Sok: General Purpose Frameworks for Secure Multi-Party Computation

Total Page:16

File Type:pdf, Size:1020Kb

Sok: General Purpose Frameworks for Secure Multi-Party Computation SoK: General Purpose Compilers for Secure Multi-Party Computation Marcella Hastings, Brett Hemenway, Daniel Noble, and Steve Zdancewic University of Pennsylvania f mhast, fbrett, dgnoble, stevez g @cis.upenn.edu Abstract—Secure multi-party computation (MPC) allows [89], [136] and satellite collision detection [78], [79], a group of mutually distrustful parties to compute a joint [90]. function on their inputs without revealing any informa- Despite the demand for MPC technology, practical tion beyond the result of the computation. This type of computation is extremely powerful and has wide-ranging adoption has been limited, partly due to the efficiency applications in academia, industry, and government. Pro- of the underlying protocols. General-purpose MPC pro- tocols for secure computation have existed for decades, but tocols, capable of securely computing any function, have only recently have general-purpose compilers for executing been known to the cryptographic community for 30 years MPC on arbitrary functions been developed. These projects [33], [73], [131], [132]. Until recently such protocols rapidly improved the state of the art, and began to make MPC accessible to non-expert users. However, the field is were mainly of theoretical interest, and were considered changing so rapidly that it is difficult even for experts to too inefficient (from the standpoint of computation and keep track of the varied capabilities of modern frameworks. communication complexity) to be useful in practice. In this work, we survey general-purpose compilers To address efficiency concerns, cryptographers have for secure multi-party computation. These tools provide developed highly-optimized, special-purpose MPC pro- high-level abstractions to describe arbitrary functions and execute secure computation protocols. We consider tocols for a variety of use-cases. Unfortunately, this eleven systems: EMP-toolkit, Obliv-C, ObliVM, TinyGar- mode of operation does not foster widespread deploy- ble, SCALE-MAMBA (formerly SPDZ), Wysteria, Share- ment or adoption of MPC in the real world. Even if mind, PICCO, ABY, Frigate and CBMC-GC. We evaluate these custom-tailored MPC protocols are theoretically these systems on a range of criteria, including language ex- efficient enough for practical use, designing, analyzing pressibility, capabilities of the cryptographic back-end, and accessibility to developers. We advocate for improved doc- and implementing a custom-tailored protocol from the umentation of MPC frameworks, standardization within ground up for each application is not a scalable solution. the community, and make recommendations for future General-purpose MPC compilers, could drastically directions in compiler development. Installing and running reduce the burden of designing multiple custom proto- these systems can be challenging, and for each system, we also provide a complete virtual environment (Docker cols and could allow non-experts to quickly prototype container) with all the necessary dependencies to run the and deploy secure computations. Using compilers, the compiler and our example programs. engineering effort devoted to making general-purpose MPC protocols practical and secure can be amortized I. INTRODUCTION across all of the uses of such a system. Secure multi-party computation (MPC) provides a Many significant challenges arise when designing and mechanism by which a group of data-owners can com- building an MPC compiler. In general, implementing pute joint functions of their private data, where the any type of multi-round, distributed protocol robustly execution of the protocol reveals nothing more about and efficiently is a major engineering challenge, but the underlying data than what is revealed by the output the MPC compilers have additional requirements that alone. MPC can be viewed as a cryptographic method make them especially challenging to build correctly. for providing the functionality of a trusted party—who For efficiency, both the compiler and the cryptographic would accept private inputs, compute a function and back-end need to be highly optimized. For usability, the return the result to the stakeholders—without the need front-end compiler needs to be expressive, flexible, and for mutual trust. intuitive for non-experts, and should abstract away many Thanks to these strong security guarantees, MPC has of the complexities of the underlying MPC protocol, broad potential for practical applications, ranging from including circuit-level optimizations (e.g. implementing general computations of secure statistical analysis [23], floating-point operations as a Boolean circuit) and back- [24], [26], [57], [58], [59], [60], [100], to more domain- end protocol choice (e.g. selecting an optimal protocol specific uses like financial oversight [2], [22], [27], [63], for a particular computation). With today’s compilers, biomedical computations [38], [34], [80], [88], [86], optimizing performance often still requires a fair degree of knowledge and effort on the part of the user. Casual readers may wish to skim Section VI, which Fairplay [103] was the first publicly available MPC discusses each framework in greater depth, and focus on compiler. It translated code written in a high-level Secure the final discussion section, where we advocate for im- Function Definition Language (SFDL) into a garbled proved documentation and standardization and suggest circuit representation, which could then be (securely) future directions in compiler research. evaluated by two parties. Fairplay was subsequently Many of these frameworks are themselves research extended to allow for true multi-party computation in projects or works-in-progress: they have non-trivial build FairplayMP [15], using a