CRI: IAD: Acquisition of a Trusted Hardware Infrastructure for Secure Data Management

CRI：IAD：收购用于安全数据管理的可信硬件基础设施

• 批准号: 0708025
• 负责人: Radu Sion
• 金额: $ 20万
• 依托单位: SUNY at Stony Brook
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-09-15 至 2011-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0708025&HistoricalAwards=false
• 关键词: CRI; IAD; Acquisition; Trusted; Hardware

0708025CRI-IAD: Acquisition of a Trusted Hardware Infrastructure for Secure Data ManagementRadu SionThis project will acquire secure tamper-proof hardware required in the design and implementation of trusted, efficient, and scalable data management. Specifically, the infrastructure will consist of a trusted computing and storage cluster to support three ongoing research projects that address such security assurances in networked file-systems (NSF CyberTrust NS3), relational data outsourcing (Secure Query Interface SQi), and regulatory ? compliant storage (SecureWORM). The cluster will be composed of a set of servers, associated compatible trusted co-processors, a storage sub-system, and a set of On-Disk Encryption hard drive.This hardware is an essential requirement in the target projects. For example, in the NS3 project, in recent results the researchers have shown that data access pattern privacy cannot be achieved efficiently in the absence of server-side trusted hardware support, mainly due to provable prohibitive lower bounds on required server-side work. In the SecureWORM project, the researchers have also shown that existing WORM systems are vulnerable to simple attackers due to the lack of strong tamper-resistance. In the Secure Query Interface (SQi) framework, trusted server-hosted hardware closely cooperates with the server relational query processor to provide clients with execution assurances and query privacy.

0708025CRI-IAD：获取用于安全数据管理的可信硬件基础设施Radu Sion该项目将获取设计和实施可信、高效和可扩展的数据管理所需的安全防篡改硬件。 具体来说，该基础设施将由可信计算和存储集群组成，以支持三个正在进行的研究项目，这些项目解决网络文件系统（NSF Cyber​​Trust NS3）、关系数据外包（安全查询接口 SQi）和监管中的此类安全保证？合规存储 (SecureWORM)。 该集群将由一组服务器、相关的兼容的可信协处理器、一个存储子系统和一组磁盘加密硬盘组成。该硬件是目标项目的基本要求。 例如，在 NS3 项目中，研究人员最近的结果表明，在缺乏服务器端可信硬件支持的情况下，无法有效实现数据访问模式隐私，这主要是由于可证明所需服务器端工作的下限令人望而却步。 在SecureWORM项目中，研究人员还表明，现有的WORM系统由于缺乏强大的防篡改能力，很容易受到简单攻击者的攻击。 在安全查询接口（SQi）框架中，可信服务器托管硬件与服务器关系查询处理器密切合作，为客户端提供执行保证和查询隐私。