SaTC: CORE: Medium: Collaborative: Cryptographic Data Protection in Modern Systems

计算机系统不断出现的重大漏洞和安全问题激发了一种很有前途的数据保护新方法：对数据进行加密，这样即使数据被盗，对攻击者也毫无用处，但同时又能透露足够的数据信息，以便数据库和Web服务器等商业系统仍能对其进行操作。这被称为属性披露加密（PRE），并且已经在学术和商业产品中找到了保护云服务中敏感数据的方法。该项目是对属性披露加密是否、何时以及如何充分保护敏感数据的全面调查。这项调查是通过与业界的密切接触和对保护用户数据的需求和要求的理解而进行的。该项目包括三个研究重点，从理论基础到安全分析，再到原型系统的设计和实现。第一个重点是为属性披露加密（PRE）方案开发加密定义和安全模型，以及开发威胁模型和推理方法的层次结构。第二个重点是开发一种统一的方法，用于在实际分布式系统的实际数据上部署PRE方案时测量和利用信息泄漏。最后的推力设计和实现安全系统，安全可靠地使用加密数据保护，重点关注展示基本PRE功能的少数关键应用程序。

Continuing major breaches and security compromises of computer systems motivate a promising new approach to data protection: encrypt the data so that even if stolen, it will be useless to the attacker, yet reveal just enough information about the data so that commodity systems such as databases and Web servers can still operate on it. This is called property-revealing encryption (PRE), and has already found its way to academic and commercial products that protect sensitive data in cloud services. This project is a comprehensive investigation of whether, when, and how can property-revealing encryption adequately protect sensitive data. This investigation is informed by close engagement with industry and understanding of the needs and requirements of protecting users' data.This project comprises three research thrusts, spanning the range from theoretical foundations to security analysis to design and implementation of prototype systems. The first thrust develops cryptographic definitions and security models for property-revealing encryption (PRE) schemes, as well as developing a hierarchy of threat models and inference methods. The second thrust focuses on developing a unified methodology for measuring and exploiting information leakage when PRE schemes are deployed on realistic data in actual distributed systems. The final thrust designs and implements secure systems that use cryptographic data protection safely and securely, focusing on a small number of key applications that showcase essential PRE functionality.