modified version of the BMR dependencies and complicated work flows. Indeed, im- protocol [10]. It was followed shortly by VIFF [68], plementing our simple example programs in each sys- [50] and SEPIA [29], which used the same basic ar- tem required significant engineering effort: we estimate chitecture: they took programs written in fairly high- over 750 person-hours. To allow others to experiment level languages, converted them to a circuit format, and more easily with these systems, we have created an executed the circuit using a secure computation protocol. on-line Github repository1 with two artifacts: (1) a These early compilers showed that general-purpose set of Docker containers, each of which provides a MPC was achievable, and, although their performance development environment configured with the required rendered them unsuitable for most real-world applica- software infrastructure for each MPC framework, along tions, they launched what is now a very active field of with executable examples of our test cases, and (2) a wiki research in MPC compiler design and implementation. page that collects much of the evaluation presented here Thanks to these efforts, dramatic improvements in with additional documentation about each framework. secure computation algorithms coupled with a steady a) Related Work: Archer et al.’s survey [6] of se- increase in hardware performance have made MPC a cure computation tools across several paradigms, includ- viable solution to a large class of real-world problems. ing garbled circuit schemes, defines a maturity taxonomy Modern MPC protocol implementations are fast enough that aims to describe the practical readiness of several to securely evaluate complex functions on moderately- schemes. Shan et al.’s survey [121] outlines different large data sets, such as the numerous implementations threat models and computation techniques for securely of secure regression analyses with tens to hundreds outsourcing many specific types of computation. The of thousands of observations, and tens to hundreds of authors of Frigate [105] include a short survey of existing variables [24], [41], [67], [91], [108]. MPC frameworks, which focuses on correctness and The rush of activity in this field can be difficult covers a slightly older body of work. The SSC protocol to navigate: dozens of new compilers and supporting comparison tool [109], [110], [111] allows users to find frameworks encompass a wide variety of architectures published protocols matching certain security or pri- and features which influence their efficiency, usability vacy criteria, but this tool classifies theoretical protocols and suitability for different tasks. The goal of this rather than implementations and does not include proto- Systematization of Knowledge paper is to provide a cols developed in the past few years. The awesome-mpc guide to the powerful new breed of MPC compilers, and repository [119] provides an up-to-date list of compilers, is primarily aimed at four distinct types of readers. back-ends and special-purpose protocols, with a short 1) Developers looking to choose a compiler with description of each. To the best of our knowledge, these which to implement a specific secure computation previous works did not actually install and experiment 2) Theoretical cryptographers looking to understand with each of the systems they surveyed, but drew their state-of-the-art in practical, secure computation conclusions based on the descriptions of the systems 3) Compiler designers looking to understand the lim- in their published papers and documentation. Unfortu- itations of existing technology and identify new nately, we have found that the features, functionality research directions and syntax of the actual implementations do not always 4) Managers and policy-makers looking to under- match those
Recommended publications
  • MODELING and ANALYSIS of MOBILE TELEPHONY PROTOCOLS by Chunyu Tang a DISSERTATION Submitted to the Faculty of the Stevens Instit
    MODELING AND ANALYSIS OF MOBILE TELEPHONY PROTOCOLS by Chunyu Tang A DISSERTATION Submitted to the Faculty of the Stevens Institute of Technology in partial fulfillment of the requirements for the degree of DOCTOR OF PHILOSOPHY Chunyu Tang, Candidate ADVISORY COMMITTEE David A. Naumann, Chairman Date Yingying Chen Date Daniel Duchamp Date Susanne Wetzel Date STEVENS INSTITUTE OF TECHNOLOGY Castle Point on Hudson Hoboken, NJ 07030 2013 c 2013, Chunyu Tang. All rights reserved. iii MODELING AND ANALYSIS OF MOBILE TELEPHONY PROTOCOLS ABSTRACT The GSM (2G), UMTS (3G), and LTE (4G) mobile telephony protocols are all in active use, giving rise to a number of interoperation situations. This poses serious challenges in ensuring authentication and other security properties. Analyzing the security of all possible interoperation scenarios by hand is, at best, tedious under- taking. Model checking techniques provide an effective way to automatically find vulnerabilities in or to prove the security properties of security protocols. Although the specifications address the interoperation cases between GSM and UMTS and the switching and mapping of established security context between LTE and previous technologies, there is not a comprehensive specification of which are the possible interoperation cases. Nor is there comprehensive specification of the procedures to establish security context (authentication and short-term keys) in the various interoperation scenarios. We systematically enumerate the cases, classifying them as allowed, disallowed, or uncertain with rationale based on detailed analysis of the specifications. We identify the authentication and key agreement procedure for each of the possible cases. We formally model the pure GSM, UMTS, LTE authentication protocols, as well as all the interoperation scenarios; we analyze their security, in the symbolic model of cryptography, using the tool ProVerif.
