{"id":651,"date":"2018-01-20T19:44:12","date_gmt":"2018-01-21T00:44:12","guid":{"rendered":"https:\/\/www.bu.edu\/macs\/?page_id=651"},"modified":"2018-02-01T13:58:13","modified_gmt":"2018-02-01T18:58:13","slug":"meeting-jan-2018","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/macs\/workshops\/meeting-jan-2018\/","title":{"rendered":"MACS Project Meeting, January 2018"},"content":{"rendered":"<p><strong>Date:<\/strong><br \/>\nMonday, January\u00a029,\u00a02018<\/p>\n<p><strong>Location:<br \/>\n<\/strong>Boston University, Hariri Seminar Room, <a href=\"https:\/\/www.bu.edu\/math\/about\/contact-us\/directions-to-the-department\/\">MCS building<\/a> room 180<\/p>\n<p><strong>Schedule:<\/strong><\/p>\n<table valign=\"top\" style=\"direction: ltr; border-collapse: collapse; border: 1pt solid #A3A3A3;\" cellspacing=\"0\" cellpadding=\"0\" border=\"1\">\n<tbody>\n<tr>\n<td>11 &#8211; 12:15<\/td>\n<td>\n<ul>\n<li>Yossi Gilad, <a href=\"https:\/\/eprint.iacr.org\/2016\/943.pdf\"><em>Stadium: A Distributed Metadata-Private Messaging System<\/em><\/a><em><\/em><\/li>\n<li>Vinod Vaikuntanathan, <em><a href=\"https:\/\/eprint.iacr.org\/2018\/073.pdf\">Gazelle: Secure Neural Network Inference<\/a><\/em><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>12:15 &#8211; 1:15<\/td>\n<td>Lunch (provided)<\/td>\n<\/tr>\n<tr>\n<td>1:15 &#8211; 2:15<\/td>\n<td>\n<ul>\n<li>Malte Schwarzkopf, <em>Conclave: Secure Multi-Party Computation on Big Data<\/em> (<a href=\"https:\/\/www.bu.edu\/macs\/files\/2018\/02\/Schwarzkopf-conclave.pdf\">pdf<\/a>)<\/li>\n<li>Chenglu Jin, <em>Secure Sensor Function<\/em><em><\/em><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td>2:15 &#8211; 2:30<\/td>\n<td>Break<\/td>\n<\/tr>\n<tr>\n<td>2:30 &#8211; 3<\/td>\n<td>Srini Devadas, <em>Discussion on Meltdown and Spectre attacks and implications on the MACS project<\/em> (<a href=\"https:\/\/www.bu.edu\/macs\/files\/2018\/01\/Devadas-meltdown-spectre.pptx\">pptx<\/a>)<\/td>\n<\/tr>\n<tr>\n<td>3 &#8211; 4<\/td>\n<td>Faculty-only discussion<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Selected abstracts:<\/strong><\/p>\n<p><strong>Yossi Gilad<\/strong>, <em>Stadium: A Distributed Metadata-Private Messaging System<br \/>\n<\/em><\/p>\n<p>Private communication over the Internet remains a challenging problem. Even if messages are encrypted, it is hard to deliver them without revealing metadata about which pairs of users are communicating. Scalable anonymity systems, such as Tor, are susceptible to traffic analysis attacks that leak metadata. In contrast, the largest-scale systems with metadata privacy require passing all messages through a small number of providers, requiring a high operational cost for each provider and limiting their deployability in practice.<\/p>\n<p>This paper presents Stadium, a point-to-point messaging system that provides metadata and data privacy while scaling its work efficiently across hundreds of low-cost providers operated by different organizations. Much like Vuvuzela, the current largest-scale metadata-private system, Stadium achieves its provable guarantees through differential privacy and the addition of noisy cover traffic. The key challenge in Stadium is limiting the information revealed from the many observable traffic links of a highly distributed system, without requiring an overwhelming amount of noise. To solve this challenge, Stadium introduces techniques for distributed noise generation and differentially private routing as well as a verifiable parallel mixnet design where the servers collaboratively check that others follow the protocol. We show that Stadium can scale to support 4x more users than Vuvuzela using servers that cost an order of magnitude less to operate than Vuvuzela nodes.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Vinod Vaikuntanathan<\/strong>, <em>Gazelle: A Low Latency Framework for Secure Neural Network Inference<br \/>\n<\/em><\/p>\n<p>The growing popularity of cloud-based machine learning raises a natural question about the privacy guarantees that can be provided in such a setting. Our work tackles this problem in the context where a client wishes to classify private images using a convolutional neural network (CNN) trained by a server. Our goal is to build efficient protocols whereby the client can acquire the classification result without revealing their input to the server, while guaranteeing the privacy of the server&#8217;s neural network.