<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cloud Computing Köln &#187; Forschung</title>
	<atom:link href="https://www.cloud-computing-koeln.de/category/forschung/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.cloud-computing-koeln.de</link>
	<description>Neues zu Cloud Computing, Internet of Things und Technologien</description>
	<lastBuildDate>Sat, 14 Nov 2026 14:41:19 +0000</lastBuildDate>
	<language>de-DE</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=4.1.1</generator>
	<item>
		<title>Jeffery Lim wants to open up cloud research</title>
		<link>https://www.cloud-computing-koeln.de/jeffery-lim-wants-to-open-up-cloud-research/</link>
		<comments>https://www.cloud-computing-koeln.de/jeffery-lim-wants-to-open-up-cloud-research/#comments</comments>
		<pubDate>Tue, 03 Nov 2026 02:41:43 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/jeffery-lim-wants-to-open-up-cloud-research/</guid>
		<description><![CDATA[<p>Millions of people rely on the cloud every day, yet researchers working to secure and improve the cloud are often locked out of the technology it runs on. Jeffery Lim is trying to change that.One such technology, single-root input/output virtualization (SR-IOV), lets major cloud providers like Amazon Web Services boost the performance of their systems.&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/jeffery-lim-wants-to-open-up-cloud-research/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/jeffery-lim-wants-to-open-up-cloud-research/">Jeffery Lim wants to open up cloud research</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>Millions of people rely on the cloud every day, yet researchers working to secure and improve the cloud are often locked out of the technology it runs on. Jeffery Lim is trying to change that.One such technology, single-root input/output virtualization (SR-IOV), lets major cloud providers like Amazon Web Services boost the performance of their systems. Cloud providers combine SR-IOV with custom hardware and software to deliver faster cloud services than traditional setups allow.Lim is a computer engineer at MIT Lincoln Laboratory. While pursuing his master&#8217;s degree, he noticed that academic research proposing smarter or safer cloud infrastructure did not account for SR-IOV. Very few open-source hardware platforms existed that would let researchers work directly with SR-IOV as they developed new software or models to improve the cloud.So, Lim filled that gap with his master&#8217;s thesis, building a hardware platform compatible with SR-IOV that captures key features of the infrastructure used by cloud providers.&nbsp;The result is a research and development platform that allows researchers to build, test, and evaluate realistic cloud designs.&#8221;As a society, everyone uses the cloud now,&#8221; Lim says. &#8220;I hope that people will use this platform to build systems more akin to how cloud providers operate, and, more broadly, that researchers everywhere can take advantage of SR-IOV for the performance benefits it offers.&#8221;Lim presented a&nbsp;paper&nbsp;at the IEEE High-Performance Extreme Computing Conference in September, and he plans to release this work open source. In recognition of the hardware&#8217;s potential impact, the Boston University College of Engineering awarded Lim its 2026 Master&#8217;s Societal Impact Award.Winding path to cybersecurityGrowing up, Lim was fascinated with building computers. That fascination set him on a winding path to the&nbsp;Secure Resilient Systems and Technology Group at Lincoln Laboratory.After studying electrical and computer engineering at the University of Colorado at Boulder, he spent several years in industry working on field-programmable gate arrays (FPGAs) — integrated circuits that can be repeatedly reprogrammed for different functions. This background led to his 2018 hire at the laboratory, where he developed FPGAs for small radars that detect the breathing of humans&nbsp;trapped in rubble&nbsp;and for large radars that track satellites and orbital debris from atop&nbsp;Millstone Hill. He next turned to investigating radiation-induced faults in integrated circuits aboard space platforms and ways to protect the chips.This focus on safeguarding hardware turned his attention to cybersecurity, an area he had long found interest in but never fully explored. So, Lim transferred to his current group in 2022 to pursue this interest.&#8221;I don&#8217;t think there&#8217;s another place in the world where I could say, &#8216;Hey, I want to try something new,&#8217; and actually have that opportunity,&#8221; Lim says. &#8220;Lincoln Laboratory does that really well, giving people the chance to transition into a different field of engineering or area of expertise.&#8221;To deepen his expertise, he applied and was accepted in 2024 to the&nbsp;Lincoln Scholars Program, which allows technical staff to pursue full-time graduate studies at the master&#8217;s or doctoral level. Scholars remain employed and apply their academic work to national security needs.As he pursued his master&#8217;s degree at Boston University, Lim worked closely with his Lincoln Laboratory mentor Benjamin Nahill, who helped Lim keep his research tied to the laboratory&#8217;s mission and provided a sounding board for ideas. &#8220;I&#8217;d call him my rubber ducky,&#8221; Lim says, a nod to the classic software engineering practice of &#8220;rubber duck debugging&#8221; — reasoning things out through speaking aloud to a rubber duck.&#8221;We talked about his thesis concept for quite a while, but the implementation suddenly became real toward the end,&#8221; says Nahill. &#8220;He transformed what began as an idea for a research tool to an incredibly performant implementation. Having worked with Jeffery on projects in our group, I shouldn&#8217;t have been surprised, but it was most impressive.&#8221;Missing piece for cloud researchWhen most people say &#8220;the cloud,&#8221; they mean cloud services provided by companies such as Amazon, Microsoft, and Google. Virtualization is the invisible process that makes those services possible. Users uploading photos or streaming movies are interacting with virtual machines, running on servers in data centers.In the past decade, SR-IOV has changed the way traditional virtualization works. Traditionally, a software component known as the hypervisor acts as a middleman between the virtual machines and the server&#8217;s physical hardware. Its main role is to distribute computing resources as needed, and provide functions (such as networking) to the virtual machines.In contrast, SR-IOV enables virtual machines to access a dedicated slice of the hardware device, reducing the hypervisor overhead. This capability is often found on specialized devices called Smart Network Interface Cards (SmartNICs). Major cloud platforms, such as Amazon Web Services’ Nitro System and Microsoft’s Azure Accelerated Networking, use SmartNICs with SR-IOV to provide high-speed networking to many virtual machines.&#8221;This was the missing research capability that I set out to build: an open-source SmartNIC platform compatible with SR-IOV,&#8221; Lim says. Because SmartNICs can be built on FPGAs, Lim had a familiar starting point. In fact, he found a couple of platforms that supported SR-IOV; however, they lacked features that would make them practical tools for researchers to utilize. He spent a couple of months building those required components.The first component is a switching fabric. Often, cloud customers&#8217; applications or programs may be split across multiple virtual machines, which may be distributed across multiple servers. Therefore, the cloud system needs a way to determine whether a piece of data needs to stay local or leave the server. Lim&#8217;s switching fabric handles that traffic-directing job.The second component is a network function engine. This small, specialized processor is built to run security rules, like firewalls, that keep one customer&#8217;s data safely separated from another&#8217;s. To build it, Lim used Extended Berkeley Packet Filter, a system that allows custom code to inspect network traffic, approving or blocking data as needed. Rather than starting from scratch, he adapted the design from doctoral research conducted by Zaid Tahir, who studied under their shared advisor, Professor Martin Herbordt of Boston University.Herbordt described Lim&#8217;s efforts as &#8220;combining vision with heroic system-building, single-handedly putting together the hardware and software necessary to prove the concept.&#8221;&#8221;I&#8217;m very much a hands-on hardware guy, so, yes, I ended up building two servers at home to test my designs,&#8221; Lim says. He also used the&nbsp;Mass Open Cloud’s&nbsp;Open Cloud Testbed, a test bed meant for testing cloud platforms, to gather metrics and validate his system.Impact beyond the platformThroughout the project, Lim maintained focus on applicability and transparency. &#8220;My biggest worry was, is this going to be relevant? Is this something that can actually be utilized?