CAREER: Protecting Privacy in Untrusted Environments

职业：在不可信环境中保护隐私

• 批准号: 0746888
• 负责人: Vitaly Shmatikov
• 金额: $ 40万
• 依托单位: University of Texas at Austin
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2015-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0746888&HistoricalAwards=false
• 关键词: CAREER; Protecting; Privacy; Untrusted; Environments

CAREER: Protecting Privacy in Untrusted Environments----------------------------------------------------PI: Vitaly Shmatikov (The University of Texas at Austin)Information about individuals and organizations is increasingly collectedin massive databases, sent over public networks and shared acrossorganizational boundaries. This presents serious threats to privacy:even if individual pieces of data are cryptographically protected,sensitive information may still leak out due to mismatches betweenprivacy policies of different components.This project aims to develop tools and techniques for protecting privacyof sensitive data, focusing on three main research thrusts. The firstthrust is protection of public databases containing individual informationsuch as medical records, transactions, and preferences. This includesdesign of provably secure methods for enforcing access policies directlyin published data, development of analysis tools for finding privacyvulnerabilities, and evaluation on real-world data. The second thrustis design and implementation of formal methods for checking privacypolicy compliance in order to ensure that data processing applicationsdo not violate the stated privacy policies of the enteprise. The thirdthrust is development of new methods for analyzing privacy-preservingcommunication networks.Protecting data privacy is important not only for individuals, butalso for businesses and organizations that deal with individual data.New technologies developed as part of this project will help detectpotential privacy violations and enforce privacy policies. They willenable applications dealing with sensitive personal and organizationaldata to be executed in open computing environments and support manysocially important tasks such as multi-institution medical trials thatdo not violate patients' privacy and collaborative analysis of Internetsecurity threats.

职业：在不受信任的环境中保护隐私----------------------------------------------------PI：Vitaly Shmatikov（德克萨斯大学奥斯汀分校）有关个人和组织的信息越来越多地收集在海量数据库中，通过公共网络发送并跨组织边界共享。 这对隐私构成了严重威胁：即使个别数据受到密码保护，敏感信息仍然可能由于不同组件的隐私政策之间的不匹配而泄露。该项目旨在开发用于保护敏感数据隐私的工具和技术，重点关注三个主要研究方向。 第一个重点是保护包含医疗记录、交易和偏好等个人信息的公共数据库。 这包括设计可证明安全的方法来直接在已发布的数据中执行访问策略、开发用于查找隐私漏洞的分析工具以及对真实世界数据的评估。 第二个重点是设计和实施检查隐私政策合规性的正式方法，以确保数据处理应用程序不会违反企业规定的隐私政策。 第三个重点是开发分析隐私保护通信网络的新方法。保护数据隐私不仅对个人很重要，而且对处理个人数据的企业和组织也很重要。作为该项目一部分开发的新技术将有助于检测潜在的隐私侵犯并执行隐私政策。 它们将使处理敏感个人和组织数据的应用程序能够在开放计算环境中执行，并支持许多对社会重要的任务，例如不侵犯患者隐私的多机构医疗试验和互联网安全威胁的协作分析。