Policy-sealed data: a new abstraction for building trusted cloud services

摘要: Accidental or intentional mismanagement of cloud software by administrators poses a serious threat to the integrity and confidentiality customer data hosted services. Trusted computing provides an important foundation for designing services that are more resilient these threats. However, current trusted technology is ill-suited as it exposes too many internal details infrastructure, hinders fault tolerance load-balancing flexibility, performs poorly. We present Excalibur, system addresses limitations enabling design Excalibur new abstraction, called policy-sealed data, lets be sealed (i.e., encrypted customer-defined policy) then unsealed decrypted) only nodes whose configurations match policy. To provide this uses attribute-based encryption, which reduces overhead key management improves performance distributed protocols employed. demonstrate practical, we incorporated in Eucalyptus open-source platform. Policy-sealed can greater confidence customers their not being mismanaged.