nation by increasing their security and resilience - supporting business, consumer, and military applications. The educational plan of the project, capitalizing on the proposed perspective, aims to train students with principles of multiple fields and their interactions, preparing them for leading-edge STEM positions.The main directions of this project include a) designing codeword allocations to resolve data connectivity challenges when system components fail, b) utilizing secret keys stored at clients in encoding to reduce the cost of information theoretic security, c) building data mixtures through interference alignment principle to resolve privacy problems, and d) designing codes to facilitate challenge-based cryptographic protocols for establishing trust mechanisms between providers and clients. Revealing the benefits that can be leveraged from such a coding-based security approach, this research addresses the challenges in identifying appropriate metrics for data availability and security, characterizing fundamental limits based on these models, and constructing schemes that achieve optimal performance. The proposed effort is interdisciplinary in nature, borrowing tools from coding theory, information theory, cryptography, and networking, and will develop new techniques in these fields.

广泛的云服务和应用程序对敏感数据（如商业、个人和政府信息）进行操作。这使得安全和隐私成为云时代最关键的问题。该项目的目的是质疑存储系统的安全性和可靠性特征设计中的分离方法，并研究基于联合设计原则的新的基于编码的安全机制。拟议中的计划将产生无数的结果。解决方案包括阻止网络攻击、确保数据可用性以及在存储架构各方之间建立信任的有效方法。这些基础设施是包括云计算、点对点和内容交付网络在内的几个系统的骨干。拟议的研究及其深远的影响通过增加其安全性和弹性来确保国家这些关键基础设施的福祉-支持商业，消费者和军事应用。该项目的教育计划，利用提出的观点，旨在培养学生的多领域及其相互作用的原则，为他们的前沿STEM职位做好准备。本研究的主要方向包括：a)设计码字分配以解决系统组件失效时的数据连通性挑战；b)利用存储在客户端的密钥编码以降低信息理论安全成本；c)通过干扰对齐原则构建数据混合以解决隐私问题；d)设计代码以促进基于挑战的加密协议，以建立提供者和客户之间的信任机制。揭示了这种基于编码的安全方法可以利用的好处，本研究解决了在确定数据可用性和安全性的适当度量方面的挑战，描述了基于这些模型的基本限制，并构建了实现最佳性能的方案。提议的努力本质上是跨学科的，借鉴了编码理论、信息论、密码学和网络的工具，并将在这些领域开发新技术。