Collaborative Research: SaTC: CORE: Medium: Mixed Distribution Models for Encrypted Data Stores

如今，许多组织在云存储系统中捕获和存储大量数据。不幸的是，仅仅以加密形式存储数据不足以确保安全性：攻击者可以发动强大的攻击，利用数据访问模式和数据长度来了解有关数据的破坏性信息。由于大带宽和/或存储开销，针对这些攻击的现有对策在现代存储系统的规模上仍然不切实际。这种情况给组织留下了两个同样昂贵和痛苦的选择：(1)加密但不安全的系统；或者(2)安全系统，但运营成本要高得多。该项目通过探索一种全新的混合分布模型打破了上述僵局，该模型具有实现安全和高性能数据存储的潜力，并提供了关于云存储系统的对抗强度和性能限制之间较少探索的权衡的新见解。因此，该项目使云存储系统的设计能够在实践中抵抗重要的对手，获得正式的安全分析和效率。该项目对从业者在构建云存储系统时如何在安全性和性能之间进行权衡具有广泛的影响；对于许多场景，该项目能够打破现有解决方案提供的安全性和性能之间的（不幸的）选择，为最终解决通常需要更高操作成本的安全性缺陷铺平道路。项目成果是开源研究成果，并通过教育和技术转移活动产生更广泛的社区影响。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Many organizations today capture and store an immense amount of data in cloud storage systems. Unfortunately, simply storing the data in an encrypted form is insufficient to ensure security: an adversary can launch powerful attacks that use data access patterns and data lengths to learn damaging information about the data. Existing countermeasures against these attacks remain impractical at the scale of modern storage systems due to large bandwidth and/or storage overheads. This state of affairs leave organizations with two equally expensive and painful options: (1) encrypted but insecure systems; or (2) secure systems but with orders-of-magnitude higher operational costs.This project breaks the above impasse by exploring a fundamentally new mixed distribution model that has the potential to both enable secure and high-performance data stores, as well as to provide new insights about the less-explored tradeoff between adversarial strength and performance limits of cloud storage systems. Thus, this project enables the design of cloud storage systems that resist important adversaries in practice, getting both formal security analyses and efficiency. This project has broad ramifications for how practitioners navigate the security-performance tradeoff while building cloud storage systems; for many scenarios, the project enables breaking the (unfortunate) choice between security and performance offered by existing solutions, paving the path for finally addressing security flaws that have typically required orders-of-magnitude higher operational costs. The project outcomes are open-source research artifacts, and broader community impact via educational and technology transfer activities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.