Collaborative Research: SaTC: CORE: Medium: The Next Generation of Leakage Attacks and Defenses for Encrypted Databases

越来越多的作品探索加密数据库领域，将其作为搜索存储在服务器上的加密数据的实用方法。客户端在将数据上传到服务器之前对数据进行加密。服务器不会被给予解密密钥，但服务器可以对客户端请求的加密数据执行搜索，并返回相应的加密答案。加密数据库通过允许原始(明文)数据的一些泄漏来高效地实现上述功能，这些原始(明文)数据看似无害，但可能被攻击者利用，攻击者试图通过合成来自加密答案和加密查询的泄漏来重建原始数据。该项目旨在开发用于构建高效加密数据库并分析其对重建攻击的恢复能力的下一代方法。为了实现这一目标，它使用了来自算法、统计学、几何学、数据库和计算机系统的方法。具体的研究活动包括加密数据库泄漏的密码分析和高维加密查询的密码分析和方案。在上述研究的推动下，该项目将制定一项原则性的防御分析以及在加密数据库背景下量化泄漏影响的框架。为了实现更广泛的影响，该项目包括计算机安全课程的课程开发，努力将未被充分代表的群体的成员纳入研究活动，以及与行业和政府受众进行接触。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

A growing number of works explore the area of encrypted databases as a practical approach to searching on encrypted data stored at a server. The client encrypts the data before uploading it to the server. The server is not given the decryption key, yet the server can execute searches on the encrypted data requested by the client and return the corresponding encrypted answers. An encrypted database efficiently achieves the above functionality by allowing some leakage about the original (plaintext) data that appears harmless but could be exploited by an attacker who attempts to reconstruct the original data by synthesizing leakage from the encrypted answers and encrypted queries over time.This project aims to develop the next generation of methods for building efficient encrypted databases and for analyzing their resilience to reconstruction attacks. To achieve this goal, it uses methods from algorithms, statistics, geometry, databases, and computer systems. Specific research activities include cryptanalysis of the leakage from encrypted databases with suppressed leakage as well as cryptanalysis and schemes for high-dimensional encrypted queries. Informed by the above research thrusts, this project will develop a principled analysis of defenses as well as a framework for quantifying the impact of leakage in the context of encrypted databases.Toward achieving broader impacts, this project includes curriculum development for computer security courses, efforts to include members of underrepresented groups in research activities, and outreach to industry and government audiences.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.