SHF: Small: EAGER: Architectural Support for Improving Cloud Computing Security

云计算服务的快速部署及其对中小型企业的吸引力需要对安全问题进行彻底的检查。事实上，云计算带来了许多在过去的研究中没有解决的新的安全问题，即基础设施提供商和客户(例如服务提供商)之间缺乏信任，以及可能滥用云计算资源来暴露数据或中断服务。在这项研究中，PI解决了云计算带来的主要安全问题。特别是，它计划调查与云计算安全相关的三个主要问题的底层硬件/架构机制：(A)同时加密和访问控制，以保护服务提供商的数据不受基础设施提供商的影响；(B)通过将数据、元数据或加密密钥分散在云中来保护云驻留数据；以及(C)协调监控云中VM的传入和传出流量，以检测安装在云中的任何间谍软件。这项研究可能会对为云计算提供安全产生重大影响。这项研究的其他更广泛的影响包括研究生培训和将研究成果纳入研究生课程。这一项目的学术发现将通过出版物广泛传播，并在适当的情况下向工业界转让技术。

The rapid deployment of cloud computing services and their attraction for small and medium businesses requires a thorough examination of security issues. Indeed cloud computing brings a host of new security issues that have not been addressed in the past research, namely the lack of trust between the infrastructure provider and customers (e.g., service providers) and potential for misuse of cloud computing resources for data exposure or service disruption. In this research, the PI addresses major security issues brought about by cloud computing. In particular, it plans to investigate underlying hardware/architectural mechanisms for three main issues related to cloud computing security: (a) simultaneous encryption and access control to protect service provider's data from infrastructure provider, (b) securing cloud resident data by scattering the data, meta-data, or encryption keys in the cloud, and (c) coordinated monitoring of both incoming and outgoing traffic of VMs in the cloud in order to detect any spyware installed in the cloud. The research could have a significant impact on providing security for cloud computing. The other broader impacts of the research include graduate student training and integration of the research findings into graduate courses. The scholarly discovery of this project will be disseminated broadly through publications and, where appropriate, technology transfer to industry.