TWC: Medium: Collaborative: New Protocols and Systems for RAM-Based Secure Computation

安全计算允许用户在其私有数据上协作计算任何程序，同时确保他们除了计算输出之外不会学到任何东西。现有的安全计算协议主要依赖于正在评估的程序的布尔电路表示，这可能非常低效。该项目重点开发 RAM 计算模型中的安全计算协议。这里特别具有挑战性的是需要确保内存访问是不经意的，并且不会泄漏有关私有数据的信息。我们正在设计高效的不经意数据结构，可以用作 RAM 计算模型中安全协议的通用构建块。该项目开发了一个框架，使程序员能够编写高级代码，然后由后端算法进行编译，该算法分析代码并利用我们提供的不经意的数据结构。这项工作受到实际应用程序需求的影响，并且将评估分析程序的确切要求的技术，并根据这些要求定制生成的协议。该项目旨在开发工具，使非专业人士更容易进行安全计算，因此可以更广泛地用于对私有数据执行计算。该项目的 PI 指导研究生和本科生，并积极鼓励少数民族学生参与。该项目开发新的课程材料，并通过参与 IEEE 网络安全倡议和马里兰州网络安全委员会与更广泛的社区互动。

Secure computation allows users to collaboratively compute any program on their private data, while ensuring that they learn nothing beyond the output of the computation. Existing protocols for secure computation primarily rely on a boolean-circuit representation for the program being evaluated, which can be highly inefficient. This project focuses on developing secure-computation protocols in the RAM model of computation. Particularly challenging here is the need to ensure that memory accesses are oblivious, and do not leak information about private data. We are designing efficient oblivious data structures that can be used as general-purpose building blocks for secure protocols in the RAM model of computation. This project develops a framework that enables programmers to write high-level code that can then be compiled by a back-end algorithm that analyzes the code and makes use of the oblivious data structures we provide. This work is influenced by the needs of real applications, and the techniques to analyze the exact requirements of the program will evaluated and to tailor the resulting protocol to those requirements. This project aims to develop tools making secure computation more accessible to non-specialists, so it can be more broadly used to perform computations on private data. The PIs on this project mentor both graduate and undergraduate students and actively encourage involvement of minority students. The project develops new course materials and interact with the broader community through involvement in the IEEE cybersecurity initiative and the Maryland Cybersecurity Council.