CAREER: Protecting Privacy in Untrusted Environments

职业：在不受信任的环境中保护隐私-PI：Vitaly Shmatikov（德克萨斯大学奥斯汀分校）关于个人和组织的信息越来越多地被收集在大规模的数据库中，通过公共网络发送，并跨组织边界共享。 这对隐私造成了严重的威胁：即使个别数据受到加密保护，敏感信息仍然可能由于不同组件的隐私策略之间的不匹配而泄漏。本项目旨在开发保护敏感数据隐私的工具和技术，重点关注三个主要研究方向。 第一个重点是保护包含个人信息（如医疗记录、交易和偏好）的公共数据库。 这包括设计可证明安全的方法，直接在已发布的数据中执行访问策略，开发用于查找隐私漏洞的分析工具，以及对真实数据进行评估。 第二个突破点是设计和实现检查隐私政策遵守情况的正式方法，以确保数据处理应用程序不违反企业规定的隐私政策。 第三个重点是开发分析隐私保护通信网络的新方法。保护数据隐私不仅对个人很重要，对处理个人数据的企业和组织也很重要。作为该项目一部分开发的新技术将有助于发现潜在的隐私侵犯并执行隐私政策。 它们将使处理敏感个人和组织数据的应用程序能够在开放计算环境中执行，并支持许多社会重要任务，例如不侵犯患者隐私的多机构医学试验和对互联网安全威胁的协作分析。

CAREER: Protecting Privacy in Untrusted Environments----------------------------------------------------PI: Vitaly Shmatikov (The University of Texas at Austin)Information about individuals and organizations is increasingly collectedin massive databases, sent over public networks and shared acrossorganizational boundaries. This presents serious threats to privacy:even if individual pieces of data are cryptographically protected,sensitive information may still leak out due to mismatches betweenprivacy policies of different components.This project aims to develop tools and techniques for protecting privacyof sensitive data, focusing on three main research thrusts. The firstthrust is protection of public databases containing individual informationsuch as medical records, transactions, and preferences. This includesdesign of provably secure methods for enforcing access policies directlyin published data, development of analysis tools for finding privacyvulnerabilities, and evaluation on real-world data. The second thrustis design and implementation of formal methods for checking privacypolicy compliance in order to ensure that data processing applicationsdo not violate the stated privacy policies of the enteprise. The thirdthrust is development of new methods for analyzing privacy-preservingcommunication networks.Protecting data privacy is important not only for individuals, butalso for businesses and organizations that deal with individual data.New technologies developed as part of this project will help detectpotential privacy violations and enforce privacy policies. They willenable applications dealing with sensitive personal and organizationaldata to be executed in open computing environments and support manysocially important tasks such as multi-institution medical trials thatdo not violate patients' privacy and collaborative analysis of Internetsecurity threats.