&#8221; Lim reflects. &nbsp;Earning the Societal Impact Award points to yes. The award recognizes projects that address pressing global challenges through innovative applications of technology. Lim&#8217;s platform opens the door to evaluating a cloud trust model that remains largely opaque, even as many sectors of society, from health care to banking, increasingly rely on it.&#8221;Right now, we have limited visibility into how major cloud providers implement and evolve their infrastructure,&#8221; Lim says. &#8220;If researchers can catch up to how the modern cloud operates, they might develop new approaches that improve security or performance.&#8221;As part of his role as a Lincoln Scholar, Lim is also exploring how his work connects to Lincoln Laboratory&#8217;s national security mission. He sees several potential avenues.One program in his group is&nbsp;evaluating cyber-hardening techniques for&nbsp;hypervisors,&nbsp;as the cloud takes on an expanding role in defense systems. &#8220;Introducing Lim&#8217;s SR-IOV-compatible platform to this work would help bring our research closer to how cloud environments operate, demonstrating the impact of our techniques in realistic environments,&#8221; says Nathan Burow, the program&#8217;s principal investigator. Another program is examining what it takes to stand up high-performance data centers, work that could draw directly on Lim&#8217;s research into the technologies SR-IOV requires.Or his path may lead to something new. The laboratory allocates internal technical investment funding — supported by the Office of the Under Secretary of War for Research and Development — for staff-proposed projects addressing emerging needs. Lim is considering a proposal to bring SR-IOV to the embedded-systems level, say, to drones or satellites.&#8221;We saw how cloud providers moved from traditional virtualization to SR-IOV to maximize performance while maintaining isolation,&#8221; he says. &#8220;I wonder if we can do the same at the embedded level, where power and compute constraints are even tighter. I&#8217;d love to complete that transition. I learned a lot from the cloud. Now, can we apply those lessons somewhere else?&#8221;<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/jeffery-lim-wants-to-open-up-cloud-research/">Jeffery Lim wants to open up cloud research</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/jeffery-lim-wants-to-open-up-cloud-research/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Aim policies at ‘hardware’ to ensure AI safety, say experts</title>
		<link>https://www.cloud-computing-koeln.de/aim-policies-at-hardware-to-ensure-ai-safety-say-experts/</link>
		<comments>https://www.cloud-computing-koeln.de/aim-policies-at-hardware-to-ensure-ai-safety-say-experts/#comments</comments>
		<pubDate>Thu, 15 Feb 2024 02:43:01 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/aim-policies-at-hardware-to-ensure-ai-safety-say-experts/</guid>
		<description><![CDATA[<p>Chips and datacentres – the “compute” driving the AI revolution – may be the most effective targets for risk-reducing AI policies, according to a new report. Quelle: University of Cambridge</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/aim-policies-at-hardware-to-ensure-ai-safety-say-experts/">Aim policies at ‘hardware’ to ensure AI safety, say experts</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>Chips and datacentres – the “compute” driving the AI revolution – may be the most effective targets for risk-reducing AI policies, according to a new report.</p>
<p>Quelle: University of Cambridge</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/aim-policies-at-hardware-to-ensure-ai-safety-say-experts/">Aim policies at ‘hardware’ to ensure AI safety, say experts</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/aim-policies-at-hardware-to-ensure-ai-safety-say-experts/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Q&amp;A: Steven Gonzalez on Indigenous futurist science fiction</title>
		<link>https://www.cloud-computing-koeln.de/qa-steven-gonzalez-on-indigenous-futurist-science-fiction/</link>
		<comments>https://www.cloud-computing-koeln.de/qa-steven-gonzalez-on-indigenous-futurist-science-fiction/#comments</comments>
		<pubDate>Tue, 22 Aug 2023 14:41:57 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/qa-steven-gonzalez-on-indigenous-futurist-science-fiction/</guid>
		<description><![CDATA[<p>Steven Gonzalez is a PhD candidate in the MIT Doctoral Program in&#160;History, Anthropology, Science, Technology, and Society (HASTS), where he researches the environmental impacts of cloud computing and data centers in the United States, Iceland, and Puerto Rico. He is also an author. Writing under the name E.G. Condé, he recently published his first book,&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/qa-steven-gonzalez-on-indigenous-futurist-science-fiction/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/qa-steven-gonzalez-on-indigenous-futurist-science-fiction/">Q&amp;A: Steven Gonzalez on Indigenous futurist science fiction</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>Steven Gonzalez is a PhD candidate in the MIT Doctoral Program in&nbsp;History, Anthropology, Science, Technology, and Society (HASTS), where he researches the environmental impacts of cloud computing and data centers in the United States, Iceland, and Puerto Rico. He is also an author. Writing under the name E.G. Condé, he recently published his first book, “Sordidez.” It’s described as an “Indigenous futurist science fiction novella set in Puerto Rico and the Yucatán.” Set in the near future, it follows the survivors of civil war and climate disaster led by protagonist Vero Diaz, as they reclaim their Indigenous heritage and heal their lands. </p>
<p>In this Q&amp;A, Gonzalez describes the book&#8217;s themes, its inspirations, and its connection to research, people, and classes at MIT.</p>
<p>Q: Where did the inspiration for this story come from?</p>
<p>A: I actually began my time at MIT in September of 2017 when Hurricane María struck. It was a really difficult time for me at the Institute, starting a PhD program. And it&#8217;s MIT, so there&#8217;s a lot of pressure. I was still kind of navigating the new institutional space and trying to understand my place in it. But I had a lot of people at the Institute who were extremely supportive during that time. I had family members in Puerto Rico who were stranded as a result of the hurricane, who I didn&#8217;t hear from for a very long time&nbsp;— who I feared dead. It was a very, very chaotic, confusing, and emotionally turbulent time for me, and also incredibly difficult to be trying to be present in a PhD program for the first semester. Karen Gardner, our administrator, was really incredibly supportive in that. Also the folks at the MIT Association of Puerto Ricans, who hosted fundraisers and linked students with counseling resources. But that trauma of the hurricane and the images that I saw of the aftermath of the hurricane, specifically in the town where my grandmother&#8217;s house was where I spent time living as a child during the summers, and to me, it was the greenest place that I have ever known. It looked like somebody had torched the entire landscape. It was traumatizing to see that image. But that kind of seeded the idea of, is there a way to burn without fire? There&#8217;s climate change, but there&#8217;s also climate terror. And so that was sort of one of the premises of the book explores, geoengineering, but also the flip side of geoengineering and terraforming is, of course, climate terror. And in a way, we could frame what&#8217;s been happening with the fossil fuel industry as a form of climate terror, as well. So for me, this all began right when I started at MIT, these dual tracks of thought.</p>
<p>Q: What do you see as the core themes of your novella? </p>
<p>A: One major theme is rebuilding. As I said, this story was very influenced by the trauma of Hurricane María and the incredibly inspiring accounts from family members, from people in Puerto Rico that I know, of regular people stepping up when the government — both federal and local — essentially abandoned them. There were so many failures of governance. But people stepped up and did what they could to help each other, to help neighbors. Neighbors cleared trees from roads. They banded together to do this. They pooled resources, to run generators so that everyone in the same street could have food that day. They would share medical supplies like insulin and things that were scarce. This was incredibly inspiring for me. And a huge theme of the book is rebuilding in the aftermath of a fictive hurricane, which I call Teddy, named after President Theodore Roosevelt, where Puerto Rico&#8217;s journey began as a U.S. commonwealth or a colony.</p>
