TC: Small: Towards Customer-Centric Utility Computing

在这个项目中，我们正在探索计算任务（作业）和分配给运行这些作业的计算资源之间的关联，以提高部署任务以满足安全需求的能力。从历史上看，计算任务的所有者也拥有他们的计算资源，因此他们配置他们的资源以高效安全地运行他们的任务。然而，配置安全运行的任务已经变得如此复杂，以至于关键知识现在分布在几个方面：云供应商配置主机系统，操作系统分发者配置云实例，客户配置他们的应用程序和网络策略。目标是能够将这些专业知识收集到单个模型中，以推断如何部署计算任务以满足其安全需求。为此，我们将无数的完整性度量机制集成到一个全面的完整性度量框架中，从而能够对计算任务从安装到完成的数据安全性满意度进行推理。使用此模型，我们正在构建以客户为中心的效用计算服务，以便为满足数据安全需求的计算任务选择资源分配。当客户通过这样的服务部署计算任务时，该服务将构建到其正在运行的作业的完整性验证通道，这些通道是安全的通信通道，可保证数据发送方遵守数据安全策略。使用这些服务，客户将能够在由多方管理的云资源之间部署计算作业，同时确保自动满足他们的数据安全需求。

In this project, we are exploring the association between computing tasks (jobs) and the computing resources assigned to run those jobs to improve the ability to deploy tasks to satisfy security requirements. Historically, the owners of the computing tasks also owned their computing resources, so they configured their resources to run their tasks efficiently and securely. However, configuring tasks to run securely has become so complex that the key knowledge is now distributed among several parties: cloud vendors configure host systems, OS distributors configure cloud instances, customers configure their application programs and network policies. The goal is to be able to collect this expertise into a single model to reason about how to deploy computing tasks to satisfy their security requirements. To do this, we are integrating the myriad of integrity measurement mechanisms into a comprehensive integrity measurement framework to enable reasoning about the satisfaction of a computing task's data security from installation to completion. Using this model, we are building a customer-centric utility computing service to choose an assignment of resources for computing tasks that satisfies data security requirements. When a customer deploys a computing task via such a service, the service will construct integrity-verified channels to her running jobs, which are secure communication channels that guarantee that the data sender adheres to a data security policy. Using such services, customers will be able to deploy computing jobs among cloud resources managed by several parties, while assuring that their data security requirements are satisfied automatically.