Electrical engineer seeks to protect network users from “timing-based” theft of their data.
When you go online to pay a bill or buy an airline ticket, says Parv Venkitasubramaniam, your transaction is subject to inevitable tradeoffs between privacy and utility. While you expect your personal data to be protected from malicious actors, you also want the speediest possible transmission of data and completion of your transaction.
You can’t have both to the extent you might wish, says Venkitasubramaniam, an assistant professor of electrical and computer engineering.
“Our research shows fundamental tradeoffs exist,” he says. “You have to pay in terms of performance for the privacy you desire.”
Venkitasubramaniam studies network security in hopes of improving the anonymity of communicating parties and the paths along which data flow. He recently received a five-year CAREER Award from the National Science Foundation.
His goal is to gain a quantitative understanding of the tradeoffs between utility and privacy and to write algorithms that let consumers know how much privacy they can expect according to the amount of utility they desire.
“One person’s idea of privacy is not the same as another’s. We want to design flexible algorithms that accommodate the desires of all classes of consumers. Our algorithms will tell users what to expect based on their desire for utility or privacy.”
Venkitasubramaniam is particularly interested in protecting network users against adversaries who gain valuable information about users or networks based on the timing of data transmission.
Network security experts seek hackerproof encryption codes, he says, but adversaries can gain information about users or networks based solely on the timing of data transmission and the size of data packets. Encryption codes, he adds, do not guard against timing-backed information retrieval.
“Previous quantitative models did not consider the complete window of information available to adversaries. We were the first group to do this and the first to compute the fundamental relationship between privacy and utility.”
Applications of this work include transportation and healthcare networks, and the energy-distribution network, or smart grid.
“Each network wants to hide information but does so in a different way,” says Venkitasubramaniam. “A smart grid, for example, inadvertently reveals the timing and pattern of energy requests. Our tools must understand the utility, or energy savings, you can get out of the grid versus the privacy you may have to sacrifice.
“Our mathematical framework enables us to characterize the fundamental tradeoffs between anonymity and network performance and to derive insights into the strategies and likely behavior of network adversaries.”