<p>Healing is also a huge theme. Healing in the sense of this story was also somewhat critical of Puerto Rican culture. And it&#8217;s refracted through my own experience as a queer person navigating the space of Puerto Rico as a very kind of religious and traditional place and a very complex place at that. The main character, Vero, is a trans man. This is a person who&#8217;s transitioned and has felt a lot of alienation and as a result of his gender transition, a lot of people don&#8217;t accept him and don&#8217;t accept his identity or who he is even though he&#8217;s incredibly helpful in this rebuilding effort to the point where he&#8217;s, in some ways, a leader, if not the leader. And it becomes, in a way, about healing from the trauma of rejection too. And of course, Vero, but other characters who have gone through various traumas that I think are very much shared across Latin America, the Latin American experiences of assimilation, for instance. Latin America is a very complex place. We have Spanish as our language, that is our kind of lingua franca. But there are many Indigenous languages that people speak that have been not valued or people who speak them or use them are actively punished. And there&#8217;s this deep trauma of losing language. And in the case of Puerto Rico, the Indigenous language of the Taínos has been destroyed by colonialism. The story is about rebuilding that language and healing and “becoming.” In some ways, it&#8217;s about re-indigenization. And then the last part, as I said, healing, reconstruction, but also transformation and metamorphosis. And becoming Taíno. Again, what does that mean? What does it mean to be an Indigenous Caribbean in the future? And so that&#8217;s one of the central themes of the story.</p>
<p>Q: How does the novella intersect with the work you’re doing as a PhD candidate in HASTS? </p>
<p>A: My research on cloud computing is very much about climate change. It&#8217;s pitched within the context of climate change and understanding how our digital ecosystem contributes to not only global warming, but things like desertification. As a social scientist, that&#8217;s what I study. My studies of infrastructure are also directly referenced in the book in a lot of ways. For instance, the now collapsed Arecibo Ionosphere Observatory, where some of my pandemic fieldwork occurred, is a setting in the book. And also, I am an anthropologist. I am Puerto Rican. I draw both from my personal experience and my anthropological lens to make a story that I think is very multicultural and multilingual. It&#8217;s set in Puerto Rico, but the other half is set in the Yucatán Peninsula in what we&#8217;ll call the former Maya world. And there&#8217;s a lot of intersections between the two settings. And that goes back to the deeper Indigenous history. Some people are calling this Indigenous futurism because it references the Taínos, who are the Indigenous people of Puerto Rico, but also the Mayas, and many different Maya groups that are throughout the Yucatán Peninsula, but also present-day Guatemala and Honduras. And the story is about exchange between these two worlds. As someone trained as an anthropologist, it&#8217;s a really difficult task to kind of pull that off. And I think that my training has really, really helped me achieve that.</p>
<p>Q: Are there any examples of ways being among the MIT community while writing this book influenced and, in some ways, made this project possible?</p>
<p>A: I relied on many of my colleagues for support. There&#8217;s some sign language in the book. In Puerto Rico, there&#8217;s a big tradition of sign language. There&#8217;s a version of American sign language called LSPR that&#8217;s only found in Puerto Rico. And that&#8217;s something I&#8217;ve been aware of ever since I was a kid. But I&#8217;m not fluent in sign language or deaf communities and their culture. I got a lot of help from Timothy Loh, who&#8217;s in the HASTS program, who was extremely helpful to steer me towards sensitivity readers in the deaf community in his networks. My advisor, Stefan Helmreich, is very much a science fiction person in a lot of ways. His research is on the ocean waves, the history and anthropology of biology. He&#8217;s done ethnography in deep-sea submersibles. He&#8217;s always kind of thinking in a science fictional lens. And he allowed me, for one of my qualifying exam lists, to mesh science fiction with social theory. And that was also a way that I felt very supported by the Institute. In my coursework, I also took a few science fiction courses in other departments. I worked with Shariann Lewitt, who actually read the first version of the story. I workshopped it in her 21W.759 (Writing Science Fiction) class, and got some really amazing feedback that led to what is now a publication and a dream fulfilled in so many ways. She took me under her wing and really believed in this book.<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/qa-steven-gonzalez-on-indigenous-futurist-science-fiction/">Q&amp;A: Steven Gonzalez on Indigenous futurist science fiction</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/qa-steven-gonzalez-on-indigenous-futurist-science-fiction/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Two Lincoln Laboratory software products honored with national Excellence in Technology Transfer Awards</title>
		<link>https://www.cloud-computing-koeln.de/two-lincoln-laboratory-software-products-honored-with-national-excellence-in-technology-transfer-awards/</link>
		<comments>https://www.cloud-computing-koeln.de/two-lincoln-laboratory-software-products-honored-with-national-excellence-in-technology-transfer-awards/#comments</comments>
		<pubDate>Fri, 27 Jan 2023 14:41:37 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/two-lincoln-laboratory-software-products-honored-with-national-excellence-in-technology-transfer-awards/</guid>
		<description><![CDATA[<p>The Federal Laboratory Consortium (FLC) has awarded 2023 Excellence in Technology Transfer Awards at the national level to two MIT Lincoln Laboratory software products developed to improve security: Keylime and the Forensic Video Exploitation and Analysis (FOVEA) tool suite. Keylime increases the security and privacy of data and services in the cloud, while FOVEA expedites&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/two-lincoln-laboratory-software-products-honored-with-national-excellence-in-technology-transfer-awards/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/two-lincoln-laboratory-software-products-honored-with-national-excellence-in-technology-transfer-awards/">Two Lincoln Laboratory software products honored with national Excellence in Technology Transfer Awards</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>The Federal Laboratory Consortium (FLC) has awarded 2023 Excellence in Technology Transfer Awards at the national level to two MIT Lincoln Laboratory software products developed to improve security: Keylime and the Forensic Video Exploitation and Analysis (FOVEA) tool suite. Keylime increases the security and privacy of data and services in the cloud, while FOVEA expedites the process of reviewing and extracting useful information from existing surveillance videos. These technologies both previously won FLC Northeast regional awards for Excellence in Technology Transfer, as well as R&amp;D 100 Awards.</p>
<p>&#8220;Lincoln Laboratory is honored to receive these two national FLC awards, which demonstrate the capacity of government-nonprofit-industry partnerships to enhance our national security while simultaneously driving new economic growth,&#8221; says Louis Bellaire, acting chief technology ventures officer at the laboratory. &#8220;These awards are particularly meaningful because they show Lincoln Laboratory teams at their best, developing transformative R&amp;D [research and development] and transferring these results to achieve the strongest benefits for the nation.&#8221;</p>
<p>A nationwide network of more than 300 government laboratories, agencies, and research centers, FLC helps facilitate the transfer of technologies out of research labs and into the marketplace. Ultimately, the goal of FLC — organized in 1974 and formally chartered by the Federal Technology Transfer Act of 1986 — is to “increase the impact of federal laboratories’ technology transfer for the benefit of the U.S. economy, society, and national security.” Each year, FLC confers awards to commend outstanding technology transfer efforts of employees of FLC member labs and their partners from industry, academia, nonprofit, or state and local government. The Excellence in Technology Transfer Award recognizes exemplary work in transferring federally developed technology.</p>
<p>Keylime: Enabling trust in the cloud&nbsp;</p>
<p>Cloud computing services are an increasingly convenient way for organizations to store, process, and disseminate data and information. These services allow organizations to rent computing resources from a cloud provider, who handles the management and security of those rented machines. Although cloud providers claim that the machines are secure, customers have no way to verify this security. As a result, organizations with sensitive data, such as U.S. government agencies and financial institutions, are reluctant to reap the benefits of flexibility and low cost that commercial cloud providers offer.</p>
