TWC: Small: Coding-based Mechanisms for Building Secure Cloud Storage Systems

TWC：小型：用于构建安全云存储系统的基于编码的机制

• 批准号: 1748692
• 负责人: Onur Ozan Koyluoglu
• 金额: $ 33.82万
• 依托单位: University of California-Berkeley
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-06-01 至 2020-11-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1748692&HistoricalAwards=false
• 关键词: TWC; Small; Coding; based; Mechanisms

A wide range of cloud services and applications operate on sensitive data such as business, personal, and governmental information. This renders security and privacy as the most critical concerns in the cloud era. The objective of this project is to question the separation approach in the design of security and reliability features of storage systems, and to investigate new, coding-based security mechanisms based on a joint-design principle. The proposed program will result in a myriad of outcomes. The solutions include effective ways of thwarting cyber attacks, ensuring data availability, and establishing trust between the parties of storage architectures. These infrastructures are the backbones of several systems including cloud computing, peer-to-peer, and content delivery networks. The proposed research together with its far-reaching effects ensure the well-being of these critical infrastructures of the nation by increasing their security and resilience - supporting business, consumer, and military applications. The educational plan of the project, capitalizing on the proposed perspective, aims to train students with principles of multiple fields and their interactions, preparing them for leading-edge STEM positions.The main directions of this project include a) designing codeword allocations to resolve data connectivity challenges when system components fail, b) utilizing secret keys stored at clients in encoding to reduce the cost of information theoretic security, c) building data mixtures through interference alignment principle to resolve privacy problems, and d) designing codes to facilitate challenge-based cryptographic protocols for establishing trust mechanisms between providers and clients. Revealing the benefits that can be leveraged from such a coding-based security approach, this research addresses the challenges in identifying appropriate metrics for data availability and security, characterizing fundamental limits based on these models, and constructing schemes that achieve optimal performance. The proposed effort is interdisciplinary in nature, borrowing tools from coding theory, information theory, cryptography, and networking, and will develop new techniques in these fields.

广泛的云服务和应用程序对敏感数据进行操作，例如业务，个人和政府信息。这使得安全和隐私成为云时代最关键的问题。本项目的目的是质疑在存储系统的安全性和可靠性功能的设计分离的方法，并调查新的，基于编码的安全机制的基础上的联合设计原则。拟议的方案将产生无数的结果。这些解决方案包括挫败网络攻击、确保数据可用性以及在存储架构各方之间建立信任的有效方法。这些基础设施是包括云计算、点对点和内容交付网络在内的多个系统的骨干。拟议的研究及其深远的影响，通过提高这些关键基础设施的安全性和恢复能力，确保了国家这些关键基础设施的福祉-支持商业，消费者和军事应用。该项目的教育计划，利用所提出的观点，旨在培养学生多个领域及其相互作用的原则，为前沿STEM职位做好准备。该项目的主要方向包括a）设计码字分配，以解决系统组件故障时的数据连接挑战，B）在编码中使用存储在客户端的密钥，以降低信息理论安全的成本，c）通过干扰对齐原理构建数据混合以解决隐私问题，以及d）设计代码以促进基于挑战的密码协议，用于在提供者和客户端之间建立信任机制。揭示了这种基于编码的安全方法可以利用的好处，本研究解决了确定数据可用性和安全性的适当指标，基于这些模型表征基本限制以及构建实现最佳性能的方案方面的挑战。拟议的努力是跨学科的性质，从编码理论，信息论，密码学和网络借用工具，并将在这些领域开发新技术。