CAREER: Towards Secure and Policy-Compliant Encrypted Communications

职业：实现安全且符合策略的加密通信

• 批准号: 1653110
• 负责人: Matthew Green
• 金额: $ 55.83万
• 依托单位: Johns Hopkins University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-07-01 至 2024-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1653110&HistoricalAwards=false
• 关键词: CAREER; Towards; Secure; Policy; Compliant

The past several years have seen a fundamental change in the way that individuals use technology to communicate. One aspect of this change has been the widespread deployment of new encrypted communications systems that are used by billions of users. With the emergence of new, practical encrypted messaging protocols and storage technologies, encryption is now available to the public in a quantity and quality that could only be imagined in previous decades. With the deployment of secure encryption technology comes new challenges. These span the traditional domains of cryptography, software design, and usable security. Technical flaws in these systems have already exposed hundreds of millions of users to the threat of data compromise. At the same time governments around the world have called for the introduction of new potential points of failure, in the form of exceptional access systems that would allow law enforcement to access communications on demand. This project studies problems arising from the often contradictory requirements of providing user security and providing exceptional access to government agencies. The work involves research into many aspects of the problem, ranging from cryptographic protocol design through the careful consideration of legal and administrative procedures. Research outputs will include development of requirements for these systems; analysis of concrete proposals put forward by government agencies; and the design of meaningful auditing systems and revocation mechanisms to maintain security for such systems in the event of a catastrophic breach. The research results have been integrated into graduate and undergraduate courses, and are disseminated through news publications and a public blog.

在过去的几年里，个人使用技术进行通信的方式发生了根本性的变化，其中一个方面是随着新的、实用的加密技术的出现，新的加密通信系统得到了广泛部署。随着安全加密技术的部署，现在公众可以使用的加密技术的数量和质量是过去几十年里无法想象的。可用的安全性。这些系统中的漏洞已经使数亿用户面临数据泄露的威胁，同时世界各国政府呼吁引入新的潜在故障点，以允许执法的特殊访问系统的形式。该项目研究了由于提供用户安全性和向政府机构提供特殊访问权这两个经常相互矛盾的要求而产生的问题。这项工作涉及对问题的许多方面的研究，从加密协议设计到对法律的仔细考虑。研究成果将包括需求的制定。针对这些系统；分析政府机构提出的具体建议；以及设计有意义的审计系统和撤销机制，以在发生灾难性破坏时维护此类系统的安全。并通过新闻出版物和公共博客传播。

项目成果

Abuse Resistant Law Enforcement Access Systems

防滥用执法访问系统

• DOI: 10.1007/978-3-030-77883-5_19
• 发表时间: 2021-06
• 期刊: EUROCRYPT 2021
• 作者: Green; M.
• 通讯作者: M.

Giving State to the Stateless: Augmenting Trustworthy Computation with Ledgers

为无国籍者提供状态：用账本增强可信计算

• DOI: 10.14722/ndss.2019.23060
• 发表时间: 2024-09-13
• 期刊: Proceedings 2019 Network and Distributed System Security Symposium
• 作者: Gabriel Kaptchuk;M. Green;Ian Miers
• 通讯作者: Ian Miers

Where did I leave my keys?: lessons from the Juniper Dual EC incident

我把钥匙落在哪里了？：Juniper Dual EC 事件的教训

• DOI: 10.1145/3266291
• 发表时间: 2018-10
• 期刊: Communications of the ACM
• 影响因子: 22.7
• 作者: Checkoway, Stephen;Maskiewicz, Jacob;Garman, Christina;Fried, Joshua;Cohney, Shaanan;Green, Matthew;Heninger, Nadia;Weinmann, Ralf;Rescorla, Eric;Shacham, Hovav
• 通讯作者: Shacham, Hovav

ZEXE: Enabling Decentralized Private Computation

ZEXE：实现去中心化私有计算

• DOI: 10.1109/sp40000.2020.00050
• 发表时间: 2020-05-01
• 期刊: 2020 IEEE Symposium on Security and Privacy (SP)
• 作者: Sean Bowe;A. Chiesa;M. Green;Ian Miers;Pratyush Mishra;Howard Wu
• 通讯作者: Howard Wu

Empty Title

空标题

• DOI: 0/1
• 发表时间: 2017-01
• 期刊: Empty Conference
• 作者: Author; None
• 通讯作者: None