Keynote: Analyzing Proximity-based Contact Tracing Protocols

Abstract: The COVID-19 pandemic is shaping up to be among the biggest disasters for humanity since World War 2. Traditional contact tracing requires extensive manual efforts and scales poorly. As smartphone usage is ubiquitous in modern society, the use of smartphone apps to help with contact tracing is a promising solution. In Proximity-based Contact Tracing (PCT) systems, the goal is to identify events where two persons are physically close to each other, by detecting that their smartphones are physically adjacent for some period of time. The challenge is how to do this while balancing Privacy of individuals, Resiliency to malicious attackers, and Efficiency. In this talk, we present a systematic approach to design and analyze PCT protocols. We identify a list of desirable properties of a contact tracing design from the four aspects of Privacy, Utility, Resiliency, and Efficiency (PURE). We also identify two main design choices for PCT protocols: what information patients report to the server, and which party performs the matching of patient and contacts. These two choices determine most of the PURE properties and enable us to conduct a comprehensive analysis and comparison of the existing protocols. This also led us to discover a new design and offers attractive combination of properties. See https://arxiv.org/abs/2012.09520 for the paper.

BIO: Ninghui Li is a Professor of Computer Science at Purdue University. His research interests are in security and privacy. He has published over 120referred papers in these areas, and is on the editorial boards of ACM Transactions on Privacy and Security (TOPS), Journal of Computer Security(JCS), and ACM Transactions on Internet Technology. Prof. Li is Vice Chair of ACM Special Interest Group on Security, Audit and Control (SlGSAC). He has served on the Program Committees of over 100 international conferences and workshops in computer security, databases, and data mining, including serving as Program Committee Chairs for 2014 and 2015 ACM Conference on Computer and Communications Security (CCS)，ACM's flagship conference in the field of security and privacy.

Keynote: Privacy Computing: Moving Towards Practicality

Abstract:

BIO:浙江大学求是讲席教授、ACM会士和IEEE会士、国家特聘专家，目前担任浙江大学网络空间安全学院院长、计算机科学与技术学院副院长、计算机创新技术研究院执行院长，并曾担任纽约州立大学布法罗分校冠名教授及普适安全与隐私实验室主任。先后主持和参与了科技部、国家自然科学基金委员会、浙江省领军型创新团队、美国国家科学基金会、美国能源部、香港研究资助局、韩国国家研究基金会、阿里巴巴、蚂蚁金服、华为、亚马逊等机构和公司的多项科研项目，多项研究成果在工业界有广泛应用。获得了包括浙江大学首届国华杰出学者奖，IEEE通信分会安全技术委员会技术成就奖 、纽约州立大学校长杰出研究奖 、美国国家自然科学基金青年职业奖在内的一系列奖项。发表了300余篇同行评议的期刊与会议文章，获得了包括IEEE ICDCS’20、ACM MobiSys’20、IEEE INFOCOM’20、IEEE Globecom’19、中国密码学会’18、ACM/IEEE IWQoS’17，IEEE ICNP’11等在内的多篇最佳论文和时间考验论文奖。H-Index为77，文章总引用次数超过35,000次，并入选科睿唯安高被引科学家。任奎教授担任了多个国际权威期刊编委，国际一流会议主席或共同主席，包括现/曾任《中国科学：信息科学》、《ACM互联网技术汇刊》、《ACM信息物理系统汇刊》、《ACM物联网汇刊》、《IEEE网络汇刊》、《IEEE可信任安全计算汇刊》、《IEEE服务计算汇刊》、《IEEE移动计算汇刊》、《IEEE网络科学与工程汇刊》、《IEEE信息取证与安全汇刊》、《IEEE无线通信杂志》、《IEEE物联网期刊》、《IEEE智能电网汇刊》、《Elsevier 计算机网络期刊》、《ZTE Communications》、Springer安全系统与网络书系、中国计算机学会网络汇刊、电子学报 (英文版)和网络及信息安全学报等的编委和副主编。任奎教授同时担任第八届教育部科学技术委员会委员、教育部高等学校教学指导委员会委员、ACM亚洲计算机与通信安全会议指导委员会委员、ACM中国安全分会主席，中共浙江省委网络安全和信息化委员会专家咨询委员会咨询专家、浙江省数字社会系统建设专家组召集专家以及浙江省海高会青年分会首任会长等社会职务。

Keynote: Multidimensional Countermeasure in Data Security

Abstract:随着《中华人民共和国数据安全法》在今年人大会议通过，并于2021年9月1日起施行，昭示着数据安全已在安全建设中成为不能回避且应切实落地的主题。数据安全的核心是流动性风险，核心难点包括但不限于：面对敏感数据的多样性，如何应用弱监督学习、主动学习和NER等技术解决数据不均衡下的高精准识别；面对快速膨胀的数据流动路径，如何在元数据缺乏和血缘关系高达数百层的数据链路中，应用图计算和图神经网络解决链路溯源加速和资产发现的难题；面对数据行为风险，如何从海量的行为数据中构建面向员工、设备、内容的风险画像，辅助异常事件定性和威胁证据链还原。本次演讲将介绍蚂蚁天堑实验室在敏感资产识别、数据链路刻画、流动性威胁分析和数据安全运营等方面的实战心得。

BIO:刘威歆，蚂蚁集团安全专家，北京邮电大学博士，清华大学博士后。加入蚂蚁前，曾担任绿盟创新中心首席研究员、安全大数据实验室负责人等职务。曾获北京市科技新星、世界互联网领先科技成果、网络安全创新产品（技术）二等奖等6项荣誉，主持和参与11项国家及省部级课题，参与建设的DDoS攻击溯源和团伙跟踪项目获得2020中国电子学会科技进步一等奖。作为主要起草人，参编威胁情报相关国家标准1项，该标准已经发布实施。擅长领域是攻击溯源分析、威胁情报建设和大数据量下的算法应用。目前是蚂蚁集团天堑实验室的算法一号位，主要负责对抗智能、数据安全和智能审计相关业务。

Title: Provable security of symmetric cryptography and some problems that it solves

Abstract:

BIO:

Title: Vulnerability Research on Open-source Software

Abstract:

BIO:

Title: Cryptography in the Post-Snowden Era: Attacks and Defenses

Abstract:

BIO:

Title: Android Custom Permissions Demystified

Abstract:

BIO:

Title: Exploiting and Securing AI from the Cyber Security View

Abstract:

BIO:

Title: Research on novel cryptanalytic methods for symmetric-key primitives

Abstract:

BIO:

Title: Mining Cross-layer Vulnerabilities in Mobile Software System

Abstract:

BIO:

Title: Attack and Defense Strategies: Toward Smart Mobile Devices

Abstract:

BIO:

Title: Efficient Implementation of Anonymou Credentials, and Study on Its Applications

Abstract:

BIO: