Award Abstract # 2209194
SaTC: CORE: Medium: Secure outsourced analytics in untrusted clouds

NSF Org: CNS
Division Of Computer and Network Systems
Recipient: TRUSTEES OF BOSTON UNIVERSITY
Initial Amendment Date: August 23, 2022
Latest Amendment Date: May 29, 2024
Award Number: 2209194
Award Instrument: Standard Grant
Program Manager: Anna Squicciarini
asquicci@nsf.gov
 (703)292-5177
CNS
 Division Of Computer and Network Systems
CSE
 Directorate for Computer and Information Science and Engineering
Start Date: October 1, 2022
End Date: September 30, 2026 (Estimated)
Total Intended Award Amount: $749,952.00
Total Awarded Amount to Date: $775,692.00
Funds Obligated to Date: FY 2022 = $749,952.00
FY 2023 = $15,990.00

FY 2024 = $9,750.00
History of Investigator:
  • Ioannis Liagouris (Principal Investigator)
    liagos@bu.edu
  • Mayank Varia (Co-Principal Investigator)
  • Vasiliki Kalavri (Co-Principal Investigator)
Recipient Sponsored Research Office: Trustees of Boston University
1 SILBER WAY
BOSTON
MA  US  02215-1703
(617)353-4365
Sponsor Congressional District: 07
Primary Place of Performance: Trustees of Boston University
111 Cummington Mall
BOSTON
MA  US  02215-2411
Primary Place of Performance
Congressional District:
07
Unique Entity Identifier (UEI): THL6A6JLE1S7
Parent UEI:
NSF Program(s): Special Projects - CNS,
Secure &Trustworthy Cyberspace
Primary Program Source: 01002223DB NSF RESEARCH & RELATED ACTIVIT
01002425DB NSF RESEARCH & RELATED ACTIVIT

01002324DB NSF RESEARCH & RELATED ACTIVIT
Program Reference Code(s): 025Z, 9251, 9178, 7924
Program Element Code(s): 171400, 806000
Award Agency Code: 4900
Fund Agency Code: 4900
Assistance Listing Number(s): 47.070

ABSTRACT

This project designs and develops Secrecy+, a novel data analytics system that uses secure multi-party computation (MPC) and enables data holders to perform relational analytics on their collective private data with provable and configurable security guarantees. The project's core novelties include a principled optimization framework for outsourced relational MPC and a library of parallel secure operators that scale to much larger datasets than the current state-of-the-art. Secrecy+ targets use cases where multiple data holders are willing to contribute their private data towards a joint analysis (e.g., for profit, social good, or improved services), provided that the data remain siloed from untrusted or unauthorized entities. The research is grounded in two case studies: (i) secure cloud-based analytics on mobile health data, and (ii) secure cross-site analytics on datacenter logs.

The project involves three sets of tasks that span the areas of cryptography, database query evaluation, and distributed systems. First, the investigators define a unified cost model for secure operations across different MPC protocols and physical deployments. Second, they develop a relational MPC query processor that supports parallel query execution and employs optimizations that reduce MPC costs while retaining the full security guarantees of the cryptographic protocols. Third, the investigators design and implement high-level user interfaces and tools for seamless integration with existing cloud infrastructure. Project results have the potential to fundamentally change how private datasets are used by organizations, researchers, and policy makers in accordance with data privacy regulations and can pave the way for new marketplaces in the cloud.

This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

PUBLICATIONS PRODUCED AS A RESULT OF THIS RESEARCH

Note:  When clicking on a Digital Object Identifier (DOI) number, you will be taken to an external site maintained by the publisher. Some full text articles may not yet be available without a charge during the embargo (administrative interval).

Some links on this page may take you to non-federal websites. Their policies may differ from this site.

Little, Ryan and Qin, Lucy and Varia, Mayank "Secure Account Recovery for a Privacy-Preserving Web Service" , 2024 Citation Details
Seow, Ethan and Tong, Yan and Baum, Eli and Buxbaum, Sam and Faisal, Muhammad and Liagouris, John and Kalavri, Vasiliki and Varia, Mayank "QueryShield: Cryptographically Secure Analytics in the Cloud" , 2024 https://doi.org/10.1145/3626246.3654749 Citation Details
Faisal, Muhammad and Zhang, Jerry and Liagouris, John and Vasiliki, Kalavri and Varia, Mayank "TVA: A multi-party computation system for secure and expressive time series analytics" USENIX Security 2023 , 2023 Citation Details

Please report errors in award information by writing to: awardsearch@nsf.gov.

Print this page

Back to Top of page