<p>Keylime is an open-source software that enables customers with sensitive data to continuously verify the security of cloud machines, and edge and internet-of-things (IoT) devices. To enact its constant security checks, Keylime leverages a piece of hardware called a trusted platform module (TPM). The TPM generates a hash (a string of characters representing data) that will change significantly if data are tampered with. Keylime was designed to make TPMs compatible with cloud technology and reacts to a TPM hash change within seconds to shut down a compromised machine. Keylime also enables users to securely bootstrap secrets (in other words, upload cryptographic keys, passwords, and certificates into the rented machines) without divulging these secrets to the cloud provider.</p>
<p>Lincoln Laboratory transitioned Keylime to the public via an open-source license and distribution strategy that involved a series of partnerships. In 2015, after completing a prototype of Keylime, laboratory researchers Charles Munson and Nabil Schear collaborated with Boston University and Northeastern University to implement it as a core security component in the Mass Open Cloud (MOC) alliance, a public cloud service supporting thousands of researchers in the state. That experience led the team to work with Red Hat (under a pilot program funded by the U.S. Department of Homeland Security) to mature the technology in the open-source community.</p>
<p>Through the efforts of the Red Hat partnership, Keylime was accepted into the Linux Foundation’s highly selective Cloud Native Computing Foundation as a Sandbox project technology in 2019, a significant step in establishing the technology&#8217;s prestige. More than 50 open-source developers are now contributing to Keylime from around the world, and large organizations, including IBM, are deploying the technology to their cloud machines. Most recently, Red Hat released Keylime into its Enterprise Linux 9.1 operating system.</p>
<p>&#8220;We are proud that the Keylime team, our partners, and open-source developers have been recognized for their hard work and dedication with this national FLC award.&nbsp;We look forward to maintaining and building impactful collaborations, and helping the Keylime open-source community continue to grow,&#8221; says Munson.</p>
<p>The team members recognized with the FLC award are Munson and Schear (creators of Keylime at Lincoln Laboratory); Orran Krieger (MOC and Boston University); Luke Hinds and Michael Peters (Red Hat); Gheorghe Almasi (IBM); and Dan Dardani (formerly of the MIT Technology Licensing Office).</p>
<p>FOVEA: Accelerating video surveillance review&nbsp;</p>
<p>While significant investments have improved camera coverage and video quality, the burden on video operators to analyze and obtain meaningful insights from surveillance footage — still a largely manual process — has greatly increased. The large-scale closed-circuit television systems patrolling public and commercial spaces can comprise hundreds or thousands of cameras, making daily investigation tasks burdensome. Examples of these tasks include searching for events of interest, investigating abandoned objects, and piecing together people&#8217;s activity from multiple cameras. As with any investigation, time is of the essence in apprehending persons of interest before they have inflicted widespread harm.</p>
<p>FOVEA dramatically reduces the time required for such forensic video analysis. With FOVEA, security personnel can review hours of video in minutes and perform complex investigations in hours rather than days, translating to faster reaction times to in-progress events and a stronger overall security posture. No pre-analysis video curation or proprietary server equipment are required; the add-on suite of video analytic capabilities can be applied to any video stream in an on-demand fashion and support both routine investigations and unforeseen or catastrophic circumstances such as terrorist threats. This suite includes capabilities for jump back, which automatically rewinds video to critical times and detects general scene changes; video summarization, which condenses all motion activity from long raw video into a short visual summary; multicamera navigation and path reconstruction, which tracks activity over place and time and camera to camera in chronological order; and on-demand person search, which scans neighboring cameras for persons of similar appearance.</p>
<p>Lincoln Laboratory began developing FOVEA under sponsorship from the U.S. Department of Homeland Security to address the critical needs of security operators in mass transit security centers. Through an entrepreneurial training program based on the National Science Foundation&#8217;s Innovation Corps, Lincoln Laboratory conducted a broad set of customer interviews, which ultimately led to Doradus Labs licensing FOVEA. The Colorado-based software development and technical support small business offered FOVEA to two of their casino customers and is now introducing the technology to their customers in the educational and transportation industries.</p>
<p>The laboratory team members recognized with the FLC award are Marianne DeAngelus and Jason Thornton (technology invention and primary contact with Doradus); Natalya Luciw, Diane Staheli, Sanjeev Mohindra, and (formerly) Tyler Shube (customer discovery); Ronald Duarte, Zach Elko, Brett Levasseur (software design and technology demonstrations); Jesslyn Alekseyev, Heather Griffin, and Kimberlee Chang and (formerly) Christine Russ, Aaron Yahr, and Marc Valliant (algorithm and software development); Dan Dardani (formerly of the MIT Technology Licensing Office) and Louis Bellaire (licensing); and Drinalda Kume, Jayme Selinger, and Zach Sweet (contracting services).</p>
<p>“It is wonderful to see the software team’s efforts recognized with this award,” says DeAngelus. “I am grateful for the many friendly people across Lincoln Laboratory and MIT who made this transition happen — especially the licensing, contracts, and communications offices.”</p>
<p>The FLC 2023 award winners will be recognized on March 29 at an awards reception and ceremony during the FLC National Meeting.&nbsp;<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/two-lincoln-laboratory-software-products-honored-with-national-excellence-in-technology-transfer-awards/">Two Lincoln Laboratory software products honored with national Excellence in Technology Transfer Awards</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/two-lincoln-laboratory-software-products-honored-with-national-excellence-in-technology-transfer-awards/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MIT to launch new Office of Research Computing and Data</title>
		<link>https://www.cloud-computing-koeln.de/mit-to-launch-new-office-of-research-computing-and-data/</link>
		<comments>https://www.cloud-computing-koeln.de/mit-to-launch-new-office-of-research-computing-and-data/#comments</comments>
		<pubDate>Fri, 06 May 2022 02:41:38 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/mit-to-launch-new-office-of-research-computing-and-data/</guid>
		<description><![CDATA[<p>As the computing and data needs of MIT’s research community continue to grow — both in their quantity and complexity — the Institute is launching a new effort to ensure that researchers have access to the advanced computing resources and data management services they need to do their best work.&#160; At the core of this&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/mit-to-launch-new-office-of-research-computing-and-data/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/mit-to-launch-new-office-of-research-computing-and-data/">MIT to launch new Office of Research Computing and Data</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>As the computing and data needs of MIT’s research community continue to grow — both in their quantity and complexity — the Institute is launching a new effort to ensure that researchers have access to the advanced computing resources and data management services they need to do their best work.&nbsp;</p>
<p>At the core of this effort is the creation of the new Office of Research Computing and Data (ORCD), to be led by Professor Peter Fisher, who will step down as head of the Department of Physics to serve as the office’s inaugural director. The office, which formally opens in September, will build on and replace the MIT Research Computing Project, an initiative supported by the Office of the Vice President for Research, which contributed in recent years to improving the computing resources available to MIT researchers.</p>
<p>“Almost every scientific field makes use of research computing to carry out our mission at MIT — and computing needs vary between different research groups. In my world, high-energy physics experiments need large amounts of storage and many identical general-purpose CPUs, while astrophysical theorists simulating the formation of galaxy clusters need relatively little storage, but many CPUs with high-speed connections between them,” says Fisher, the Thomas A. Frank (1977) Professor of Physics, who will take up the mantle of ORCD director on Sept. 1.</p>
<p>“I envision ORCD to be, at a minimum, a centralized system with a spectrum of different capabilities to allow our MIT researchers to start their projects and understand the computational resources needed to execute them,” Fisher adds.</p>
