SaTC: CORE: Medium: Collaborative: Cryptographic Data Protection in Modern Systems

计算机系统持续的重大漏洞和安全隐患激发了一种有前途的数据保护新方法：对数据进行加密，即使被盗，对攻击者来说也是无用的，但会显示足够的数据信息，以便数据库和Web服务器等商品系统仍然可以对其进行操作。这称为属性揭示加密（PRE），并且已经找到了保护云服务中敏感数据的学术和商业产品。这个项目是一个全面的调查是否，何时，以及如何可以充分保护敏感数据的属性揭示加密。本研究通过与行业的密切合作以及对用户数据保护需求的了解而获得信息。该项目包括三个研究方向，涵盖从理论基础到安全分析，再到原型系统的设计和实现。 第一个重点是开发属性揭示加密（PRE）方案的加密定义和安全模型，以及开发威胁模型和推理方法的层次结构。 第二个重点是开发一个统一的方法来测量和利用信息泄漏时，PRE计划部署在实际的分布式系统中的现实数据。最后的推力设计和实现安全的系统，安全地使用加密数据保护，专注于少数关键应用程序，展示基本的PRE功能。

Continuing major breaches and security compromises of computer systems motivate a promising new approach to data protection: encrypt the data so that even if stolen, it will be useless to the attacker, yet reveal just enough information about the data so that commodity systems such as databases and Web servers can still operate on it. This is called property-revealing encryption (PRE), and has already found its way to academic and commercial products that protect sensitive data in cloud services. This project is a comprehensive investigation of whether, when, and how can property-revealing encryption adequately protect sensitive data. This investigation is informed by close engagement with industry and understanding of the needs and requirements of protecting users' data.This project comprises three research thrusts, spanning the range from theoretical foundations to security analysis to design and implementation of prototype systems. The first thrust develops cryptographic definitions and security models for property-revealing encryption (PRE) schemes, as well as developing a hierarchy of threat models and inference methods. The second thrust focuses on developing a unified methodology for measuring and exploiting information leakage when PRE schemes are deployed on realistic data in actual distributed systems. The final thrust designs and implements secure systems that use cryptographic data protection safely and securely, focusing on a small number of key applications that showcase essential PRE functionality.