Antoine Boulanger

Speaking Sessions

• Where is my data? Consistency, availability, security of cloud file storage at Box

  1:45 PM Saturday   Room: 1401

  <p>Hosting customers' files in the cloud is one of Box.net's fundamental competencies, and thus it is critically important that we execute it correctly.</p> The storage infrastructure at Box.net has gone through many changes, and we attempt to justify our history and approach in light of ever increasing security and scalability obligations. Box storage is built on four axioms: <ul> <li>security - data is encrypted at all times in transit and at rest</li> <li>durability - data is never lost</li> <li>availability - data retrieval is insulated from network outages</li> <li>scalability - system maintains other three properties in the face of large and multitudinous files</li> </ul> We will describe the lifecycle of a file from upload to final storage to download: <ul> <li>Using consistency checkers and locking to keep data and meta-data synchronized throughout the process</li> <li>Increasing our files' availability by building failover systems in PHP and Scala</li> <li>Encrypting data with keys stored separately from the data, and decrypting in flight during download</li> </ul>