<p>The Office of Research Computing and Data will provide services spanning hardware, software, and cloud solutions, including data storage and retrieval, and offer advice, training, documentation, and data curation for MIT’s research community. It will also work to develop innovative solutions that address emerging or highly specialized needs, and it will advance strategic collaborations with industry.</p>
<p>The exceptional performance of MIT’s endowment last year has provided a unique opportunity for MIT to distribute endowment funds to accelerate progress on an array of Institute priorities in fiscal year 2023, beginning July 1, 2022. On the basis of community input and visiting committee feedback, MIT’s leadership identified research computing as one such priority, enabling the expanded effort that the Institute commenced today. Future operation of ORCD will incorporate a cost-recovery model.</p>
<p>In his new role, Fisher will report to Maria Zuber, MIT’s vice president for research, and coordinate closely with MIT Information Systems and Technology (IS&amp;T), MIT Libraries, and the deans of the five schools and the MIT Schwarzman College of Computing, among others. He will also work closely with Provost Cynthia Barnhart.</p>
<p>“I am thrilled that Peter has agreed to take on this important role,” says Zuber. “Under his leadership, I am confident that we’ll be able to build on the important progress of recent years to deliver to MIT researchers best-in-class infrastructure, services, and expertise so they can maximize the performance of their research.”</p>
<p>MIT’s research computing capabilities have grown significantly in recent years. Ten years ago, the Institute joined with a number of other Massachusetts universities to establish the Massachusetts Green High-Performance Computing Center (MGHPCC) in Holyoke to provide the high-performance, low-carbon computing power necessary to carry out cutting-edge research while reducing its environmental impact. MIT’s capacity at the MGHPCC is now almost fully utilized, however, and an expansion is underway.</p>
<p>The need for more advanced computing capacity is not the only issue to be addressed. Over the last decade, there have been considerable advances in cloud computing, which is increasingly used in research computing, requiring the Institute to take a new look at how it works with cloud services providers and then allocates cloud resources to departments, labs, and centers. And MIT’s longstanding model for research computing — which has been mostly decentralized — can lead to inefficiencies and inequities among departments, even as it offers flexibility.</p>
<p>The Institute has been carefully assessing how to address these issues for several years, including in connection with the establishment of the MIT Schwarzman College of Computing. In August 2019, a college task force on computing infrastructure found a “campus-wide preference for an overarching organizational model of computing infrastructure that transcends a college or school and most logically falls under senior leadership.” The task force’s report also addressed the need for a better balance between centralized and decentralized research computing resources.</p>
<p>“The needs for computing infrastructure and support vary considerably across disciplines,” says Daniel Huttenlocher, dean of the MIT Schwarzman College of Computing and the Henry Ellis Warren Professor of Electrical Engineering and Computer Science. “With the new Office of Research Computing and Data, the Institute is seizing the opportunity to transform its approach to supporting research computing and data, including not only hardware and cloud computing but also expertise. This move is a critical step forward in supporting MIT’s research and scholarship.”</p>
<p>Over time, ORCD (pronounced “orchid”) aims to recruit a staff of professionals, including data scientists and engineers and system and hardware administrators, who will enhance, support, and maintain MIT’s research computing infrastructure, and ensure that all researchers on campus have access to a minimum level of advanced computing and data management.</p>
<p>The new research computing and data effort is part of a broader push to modernize MIT’s information technology infrastructure and systems. “We are at an inflection point, where we have a significant opportunity to invest in core needs, replace or upgrade aging systems, and respond fully to the changing needs of our faculty, students, and staff,” says Mark Silis, MIT’s vice president for information systems and technology. “We are thrilled to have a new partner in the Office of Research Computing and Data as we embark on this important work.”<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/mit-to-launch-new-office-of-research-computing-and-data/">MIT to launch new Office of Research Computing and Data</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/mit-to-launch-new-office-of-research-computing-and-data/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Lincoln Laboratory honored for transfer of security-enhancing technologies</title>
		<link>https://www.cloud-computing-koeln.de/lincoln-laboratory-honored-for-transfer-of-security-enhancing-technologies/</link>
		<comments>https://www.cloud-computing-koeln.de/lincoln-laboratory-honored-for-transfer-of-security-enhancing-technologies/#comments</comments>
		<pubDate>Wed, 08 Sep 2021 02:41:45 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/lincoln-laboratory-honored-for-transfer-of-security-enhancing-technologies/</guid>
		<description><![CDATA[<p>The Federal Laboratory Consortium for Technology Transfer (FLC) awarded their 2021 Excellence in Technology Transfer Award for the Northeast region to two Lincoln Laboratory technologies developed to improve security. The first technology, Forensic Video Exploitation and Analysis (FOVEA), is a suite of analytic tools that makes it significantly easier for investigators to review surveillance video&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/lincoln-laboratory-honored-for-transfer-of-security-enhancing-technologies/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/lincoln-laboratory-honored-for-transfer-of-security-enhancing-technologies/">Lincoln Laboratory honored for transfer of security-enhancing technologies</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>The Federal Laboratory Consortium for Technology Transfer (FLC) awarded their 2021 Excellence in Technology Transfer Award for the Northeast region to two Lincoln Laboratory technologies developed to improve security.</p>
<p>The first technology, Forensic Video Exploitation and Analysis (FOVEA), is a suite of analytic tools that makes it significantly easier for investigators to review surveillance video footage. The second technology, Keylime, is a software architecture designed to increase the security and privacy of data and services in the cloud. Both technologies have transitioned to commercial use via license or open-source access.</p>
<p>&#8220;These Federal Laboratory Consortium awards are an acknowledgement that the advanced capabilities developed at MIT Lincoln Laboratory are valued, not only for their contribution to enhancing national security, but also for their value to related private-sector needs,&#8221; says Bernadette Johnson, the chief technology ventures officer at Lincoln Laboratory.&nbsp;&#8220;Technology transfer is considered an integral element of the Department of Defense&#8217;s mission and is explicitly called out in the laboratory’s Prime Contract and Sponsoring Agreement.&nbsp;The transfer of these two technologies is emblematic of the unique &#8216;R&amp;D-to-rapid-prototyping&#8217; transition pipeline we have been developing at Lincoln.&#8221;</p>
<p>Speeding up video review&nbsp; </p>
<p>The FOVEA program first began under sponsorship from the Department of Homeland Security (DHS) to address the challenge of efficiently reviewing video surveillance footage. The process of searching for a specific event, investigating abandoned objects, or piecing together activity from multiple cameras can take investigators hours or even days. It is especially challenging in large-scale closed-circuit TV systems, like those that surveil subway stations.</p>
<p>The FOVEA suite overcomes these challenges with three advanced tools. The first tool, video summarization, condenses all motion activity into a visual summary, transforming, for example, an hour of raw video into a three-minute product that only highlights motion. The second tool, called jump back, automatically seeks a portion of the video when an idle object, such as a backpack, first appeared. The third tool, multi-camera navigation and path reconstruction, allows an operator to track a person or vehicle of interest across multiple camera views.</p>
<p>Notably, FOVEA&#8217;s analytic tools can be integrated directly into existing video surveillance systems and can be processed on any desktop or laptop computer. In contrast, most commercial offerings first require customers to export their video data for analysis and to purchase proprietary server equipment or cloud services.</p>