    [Show full text]
  • Department of Computer Science
    i cl i ck ! MAGAZINE click MAGAZINE 2014, VOLUME II FIVE DECADES AS A DEPARTMENT. THOUSANDS OF REMARKABLE GRADUATES. 50COUNTLESS INNOVATIONS. Department of Computer Science click! Magazine is produced twice yearly for the friends of got your CS swag? CS @ ILLINOIS to showcase the innovations of our faculty and Commemorative 50-10 Anniversary students, the accomplishments of our alumni, and to inspire our t-shirts are available! partners and peers in the field of computer science. Department Head: Editorial Board: Rob A. Rutenbar Tom Moone Colin Robertson Associate Department Heads: Rob A. Rutenbar shop now! my.cs.illinois.edu/buy Gerald DeJong Michelle Wellens Jeff Erickson David Forsyth Writers: David Cunningham CS Alumni Advisory Board: Elizabeth Innes Alex R. Bratton (BS CE ’93) Mike Koon Ira R. Cohen (BS CS ’81) Rick Kubetz Vilas S. Dhar (BS CS ’04, BS LAS BioE ’04) Leanne Lucas William M. Dunn (BS CS ‘86, MS ‘87) Tom Moone Mary Jane Irwin (MS CS ’75, PhD ’77) Michelle Rice Jennifer A. Mozen (MS CS ’97) Colin Robertson Daniel L. Peterson (BS CS ’05) Laura Schmitt Peter L. Tannenwald (BS LAS Math & CS ’85) Michelle Wellens Jill C. Zmaczinsky (BS CS ’00) Design: Contact us: SURFACE 51 [email protected] 217-333-3426 Machines take me by surprise with great frequency. Alan Turing 2 CS @ ILLINOIS Department of Computer Science College of Engineering, College of Liberal Arts & Sciences University of Illinois at Urbana-Champaign shop now! my.cs.illinois.edu/buy click i MAGAZINE 2014, VOLUME II 2 Letter from the Head 4 ALUMNI NEWS 4 Alumni
    [Show full text]
  • Lipics-ISAAC-2020-42.Pdf (0.5
    Multiparty Selection Ke Chen Department of Computer Science, University of Wisconsin–Milwaukee, WI, USA [email protected] Adrian Dumitrescu Department of Computer Science, University of Wisconsin–Milwaukee, WI, USA [email protected] Abstract Given a sequence A of n numbers and an integer (target) parameter 1 ≤ i ≤ n, the (exact) selection problem is that of finding the i-th smallest element in A. An element is said to be (i, j)-mediocre if it is neither among the top i nor among the bottom j elements of S. The approximate selection problem is that of finding an (i, j)-mediocre element for some given i, j; as such, this variant allows the algorithm to return any element in a prescribed range. In the first part, we revisit the selection problem in the two-party model introduced by Andrew Yao (1979) and then extend our study of exact selection to the multiparty model. In the second part, we deduce some communication complexity benefits that arise in approximate selection. In particular, we present a deterministic protocol for finding an approximate median among k players. 2012 ACM Subject Classification Theory of computation Keywords and phrases approximate selection, mediocre element, comparison algorithm, i-th order statistic, tournaments, quantiles, communication complexity Digital Object Identifier 10.4230/LIPIcs.ISAAC.2020.42 1 Introduction Given a sequence A of n numbers and an integer (selection) parameter 1 ≤ i ≤ n, the selection problem asks to find the i-th smallest element in A. If the n elements are distinct, the i-th smallest is larger than i − 1 elements of A and smaller than the other n − i elements of A.
