TWC: Frontier: Collaborative: Rethinking Security in the Era of Cloud Computing

TWC：前沿：协作：重新思考云计算时代的安全性

• 批准号: 1440065
• 负责人: Vyas Sekar
• 金额: $ 74.98万
• 依托单位: Carnegie-Mellon University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-01-01 至 2020-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1440065&HistoricalAwards=false
• 关键词: TWC; Frontier; Collaborative; Rethinking; Security

There are at least two key features of the move to cloud computing that introduce the opportunity for significant leaps forward in computer security for tenant services. First, a compute cloud provides a common software, hardware and management basis for rolling out cross-cutting services en masse that have resisted incremental deployment in a one-service-at-a-time fashion. Second, compute clouds offer providers a broad view of activity across an unprecedented diversity of tenant services. This research project leverages these features to develop new approaches to a wide array of fundamental problems in computer security. By convening Cloud Security Horizons summits with industry stakeholders, this project further seeks to both contribute to industry directions in cloud computing and to be informed by them.Particular longstanding security challenges addressed in this project include secure transport, authorization, user and software authentication, security monitoring, and incident analysis. Moreover, since modern clouds are not sufficiently extensible to support the envisioned capabilities, this project is constructing cloud software platforms that enable the flexibility, extensibility and security needed for this research to come to fruition in practice.

向云计算的迁移至少有两个关键特征，它们为租户服务的计算机安全带来了重大飞跃的机会。 首先，计算云为大规模推出跨领域服务提供了通用的软件、硬件和管理基础，而这些服务阻碍了以一次一项服务的方式进行增量部署。 其次，计算云为提供商提供了跨前所未有的多样化租户服务活动的广阔视野。 该研究项目利用这些功能来开发新方法来解决计算机安全中的各种基本问题。 通过与行业利益相关者召开云安全视野峰会，该项目进一步寻求为云计算的行业方向做出贡献并从中获取信息。该项目解决的长期存在的特定安全挑战包括安全传输、授权、用户和软件身份验证、安全性监控和事件分析。 此外，由于现代云的可扩展性不足以支持设想的功能，因此该项目正在构建云软件平台，以实现该研究在实践中取得成果所需的灵活性、可扩展性和安全性。