BlindBox

“Only the equality part that I told you about can support already watermarks, checking if exfiltrated documents contain watermarks, and parental filtering, and a bunch of the IDS rules.”

“Our system blind box is the first to show that this could be possible, and is the first system that enables DPI middle boxes to inspect traffic without seeing the traffic.”

“In terms of the transmission time, we increase it so page load time would become 15% to a hundred percent slower.”

“So the detection of the middle box is competitive to Snort.”

“And third is that actually it's fast. It can run at network rates, because it only uses AES, and we have AES instructions in hardware.”

“So as part of Blindbox, our first contribution was to construct such a scheme. A scheme that is as secure as randomized schemes, and as fast as deterministic schemes.”

“The middle box learns only if a malicious string matches at some location, but it doesn't learn anything else about the other locations.”

“So for this, we use really cool primitive from the crypto community, namely secure two-party computation, which enables the middle box and the user during the SSL handshake to produce this encryption scheme to get this encryption encrypted value together witho…”

“So I'm going to tell you about some very recent work on Blindbox, which enables us to inspect traffic that remains encrypted and protect the privacy of the users.”