III-COR Medium: Collaborative Research: Achieving Compliant Databases

III-COR 媒介：协作研究：实现合规数据库

• 批准号: 0803229
• 负责人: Richard Snodgrass
• 金额: $ 27.98万
• 依托单位: University of Arizona
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2013-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0803229&HistoricalAwards=false
• 关键词: III; COR; Medium; Collaborative; Research

Spurred by financial scandals and privacy concerns, governments worldwide have moved to ensure confidence in digital records by regulating their retention and deletion. The goal of this project is to develop and explore a database management system (DBMS) architecture that supports a spectrum of approaches to regulatory compliance, thereby extending the level of protection afforded by conventional file-based compliance storage servers to the vast amounts of structured data residing in databases. The key challenge of this work is to provide compliance assurances for the DBMS, even against insiders with super-user powers, while balancing the need for trustworthiness against the conflicting requirements for scalable performance guarantees and low cost. The resulting architecture provides tunable tradeoffs between security and performance, through a spectrum of techniques ranging from tamper detection to tamper prevention for data, indexes, logs, and metadata; tunable vulnerability windows; tunable granularities of protection; careful use of magnetic disk as a cache and of secure coprocessors on the DBMS platform and compliance storage server platform; and judicious retargeting of an on-disk encryption unit. This work enables compliance laws to be applied to business, government, and personal data now stored in databases, increasing societal confidence in such data. A new web course on compliance data management will raise the computer science community's awareness of compliance issues and will help train a new generation of professionals cognizant of these challenges and solutions. The software prototypes and technical papers describing them will be disseminated through the project's web site http://web.crypto.cs.sunysb.edu/cdb/

受金融丑闻和隐私问题的刺激，世界各国政府已采取行动，通过规范数字记录的保留和删除来确保人们对数字记录的信心。该项目的目标是开发和探索数据库管理系统 (DBMS) 架构，该架构支持多种法规遵从性方法，从而将传统基于文件的合规性存储服务器提供的保护级别扩展到大量结构化数据驻留在数据库中。这项工作的关键挑战是为 DBMS 提供合规性保证，即使是针对具有超级用户权力的内部人员，同时平衡可信性需求与可扩展性能保证和低成本的相互冲突的要求。由此产生的架构通过从数据、索引、日志和元数据的篡改检测到防篡改等一系列技术，在安全性和性能之间提供了可调的权衡；可调整的漏洞窗口；可调节的保护粒度；在 DBMS 平台和合规性存储服务器平台上谨慎使用磁盘作为缓存以及安全协处理器；以及明智地重新定位磁盘加密单元。这项工作使合规性法律能够应用于现在存储在数据库中的企业、政府和个人数据，从而增强社会对此类数据的信心。关于合规性数据管理的新网络课程将提高计算机科学界对合规性问题的认识，并有助于培训认识到这些挑战和解决方案的新一代专业人员。软件原型和描述它们的技术论文将通过该项目的网站 http://web.crypto.cs.sunysb.edu/cdb/ 传播