<p>&#8220;The project team worked very hard on not just the development of the FOVEA prototype, but also packaging the software in a way that accommodates hand-off to third-party deployment sites and transition partners,&#8221; says Marianne DeAngelus, who led the development of FOVEA with a team in the Homeland Sensors and Analytics Group.</p>
<p>Under government sponsorship, the developers first deployed FOVEA to two mass transit facilities. Through participation in an MIT-led Innovation-Corps program, the team then adapted the technology into a commercial application. Doradus Lab, Inc. has since licensed FOVEA for security surveillance in casinos.</p>
<p>&#8220;Though FOVEA was originally developed for a specific use case of mass transit security, our tech transfer to industry will make it available for a broader set of security applications that would benefit from accelerated forensic analysis of surveillance video.&nbsp;We and our DHS sponsor are happy that this may lead to a wider impact of the technology,&#8221; adds Jason Thornton, who leads the technical group.</p>
<p>Putting trust in the cloud</p>
<p>Keylime is making it possible for government and industry users with sensitive data to increase the security of their cloud and internet-of-things (IoT) devices. This free, open-source software architecture enables cloud customers to securely upload cryptographic keys, passwords, and certificates into the cloud without divulging these secrets to their cloud provider, and to secure their cloud resources without relying on their provider to do it for them.</p>
<p>Keylime started as an internal project funded through Lincoln Laboratory&#8217;s Technology Office in 2015. Eventually, the Keylime team began discussions with RedHat, one of the world&#8217;s largest open-source software companies, to expand the technology&#8217;s reach. With RedHat&#8217;s help, Keylime&nbsp;was transitioned in 2019 into the Cloud Native Computing Foundation as a sandbox technology with more than 30 open-source developers contributing to it from around the world. Most recently, IBM announced its plans to adopt Keylime into its cloud feet, enabling IBM to attest to the security of its thousands of cloud servers.</p>
<p>&#8220;Keylime&#8217;s transfer and adoption into the open-source community and cloud environments helps to empower edge/IoT and cloud customers to validate provider claims of trustworthiness, rather than needing to rely solely on trust of the underlying environment for compliance and correctness,&#8221; says Charles Munson, who developed Keylime with former laboratory staff member Nabil Schear and adapted it as an open-source platform with Luke Hinds at RedHat.&nbsp;</p>
<p>Keylime achieves its cloud security by leveraging a piece of hardware called a TPM, an industry-standard hardware security chip. A TPM generates a hash, a short string of numbers representing a much larger amount of data, that changes significantly if data are even slightly tampered with. Keylime can detect and react to this tampering in under a second.</p>
<p>Before Keylime, TPMs were incompatible with cloud technology, slowing down systems and forcing engineers to change software to accommodate the module. Keylime gets around these problems by serving as a piece of intermediary software that allows users to leverage the security benefits of the TPM without having to make their software compatible with it.</p>
<p>Transferring to industry</p>
<p>The transition of Lincoln Laboratory&#8217;s technology to industry and government is central to its role as a federally funded research and development center (FFRDC).</p>
<p>The mission of the FLC is to facilitate and educate FFRDCs and industry on the process of technology transfer. More than 300 federal laboratories, facilities, research centers, and their parent agencies make up the FLC community.</p>
<p>The transfer of these FLC-awarded technologies was supported by Bernadette Johnson and Lou Bellaire in the Technology Ventures Office; David Pronchick, Drinalda Kume, Zachary Sweet, and Jayme Selinger of the Contracting Services Department; and Daniel Dardani in MIT&#8217;s Technology Licensing Office, along with the technology development teams. Both FOVEA and Keylime were also awarded R&amp;D 100 Awards in 2020, acknowledging them among the year&#8217;s 100 most innovative technologies available for sale or license.</p>
<p>The FLC will recognize the award recipients at a regional meeting in October.<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/lincoln-laboratory-honored-for-transfer-of-security-enhancing-technologies/">Lincoln Laboratory honored for transfer of security-enhancing technologies</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/lincoln-laboratory-honored-for-transfer-of-security-enhancing-technologies/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Keylime security software is deployed to IBM cloud</title>
		<link>https://www.cloud-computing-koeln.de/keylime-security-software-is-deployed-to-ibm-cloud/</link>
		<comments>https://www.cloud-computing-koeln.de/keylime-security-software-is-deployed-to-ibm-cloud/#comments</comments>
		<pubDate>Wed, 28 Jul 2021 02:41:39 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/keylime-security-software-is-deployed-to-ibm-cloud/</guid>
		<description><![CDATA[<p>Keylime, a cloud security software architecture, is being adopted into IBM&#8217;s cloud fleet. Originally developed at MIT Lincoln Laboratory to allow system administrators to ensure the security of their cloud environment, Keylime is now a Cloud Native Computing Foundation sandbox technology with more than 30 open-source developers contributing to it from around the world. The&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/keylime-security-software-is-deployed-to-ibm-cloud/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/keylime-security-software-is-deployed-to-ibm-cloud/">Keylime security software is deployed to IBM cloud</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>Keylime, a cloud security software architecture, is being adopted into IBM&#8217;s cloud fleet. Originally developed at MIT Lincoln Laboratory to allow system administrators to ensure the security of their cloud environment, Keylime is now a Cloud Native Computing Foundation sandbox technology with more than 30 open-source developers contributing to it from around the world. The software will enable IBM to remotely attest to the security of its thousands of cloud servers.</p>
<p>&#8220;It is exciting to see the hard work of the growing Keylime community coming to fruition,&#8221; says Charles Munson, a researcher in the Secure Resilient Systems and Technology Group at Lincoln Laboratory who created Keylime with Nabil Schear, now at Netflix. &#8220;Adding integrated support for Keylime into IBM&#8217;s cloud fleet is an important step towards enabling cloud customers to have a zero-trust capability of &#8216;never trust, always verify.'&#8221;</p>
<p>In a blog post announcing IBM&#8217;s integration of Keylime, George Almasi of IBM Research said, &#8220;IBM has planned a rapid rollout of Keylime-based attestation to the entirety of its cloud fleet in order to meet requirements for a strong security posture from its financial services and other enterprise customers. This will leverage work done on expanding the scalability and resilience of Keylime to manage large numbers of nodes, allowing Keylime-based attestation to be operationalized at cloud data center scale.&#8221;</p>
<p>Keylime is a key bootstrapping and integrity management software architecture. It was first developed to enable organizations to check for themselves that the servers storing and processing their data are as secure as cloud service providers claim they are. Today, many organizations use a form of cloud computing called infrastructure-as-a-service, whereby they rent computing resources from a cloud provider who is responsible for the security of the underlying systems.</p>
<p>To enable remote cloud-security checks, Keylime leverages a piece of hardware called a trusted platform module, or TPM, an industry-standard and widely used hardware security chip. A TPM generates a hash, a short string of numbers representing a much larger amount of data. If data are tampered with even slightly, the hash will change significantly, a security alarm that Keylime can detect and react to in under a second.</p>
<p>Before Keylime, TPMs were incompatible with cloud technology, slowing down systems and forcing engineers to change software to accommodate the module. Keylime gets around these problems by serving as a piece of intermediary software that allows users to leverage the security benefits of the TPM without having to make all of their software compatible with it.</p>
