CAREER: Secure and Reliable Outsourced Storage Systems Using Remote Data Checking

职业：使用远程数据检查的安全可靠的外包存储系统

• 批准号: 1054754
• 负责人: Reza Curtmola
• 金额: $ 53.05万
• 依托单位: New Jersey Institute of Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-07-01 至 2017-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1054754&HistoricalAwards=false
• 关键词: CAREER; Secure; Reliable; Outsourced; Storage

When data is outsourced at a cloud storage provider, data owners lose control over the integrity of their data and must trust the storage provider unconditionally. Coupled with numerous data loss incidents, this prevents organizations from assessing the risk posed by outsourcing data to untrusted clouds, making cloud storage unsuitable for applications that require long-term security and reliability guarantees. This project establishes a practical remote data checking (RDC) framework as a mechanism to provide long-term integrity and reliability for remotely stored data. At the same time, the project seeks to develop new functionality for remote data checking that overcomes limitations of early RDC protocols and improves the usability and deployability of RDC on existing cloud storage infrastructures. Unlike previous work, this research takes a holistic approach and considers RDC protocols that minimize the combined security costs of all data management phases over the lifetime of a distributed storage system. This includes prevention, repair, and retrieval. Maintaining the health of the data in a distributed storage system requires various transformations to be applied on the data and requires data to migrate among storage servers. This project develops novel RDC protocols that are compatible with the full range of replication, erasure coding and network coding operations employed by distributed storage systems, thus enabling owners to maintain better control over their data. This project increases the transparency of cloud storage platforms and improves the security dimension of storage outsourcing enabling wider adoption of cloud storage technologies. To disseminate these ideas, the project's educational activities include curriculum development, mentoring undergraduate and graduate students and engaging them into research, and outreach to high-school teachers.

当数据在云存储提供商中外包时，数据所有者将失去对数据完整性的控制权，并且必须无条件地信任存储提供商。加上许多数据丢失事件，这阻止了组织评估将数据外包给未经信任的云所带来的风险，从而使云存储不适合需要长期安全性和可靠性保证的应用程序。该项目建立了一个实用的远程数据检查（RDC）框架，作为一种机制，可为远程存储的数据提供长期完整性和可靠性。同时，该项目试图为远程数据检查开发新的功能，以克服早期RDC协议的限制，并提高RDC在现有云存储基础架构上的可用性和可部署性。与以前的工作不同，这项研究采用了整体方法，并考虑了RDC协议，这些协议将分布式存储系统的一生中所有数据管理阶段的合并安全成本降至最低。这包括预防，维修和检索。在分布式存储系统中保持数据的健康需要在数据上应用各种转换，并且需要数据才能在存储服务器之间迁移。该项目开发了与分布式存储系统采用的全部复制，擦除编码和网络编码操作兼容的新型RDC协议，从而使所有者能够更好地控制其数据。该项目提高了云存储平台的透明度，并提高了存储外包的安全维度，从而使云存储技术更广泛地采用。为了传播这些想法，该项目的教育活动包括课程开发，指导本科生和研究生，并参与研究，并向高中老师宣讲。