A feasibility study of a data security software product adopting Digital Security by Design (DSbD) technology

Anzen数据归档和存储产品是一项软件创新，它允许组织将数据存储在公共云中，同时提高了数据不会泄露或受损的保证水平。它通过集群实现数据匿名化，然后将其分成四个独立的数据分片，这些数据分片可以单独存储在不同的位置。此解决方案意味着，如果不危及四个存储位置中的每一个，就不可能将数据返回到其原始形式，从而大大增加了危及数据所需的工作量。关键的项目目标是确认采用DSbD安全性是否可行。因此，我们需要了解我们的产品的功能行为是否相同，以及我们是否拥有必要的技能和资源，这些技能和资源对于DSbD技术的采用既实用又可实现。因此，研究成果将通过可行性实验的研究和设计来回答这个问题；这些的执行/测试；并对定量和定性结果进行了分析。我们对移动现有软件（在本例中是我们的核心处理代码）所需工作的调查将作为其他软件项目和我们自己未来支持CHERI可行性工作的指南。调查将集中于确定在软件堆栈的中间件中迁移应用程序时遇到的技术和知识挑战。这项调查不仅将评估CHERI架构本身，还将评估支持文档、操作系统支持和用于CHERI的LLVM/clang编译器。

The Anzen data archive and storage product is a software innovation that allows organisations to store their data in the public cloud with an increased level of assurance that it will not be leaked or compromised. It achieves this by data anonymisation via clustering, followed by splitting it into four separate data shards which may individually stored in different locations. This solution means that without compromising each of the four storage locations it is impossible to return the data to its original form and therefore massively multiplying the amount of effort required in order to compromise the data.The key project objective is to confirm whether adopting DSbD security is viable. We therefore require to understand whether our product's functionality behaves the same and whether we have the requisite have the skills and resources that is both practical and achievable for DSbD technology adoption. The study deliverables therefore will be framed to answer this question through research and design of feasibility experiments; the execution/testing of these; and the analysis of both the quantitative and qualitative results.Our investigation of the work required in order to move an existing piece of software (in this case our core processing code) will act as guide for other software projects and our own future works as to the viability of supporting CHERI.The investigation will focus on determining the technical and knowledge challenges encountered when migrating an application in the middleware of the software stack. This investigation will evaluate not only the CHERI architecture itself but also the supporting documentation, operating system support and the LLVM/clang compiler for CHERI.