CRI: IAD: Acquisition of a Trusted Hardware Infrastructure for Secure Data Management

0708025CRI-IAD：收购用于安全数据管理的可信硬件基础设施Radu Sion该项目将获得设计和实施可信、高效且可扩展的数据管理所需的安全防篡改硬件。具体地说，基础设施将由一个可信的计算和存储集群组成，以支持三个正在进行的研究项目，这些项目旨在解决网络文件系统(NSF CyberTrust NS3)、关系数据外包(安全查询接口SQI)和监管？合规存储(SecureWORM)。该集群将由一组服务器、关联的兼容可信协处理器、存储子系统和一组磁盘加密硬盘组成。这些硬件是目标项目的基本要求。例如，在NS3项目中，研究人员在最近的结果中表明，在没有服务器端可信硬件支持的情况下，数据访问模式隐私无法有效实现，这主要是由于所需服务器端工作的可证明的令人望而却步的下限。在SecureWORM项目中，研究人员还表明，由于缺乏强大的防篡改能力，现有的蠕虫系统容易受到简单攻击者的攻击。在安全查询接口(SQI)框架中，可信的服务器托管硬件与服务器关系查询处理器紧密合作，为客户提供执行保证和查询隐私。

0708025CRI-IAD: Acquisition of a Trusted Hardware Infrastructure for Secure Data ManagementRadu SionThis project will acquire secure tamper-proof hardware required in the design and implementation of trusted, efficient, and scalable data management. Specifically, the infrastructure will consist of a trusted computing and storage cluster to support three ongoing research projects that address such security assurances in networked file-systems (NSF CyberTrust NS3), relational data outsourcing (Secure Query Interface SQi), and regulatory ? compliant storage (SecureWORM). The cluster will be composed of a set of servers, associated compatible trusted co-processors, a storage sub-system, and a set of On-Disk Encryption hard drive.This hardware is an essential requirement in the target projects. For example, in the NS3 project, in recent results the researchers have shown that data access pattern privacy cannot be achieved efficiently in the absence of server-side trusted hardware support, mainly due to provable prohibitive lower bounds on required server-side work. In the SecureWORM project, the researchers have also shown that existing WORM systems are vulnerable to simple attackers due to the lack of strong tamper-resistance. In the Secure Query Interface (SQi) framework, trusted server-hosted hardware closely cooperates with the server relational query processor to provide clients with execution assurances and query privacy.