SFB 1223:  Methods and Tools for Understanding and Controlling Privacy

• Subject Area: Computer Science, Systems and Electrical Engineering
• Term: from 2016 to 2019
• Project identifier: Deutsche Forschungsgemeinschaft (DFG) - Project number 272573906

The Internet has become a global multimedia platform in which billions of users increasingly conduct sizable parts of their lives. In this context, online privacy of end-users is a largely unsolved problem. The wide circulation, easy accessibility and permanent nature of online data incurs risks ranging from public embarrassment to disadvantages when applying for jobs or insurance. New business models have emerged, tracking and monetizing personal information in an unprecedented manner. Legislators have started to respond by tightening privacy regulations, but we arguably lack the technology to fully comply with such regulations, and users lack support for making informed privacy choices. Establishing an overarching scientific foundation for providing online privacy is a long-term endeavor, requiring a fundamental research effort broadly covering two central research areas: Understanding Privacy, i.e. how to identify privacy-sensitive information in the Internet and assess the detrimental privacy consequences; and Controlling Privacy, i.e.. how to enforce user privacy demands given the dynamics of present-day digital habitats and emerging technologies. The CRC will make conceptual and tangible contributions addressing these questions, including, for example, image analysis methods that assess the potential privacy threat of public visual data, techniques protecting privacy in the presence of sophisticated mobile sensing and recording devices, and solutions preserving a user¿s anonymity in online interactions without inhibiting their functionality. Three task forces will facilitate joint research on cross-cutting themes: a comprehensive framework for data models as a basis for the interaction between different kinds of privacy analysis and enforcement; the interplay of different privacy notions; and a methodological framework to foster the usability of our solutions.Achieving our goals goes far beyond traditional security and privacy research. It requires to combinetop-down research approaches, necessary to understand privacy in an open world and on existing infrastructures; with bottom-up research approaches that are necessary to control privacy and completely reshape infrastructures in order to provide firm guarantees. It requires to tightly integrate the expertise from, and drive the long-term collaboration of, a wide range of computer science subareas ¿ including, e.g., information systems, computer vision, and social networks analysis ¿ with classical security & privacy research. The participating institutions are in a unique position to tackle this challenge. On the long run, we see a great impact on our research community: a paradigm shift towards a comprehensive, holistic approach that surmounts existing barriers between traditional privacy research and adjacent areas.

• DFG Programme: Collaborative Research Centres
• International Connection: France, Luxembourg

Completed projects

• A01 - Personal Information for Privacy Awareness (Project Heads Dittrich, Jens ;  Weikum, Gerhard )
• A02 - Privacy Implications of Visual Data Dissemination (Project Heads Fritz, Mario ;  Schiele, Bernt )
• A03 - Analysis of Software Privacy Leakage (Project Heads Briand, Lionel ;  Zeller, Ph.D., Andreas )
• A04 - Privacy Threats in Social Networks (Project Heads Gomez-Rodriguez, Ph.D., Manuel ;  Gummadi, Ph.D., Krishna )
• A05 - Semantic and Statistical Linkability (Project Heads Backes, Michael ;  Weikum, Gerhard )
• A07 - Understandable Privacy Specification (Project Heads Hoffmann, Jörg ;  Krüger, Antonio )
• B01 - Privacy Enforcement for Third-Party Software (Project Heads Finkbeiner, Bernd ;  Hammer, Christian )
• B02 - Programming Principles and Abstractions for Privacy (Project Heads Garg, Ph.D., Deepak ;  Hammer, Christian )
• B03 - Computationally Sound Reasoning about Privacy Properties (Project Heads Backes, Michael ;  Cortier, Véronique )
• B04 - Privacy-Preserving Cloud Storage (Project Heads Backes, Michael ;  Maffei, Ph.D., Matteo ;  Schröder, Dominique )
• B05 - Anonymous and Censorship-Resistant Communication (Project Heads Maffei, Ph.D., Matteo ;  Rossow, Christian )
• B06 - Privacy-Friendly Data Analytics (Project Heads Francis, Ph.D., Paul ;  Maffei, Ph.D., Matteo )
• B07 - Privacy-Preserving Digital Capture (Project Heads Druschel, Ph.D., Peter ;  Schiele, Bernt )
• INF - Information Infrastructure (Project Heads Dittrich, Jens ;  Hoffmann, Jörg )
• MGK - Integrated Research Training Group (Project Head Zeller, Ph.D., Andreas )
• Z - Central Administration (Project Head Backes, Michael )

• Applicant Institution: Universität des Saarlandes
• Participating Institution: Deutsches Forschungszentrum für Künstliche Intelligenz GmbH (DFKI); Université de Lorraine; LORIA - Laboratoire lorrain de recherche en ; informatique et ses applications (UMR 7503); Max-Planck-Institut für Informatik; Max-Planck-Institut für Softwaresysteme
• Participating University: Université du Luxembourg
• Spokesperson: Professor Dr. Michael Backes