SaTC: CORE: Small: Hardware-assisted Self-repairing in Decentralized Cloud Storage against Malicious Attacks

分散式云存储系统通过允许具有备用存储空间的对等体加入网络并提供存储服务，从而消除了对专用计算基础设施的需求。与传统的集中式云存储系统相比，它可以带来更低的存储成本、更好的容错性、更大的可扩展性以及更高效的数据存储和检索等显著优势。在带来巨大好处的同时，分散的云存储系统也引发了重大的安全问题，因为存储对等体更有可能出现不当行为，因为它们是由信誉较差、安全技能较差的个人用户托管的。因此，该项目在保护外包给新兴分散云的关键数据的长期完整性方面迈出了重要的一步。该项目的新颖之处在于：1)在去中心化云中实现新的自我修复概念；2)开发支持自我修复的硬件辅助安全去中心化云存储系统。该项目更广泛的意义和重要性包括保护外包给不受信任的云的关键数字资产，培训研究生，并向代表性不足的少数民族学生伸出援手。该项目旨在开发首个针对恶意攻击的硬件辅助自修复去中心化云存储系统。它通过利用可信执行环境（TEE）和闪存转换层（FTL），解决了长期完整性保证需求与分散环境中缺乏信任之间的根本冲突。主要进行了以下研究工作：1)通过TEE和FTL的协作，实现每个存储对等体的安全自修复；2)通过利用TEE实现跨多个不受信任的存储对等体的安全自我修复；3)构建功能完备、安全、支持自我修复的去中心化云存储系统。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

A decentralized cloud storage system eliminates the need of dedicated computing infrastructures by allowing peers which have spare storage space to join the network and to provide storage services. Compared to a conventional centralized cloud storage system, it can bring significant benefits including cheaper storage cost, better fault tolerance, greater scalability, as well as more efficient data storing and retrieval. While bringing immense benefits, the decentralized cloud storage system also raises significant security concerns, as storage peers are more likely to misbehave since they are hosted by individual users who are less reputable and less skillful in security. This project thus takes an essential step towards protecting the long-term integrity of the critical data outsourced to the emerging decentralized cloud. The project's novelties are 1) enabling a new self-repair concept in the decentralized cloud and 2) developing a hardware-assisted secure decentralized cloud storage system supporting the self-repair. The project's broader significance and importance includes protecting critical digital assets outsourced to the untrusted cloud, training graduate students, and reaching out to underrepresented minority students.The project aims to develop the first hardware-assisted self-repairing decentralized cloud storage system against malicious attacks. It resolves a fundamental conflict between the requirement of long-term integrity guarantee and the lack of trust in a decentralized setting, by leveraging the trusted execution environment (TEE) and the flash translation layer (FTL). Especially, the following research tasks are conducted: 1) enabling secure self-repair in each storage peer by collaborating the TEE and the FTL; 2) enabling secure self-repair across multiple untrusted storage peers by leveraging the TEE; and 3) building a fully functioning secure decentralized cloud storage system with self-repair support.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.