CICI: UCSS: Innovations for Securing HPC Cyberinfrastructure: Compression-Enabled Confidentiality and Verifiable Provenance

This project develops practical security mechanisms for high-performance scientific computing workflows. Large-scale simulations in areas such as weather prediction, energy systems, materials science, and biomedical modeling generate and move large volumes of floating-point data across compute nodes, storage systems, and workflow services. As these workflows increasingly use shared and cloud-adjacent infrastructure, data may pass through networks and intermediary services that are not uniformly trusted. This creates two key risks: sensitive simulation data may be exposed, and intermediate or final artifacts may be modified or misrepresented before they are used for scientific or operational decisions. The project addresses these challenges through a data-centric software library with three integrated capabilities. First, it develops application-specific compression, including autoencoder-based methods, to reduce communication and storage costs for simulation data. Second, it combines compression with standards-based authenticated encryption, making strong confidentiality practical within the performance constraints of modern computing systems. Third, it introduces proof-carrying artifacts: scientific data objects that carry compact, cryptographically verifiable receipts enforcing that approved transformations, such as reblocking, recompression, and format conversion, are correctly applied. When data are sensitive, these receipts can use zero-knowledge proofs so that downstream users can verify integrity and provenance without learning the underlying scientific state. The resulting tools strengthen trust in scientific cyberinfrastructure by enabling secure, auditable, and reproducible workflows without sacrificing performance. They are evaluated on representative simulation applications and released as open-source software, supporting adoption across scientific computing communities and training students at the intersection of high-performance computing and cybersecurity. This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria. NSF Award ID: 2613709 | Program: 01002627DB NSF RESEARCH & RELATED ACTIVIT | Principal Investigator: Pratik Soni | Institution: University of Utah, SALT LAKE CITY, UT | Award Amount: $599,999 View on NSF Award Search: https://www.nsf.gov/awardsearch/show-award/?AWD_ID=2613709 View on Research.gov: https://www.research.gov/awardapi-service/v1/awards/2613709.html