CICI: RDP: SAMPRA: Scalable Analysis, Management, and Protection of Research Artifacts

目前支持对敏感数据(如个人身份信息)进行研究的计算系统往往是单一目的的，并且依赖于临时方法来保护和管理数据。该项目开发了名为Sampra的系统：可伸缩的研究成果分析、管理和保护。Sampra的目标是提供一个合规的研究计算平台，支持对受保护数据的多样化、跨学科、协作研究。Sampra利用现代虚拟化技术来实现对受保护计算飞地的分散管理，这些飞地可以根据每个特定研究项目的需求进行定制。此外，该项目还培训研究人员和学生有关管理和分析受保护数据的最佳实践，以及技术人员如何根据个别研究小组的需求定制环境。SAMPRA研究多种技术以满足这些目标，总体技术目标是了解隔离和共享受保护的研究基础设施服务之间的技术和管理权衡。首先，Sampra系统地对硬件、软件和网络资源进行虚拟化，以提供灵活的系统架构，支持具有不同分析、管理和保护需求的研究计算。Sampra还提供虚拟数据传输节点，将受保护的环境与外部数据采集系统连接起来，目的是利用中央机构资源支持现代数据密集型研究项目。该项目开发样本计算、数据分析和数据管理虚拟环境，并将其与管理受保护数据的机构系统相结合。这些示范系统也是培训研究人员如何使用Sampra支持研究的研讨会中使用的例子。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Current computing systems that support research on sensitive data, such as personally identifiable information, are frequently single-purpose and rely on ad-hoc approaches to data protection and management. This project develops system called SAMPRA: Scalable Analysis, Management, and Protection of Research Artifacts. SAMPRA's goal is to provide a compliant research computing platform that supports diverse, inter-disciplinary, collaborative research on protected data. SAMPRA leverages modern virtualization technology to enable the decentralized management of protected computing enclaves that can be customized to the needs of each specific research project. In addition, the project trains researchers and students on best practices for managing and analyzing protected data, and technical staff on how to customize environments to the needs of individual research groups.SAMPRA investigates multiple techniques to meet these goals, with the overall technical goal of understanding the technical and administrative tradeoffs between isolating and sharing protected research infrastructure services. First, SAMPRA systematically virtualizes hardware, software, and network resources to provide a flexible system architecture that supports research computing with varying analysis, management, and protection needs. SAMPRA also provides virtual data transfer nodes to interface protected environments with external data acquisition systems, with the goal of supporting modern data-intensive research projects using central institutional resources. The project develops exemplar computing, data analysis, and data management virtual environments, and integrating these with institutional systems for managing protected data. These exemplar systems are also the examples used in workshops that train researchers on the use of SAMPRA to support research.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.