<p>In 2019, Keylime&nbsp;was transitioned into the CNCF as a sandbox technology with the help of RedHat, one of the world&#8217;s leading open-source software companies. This transition better incorporated Keylime into the Linux open-source ecosystem, making it simpler for users to adopt. In 2020, the Lincoln Laboratory team that developed Keylime was awarded an R&amp;D 100 Award, recognizing the software among the year&#8217;s 100 most innovative new technologies available for sale or license.<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/keylime-security-software-is-deployed-to-ibm-cloud/">Keylime security software is deployed to IBM cloud</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/keylime-security-software-is-deployed-to-ibm-cloud/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Lincoln Laboratory earns a 2020 Stratus Award for Cloud Computing</title>
		<link>https://www.cloud-computing-koeln.de/lincoln-laboratory-earns-a-2020-stratus-award-for-cloud-computing/</link>
		<comments>https://www.cloud-computing-koeln.de/lincoln-laboratory-earns-a-2020-stratus-award-for-cloud-computing/#comments</comments>
		<pubDate>Mon, 08 Mar 2021 16:03:40 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/lincoln-laboratory-earns-a-2020-stratus-award-for-cloud-computing/</guid>
		<description><![CDATA[<p>MIT Lincoln Laboratory is among the winners of the 2020 Stratus Awards for Cloud Computing. The Business Intelligence Group presented 38 companies, services, and executives with these awards that recognize leaders in cloud-based technology. The laboratory won for developing TRACER (Timely Randomization Applied to Commodity Executables at Runtime), software that prevents cyber attackers from remotely&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/lincoln-laboratory-earns-a-2020-stratus-award-for-cloud-computing/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/lincoln-laboratory-earns-a-2020-stratus-award-for-cloud-computing/">Lincoln Laboratory earns a 2020 Stratus Award for Cloud Computing</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>MIT Lincoln Laboratory is among the winners of the 2020 Stratus Awards for Cloud Computing. The Business Intelligence Group presented 38 companies, services, and executives with these awards that recognize leaders in cloud-based technology. The laboratory won for developing TRACER (Timely Randomization Applied to Commodity Executables at Runtime), software that prevents cyber attackers from remotely attacking Windows applications.</p>
<p>Since 2012, the Business Intelligence Group has acknowledged industry leaders with several awards for innovation in technology and services. With the move of so many business and institutional functions to the cloud, the Stratus Awards were initiated to recognize companies and individuals that have enabled effective, secure cloud-based computing.</p>
<p>Maria Jimenez, chief nominations officer of the Business Intelligence Group, says, &#8220;We now rely on the cloud for everything from entertainment to productivity, so we are proud to recognize all of our winners. Each and every one is helping in their own way to make our lives richer every day. We are honored and proud to reward these leaders in business.”</p>
<p>TRACER addresses a problem inherent in the immensely popular Windows&#8217; commodity applications: all installations of these applications look alike, so cyber intruders gain the ability to compromise millions of computers simply by &#8220;cracking&#8221; into one computer. In addition, because more than 90 percent of desktop computers run Microsoft Windows with closed-source applications, many cyber protections that rely on having the source code available are not applicable for these desktop systems.</p>
<p>The patented TRACER technology re-randomizes sensitive internal data and layout at every output from the application. This continuous re-randomization thwarts attempts to use data leaks to hijack the computer&#8217;s internals; any information leaked by the application will be stale when attackers attempt to exploit it.</p>
<p>TRACER’s research and development was led by Hamed Okhravi of Lincoln Laboratory’s Secure Resilient Systems and Technology Group and included contributions by Jason Martin, David Bigelow, David Perry, Kristin Dahl, Robert Rudd, Thomas Hobson, and William Streilein.</p>
<p>&#8220;One of our primary goals for TRACER was to make it as easy to use as possible. The current version requires minimal steps to set up and requires no user interaction during its operation, which we hope facilitates its widespread adoption,” Okhravi said.</p>
<p>The software has been made available via a commercial company. For its innovation and potential to revolutionize the cybersecurity field, TRACER was named a 2020 R&amp;D 100 Award winner by R&amp;D World. TRACER was also honored with MIT Lincoln Laboratory&#8217;s 2019 Best Invention Award.<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/lincoln-laboratory-earns-a-2020-stratus-award-for-cloud-computing/">Lincoln Laboratory earns a 2020 Stratus Award for Cloud Computing</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/lincoln-laboratory-earns-a-2020-stratus-award-for-cloud-computing/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Detecting program-tampering in the cloud</title>
		<link>https://www.cloud-computing-koeln.de/detecting-program-tampering-in-the-cloud-2/</link>
		<comments>https://www.cloud-computing-koeln.de/detecting-program-tampering-in-the-cloud-2/#comments</comments>
		<pubDate>Tue, 25 Aug 2020 04:44:06 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/detecting-program-tampering-in-the-cloud-2/</guid>
		<description><![CDATA[<p>For small and midsize organizations, the outsourcing of demanding computational tasks to the cloud — huge banks of computers accessible over the Internet — can be much more cost-effective than buying their own hardware. But it also poses a security risk: A malicious hacker could rent space on a cloud server and use it to&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/detecting-program-tampering-in-the-cloud-2/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/detecting-program-tampering-in-the-cloud-2/">Detecting program-tampering in the cloud</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>For small and midsize organizations, the outsourcing of demanding computational tasks to the cloud — huge banks of computers accessible over the Internet — can be much more cost-effective than buying their own hardware. But it also poses a security risk: A malicious hacker could rent space on a cloud server and use it to launch programs that hijack legitimate applications, interfering with their execution.In August, at the International Cryptology Conference, researchers from MIT and Israel’s Technion and Tel Aviv University presented a new system that can quickly verify that a program running on the cloud is executing properly. That amounts to a guarantee that no malicious code is interfering with the program’s execution.The same system also protects the data used by applications running in the cloud, cryptographically ensuring that the user won’t learn anything other than the immediate results of the requested computation. If, for instance, hospitals were pooling medical data in a huge database hosted on the cloud, researchers could look for patterns in the data without compromising patient privacy.Although the paper reports new theoretical results (view PDF), the researchers have also built working code that implements their system. At present, it works only with programs written in the C programming language, but adapting it to other languages should be straightforward.The new work, like much current research on secure computation, requires that computer programs be represented as circuits. So the researchers’ system includes a “circuit generator” that automatically converts C code to circuit diagrams. The circuits it produces, however, are much smaller than those produced by its predecessors, so by itself, the circuit generator may find other applications in cryptography.Zero knowledgeAlessandro Chiesa, a graduate student in electrical engineering and computer science at MIT and one of the paper’s authors, says that because the new system protects both the integrity of programs running in the cloud and the data they use, it’s a good complement to the cryptographic technique known as homomorphic encryption, which protects the data transmitted by the users of cloud applications. On the paper, Chiesa joins Madars Virza, also a graduate student in electrical engineering and computer science; the Technion&#8217;s Daniel Genkin and Eli Ben-Sasson, who was a visiting scientist at MIT for the past year; and Tel Aviv University&#8217;s Eran Tromer. Ben-Sasson and Tromer were co-PIs on the project.   