Annual Computer Security Applications Conference (ACSAC) 2012

Full Program »

Iris: A Scalable Cloud File System with Efficient Integrity Checks

Paper
View File
pdf
771KB

Emil Stefanov
UC Berkeley
United States

Marten van Dijk
RSA Laboratories
United States

Ari Juels
RSA Laboratories
United States

Alina Oprea
RSA Laboratories
United States

Abstract:
We present Iris, a practical, authenticated file system designed to support workloads from large enterprises storing data in the cloud and be resilient against potentially untrustworthy service providers. As a transparent layer enforcing strong integrity guarantees, Iris lets an enterprise tenant maintain a large file system in the cloud. In Iris, tenants obtain strong assurance not just on data integrity, but also on data freshness, as well as data retrievability in case of accidental or adversarial cloud failures.

Iris offers an architecture scalable to many clients (on the order of hundreds or even thousands) issuing operations on the file system in parallel. Iris includes new optimization and enterprise-side caching techniques specifically designed to overcome the high network latency typically experienced when accessing cloud storage. Iris also includes novel erasure coding techniques for efficient support of dynamic Proofs of Retrievability (PoR) protocols over the file system.

 

Powered by OpenConf®
Copyright ©2002-2012 Zakon Group LLC