"What the heck is secure computing?" What is “secure computing”? Why should it be important to me? Now that it is important to me, how can I use secure computing for my work? This presentation will give an overview of the two main types of secure computing. We explain the fundamental ideas behind the technology and point out important details. We also present ideas on how this technology can be used for new applications, and last but not least, we answer your questions. Speaker: Matthias Gusenbauer, Talk language: English About the Speaker: ********************* I am a researcher at SBA Research in Vienna, Austria. My research focuses on bridging people and technology to solve issues in security and privacy. In order to accomplish this I focus on usable security and privacy with an interest in applied cryptography. I have been a research fellow at the National Institute of Informatics (NII) in Tokyo to work on visualizing network traces. During a second stay with the NII as part of Echizen Laboratory I worked on visualizing the Bitcoin blockchain. Now I continue to work in the domain of usable security, cryptography and privacy.

1. Klassifikation: Öffentlich
Welcome
to the SBA LiveAcademy
#bleibdaheim #remotelearning
Today: What the Heck is Secure Computing?
by Matthias Gusenbauer
You are automatically muted by entry, please use the chat for interacting with us.
This talk will be recorded as soon as the presentation starts!
Recording will end BEFORE the Q&A Session starts.

2. Klassifikation: Öffentlich
What the Heck is Secure Computing
and why should I care?
SBA Research gGmbH, 2020

3. Klassifikation: Öffentlich 3
Whatis Secure Computing?
• Compute on encrypted data
o Secure Multiparty Computation (MPC)
– Jointly compute on private data
– "Data sharing without sharing data"
o Fully Homomorphic Encryption (FHE)
– Compute on ciphertext
– Outsource computation without losing privacy
SBA Research gGmbH, 2020

4. Klassifikation: Öffentlich 4
MPC vs FHE
+ - Basis
MPC
• Faster
• More tool choice
• More
communication
• Secret sharing
• Oblivioustransfer
FHE
• Less
communication
• Slower
• Less tool choice
• Mathematical
properties of
ciphertext
SBA Research gGmbH, 2020

5. Klassifikation: Öffentlich 5
MPC Example
• Average salary of Academy participants
• Only learn output (nothing else)
• Secret sharing
o Additive Secret Sharing
SBA Research gGmbH, 2020

6. Klassifikation: Öffentlich 6
MPC Example
SBA Research gGmbH, 2020
Z1: 2500 EUR
Z2: 2350 EURZ3: 2000 EUR

7. Klassifikation: Öffentlich 7
MPC Example
SBA Research gGmbH, 2020
Z1: 2500 EUR
S1,1=1000
S1,2=250
S1,3=1250
Z2: 2350 EUR
S2,1=150
S2,2=700
S2,3=1500
Z3: 2000 EUR
S3,1=300
S3,2=800
S3,3=900

8. Klassifikation: Öffentlich 8
MPC Example
SBA Research gGmbH, 2020
Z1: 2500 EUR
S1,1=1000
S1,2=250
S1,3=1250
Z2: 2350 EUR
S2,1=150
S2,2=700
S2,3=1500
Z3: 2000 EUR
S3,1=300
S3,2=800
S3,3=900
S3,2 | S2,3

9. Klassifikation: Öffentlich 9
MPC Example
SBA Research gGmbH, 2020
Z1: 2500 EUR
S1,1=1000
S1,2=250
S1,3=1250
Z2: 2350 EUR
S2,1=150
S2,2=700
S2,3=1500
Z3: 2000 EUR
S3,1=300
S3,2=800
S3,3=900
Add S1,1+S2,1+S3,1
T1=1000+150+300=1450
Add S2,2+S1,2+S3,2
T2=700+250+800=1750
Add S3,3+S1,3+S2,3
T3=900+1250+1500=3650

10. Klassifikation: Öffentlich 10
MPC Example
SBA Research gGmbH, 2020
Z1: 2500 EUR
S1,1=1000
S1,2=250
S1,3=1250
Z2: 2350 EUR
S2,1=150
S2,2=700
S2,3=1500
Z3: 2000 EUR
S3,1=300
S3,2=800
S3,3=900
Add S1,1+S2,1+S3,1
T1=1000+150+300=1450
Add S2,2+S1,2+S3,2
T2=700+250+800=1750
Add S3,3+S1,3+S2,3
T3=900+1250+1500=3650
T3 | T2

11. Klassifikation: Öffentlich 11
MPC Example
SBA Research gGmbH, 2020
Z1: 2500 EUR
S1,1=1000
S1,2=250
S1,3=1250
Z2: 2350 EUR
S2,1=150
S2,2=700
S2,3=1500
Z3: 2000 EUR
S3,1=300
S3,2=800
S3,3=900
Add S1,1+S2,1+S3,1
T1=1000+150+300=1450
Add S2,2+S1,2+S3,2
T2=700+250+800=1750
Add S3,3+S1,3+S2,3
T3=900+1250+1500=3650
T1+T2+T3=SumFinal
Average=SumFinal/3 = 2283,33

