SaTC: CORE: Medium: Collaborative: Cryptographic Data Protection in Modern Systems

计算机系统持续存在的重大漏洞和安全威胁促使人们采取了一种前景看好的数据保护新方法：对数据进行加密，使其即使被盗，对攻击者也毫无用处，同时只披露足够的数据信息，以便数据库和Web服务器等商用系统仍然可以对其进行操作。这被称为属性揭示加密(PRE)，已经在保护云服务中的敏感数据的学术和商业产品中找到了自己的方法。该项目是对属性揭示加密是否、何时以及如何充分保护敏感数据的全面调查。这项调查是通过与业界的密切接触以及对保护用户数据的需求和要求的了解而获得的。该项目包括三个研究主题，从理论基础到安全分析，再到原型系统的设计和实现。第一个重点是开发属性揭示加密(Pre)方案的密码定义和安全模型，以及开发威胁模型和推理方法的层次结构。第二个重点是开发一种统一的方法，用于在实际分布式系统中的真实数据上部署预方案时，测量和利用信息泄漏。最后一个重点是设计和实施安全系统，安全地使用加密数据保护，重点放在展示基本预功能的少数关键应用程序上。

Continuing major breaches and security compromises of computer systems motivate a promising new approach to data protection: encrypt the data so that even if stolen, it will be useless to the attacker, yet reveal just enough information about the data so that commodity systems such as databases and Web servers can still operate on it. This is called property-revealing encryption (PRE), and has already found its way to academic and commercial products that protect sensitive data in cloud services. This project is a comprehensive investigation of whether, when, and how can property-revealing encryption adequately protect sensitive data. This investigation is informed by close engagement with industry and understanding of the needs and requirements of protecting users' data.This project comprises three research thrusts, spanning the range from theoretical foundations to security analysis to design and implementation of prototype systems. The first thrust develops cryptographic definitions and security models for property-revealing encryption (PRE) schemes, as well as developing a hierarchy of threat models and inference methods. The second thrust focuses on developing a unified methodology for measuring and exploiting information leakage when PRE schemes are deployed on realistic data in actual distributed systems. The final thrust designs and implements secure systems that use cryptographic data protection safely and securely, focusing on a small number of key applications that showcase essential PRE functionality.