CAREER: Tools for building online services that hide metadata

职业：用于构建隐藏元数据的在线服务的工具

• 批准号: 2045861
• 负责人: Sebastian Angel
• 金额: $ 55.71万
• 依托单位: University of Pennsylvania
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-03-01 至 2026-02-28
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2045861&HistoricalAwards=false
• 关键词: CAREER; Tools; building; online; services

Online services track users and analyze their behavior to improve their products and monetize their services. Despite the benefits of collecting user information, data breaches and insider attacks have disastrous consequences. For example, the Ashley Madison breach highlights the danger of a leaked social graph (and what it implies about users’ relationships). Indeed, metadata (who, what, when, etc.) can be sensitive, but building services that are oblivious to certain information (e.g., which movies users watch, which messages are “liked”, or the social graph) poses significant technical and financial challenges. This project takes a provider-centric view to hiding metadata and sees companies not as adversaries, but as partners committed to safeguarding users’ information, provided that the necessary mechanisms are reasonable in terms of costs, features, and assumptions. Grounded by the needs of companies, this project designs algorithms, tools, and infrastructure to help services continue to work without accessing or collecting certain metadata (e.g., the social graph), limiting the harm of data breaches and insider attacks.This project improves widely applicable cryptographic primitives by making them more efficient; extends them with access control and accountability features so privacy is not at odds with functionality; supports private user feedback necessary to improve services (e.g., train spam filters); and makes the release of source code optional. This project also designs the first decentralized and verifiable ad exchange platform that allows users to receive targeted ads without violating their privacy. This platform will supplement other revenue sources to ensure the sustainability of metadata-private online services. Finally, the topics of this project cover critical and timely social issues such as privacy, fairness, and their impact on the financial stability of businesses. These concepts will be transitioned to the classroom through a new in-depth capstone course, yearly workshops, and dedicated chapters in existing systems and security courses.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

在线服务跟踪用户并分析他们的行为，以改进他们的产品并将其服务货币化。尽管收集用户信息有好处，但数据泄露和内部攻击会带来灾难性的后果。例如，阿什利麦迪逊的违规行为凸显了社交图谱泄露的危险（以及它对用户关系的暗示）。元数据（who，what，when，etc）可能是敏感的，但建筑服务不注意某些信息（例如，用户观看哪些电影、哪些消息被“喜欢”、或社交图）提出了重大的技术和财务挑战。 该项目采取以提供商为中心的观点来隐藏元数据，并将公司视为致力于保护用户信息的合作伙伴，而不是对手，前提是必要的机制在成本，功能和假设方面是合理的。根据公司的需求，该项目设计算法，工具和基础设施，以帮助服务继续工作，而无需访问或收集某些元数据（例如，该项目通过使其更有效来改进广泛适用的加密原语;通过访问控制和问责制功能扩展它们，因此隐私与功能不矛盾;支持改进服务所需的私人用户反馈（例如，训练垃圾邮件过滤器）;并使源代码的发布是可选的。该项目还设计了第一个分散和可验证的广告交换平台，允许用户在不侵犯其隐私的情况下接收有针对性的广告。该平台将补充其他收入来源，以确保元数据私人在线服务的可持续性。最后，该项目的主题涵盖了关键和及时的社会问题，如隐私，公平及其对企业财务稳定的影响。这些概念将通过一个新的深入的顶点课程，年度研讨会，并在现有的系统和安全课程的专门章节过渡到课堂上。这个奖项反映了NSF的法定使命，并已被认为是值得通过使用基金会的智力价值和更广泛的影响审查标准进行评估的支持。

项目成果

Ibex: Privacy-preserving Ad Conversion Tracking and Bidding

• DOI: 10.1145/3548606.3560651
• 发表时间: 2022-11
• 期刊: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security
• 作者: Ke Zhong;Yiping Ma;Sebastian Angel

Bringing Decentralized Search to Decentralized Services

• 发表时间: 2021
• 作者: Mingyu Li;Jinhao Zhu;Tianxu Zhang;Cheng Tan;Yubin Xia;Sebastian Angel;Haibo Chen

Incremental Offline/Online PIR

增量离线/在线 PIR

• 发表时间: 2022
• 期刊: USENIX Security Symposium
• 作者: Ma, Yiping;Zhong, Ke;Rabin, Tal;Angel, Sebastian
• 通讯作者: Angel, Sebastian

Flamingo: Multi-Round Single-Server Secure Aggregation with Applications to Private Federated Learning

• DOI: 10.1109/sp46215.2023.10179434
• 发表时间: 2023-05
• 期刊: 2023 IEEE Symposium on Security and Privacy (SP)
• 作者: Yiping Ma;Jess Woods;Sebastian Angel;Antigoni Polychroniadou;T. Rabin

Addax: A fast, private, and accountable ad exchange infrastructure

• 发表时间: 2022
• 作者: Ke Zhong;Yiping Ma;Yifeng Mao;Sebastian Angel