权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

SaTC: CORE: Small: Hardware-assisted Self-repairing in Decentralized Cloud Storage against Malicious Attacks

SaTC：CORE：小型：去中心化云存储中的硬件辅助自我修复抵御恶意攻击

基本信息

批准号：
2225424
负责人：
Bo Chen
金额：
$ 59.84万
依托单位：
Michigan Technological University
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2022
资助国家：
美国
起止时间：
2022-10-01 至 2025-09-30
项目状态：
未结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=2225424&HistoricalAwards=false
关键词：
SaTC CORE Small Hardware assisted

项目摘要

A decentralized cloud storage system eliminates the need of dedicated computing infrastructures by allowing peers which have spare storage space to join the network and to provide storage services. Compared to a conventional centralized cloud storage system, it can bring significant benefits including cheaper storage cost, better fault tolerance, greater scalability, as well as more efficient data storing and retrieval. While bringing immense benefits, the decentralized cloud storage system also raises significant security concerns, as storage peers are more likely to misbehave since they are hosted by individual users who are less reputable and less skillful in security. This project thus takes an essential step towards protecting the long-term integrity of the critical data outsourced to the emerging decentralized cloud. The project's novelties are 1) enabling a new self-repair concept in the decentralized cloud and 2) developing a hardware-assisted secure decentralized cloud storage system supporting the self-repair. The project's broader significance and importance includes protecting critical digital assets outsourced to the untrusted cloud, training graduate students, and reaching out to underrepresented minority students.The project aims to develop the first hardware-assisted self-repairing decentralized cloud storage system against malicious attacks. It resolves a fundamental conflict between the requirement of long-term integrity guarantee and the lack of trust in a decentralized setting, by leveraging the trusted execution environment (TEE) and the flash translation layer (FTL). Especially, the following research tasks are conducted: 1) enabling secure self-repair in each storage peer by collaborating the TEE and the FTL; 2) enabling secure self-repair across multiple untrusted storage peers by leveraging the TEE; and 3) building a fully functioning secure decentralized cloud storage system with self-repair support.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

分散式云存储系统通过允许具有空闲存储空间的对等体加入网络并提供存储服务来消除对专用计算基础设施的需要。与传统的集中式云存储系统相比，它可以带来显着的好处，包括更便宜的存储成本，更好的容错能力，更大的可扩展性以及更有效的数据存储和检索。在带来巨大好处的同时，分散式云存储系统也引发了重大的安全问题，因为存储对等点更有可能行为不端，因为它们由信誉较低且安全技能较低的个人用户托管。因此，该项目朝着保护外包给新兴分散云的关键数据的长期完整性迈出了重要的一步。该项目的创新之处在于：1）在去中心化云中实现了一种新的自我修复概念; 2）开发了一种支持自我修复的硬件辅助安全去中心化云存储系统。该项目更广泛的意义和重要性包括保护外包给不可信云的关键数字资产，培训研究生，以及接触代表性不足的少数民族学生，该项目旨在开发首个硬件辅助的自修复分散云存储系统，以抵御恶意攻击。它通过利用可信执行环境（TEE）和闪存转换层（FTL）解决了长期完整性保证的要求与分散设置中缺乏信任之间的根本冲突。特别地，本文完成了以下研究任务：1）通过TEE和FTL的协作，实现每个存储节点的安全自修复; 2）利用TEE实现多个不可信存储节点的安全自修复;以及3）构建功能齐全的安全分散云存储系统，该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。