CAREER: Protecting Privacy in Untrusted Environments

职业生涯：在不受信任的Environments----------------------------------------------------PI：中保护隐私维塔利·什马提科夫(德克萨斯大学奥斯汀分校)关于个人和组织的信息越来越多地收集在海量数据库中，通过公共网络发送，并跨越组织边界共享。这对隐私构成了严重威胁：即使对个别数据进行加密保护，由于不同组件的隐私策略不匹配，敏感信息仍可能泄露。该项目旨在开发保护敏感数据隐私的工具和技术，重点研究三个主要方面。第一个推力是保护包含个人信息的公共数据库，如医疗记录、交易和偏好。这包括设计可证明安全的方法，以便直接在发布的数据中执行访问策略，开发分析工具来发现隐私漏洞，以及对真实世界的数据进行评估。第二部分是设计和实施检查隐私政策遵从性的正式方法，以确保数据处理应用程序不违反企业声明的隐私政策。第三个重点是开发分析隐私保护通信网络的新方法。保护数据隐私不仅对个人，而且对处理个人数据的企业和组织都很重要。作为该项目的一部分开发的新技术将有助于检测潜在的隐私违规行为并执行隐私政策。它们将使处理敏感个人和组织数据的应用程序能够在开放计算环境中执行，并支持许多社会重要任务，如不侵犯患者隐私的多机构医学试验和互联网安全威胁的协作分析。

CAREER: Protecting Privacy in Untrusted Environments----------------------------------------------------PI: Vitaly Shmatikov (The University of Texas at Austin)Information about individuals and organizations is increasingly collectedin massive databases, sent over public networks and shared acrossorganizational boundaries. This presents serious threats to privacy:even if individual pieces of data are cryptographically protected,sensitive information may still leak out due to mismatches betweenprivacy policies of different components.This project aims to develop tools and techniques for protecting privacyof sensitive data, focusing on three main research thrusts. The firstthrust is protection of public databases containing individual informationsuch as medical records, transactions, and preferences. This includesdesign of provably secure methods for enforcing access policies directlyin published data, development of analysis tools for finding privacyvulnerabilities, and evaluation on real-world data. The second thrustis design and implementation of formal methods for checking privacypolicy compliance in order to ensure that data processing applicationsdo not violate the stated privacy policies of the enteprise. The thirdthrust is development of new methods for analyzing privacy-preservingcommunication networks.Protecting data privacy is important not only for individuals, butalso for businesses and organizations that deal with individual data.New technologies developed as part of this project will help detectpotential privacy violations and enforce privacy policies. They willenable applications dealing with sensitive personal and organizationaldata to be executed in open computing environments and support manysocially important tasks such as multi-institution medical trials thatdo not violate patients' privacy and collaborative analysis of Internetsecurity threats.