Collaborative Research: CNS Core: Medium: Secure, Reliable, and Efficient Long-Term Storage

世界每年产生的数字数据呈指数级增长。将数据存储数十年是具有挑战性的，而长期保护数据则更具挑战性。该项目为数字信息开发安全、高效、长期的档案存储系统，其存续期超过一个人的寿命。该项目采用了一种长期安全模型，可以安全地对抗更快的计算机甚至量子计算机，并可以防止恶意的“内部人士”滥用他们的访问权限，在数年内慢慢地秘密窃取数据。最后，该项目探讨了如何安全有效地维护长期数据，即使单个存储提供商不复存在。本课题利用信息安全理论和组合安全理论，开发安全可靠的档案数据长期存储技术。该项目探索了允许数据从几个字节的损坏到大规模云故障等错误中存活下来的技术。然后探讨额外存储需求、数据安全性和可靠性以及系统性能之间的权衡。原型系统的经验评估提供了对在项目生命周期内实现这些技术的实际问题的见解，并且体现这些技术的模拟器允许在更长的时间框架内预测技术的有效性。这个项目促进了系统、理论和安全研究人员之间的合作，以开发实用的技术来保护数据多年，并确保数据保持不变。存储必须满足这两个标准，以数字数据为基础的社会才能依赖它。原型系统和模拟器的所有源代码都是公开维护和发布的。从这个项目的材料被整合到研究生水平的课程和一个新的“安全存储系统”课程。该项目招募并联合指导几名本科生/研究生，重点关注女性和西班牙裔学生，这两类学生传统上在计算机系统研究领域的代表性不足。项目的工件——软件、源代码、数据集、安全存档模拟器、跟踪和结果——都包含在一个名为“search: secure Archives”的系统中。研究结果将通过同行评审的出版物和arxiv.org进行传播。所有文物将通过项目网站：https://www.filesystems.org/secarch公开。该项目计划在项目结束后至少维护该遗址十年。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The world produces more digital data annually that’s growing exponentially. Storing data for decades is challenging and securing it for so long is even more challenging. This project develops secure, efficient, long-term archival storage systems for digital information that endures beyond a single human lifetime. The project uses a long-term security model that is safe against faster computers and even quantum computers and can protect against malicious "insiders" who abuse their access to secretly steal data slowly over years. Lastly, the project explores how to maintain long-term data securely and efficiently, even if individual storage providers cease to exist.This project develops techniques to store archival data securely and reliably for a long-time using information theoretic security and combinatorial security. The project explores techniques to allow data to survive errors ranging from corruptions of a few bytes to large-scale cloud failures. It then explores the trade-off between additional storage requirements, data security and reliability, and system performance. Empirical evaluation of a prototype system provides insights into real-world issues in implementing these techniques over the project’s lifespan, and a simulator embodying these techniques allows projection of the techniques’ effectiveness over much longer time frames.This project fosters collaborations across systems, theory, and security researchers to develop practical techniques to both secure data for many years and ensure that the data endures unchanged. Storage must meet both criteria for a society based on digital data to rely on it. All source code for a prototype system and simulator is maintained and released publicly. Material from this project is integrated into graduate level courses and a new “Secure Storage Systems” course. The project recruits and co-advises several under/graduate students, with a focus on female and Hispanic students, both traditionally underrepresented in computer systems research.The project's artifacts—software, source code, data sets, secure archive simulator, traces, and results—are all embodied in a system called "SecArch: Secure Archives". Results will be disseminated using peer-reviewed publications and arxiv.org. All artifacts will be made public through the project Website: https://www.filesystems.org/secarch. The project plans to maintain the site for at least ten years following the end of the project.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.