12. Klassifikation: Öffentlich 12
MPC Use Cases
SBA Research gGmbH, 2020
Awesome Company
C1
C3 C2
SecurityPrivacy

13. Klassifikation: Öffentlich 13
MPC Use Cases
• Privacy
o Machine learning
o Credit score computation
o Combining health data
• Security
o System resiliency
o Remove single point of failure (e.g. key splitting)
o Protection of assets
SBA Research gGmbH, 2020

14. Klassifikation: Öffentlich 14
ImportantConsiderations
• 2PC or MPC?
• Honest or dishonest majority?
• Semi-honest or malicious security?
• Cryptography knowledge in house?
o Some pitfalls (inadvertent leakage, performance)
• Open to work with research code?
o Proprietary platforms (tech support)
o Open source tools (more choices)
SBA Research gGmbH, 2020

15. Klassifikation: Öffentlich 15
Existing Tools
• Proprietary
o Unbound
o Cybernetica (Sharemind)
• Open source
o JIFF
o Scale-Mamba
o …
SBA Research gGmbH, 2020

16. Klassifikation: Öffentlich 16
My 3 Key Take-Aways
1. Secure Computation is possible (MPC)
2. MPC replaces trusted third parties
3. MPC can enable new business cases and
increase my security
SBA Research gGmbH, 2020

17. Klassifikation: Öffentlich 17
My Study
• MPC adoption and lack thereof
• 30-45 minute interview (recorded – 20 EUR
Amazon voucher)
• Strict protection of participants' privacy
• https://de.surveymonkey.com/r/PCB29X9 (or
send me an email)
SBA Research gGmbH, 2020

18. Klassifikation: Öffentlich 18
Matthias Gusenbauer
SBA Research gGmbH
Floragasse 7, 1040 Wien
MGusenbauer@sba-research.org
SBA Research gGmbH, 2020

19. Klassifikation: Öffentlich 19
ProfessionalServices
Penetration Testing
Architecture Reviews
Security Audit
Security Trainings
Incident Response Readiness
ISMS & ISO 27001 Consulting
Bridging Science and Industry
Applied Research
Industrial Security| IIoT Security|
Mathematics for SecurityResearch |
Machine Learning| Blockchain | Network
Security| Sustainable Software Systems |
Usable Security
SBAResearch
Knowledge Transfer
SBA Live Academy | sec4dev | Trainings |
Events | Teaching | sbaPRIME
Contact us: anfragen@sba-research.org

20. Klassifikation: Öffentlich 20
References
• Character images "Shadow Tactics – Blades of the
Shogun
• MPC overview paper "SoK: General Purpose
Compilers for Secure Multi-Party Computation"
by Hastings et al.
• Unbound - https://www.unboundtech.com/
• Sharemind - https://sharemind.cyber.ee/
SBA Research gGmbH, 2020

21. Klassifikation: Öffentlich 21
#bleibdaheim #remotelearning
Coming up @ SBA Live Academy
Datum einfügen, 13.00 Uhr, live:
„Talk Titel einfügen“
by „Speaker einfügen“
Join our MeetUp Group!
https://www.meetup.com/Security-Meetup-by-SBA-Research/
Insert here a picture related
to the next talk, if you don‘t
get / find one use the
Academy Picture

22. Klassifikation: Öffentlich 22
Abschnitt
Untertitel für Abschnitt
SBA Research gGmbH, 2020

23. Klassifikation: Öffentlich 23
MPC Example
SBA Research gGmbH, 2020
Z1: 2500 EUR
S1,1=1000
S1,2=250
S1,3=1250
Z2: 2350 EUR
S2,1=150
S2,2=700
S2,3=1500
Z3: 2000 EUR
S3,1=300
S3,2=800
S3,3=900
Add S1,1+S2,1+S3,1
T1=1000+150+300=1450
Add S2,2+S1,2+S3,2
T2=700+250+800=1750
Add S3,3+S1,3+S2,3
T3=900+1250+1500=3650
T1+T2+T3=SumFinal
Average=SumFinal/3
S3,2 | S2,3

24. Klassifikation: Öffentlich 24
MPC Example
SBA Research gGmbH, 2020
Z1: 2500 EUR
S1,1=1000
S1,2=250
S1,3=1250
Z2: 2350 EUR
S2,1=150
S2,2=700
S2,3=1500
Z3: 2000 EUR
S3,1=300
S3,2=800
S3,3=900
Add S1,1+S2,1+S3,1
T1=1000+150+300=1450
Add S2,2+S1,2+S3,2
T2=700+250+800=1750
Add S3,3+S1,3+S2,3
T3=900+1250+1500=3650
T1+T2+T3=SumFinal
Average=SumFinal/3
T3 | T2