TWC: Small: Coding-based Mechanisms for Building Secure Cloud Storage Systems

TWC：小型：用于构建安全云存储系统的基于编码的机制

• 批准号: 1748692
• 负责人: Onur Ozan Koyluoglu
• 金额: $ 33.82万
• 依托单位: University of California-Berkeley
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-06-01 至 2020-11-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1748692&HistoricalAwards=false
• 关键词: TWC; Small; Coding; based; Mechanisms

A wide range of cloud services and applications operate on sensitive data such as business, personal, and governmental information. This renders security and privacy as the most critical concerns in the cloud era. The objective of this project is to question the separation approach in the design of security and reliability features of storage systems, and to investigate new, coding-based security mechanisms based on a joint-design principle. The proposed program will result in a myriad of outcomes. The solutions include effective ways of thwarting cyber attacks, ensuring data availability, and establishing trust between the parties of storage architectures. These infrastructures are the backbones of several systems including cloud computing, peer-to-peer, and content delivery networks. The proposed research together with its far-reaching effects ensure the well-being of these critical infrastructures of the nation by increasing their security and resilience - supporting business, consumer, and military applications. The educational plan of the project, capitalizing on the proposed perspective, aims to train students with principles of multiple fields and their interactions, preparing them for leading-edge STEM positions.The main directions of this project include a) designing codeword allocations to resolve data connectivity challenges when system components fail, b) utilizing secret keys stored at clients in encoding to reduce the cost of information theoretic security, c) building data mixtures through interference alignment principle to resolve privacy problems, and d) designing codes to facilitate challenge-based cryptographic protocols for establishing trust mechanisms between providers and clients. Revealing the benefits that can be leveraged from such a coding-based security approach, this research addresses the challenges in identifying appropriate metrics for data availability and security, characterizing fundamental limits based on these models, and constructing schemes that achieve optimal performance. The proposed effort is interdisciplinary in nature, borrowing tools from coding theory, information theory, cryptography, and networking, and will develop new techniques in these fields.

广泛的云服务和应用程序在敏感数据（例如业务，个人和政府信息）上运行。这将安全性和隐私作为云时代最关键的关注。该项目的目的是质疑存储系统安全性和可靠性特征的设计分离方法，并根据联合设计原则研究基于编码的新的安全机制。拟议的计划将导致无数的结果。这些解决方案包括挫败网络攻击，确保数据可用性以及在存储架构各方之间建立信任的有效方法。这些基础架构是多个系统的骨干，包括云计算，点对点和内容交付网络。拟议的研究及其影响力的影响，通过提高其安全性和韧性 - 支持业务，消费者和军事应用来确保国家的这些关键基础设施的福祉。 The educational plan of the project, capitalizing on the proposed perspective, aims to train students with principles of multiple fields and their interactions, preparing them for leading-edge STEM positions.The main directions of this project include a) designing codeword allocations to resolve data connectivity challenges when system components fail, b) utilizing secret keys stored at clients in encoding to reduce the cost of information theoretic security, c) building data mixtures through interference alignment解决隐私问题的原则，d）设计代码，以促进基于挑战的加密协议，以建立提供者和客户之间的信任机制。揭示从这种基于编码的安全方法可以利用的好处，本研究解决了确定数据可用性和安全性的适当指标，根据这些模型来表征基本限制，并构建实现最佳性能的方案。提出的努力本质上是跨学科的，从编码理论，信息理论，加密和网络中借用工具，并将在这些领域开发新技术。