SaTC: CORE: Medium: Secure outsourced analytics in untrusted clouds

该项目设计并开发了Second+，这是一种新型的数据分析系统，使用安全多方计算（MPC），使数据持有者能够在可证明和可配置的安全保证下对其集体私有数据进行关系分析。该项目的核心创新包括一个用于外包关系MPC的原则性优化框架和一个并行安全操作符库，这些操作符可扩展到比当前最先进的数据集大得多的数据集。Secret+针对多个数据持有者愿意将其私有数据贡献给联合分析的用例（例如，为了利润、社会公益或改善服务），前提是数据保持与不受信任或未经授权的实体隔离。该研究基于两个案例研究：（i）基于云的安全分析移动的健康数据，以及（ii）数据中心日志的安全跨站点分析。该项目涉及三组跨越密码学，数据库查询评估和分布式系统领域的任务。首先，研究人员定义了一个统一的成本模型，用于跨不同MPC协议和物理部署的安全操作。其次，他们开发了一个关系MPC查询处理器，支持并行查询执行，并采用优化，降低MPC成本，同时保留密码协议的全部安全保证。第三，研究人员设计和实现高级用户界面和工具，以便与现有的云基础设施无缝集成。项目成果有可能从根本上改变组织、研究人员和政策制定者根据数据隐私法规使用私有数据集的方式，并为云中的新市场铺平道路。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响力审查标准进行评估，被认为值得支持。

This project designs and develops Secrecy+, a novel data analytics system that uses secure multi-party computation (MPC) and enables data holders to perform relational analytics on their collective private data with provable and configurable security guarantees. The project's core novelties include a principled optimization framework for outsourced relational MPC and a library of parallel secure operators that scale to much larger datasets than the current state-of-the-art. Secrecy+ targets use cases where multiple data holders are willing to contribute their private data towards a joint analysis (e.g., for profit, social good, or improved services), provided that the data remain siloed from untrusted or unauthorized entities. The research is grounded in two case studies: (i) secure cloud-based analytics on mobile health data, and (ii) secure cross-site analytics on datacenter logs.The project involves three sets of tasks that span the areas of cryptography, database query evaluation, and distributed systems. First, the investigators define a unified cost model for secure operations across different MPC protocols and physical deployments. Second, they develop a relational MPC query processor that supports parallel query execution and employs optimizations that reduce MPC costs while retaining the full security guarantees of the cryptographic protocols. Third, the investigators design and implement high-level user interfaces and tools for seamless integration with existing cloud infrastructure. Project results have the potential to fundamentally change how private datasets are used by organizations, researchers, and policy makers in accordance with data privacy regulations and can pave the way for new marketplaces in the cloud.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.