TC: Small: Collaborative Research: Accountability and Identifiability

万维网和其他联网的信息系统提供了巨大的好处，使人们能够获得前所未有的大量信息。 然而，多年来，用户一直对这些系统也产生重大问题的事实感到沮丧。 敏感的个人数据被泄露，机密的公司数据被盗，版权被侵犯，一个政府组织拥有的数据库被另一个政府组织的成员违反政府政策访问。 这类事件的频率继续增加，现在必须是真正令人发指的事件才能被认为有新闻价值。 该项目认为，当发生违反安全规定的行为时，应当能够以某种方式惩罚违反者。 尽管“问责制”被广泛认为是重要和可取的，但关于这一主题的理论工作却很少;事实上，“问责制”似乎甚至没有一个标准的定义，不同领域的研究人员用它来表示不同的东西。 该项目解决了这些问题，问责和其他目标（如用户隐私）之间的关系，以及在现实世界的系统中问责的要求（如违规者和违规行为的可识别性）。 这一澄清的重要概念的问责制将有助于推动下一代的网络介导的互动和服务，用户理解和trust.The项目的技术方法，问责制作为一个重要组成部分的可信赖性涉及两个相互交织的研究推力。 第一个重点是定义和基础理论。 直觉上，问责制存在于任何一种制度中，在这种制度中，行为受到明确规定的规则的约束，违反这些规则的行为受到惩罚。 项目的目标是确定在这个直观的概念，模糊和差距，提供正式的定义，捕捉重要的问责制desiderata，并阐明问责制的关系，以及研究的概念，如可识别性，认证，授权，隐私和匿名。 第二个重点是分析、设计和抽象。 该项目研究了现实世界系统中的基本问责制和可识别性要求，包括技术和社会。 一个项目的目标是使用由此产生的更好的理解的程度，问责制是真正在与隐私和其他可取的系统属性不一致，设计新的协议与可证明的问责制的属性。在设计协议过程中获得的理解和见解的基础上，该项目还处理了各种情况下问责和可识别性方面的基本权衡和不可能结果。 这项工作的更广泛影响不仅包括与学生的接触，还包括对可信系统中真实的世界问责制的新视角。

The World Wide Web and other networked information systems provide enormous benefits by enabling access to unprecedented amounts of information. However, for many years, users have been frustrated by the fact that these systems also create significant problems. Sensitive personal data are disclosed, confidential corporate data are stolen, copyrights are infringed, and databases owned by one government organization are accessed by members of another in violation of government policy. The frequency of such incidents continues to increase, and an incident must now be truly outrageous to be considered newsworthy. This project takes the view that when security violations occur, it should be possible to punish the violators in some fashion. Although "accountability" is widely agreed to be important and desirable, there has been little theoretical work on the subject; indeed, there does not even seem to be a standard definition of "accountability," and researchers in different areas use it to mean different things. This project addresses these issues, the relationship between accountability and other goals (such as user privacy), and the requirements (such as identifiability of violators and violations) for accountability in real-world systems. This clarification of the important notion of accountability will help propel a next generation of network-mediated interaction and services that users understand and trust.The project's technical approach to accountability as an essential component of trustworthiness involves two intertwined research thrusts. The first thrust focuses on definitions and foundational theory. Intuitively, accountability is present in any system in which actions are governed by well defined rules, and violations of those rules are punished. Project goals are to identify ambiguities and gaps in this intuitive notion, provide formal definitions that capture important accountability desiderata, and explicate relationships of accountability to well studied notions such as identifiability, authentication, authorization, privacy, and anonymity. The second thrust focuses on analysis, design, and abstraction. The project studies fundamental accountability and identifiability requirements in real-world systems, both technological and social. One project goal is to use the resulting better understanding of the extent to which accountability is truly at odds with privacy and other desirable system properties to design new protocols with provable accountability properties. Building on that understanding and insights gained in designing protocols, the project also addresses fundamental trade-offs and impossibility results about accountability and identifiability in various settings. The broader impacts of the work include not only engagement with students but also a new perspective on real world accountability in trustworthy systems.