    [Show full text]
  • COT 5407:Introduction to Algorithms Author and Copyright: Giri Narasimhan Florida International University Lecture 1: August 28, 2007
    COT 5407:Introduction to Algorithms Author and Copyright: Giri Narasimhan Florida International University Lecture 1: August 28, 2007. 1 Introduction The field of algorithms is the bedrock on which all of computer science rests. Would you jump into a business project without understanding what is in store for you, without know- ing what business strategies are needed, without understanding the nature of the market, and without evaluating the competition and the availability of skilled available workforce? In the same way, you should not undertake writing a program without thinking out a strat- egy (algorithm), without theoretically evaluating its performance (algorithm analysis), and without knowing what resources you will need and you have available. While there are broad principles of algorithm design, one of the the best ways to learn how to be an expert at designing good algorithms is to do an extensive survey of “case studies”. It provides you with a storehouse of strategies that have been useful for solving other problems. When posed with a new problem, the first step is to “model” your problem appropriately and cast it as a problem (or a variant) that has been previously studied or that can be easily solved. Often the problem is rather complex. In such cases, it is necessary to use general problem-solving techniques that one usually employs in modular programming. This involves breaking down the problem into smaller and easier subproblems. For each subproblem, it helps to start with a skeleton solution which is then refined and elaborated upon in a stepwise manner. Once a strategy or algorithm has been designed, it is important to think about several issues: why is it correct? does is solve all instances of the problem? is it the best possible strategy given the resource limitations and constraints? if not, what are the limits or bounds on the amount of resources used? are improved solutions possible? 2 History of Algorithms It is important for you to know the giants of the field, and the shoulders on which we all stand in order to see far.
    [Show full text]
  • Bit Barrier: Secure Multiparty Computation with a Static Adversary
    Breaking the O(nm) Bit Barrier: Secure Multiparty Computation with a Static Adversary Varsha Dani Valerie King Mahnush Mohavedi University of New Mexico University of Victoria University of New Mexico Jared Saia University of New Mexico Abstract We describe scalable algorithms for secure multiparty computation (SMPC). We assume a synchronous message passing communication model, but unlike most related work, we do not assume the existence of a broadcast channel. Our main result holds for the case where there are n players, of which a 1=3 − fraction are controlled by an adversary, for any positive constant.p We describe a SMPC algorithm forp this model that requires each player to send ~ n+m ~ n+m O( n + n) messages and perform O( n + n) computations to compute any function f, where m is the size of a circuit to compute f. We also consider a model where all players are selfish but rational. In this model, we describe a Nash equilibrium protocol that solve SMPC ~ n+m ~ n+m and requires each player to send O( n ) messages and perform O( n ) computations. These results significantly improve over past results for SMPC which require each player to send a number of bits and perform a number of computations that is θ(nm). 1 Introduction In 1982, Andrew Yao posed a problem that has significantly impacted the weltanschauung of computer security research [22]. Two millionaires want to determine who is wealthiest; however, neither wants to reveal any additional information about their wealth. Can we design a protocol to allow both millionaires to determine who is wealthiest? This problem is an example of the celebrated secure multiparty computation (SMPC) problem.
    [Show full text]
  • Notices of the American Mathematical Society (ISSN 0002- Call for Nominations for AMS Exemplary Program Prize
    American Mathematical Society Notable textbooks from the AMS Graduate and undergraduate level publications suitable fo r use as textbooks and supplementary course reading. A Companion to Analysis A Second First and First Second Course in Analysis T. W. Korner, University of Cambridge, • '"l!.li43#i.JitJij England Basic Set Theory "This is a remarkable book. It provides deep A. Shen, Independent University of and invaluable insight in to many parts of Moscow, Moscow, Russia, and analysis, presented by an accompli shed N. K. Vereshchagin, Moscow State analyst. Korner covers all of the important Lomonosov University, Moscow, R ussia aspects of an advanced calculus course along with a discussion of other interesting topics." " ... the book is perfectly tailored to general -Professor Paul Sally, University of Chicago relativity .. There is also a fair number of good exercises." Graduate Studies in Mathematics, Volume 62; 2004; 590 pages; Hardcover; ISBN 0-8218-3447-9; -Professor Roman Smirnov, Dalhousie University List US$79; All AJviS members US$63; Student Mathematical Library, Volume 17; 2002; Order code GSM/62 116 pages; Sofi:cover; ISBN 0-82 18-2731-6; Li st US$22; All AlviS members US$18; Order code STML/17 • lili!.JUM4-1"4'1 Set Theory and Metric Spaces • ij;#i.Jit-iii Irving Kaplansky, Mathematical Analysis Sciences R esearch Institute, Berkeley, CA Second Edition "Kaplansky has a well -deserved reputation Elliott H . Lleb M ichael Loss Elliott H. Lieb, Princeton University, for his expository talents. The selection of Princeton, NJ, and Michael Loss, Georgia topics is excellent." I nstitute of Technology, Atlanta, GA -Professor Lance Small, UC San Diego AMS Chelsea Publishing, 1972; "I liked the book very much.
