InTrans: Modular Security on an Open Cloud

InTrans：开放云上的模块化安全性

• 批准号: 1931714
• 负责人: Mayank Varia
• 金额: $ 50万
• 依托单位: Trustees of Boston University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2022-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1931714&HistoricalAwards=false
• 关键词: InTrans; Modular; Security; Open; Cloud

This project explores the intriguing possibilities that result from the combination of two tools: cryptographic software that distributes any computing task over several machines with strong security guarantees as long as the machines are isolated, and a multi-provider cloud datacenter that offers to any tenant the ability to rent multiple isolated machines that are administered by different organizations. The project's novelties are to optimize cryptographically secure multi-party computation (MPC) for use in a multi-provider datacenter, leveraging the security properties already provided by such datacenters. The project's impacts are open-source software packages that provide a compelling application for cloud datacenters like the Mass Open Cloud (MOC) that adopt a multi provider approach. The research in this InTrans project is of strong interest to two industrial partners, Honda Research Institutes and Red Hat, and it builds on top of the work performed in the Modular Approach to Cloud Security Frontier project.In more detail, this cross-disciplinary project encompasses three sets of tasks that span cryptography and distributed systems. First, the investigators explore opportunities to improve and optimize the algorithmic design of MPC toward specific scenarios for which we have observed large interest by our industry partners and others. Second, the investigators adapt and optimize system software and existing MOC tools to improve MPC's networking and distributed computing steps. Third, the investigators perform a universal composability (UC) security analysis of the MOC's security-relevant systems in order to determine the extent to which can contribute toward MPC. These three tasks are co-dependent: for instance, a UC model of the MOC can provide insights into the design of new MPC algorithms that combine software with partially trusted hardware and to validate whether the cloud meets the pre-conditions required by MPC (such as isolation between nodes).This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目探索了两种工具组合产生的有趣的可能性：加密软件，只要机器是隔离的，就可以在多台机器上分配任何计算任务，并具有强大的安全保证，以及多提供商云数据中心，为任何租户提供租用由不同组织管理的多台隔离机器的能力。该项目的创新之处在于优化用于多提供商数据中心的加密安全多方计算（MPC），利用这些数据中心已经提供的安全属性。该项目的影响是开源软件包，这些软件包为采用多提供商方法的Mass Open Cloud（MOC）等云计算中心提供了引人注目的应用程序。该InTrans项目中的研究受到本田研究所和红帽这两个行业合作伙伴的强烈关注，它建立在云安全前沿模块化方法项目中所做工作的基础上。更详细地说，这个跨学科项目包括跨越密码学和分布式系统的三组任务。首先，研究人员探索改进和优化MPC算法设计的机会，以适应我们观察到的行业合作伙伴和其他人的巨大兴趣的特定场景。其次，研究人员调整和优化系统软件和现有的MOC工具，以改善MPC的网络和分布式计算步骤。第三，调查人员对MOC的安全相关系统进行通用可组合性（UC）安全分析，以确定对MPC的贡献程度。这三项任务是相互依赖的：例如，在一个实施例中，主运行中心的统一通信模型可以为新MPC算法的设计提供洞察力，该算法将联合收割机软件与部分可信硬件相结合，并验证云是否满足MPC所需的先决条件（如节点之间的隔离）该奖项反映了NSF的法定使命，并通过使用基金会的智力价值和更广泛的评估被认为值得支持。影响审查标准。

项目成果

Universal Composition with Global Subroutines: Capturing Global Setup within plain UC

• DOI: 10.1007/978-3-030-64381-2_1
• 发表时间: 2020
• 作者: Christian Badertscher;R. Canetti;Julia Hesse;Björn Tackmann;Vassilis Zikas

Two-server Distributed ORAM with Sublinear Computation and Constant Rounds

• DOI: 10.1007/978-3-030-75248-4_18
• 发表时间: 2020
• 期刊: IACR Cryptol. ePrint Arch.
• 作者: Ariel Hamlin;Mayank Varia

Hecate: Abuse Reporting in Secure Messengers with Sealed Sender

Hecate：使用密封发件人的安全信使中的滥用报告

• 发表时间: 2022
• 期刊: 31st USENIX Security Symposium
• 作者: Issa, Rawane;Alhaddad, Nicolas;Varia, Mayank
• 通讯作者: Varia, Mayank

BooLigero: Improved Sublinear Zero Knowledge Proofs for Boolean Circuits

BooLigero：改进的布尔电路次线性零知识证明

• 发表时间: 2021
• 期刊: Financial Cryptography and Data Security
• 作者: Gvili, Yaron;Scheffler, Sarah;Varia, Mayank
• 通讯作者: Varia, Mayank

Protecting Cryptography Against Compelled Self-Incrimination

保护密码学免遭强迫自证其罪

• 发表时间: 2021
• 期刊: Usenix Security 2021
• 作者: Scheffler, Sarah;Varia, Mayank
• 通讯作者: Varia, Mayank