TWC: Small: Coding-based Mechanisms for Building Secure Cloud Storage Systems

TWC：小型：用于构建安全云存储系统的基于编码的机制

• 批准号: 1617335
• 负责人: Onur Ozan Koyluoglu
• 金额: $ 36万
• 依托单位: University of Arizona
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-08-15 至 2017-10-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1617335&HistoricalAwards=false
• 关键词: TWC; Small; Coding; based; Mechanisms

A wide range of cloud services and applications operate on sensitive data such as business, personal, and governmental information. This renders security and privacy as the most critical concerns in the cloud era. The objective of this project is to question the separation approach in the design of security and reliability features of storage systems, and to investigate new, coding-based security mechanisms based on a joint-design principle. The proposed program will result in a myriad of outcomes. The solutions include effective ways of thwarting cyber attacks, ensuring data availability, and establishing trust between the parties of storage architectures. These infrastructures are the backbones of several systems including cloud computing, peer-to-peer, and content delivery networks. The proposed research together with its far-reaching effects ensure the well-being of these critical infrastructures of the nation by increasing their security and resilience - supporting business, consumer, and military applications. The educational plan of the project, capitalizing on the proposed perspective, aims to train students with principles of multiple fields and their interactions, preparing them for leading-edge STEM positions.The main directions of this project include a) designing codeword allocations to resolve data connectivity challenges when system components fail, b) utilizing secret keys stored at clients in encoding to reduce the cost of information theoretic security, c) building data mixtures through interference alignment principle to resolve privacy problems, and d) designing codes to facilitate challenge-based cryptographic protocols for establishing trust mechanisms between providers and clients. Revealing the benefits that can be leveraged from such a coding-based security approach, this research addresses the challenges in identifying appropriate metrics for data availability and security, characterizing fundamental limits based on these models, and constructing schemes that achieve optimal performance. The proposed effort is interdisciplinary in nature, borrowing tools from coding theory, information theory, cryptography, and networking, and will develop new techniques in these fields.

范围广泛的云服务和应用程序在商业、个人和政府信息等敏感数据上运行。这使得安全和隐私成为云时代最关键的问题。本项目的目的是对存储系统安全和可靠性设计中的分离方法提出质疑，并基于联合设计原则研究新的基于编码的安全机制。拟议的计划将产生无数的结果。这些解决方案包括挫败网络攻击、确保数据可用性以及在存储体系结构各方之间建立信任的有效方法。这些基础设施是包括云计算、点对点和内容交付网络在内的多个系统的骨干。拟议的研究及其深远的影响通过提高这些关键基础设施的安全性和恢复力来确保国家的福祉，从而支持企业、消费者和军事应用。该项目的教育计划旨在培训学生掌握多个领域及其相互作用的原理，为他们进入前沿的STEM职位做准备。该项目的主要方向包括：a)设计码字分配以解决系统组件故障时的数据连接挑战；b)利用存储在客户端的密钥进行编码以降低信息理论安全的成本；c)通过干扰对齐原则建立数据混合以解决隐私问题；d)设计代码以促进基于挑战的密码协议，以建立提供商和客户之间的信任机制。这项研究揭示了这种基于编码的安全方法可以利用的好处，解决了在确定适当的数据可用性和安全性指标、基于这些模型表征基本限制以及构建实现最佳性能的方案方面的挑战。拟议的工作本质上是跨学科的，借鉴了编码理论、信息理论、密码学和网络技术的工具，并将在这些领域开发新技术。