The researchers’ system implements a so-called zero-knowledge proof, a type of mathematical game invented by MIT professors Shafi Goldwasser and Silvio Micali and their colleague Charles Rackoff of the University of Toronto. In its cryptographic application, a zero-knowledge proof enables one of the game’s players to prove to the other that he or she knows a secret key without actually divulging it.But as its name implies, a zero-knowledge proof is a more general method for proving mathematical theorems — and the correct execution of a computer program can be redescribed as a theorem. So zero-knowledge proofs are by definition able to establish whether or not a computer program is executing correctly.The problem is that existing implementations of zero-knowledge proofs — except in cases where they’ve been tailored to particular algorithms — take as long to execute as the programs they’re trying to verify. That’s fine for password verification, but not for a computation substantial enough that it might be farmed out to the cloud.The researchers’ innovation is a practical, succinct zero-knowledge proof for arbitrary programs. Indeed, it’s so succinct that it can typically fit in a single data packet.Linear thinkingAs Chiesa explains, his and his colleagues’ approach depends on a variation of what’s known as a “probabilistically checkable proof,” or PCP. “With a standard mathematical proof, if you want to verify it, you have to go line by line from the start to the end,” Chiesa says. “If you were to skip one line, potentially, that could fool you. Traditional proofs are very fragile in this respect.” “The PCP theorem says that there is a way to rewrite proofs so that instead of reading them line by line,” Chiesa adds, “what you can do is flip a few coins and probabilistically sample three or four lines and have a probabilistic guarantee that it’s correct.”The problem, Virza says, is that “the current known constructions of the PCP theorem, though great in theory, have quite bad practical realizations.” That’s because the theory assumes that an adversary who’s trying to produce a fraudulent proof has unbounded computational capacity. What Chiesa, Virza and their colleagues do instead is assume that the adversary is capable only of performing simple linear operations.“This assumption is, of course, false in practice,” Virza says. “So we use a cryptographic encoding to force the adversary to only linear evaluations. There is a way to encode numbers into such a form that you can add those numbers, but you can’t do anything else. This is how we sidestep the inefficiencies of the PCP theorem.”“I think it’s a breakthrough,” says Ran Canetti, a professor of computer science at Boston University who was not involved with the research. When the PCP theorem was first proved, Canetti says, “nobody ever thought that this would be something that would be remotely practical. They’ve become a little bit better over the years, but not that much better.”“Four or five years ago,” Canetti adds, “these guys wrote on the flag the crazy goal of trying to make [proofs for arbitrary programs] practical, and I must say, I thought, ‘They’re nuts.’ But they did it. They actually have something that works.&#8221;<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/detecting-program-tampering-in-the-cloud-2/">Detecting program-tampering in the cloud</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/detecting-program-tampering-in-the-cloud-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Protecting data in the cloud</title>
		<link>https://www.cloud-computing-koeln.de/protecting-data-in-the-cloud-2/</link>
		<comments>https://www.cloud-computing-koeln.de/protecting-data-in-the-cloud-2/#comments</comments>
		<pubDate>Tue, 25 Aug 2020 04:44:06 +0000</pubDate>
		<dc:creator><![CDATA[da Agency]]></dc:creator>
				<category><![CDATA[Forschung]]></category>
		<category><![CDATA[cloud computing]]></category>

		<guid isPermaLink="false">https://www.cloud-computing-koeln.de/protecting-data-in-the-cloud-2/</guid>
		<description><![CDATA[<p>Cloud computing — outsourcing computational tasks over the Internet — could give home-computer users unprecedented processing power and let small companies launch sophisticated Web services without building massive server farms.But it also raises privacy concerns. A bank of cloud servers could be running applications for 1,000 customers at once; unbeknownst to the hosting service, one&#8230; <a class="more-link" href="https://www.cloud-computing-koeln.de/protecting-data-in-the-cloud-2/">Continue reading &#8594;</a></p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/protecting-data-in-the-cloud-2/">Protecting data in the cloud</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></description>
				<content:encoded><![CDATA[<p>Cloud computing — outsourcing computational tasks over the Internet — could give home-computer users unprecedented processing power and let small companies launch sophisticated Web services without building massive server farms.But it also raises privacy concerns. A bank of cloud servers could be running applications for 1,000 customers at once; unbeknownst to the hosting service, one of those applications might have no purpose other than spying on the other 999.Encryption could make cloud servers more secure. Only when the data is actually being processed would it be decrypted; the results of any computations would be re-encrypted before they’re sent off-chip.In the last 10 years or so, however, it’s become clear that even when a computer is handling encrypted data, its memory-access patterns — the frequency with which it stores and accesses data at different memory addresses — can betray a shocking amount of private information. At the International Symposium on Computer Architecture in June, MIT researchers described a new type of secure hardware component, dubbed Ascend, that would disguise a server’s memory-access patterns, making it impossible for an attacker to infer anything about the data being stored. Ascend also thwarts another type of attack, known as a timing attack, which attempts to infer information from the amount of time that computations take.Computational trade-offSimilar designs have been proposed in the past, but they’ve generally traded too much computational overhead for security. “This is the first time that any hardware design has been proposed — it hasn’t been built yet — that would give you this level of security while only having about a factor of three or four overhead in performance,” says Srini Devadas, the Edwin Sibley Webster Professor of Electrical Engineering and Computer Science, whose group developed the new system. “People would have thought it would be a factor of 100.”The “trivial way” of obscuring memory-access patterns, Devadas explains, would be to request data from every address in the memory — whether a memory chip or a hard drive — and throw out everything except the data stored at the one address of interest. But that would be much too time-consuming to be practical.What Devadas and his collaborators — graduate students Ling Ren, Xiangyao Yu and Christopher Fletcher, and research scientist Marten van Dijk — do instead is to arrange memory addresses in a data structure known as a “tree.” A family tree is a familiar example of a tree, in which each “node” (in this example, a person’s name) is attached to only one node above it (the node representing the person’s parents) but may connect to several nodes below it (the person’s children).With Ascend, addresses are assigned to nodes randomly. Every node lies along some “path,” or route through the tree, that starts at the top and passes from node to node, without backtracking, until arriving at a node with no further connections. When the processor requires data from a particular address, it sends requests to all the addresses in a path that includes the one it’s really after.To prevent an attacker from inferring anything from sequences of memory access, every time Ascend accesses a particular memory address, it randomly swaps that address with one stored somewhere else in the tree. As a consequence, accessing a single address multiple times will very rarely require traversing the same path.Less computation to disguise an addressBy confining its dummy requests to a single path, rather than sending them to every address in memory, Ascend exponentially reduces the amount of computation required to disguise an address. In a separate paper, which is as-yet unpublished but has been posted online, the researchers prove that querying paths provides just as much security as querying every address in memory would.Ascend also protects against timing attacks. Suppose that the computation being outsourced to the cloud is the mammoth task of comparing a surveillance photo of a criminal suspect to random photos on the Web. The surveillance photo itself would be encrypted, and thus secure from prying eyes. But spyware in the cloud could still deduce what public photos it was being compared to. And the time the comparisons take could indicate something about the source photos: Photos of obviously different people could be easy to rule out, but photos of very similar people might take longer to distinguish.So Ascend’s memory-access scheme has one final wrinkle: It sends requests to memory at regular intervals — even when the processor is busy and requires no new data. That way, attackers can’t tell how long any given computation is taking.<br />
Quelle: Massachusetts Institute of Technology</p>
<p>Der Beitrag <a rel="nofollow" href="https://www.cloud-computing-koeln.de/protecting-data-in-the-cloud-2/">Protecting data in the cloud</a> erschien zuerst auf <a rel="nofollow" href="https://www.cloud-computing-koeln.de">Cloud Computing Köln</a>.</p>
]]></content:encoded>
			<wfw:commentRss>https://www.cloud-computing-koeln.de/protecting-data-in-the-cloud-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
