SaTC: CORE: Medium: Secure outsourced analytics in untrusted clouds

该项目设计并开发了secret +，这是一种新型的数据分析系统，它使用安全多方计算（MPC），使数据持有者能够对其集体私有数据进行关系分析，并提供可证明和可配置的安全保证。该项目的核心创新包括外包关系MPC的原则优化框架和并行安全操作程序库，该库可扩展到比当前最先进的更大的数据集。“保密+”的目标用例是，多个数据持有者愿意为联合分析贡献他们的私人数据（例如，为了利润、社会公益或改进的服务），前提是数据与不受信任或未经授权的实体保持隔离。该研究基于两个案例研究：(i)基于云的移动医疗数据安全分析，以及（ii）数据中心日志的跨站点安全分析。该项目涉及三组任务，它们跨越密码学、数据库查询评估和分布式系统领域。首先，研究人员为跨不同MPC协议和物理部署的安全操作定义了统一的成本模型。其次，他们开发了一个支持并行查询执行的关系MPC查询处理器，并采用了降低MPC成本的优化，同时保留了加密协议的完全安全保证。第三，研究人员设计并实现与现有云基础设施无缝集成的高级用户界面和工具。项目结果有可能从根本上改变组织、研究人员和政策制定者根据数据隐私法规使用私有数据集的方式，并为云计算中的新市场铺平道路。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This project designs and develops Secrecy+, a novel data analytics system that uses secure multi-party computation (MPC) and enables data holders to perform relational analytics on their collective private data with provable and configurable security guarantees. The project's core novelties include a principled optimization framework for outsourced relational MPC and a library of parallel secure operators that scale to much larger datasets than the current state-of-the-art. Secrecy+ targets use cases where multiple data holders are willing to contribute their private data towards a joint analysis (e.g., for profit, social good, or improved services), provided that the data remain siloed from untrusted or unauthorized entities. The research is grounded in two case studies: (i) secure cloud-based analytics on mobile health data, and (ii) secure cross-site analytics on datacenter logs.The project involves three sets of tasks that span the areas of cryptography, database query evaluation, and distributed systems. First, the investigators define a unified cost model for secure operations across different MPC protocols and physical deployments. Second, they develop a relational MPC query processor that supports parallel query execution and employs optimizations that reduce MPC costs while retaining the full security guarantees of the cryptographic protocols. Third, the investigators design and implement high-level user interfaces and tools for seamless integration with existing cloud infrastructure. Project results have the potential to fundamentally change how private datasets are used by organizations, researchers, and policy makers in accordance with data privacy regulations and can pave the way for new marketplaces in the cloud.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.