<\/p>\n<p>To this end, we design GAZELLE, a scalable and low-latency system for secure neural network inference, using an intricate combination of homomorphic encryption and traditional two-party computation techniques (such as garbled circuits). GAZELLE makes three contributions. First, we design the GAZELLE homomorphic encryption library which provides fast algorithms for basic homomorphic operations such as SIMD (single instruction multiple data) addition, SIMD multiplication and ciphertext permutation. Second, we implement the GAZELLE homomorphic linear algebra kernels which map neural network layers to optimized homomorphic matrix-vector multiplication and convolution routines. Third, we design optimized encryption switching protocols which seamlessly convert between homomorphic and garbled circuit encodings to enable implementation of complete neural network inference.<\/p>\n<p>We evaluate our protocols on benchmark neural networks trained on the MNIST and CIFAR-10 datasets and show that GAZELLE outperforms the best existing systems such as MiniONN by 20x and Chameleon by 30x in online runtime. Similarly when compared with fully homomorphic approaches like CryptoNets we demonstrate three orders of magnitude faster online run-time.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Malte Schwarzkopf<\/strong>, <em>Conclave: Secure Multi-Party Computation on Big Data<br \/>\n<\/em><\/p>\n<p>Secure multi-party computation (MPC) allows mutually distrusting parties<br \/>\nto run joint computations without revealing any private data.<br \/>\nUnfortunately, current MPC algorithms scale poorly with the size of the<br \/>\ndata processed. This makes MPC on &#8220;big data&#8221; prohibitively slow and<br \/>\ninhibits many use cases.<\/p>\n<p>Most analytics queries, however, can maintain the end-to-end security<br \/>\nguarantee without running entirely under MPC&#8217;s cryptographic<br \/>\ntechniques. Conclave is a query compiler that <em>automatically<\/em><br \/>\naccelerates such queries by transforming a relational query into a<br \/>\ncombination of scalable, local, cleartext processing and small, isolated<br \/>\nMPC steps. For further speedups, Conclave introduces new hybrid<br \/>\nMPC-cleartext protocols that rely on existing trust relationships<br \/>\nbetween parties to run additional steps outside MPC.<\/p>\n<p>Our Conclave prototype generates code for local, scalable cleartext<br \/>\nprocessing in Spark, and for secure MPC using the Sharemind framework,<br \/>\nand manages its execution. In experiments, Conclave scales to data sets<br \/>\nbetween three and six orders of magnitude larger than state-of-the-art<br \/>\nMPC frameworks can support, and delivers results in minutes.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Date: Monday, January\u00a029,\u00a02018 Location: Boston University, Hariri Seminar Room, MCS building room 180 Schedule: 11 &#8211; 12:15 Yossi Gilad, Stadium: A Distributed Metadata-Private Messaging System Vinod Vaikuntanathan, Gazelle: Secure Neural Network Inference 12:15 &#8211; 1:15 Lunch (provided) 1:15 &#8211; 2:15 Malte Schwarzkopf, Conclave: Secure Multi-Party Computation on Big Data (pdf) Chenglu Jin, Secure Sensor Function [&hellip;]<\/p>\n","protected":false},"author":10377,"featured_media":0,"parent":69,"menu_order":9,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/pages\/651"}],"collection":[{"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/users\/10377"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/comments?post=651"}],"version-history":[{"count":13,"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/pages\/651\/revisions"}],"predecessor-version":[{"id":668,"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/pages\/651\/revisions\/668"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/pages\/69"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/macs\/wp-json\/wp\/v2\/media?parent=651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}