Aug 2026· Proceedings of the ACM SIGOPS 32nd Symposium on Operating Systems Principles· 0 citations· 107 references
Computer Science
TL;DR
It is shown that CryptDough generalizes the functionality of state-of-the-art MPC systems and remains competitive on the analytics they support, often outperforming them by more than $2\times$.
Abstract
We present CryptDough, a unified analytics engine for secure multiparty computation (MPC). CryptDough enables multiple distrusting parties to jointly execute a data analysis pipeline on their private inputs and learn nothing beyond the result (e.g., aggregate statistics). Unlike existing MPC solutions that support a single threat model or workload type, CryptDough provides built-in support for cross-domain analytics (relational, time series, ML inference) under various threat models, all within the same system runtime. CryptDough contributes (i) a hierarchical system design that facilitates modularity and extensibility through progressive lowering of abstractions, and (ii) the concept of virtual vectors that enable users to write single-threaded code across all layers of the software stack, while pushing the complexity of communication, parallelization, and memory management down to the execution engine. We show that CryptDough generalizes the functionality of state-of-the-art MPC systems and remains competitive on the analytics they support, often outperforming them by more than 2×.
Federated Learning (FL) allows devices with private data to collaborate in training a shared model. We present a next-generation FL system based on Trusted Execution Environments (TEEs) that addresses operational challenges associated with earlier systems and provides externally verifiable central Differential Privacy...
Katharine Daly, Yu Xiao, Zachary Garrett et al.· 0 citations
We present an architecture that enables data owners to combine private data into data pools using Trusted Execution Environments (TEEs) and manage these pools by issuing narrowly scoped computational rights, encoded as Digital Rights Tokens (DRTs), to third-party data analysts. Each DRT binds specific open-source code...
The augmented multi-party shuffle DP (AMP-SDP) model is proposed, which re-architects the data pipeline with a lightweight, versatile secret-shared intermediary layer that decentralizes trust while minimizing online communication costs and provides structural security hardening against both shuffler compromise and user-sid...
Wentao Dong, Yang Cao, Cong Wang et al.· 0 citations
A2M (Attraction-to-Manipulation), a two-stage black-box framework for hijacking MCP agents, is introduced, a two-stage black-box framework for hijacking MCP agents that motivate stronger tool vetting and runtime isolation in MCP ecosystems.
Lai-Zhen Li, Xuan Wang, Pei-Cheng Zhao et al.· 0 citations
This work proposes Hoss, a first-of-its-kind oblivious semantic search system with a heterogeneous CPU-GPU TEE architecture that supports fast, scalable search with low cost of ownership and features a host-access ORAM mechanism that goes beyond traditional performance constraints and incorporates several data-dependen...
Jian Du, Wei-Jie Huang, Cheng-Hong Wang et al.· 0 citations
We present zk-Analytics, a distributed cloud analytics system that enables publicly verifiable analytics without revealing raw logs or relying on trusted hardware in analytics providers' infrastructure. Today's cloud analytics are largely self-assertive: providers collect telemetry, perform aggregation, and report resu...
Zeying Zhu, Clarence Lam, Alexander Frolov et al.· Conference on Applications,...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.