Collaborative Research: CNS Core: Medium: Secure, Reliable, and Efficient Long-Term Storage

合作研究：CNS核心：中：安全、可靠、高效的长期存储

• 批准号: 2106263
• 负责人: Erez Zadok
• 金额: $ 71.73万
• 依托单位: SUNY at Stony Brook
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-10-01 至 2025-09-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2106263&HistoricalAwards=false
• 关键词: Collaborative; Research; CNS; Core; Medium

The world produces more digital data annually that’s growing exponentially. Storing data for decades is challenging and securing it for so long is even more challenging. This project develops secure, efficient, long-term archival storage systems for digital information that endures beyond a single human lifetime. The project uses a long-term security model that is safe against faster computers and even quantum computers and can protect against malicious "insiders" who abuse their access to secretly steal data slowly over years. Lastly, the project explores how to maintain long-term data securely and efficiently, even if individual storage providers cease to exist.This project develops techniques to store archival data securely and reliably for a long-time using information theoretic security and combinatorial security. The project explores techniques to allow data to survive errors ranging from corruptions of a few bytes to large-scale cloud failures. It then explores the trade-off between additional storage requirements, data security and reliability, and system performance. Empirical evaluation of a prototype system provides insights into real-world issues in implementing these techniques over the project’s lifespan, and a simulator embodying these techniques allows projection of the techniques’ effectiveness over much longer time frames.This project fosters collaborations across systems, theory, and security researchers to develop practical techniques to both secure data for many years and ensure that the data endures unchanged. Storage must meet both criteria for a society based on digital data to rely on it. All source code for a prototype system and simulator is maintained and released publicly. Material from this project is integrated into graduate level courses and a new “Secure Storage Systems” course. The project recruits and co-advises several under/graduate students, with a focus on female and Hispanic students, both traditionally underrepresented in computer systems research.The project's artifacts—software, source code, data sets, secure archive simulator, traces, and results—are all embodied in a system called "SecArch: Secure Archives". Results will be disseminated using peer-reviewed publications and arxiv.org. All artifacts will be made public through the project Website: https://www.filesystems.org/secarch. The project plans to maintain the site for at least ten years following the end of the project.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

世界每年产生更多的数字数据，并且呈指数级增长。 存储数据数十年是一项挑战，而保护数据如此之久则更具挑战性。 该项目开发安全，高效，长期的档案存储系统，用于保存超过人类一生的数字信息。 该项目使用了一种长期的安全模型，可以安全地对抗更快的计算机，甚至量子计算机，并可以防止恶意的“内部人员”滥用他们的访问权限，多年来秘密窃取数据。 最后，本项目探讨了如何安全有效地维护长期数据，即使个别存储提供商不复存在。本项目开发了技术，以安全可靠地存储档案数据的长期使用信息理论安全和组合安全。 该项目探索了允许数据在从几个字节的损坏到大规模云故障的错误中生存的技术。 然后探讨额外存储需求、数据安全性和可靠性以及系统性能之间的权衡。 通过对原型系统的实证评估，可以深入了解在项目生命周期内实施这些技术时的实际问题，而体现这些技术的模拟器可以预测这些技术在更长时间内的有效性。该项目促进了系统、理论和安全研究人员之间的合作，以开发实用技术，确保数据安全多年，并确保数据保持不变。 存储必须满足这两个标准，以使一个基于数字数据的社会依赖于它。原型系统和模拟器的所有源代码都是公开维护和发布的。 从这个项目的材料被整合到研究生课程和一个新的“安全存储系统”课程。 该项目招募和共同建议几个下/研究生，重点是女性和西班牙裔学生，无论是传统上在计算机系统research.The项目的工件，软件，源代码，数据集，安全存档模拟器，跟踪和结果都体现在一个名为“SecArch：安全档案”的系统。 结果将通过同行评审的出版物和arxiv.org进行传播。所有工件将通过项目网站https://www.filesystems.org/secarch公开。 该项目计划在项目结束后至少维持该场地十年。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Improving Storage Systems Using Machine Learning

• DOI: 10.1145/3568429
• 发表时间: 2022-11
• 期刊: ACM Transactions on Storage
• 影响因子: 1.7
• 作者: I. Akgun;A. S. Aydin;Andrew Burford;Michael McNeill;Michael Arkhangelskiy;E. Zadok

Credibility in Private Set Membership

私人会员资格的可信度

• 发表时间: 2023
• 期刊: Public Key Cryptography -- PKC 2023
• 作者: Garg, Sanjam;Hajibadi, Mohammad;Jain, Abhishek;Jin, Zhengzhong;Pandey, Omkant;Shiehian, Sina
• 通讯作者: Shiehian, Sina

Lethe: Secure Deletion by Addition

Lethe：通过添加安全删除

• 发表时间: 2023
• 期刊: Workshop on Challenges and Opportunities of Efficient and Performant Storage Systems
• 作者: Chou, Eugene;Conrad-Shah, Leo;Barker, Austen;Quinn, Andrew;Miller, Ethan L.;Long, Darrell D.
• 通讯作者: Long, Darrell D.

F3: Serving Files Efficiently in Serverless Computing

F3：在无服务器计算中高效地提供文件服务

• DOI: 10.1145/3579370.3594771
• 发表时间: 2023
• 期刊: The 16th ACM International Systems and Storage Conference (SYSTOR '23
• 作者: Merenstein, Alex;Tarasov, Vasily;Anwar, Ali;Guthridge, Scott;Zadok, Erez
• 通讯作者: Zadok, Erez

Metrics for Sustainability in Data Centers

• DOI: 10.1145/3630614.3630622
• 发表时间: 2023-10
• 期刊: ACM SIGENERGY Energy Informatics Review
• 作者: Anshul Gandhi;K. Ghose;Kartik Gopalan;Syed Rafiul Hussain;Dongyoon Lee;David;Liu;Zhen Liu;P. McDaniel;Shuai Mu;E. Zadok