Securing Data in the Cloud

点击翻译按钮获取中文摘要

Big data and cloud computing create new privacy challenges. Our personal devices (e.g., laptops, mobile phones, tablets) have low bandwidth and can perform only lightweight computations. These devices rely on the cloud to perform search queries and other types of computations over large datasets. However, the datasets may contain sensitive information (e.g., medical, financial, personal records) that should be encrypted in the cloud, in order to maintain security and privacy. This creates a fundamental problem: our personal devices cannot use the cloud to perform computations over encrypted data. Can we run a program over encrypted data in the cloud without revealing the data or the description of the program? Can we authenticate the results of the computations performed in the cloud without re-downloading the data and re-doing the work? My long-term research program is to design and develop new cryptographic algorithms, techniques and methods for securing data and programs in the cloud. Specifically, this project will study: (1) development of new security models, methods, and algorithms for secure computation over encrypted data in the cloud, (2) development of new mathematical tools and algorithms for program and code obfuscation, and (3) advancement of techniques for verifiable computation. The algorithms and techniques can be applied to a variety of applications and help us build secure clouds. As more and more sensitive information is collected from all of us, these algorithms are essential. Moreover, during the duration of the projects outlined in this proposal, we will train a new generation of security experts. They will gain knowledge of advanced mathematics, theoretical and practical cryptography and learn how to reason about any security challenge that arises in society.