Collaborative Research: SaTC: CORE: Medium: Mixed Distribution Models for Encrypted Data Stores

如今，许多组织在云存储系统中捕获和存储海量数据。不幸的是，简单地以加密形式存储数据不足以确保安全：对手可以发动强大的攻击，利用数据访问模式和数据长度来了解有关数据的破坏性信息。由于大的带宽和/或存储开销，针对这些攻击的现有对策在现代存储系统的规模上仍然是不切实际的。这种情况给组织留下了两个同样昂贵和痛苦的选择：(1)加密但不安全的系统；或(2)安全系统，但运营成本高出数量级。该项目通过探索一种全新的混合分发模式打破了上述僵局，该模式有可能实现安全和高性能的数据存储，并提供关于云存储系统对手强度和性能限制之间较少探索的权衡的新见解。因此，该项目能够在实践中设计出能够抵御重要对手的云存储系统，从而获得正式的安全分析和效率。该项目对实践者在构建云存储系统时如何在安全与性能之间进行权衡产生了广泛的影响；对于许多场景，该项目能够打破现有解决方案提供的安全和性能之间的(不幸的)选择，为最终解决通常需要高出数量级的运营成本的安全缺陷铺平道路。该项目的成果是开源研究成果，以及通过教育和技术转让活动产生的更广泛的社区影响。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Many organizations today capture and store an immense amount of data in cloud storage systems. Unfortunately, simply storing the data in an encrypted form is insufficient to ensure security: an adversary can launch powerful attacks that use data access patterns and data lengths to learn damaging information about the data. Existing countermeasures against these attacks remain impractical at the scale of modern storage systems due to large bandwidth and/or storage overheads. This state of affairs leave organizations with two equally expensive and painful options: (1) encrypted but insecure systems; or (2) secure systems but with orders-of-magnitude higher operational costs.This project breaks the above impasse by exploring a fundamentally new mixed distribution model that has the potential to both enable secure and high-performance data stores, as well as to provide new insights about the less-explored tradeoff between adversarial strength and performance limits of cloud storage systems. Thus, this project enables the design of cloud storage systems that resist important adversaries in practice, getting both formal security analyses and efficiency. This project has broad ramifications for how practitioners navigate the security-performance tradeoff while building cloud storage systems; for many scenarios, the project enables breaking the (unfortunate) choice between security and performance offered by existing solutions, paving the path for finally addressing security flaws that have typically required orders-of-magnitude higher operational costs. The project outcomes are open-source research artifacts, and broader community impact via educational and technology transfer activities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.