EAGER: Holistic Security for Cloud Computing: Computing on Encrypted Data

广泛采用外包存储和计算服务的主要障碍是需要保护客户数据的隐私。客户可以直接拥有数据，也可以属于第三方，如客户的客户，在这种情况下，可能有合同或法律义务对这些数据保密。由于数据庞大或数据计算的复杂性，可能会将数据外包给外部服务。本项目研究如何设计安全和私有的数据库服务，以便它们可以集成到更大的安全系统设计中。这项工作的广泛影响是新的方法，以确保以高效和易于集成的方式对大型数据集进行私有操作，这对实现云服务的利用至关重要。研究人员研究了一种机制，允许人们私下将大量数据外包到云中，并私下对这些数据执行各种计算。数据可能会随着时间的推移而变化，这将需要设计有效的方法来更新数据，同时保持其隐私，而隐私不会随着数据库的大小而急剧增加。该项目关注提供的安全保证的可组合性，以确保从服务组件的属性可以推断出服务的总体隐私和安全保证。

The main impediment to a wide adoption of outsourcing storage and computing services is the need to keep the client's data private. Clients may directly own the data, or it can belong to third parties such as customers of the client in which case there may be a contractual or legal obligation to keep this data private. The data may be outsourced to external services due to it enormity or due to the complexity of the computations to be performed on the data. This project investigates how to design secure and private database services so they can be integrated within a larger design of secure systems. The broad impact of this work is new methods to ensure the private manipulations of large data sets in an efficient and easy to integrate manner, which is of vital importance to enable utilization of cloud services. The investigators study mechanisms that allow one to privately outsource large amounts of data to the cloud and privately execute various computations over this data. The data may change over time which will require the design of efficient methods to update the data while maintaining its privacy which do not increase dramatically with the size of the database. The project focuses on the composability of the security guarantees provided, so as to ensure that the overall privacy and security guarantees of a service can be deduced from the properties of its components.