SecureVault Cloud Platform
This project designs and builds a technology platform that allows cloud infrastructures to run clients' tasks with full computation privacy. The cloud provider itself is unable to access to customers' workloads even in the presence of malicious-intent direct physical access to the hardware itself. The technology significantly increases cloud defense capabilities, and provides strong computation privacy, and regulatory compliance guarantees to any regulatory- and security-sensitive customers. The broader impact/commercial potential of this project manifests itself in all dimensions of our increasingly internet and cloud-reliant society and technology. Because clouds introduce significant risks, technology-backed comprehensive security and privacy assurances are essential to establish cloud computing as a truly viable alternative to in-house IT. Unfortunately, these are not achievable with any of today's offerings or research efforts, despite being direly needed by all major potential cloud adopters, including financial, governmental and healthcare markets, heavily governed by security, regulatory compliance and intellectual property constraints. > As a result, rather than risk regulatory compliance breaches, and > unauthorized access to proprietary business logic, these major markets > have simply not adopted the cloud. Countless surveys outline security > and privacy consistently as the top concern preventing adoption, and > markets have reacted with strong reservations. This project develops a > disruptive technology that bridges this gap and makes cloud adoption > secure and attractive in all these markets. less This project designs and builds a technology platform that allows cloud infrastructures to run clients' tasks with full computation privacy. The cloud provider itself is unable to access to customers' workloads even in the presence of malicious-intent direct physical access to the hardware itself. The technology significantly increases cloud defense capabilities, and provides strong computation privacy, and regulatory compliance guarantees to any regulatory- and security-sensitive customers. The broader impact/commercial... more
This project designs and builds a technology platform that allows cloud infrastructures to run clients' tasks with full computation privacy. The cloud provider itself is unable to access to customers' workloads even in the presence of malicious-intent direct physical access to the hardware itself. The technology significantly increases cloud defense capabilities, and provides strong computation privacy, and regulatory compliance guarantees to any regulatory- and security-sensitive customers. The broader impact/commercial potential of this project manifests itself in all dimensions of our increasingly internet and cloud-reliant society and technology. Because clouds introduce significant risks, technology-backed comprehensive security and privacy assurances are essential to establish cloud computing as a truly viable alternative to in-house IT. Unfortunately, these guarantees are not achievable with any of today's offerings or research efforts, despite being direly needed by all major potential cloud adopters, including financial, governmental and healthcare markets, heavily governed by security, regulatory compliance and intellectual property constraints. As a result, rather than risk regulatory compliance breaches, and unauthorized access to proprietary business logic, these major markets have simply not adopted the cloud. Countless surveys outline security and privacy consistently as the top concern preventing adoption, and markets have reacted with strong reservations. This project develops a disruptive technology that bridges this gap and makes cloud adoption secure and attractive in all these markets.
A PhD in Computer Science, Electrical Engineering or related field.
An interest in building and delivering practical results. Ability to pass a set of interview tests meant to assess knowledge. Ability to work in a fast-paced startup in an exploding market.
For Computer Science postdocs: (i) an in-depth understanding and knowledge of systems in general; (ii) at least one specialization in a particular system-related aspect (e.g., kernels, clouds, networking etc);
For EE postdocs: (requirements available under NDA)
