云计算环境下数据库查询验证及数据隐私保护研究

With the rapid development of information technology, users' abilities to generate and process data also increase dramatically. It is a big challenge for the users to effectively manage the generated massive data and efficiently obtain the required information from the data.Cloud computing, which is a distributed, highly reliable and extensible computation model, was proposed to deal with the challenge, and is gaining tremendous attention from both the academia and industry. For a cloud computing platform, the biggest concern of the users is the security of their data stored on the servers of the cloud-platform provider, and the issue of preserving user privacy. The project aims to study database security mechanism and models in the context of cloud computing; specifically, improving existing algorithms and designing new ones for query authentication with the help of information security techniques, analyzing security flaws in state-of-the-art indexing structures and designing countermeasure for them, as well as protecting user data privacy by introducing algorithms based on statistical theories.The main technical contents of the project include: query authentication on structured and unstructured data; vulnerability analysis of access patterns on tree-based and non-tree indices, and design of secure indices; user data privacy protection. Finally, we verify the effectiveness of the proposed models and algorithms on both simulated and real cloud computing platforms.

随着信息技术的飞速发展，人们产生和处理数据的能力也有了空前的提高。如何有效的管理生成的海量数据及快速的检索需要的信息，是人们面临着的一个巨大挑战。云计算就是为此应运而生的一种新的分布式、高可靠性、可扩展的计算模型，且越来越多的受到学术界及工业界的重视。在云计算平台中,人们最关心的是存储在云服务提供商服务器上的用户数据的安全和用户的隐私保护问题。本项目拟研究云计算环境下的数据库安全机制与模型，结合信息安全技术来改进现有的数据库查询验证算法，并研究主流的索引结构所存在的安全隐患及其改进,最后提出基于统计理论的模型和算法来保护用户的数据隐私。本项目研究内容包括：结构化和非结构化数据上的查询验证，树型和非树型索引结构的访问方式安全漏洞及改进，以及用户隐私保护研究。最后，我们用模拟的和真实的云平台来验证提出的模型和算法的有效性。

大数据处理技术和云计算在过去的几年里得到了迅猛的发展，而在云计算环境下的数据安全及隐私保护问题也越来越受到人们的重视。本项目组围绕着大数据和云计算环境下的数据管理、查询验证、查询处理、聚类分析、数据隐私保护等问题，在过去四年里通过攻关研究，完成了研究计划任务，达到了预期的目标。主要成果包括发表研究论文21篇，包括数据管理领域CCF A类国际顶级会议ACM SIGMOD和VLDB两篇，CCF B类期刊IEEE Transactions on Cybernetics、IEEE Transactions on Multimedia、Neurocomputing等权威期刊论文6篇，其中被SCI检索的有5篇，EI检索的12篇。培养硕士毕业生6人，年轻骨干教师1人。