Software update systems must guarantee high availability, integrity and security even in presence of cyber attacks. We propose the first survivable software update framework for the secure distribution of confidential updates that is based on a distributed infrastructure with no single points of failure. Previous works guarantee either survivability or confidentiality of software updates but do not ensure both properties. Our proposal is based on an original application of a multi-authority attribute-based encryption scheme in the context of decentralized access control management that avoids single-point-of-vulnerability. We describe the original framework, propose the protocols to implement it, and demonstrate its feasibility through a security and performance evaluation.

中文翻译：

---

可扩展、机密且可生存的软件更新

即使存在网络攻击，软件更新系统也必须保证高可用性、完整性和安全性。我们提出了第一个可生存的软件更新框架，用于机密更新的安全分发，该框架基于没有单点故障的分布式基础架构。以前的工作保证了软件更新的生存性或机密性，但不保证这两个属性。我们的提议基于在避免单点漏洞的分散访问控制管理背景下的多权限基于属性的加密方案的原始应用。我们描述了原始框架，提出了实现它的协议，并通过安全和性能评估证明了其可行性。