Aug 2026· Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication· pp. 1299-1314· 0 citations· 103 references
Computer Science
Abstract
We present zk-Analytics, a distributed cloud analytics system that enables publicly verifiable analytics without revealing raw logs or relying on trusted hardware in analytics providers' infrastructure. Today's cloud analytics are largely self-assertive: providers collect telemetry, perform aggregation, and report results, leaving external parties unable to verify correctness without access to sensitive data or trusted execution environments. zk-Analytics addresses this gap by augmenting analytics pipelines with lightweight append-only log commitments and verifiable aggregation and query execution using zero-knowledge proofs. The system cleanly separates online log commitment from offline, distributed batch aggregation and query verification, enabling scalability while keeping online overhead low. We implement zk-Analytics using a zkVM-based execution environment and evaluate it on real-world and synthetic workloads, demonstrating that verifiable, privacy-preserving cloud analytics is feasible for real-world cloud workloads. zk-Analytics is open-sourced at https://github.com/Froot-NetSys/zk-Analytics.
It is shown that CryptDough generalizes the functionality of state-of-the-art MPC systems and remains competitive on the analytics they support, often outperforming them by more than $2\times$.
Muhammad Faisal, Alessandra Lanz, Sam Buxbaum et al.· Proceedings of the ACM SIGOP...· 0 citations
Cloud platforms let organizations share computing capacity, data services, and machine-learning tools across many business units, regions, and providers. The same flexibility also creates a difficult security problem: raw records may cross tenant boundaries, model updates may be poisoned, automated responses may interr...
K. Mudaliyar, S. S. Kumar· European Journal of Applied...· 0 citations
Internet of Things (IoT), Smart Health, and Smart City applications generate continuous data streams that may contain sensitive personal information. Decentralized storage systems such as Solid provide data ownership, access control, and interoperable sharing but offer limited support for real-time stream processing. W...
Kushagra Singh Bisen, S. Verstichel, F. Ongenae· Italian National Conference...· 0 citations
A next-generation FL system based on Trusted Execution Environments (TEEs) is presented that addresses operational challenges associated with earlier systems and provides externally verifiable central Differential Privacy (DP) guarantees for the first time while offering a better privacy-utility tradeoff.
Katharine Daly, Yu Xiao, Zachary Garrett et al.· 0 citations
FinDS-Agent is presented, a cloud–edge framework that keeps raw records and program execution at the trusted edge while providing a policy-screened, sanitized context to support cloud planning and support selective cloud planning while delimiting statistical, privacy, and transfer claims.
Xiao-Zheng Du, Rui-Jun Deng, Cheng Wang et al.· Future Internet· 0 citations
