Securing Data in the Cloud

保护云中的数据

• 批准号: RGPIN-2016-03878
• 负责人: Gorbunov, Sergey
• 金额: $ 2.62万
• 依托单位: University of Waterloo
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2016
• 资助国家: 加拿大
• 起止时间: 2016-01-01 至 2017-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=614692
• 关键词: Securing; Data; Cloud

Big data and cloud computing create new privacy challenges. Our personal devices (e.g., laptops, mobile phones, tablets) have low bandwidth and can perform only lightweight computations. These devices rely on the cloud to perform search queries and other types of computations over large datasets. However, the datasets may contain sensitive information (e.g., medical, financial, personal records) that should be encrypted in the cloud, in order to maintain security and privacy. This creates a fundamental problem: our personal devices cannot use the cloud to perform computations over encrypted data. Can we run a program over encrypted data in the cloud without revealing the data or the description of the program? Can we authenticate the results of the computations performed in the cloud without re-downloading the data and re-doing the work? My long-term research program is to design and develop new cryptographic algorithms, techniques and methods for securing data and programs in the cloud. Specifically, this project will study: (1) development of new security models, methods, and algorithms for secure computation over encrypted data in the cloud, (2) development of new mathematical tools and algorithms for program and code obfuscation, and (3) advancement of techniques for verifiable computation. The algorithms and techniques can be applied to a variety of applications and help us build secure clouds. As more and more sensitive information is collected from all of us, these algorithms are essential. Moreover, during the duration of the projects outlined in this proposal, we will train a new generation of security experts. They will gain knowledge of advanced mathematics, theoretical and practical cryptography and learn how to reason about any security challenge that arises in society.

大数据和云计算会带来新的隐私挑战。我们的个人设备（例如，笔记本电脑，手机，平板电脑）的带宽较低，只能执行轻量级计算。这些设备依靠云来执行大型数据集上的搜索查询和其他类型的计算。但是，数据集可能包含应在云中加密的敏感信息（例如，医疗，财务记录），以维护安全性和隐私。这会产生一个基本问题：我们的个人设备无法使用云对加密数据执行计算。我们可以在云中的加密数据上运行一个程序，而无需透露程序的数据或描述吗？我们可以在不重新下载数据并重新完成工作的情况下验证在云中执行的计算结果吗？我的长期研究计划是设计和开发新的加密算法，技术和方法，以保护云中的数据和程序。具体而言，该项目将研究：（1）开发新的安全模型，方法和算法，用于对云中加密数据进行安全计算，（2）开发新的数学工具和程序和代码混淆的算法，以及（3）用于可验证计算的技术的进步。这些算法和技术可以应用于各种应用程序，并帮助我们构建安全的云。随着我们所有人收集越来越多的敏感信息，这些算法至关重要。此外，在本提案中概述的项目期间，我们将培训新一代的安全专家。他们将了解先进的数学，理论和实用密码学，并学习如何推理社会上发生的任何安全挑战。