    [Show full text]
  • School of Computer Science
    MANCHESTER 1824 School of Computer Science Weekly Newsletter 20 February 2012 Contents News from Head of School News from HoS Royal Visit This Week Prince Andrew visited the School on Tuesday 14th February. Prince Andrew was School Events given a tour of the graphene laboratories by Andre Geim, and made a sample of graphene himself, which he viewed under the microscope. External Events Members of the graphene research team told the Prince about future Funding Opps applications of graphene, which is the world’s thinnest, strongest and most conductive material. Prize & Award Opps http://www.manchester.ac.uk/aboutus/news/display/?id=7977 Research Awards The visit in connection with the announcement of the new £45M graphene building: Staff News http://www.manchester.ac.uk/aboutus/news/display/?id=7930 Vacancies Turing Centenary Conference Andrei Voronkov has announced the Turing Centenary Conference, to be held in Links Manchester, June 22-25, 2012: http://www.turing100.manchester.ac.uk/ News Submissions Andrei has secured Ten Turing Award winners, a Templeton Award winner and Newsletter Archive Garry Kasparov as invited speakers: School Strategy Confirmed invited speakers: School Intranet - Fred Brooks (University of North Carolina) - Rodney Brooks (MIT) School Seminars - Vint Cerf (Google) ESNW Seminars - Ed Clarke (Carnegie Mellon University) NaCTeM Seminars - Jack Copeland (University of Canterbury, New Zealand) - George Francis Rayner Ellis (University of Cape Town) - David Ferrucci (IBM) - Tony Hoare (Microsoft Research) - Garry Kasparov (Kasparov Chess Foundation) - Don Knuth (Stanford University) - Yuri Matiyasevich (Institute of Mathematics, St. Petersburg) - Roger Penrose (Oxford) - Adi Shamir (Weizmann Institute of Science) - Michael Rabin (Harvard) - Leslie Valiant (Harvard) - Manuela M.
    [Show full text]
  • Lecture Notes in Computer Science 6223 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan Van Leeuwen
    Lecture Notes in Computer Science 6223 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University, UK Takeo Kanade Carnegie Mellon University, Pittsburgh, PA, USA Josef Kittler University of Surrey, Guildford, UK Jon M. Kleinberg Cornell University, Ithaca, NY, USA Alfred Kobsa University of California, Irvine, CA, USA Friedemann Mattern ETH Zurich, Switzerland John C. Mitchell Stanford University, CA, USA Moni Naor Weizmann Institute of Science, Rehovot, Israel Oscar Nierstrasz University of Bern, Switzerland C. Pandu Rangan Indian Institute of Technology, Madras, India Bernhard Steffen TU Dortmund University, Germany Madhu Sudan Microsoft Research, Cambridge, MA, USA Demetri Terzopoulos University of California, Los Angeles, CA, USA Doug Tygar University of California, Berkeley, CA, USA Gerhard Weikum Max-Planck Institute of Computer Science, Saarbruecken, Germany Tal Rabin (Ed.) Advances in Cryptology – CRYPTO 2010 30th Annual Cryptology Conference Santa Barbara, CA, USA, August 15-19, 2010 Proceedings 13 Volume Editor Tal Rabin IBM T.J.Watson Research Center Hawthorne, NY, USA E-mail: [email protected] Library of Congress Control Number: 2010931385 CR Subject Classification (1998): E.3, G.2.1, F.2.1-2, D.4.6, K.6.5, C.2, J.1 LNCS Sublibrary: SL 4 – Security and Cryptology ISSN 0302-9743 ISBN-10 3-642-14622-8 Springer Berlin Heidelberg New York ISBN-13 978-3-642-14622-0 Springer Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks.
    [Show full text]
  • COMP 516 Research Methods in Computer Science Research Methods in Computer Science Lecture 3: Who Is Who in Computer Science Research
    COMP 516 COMP 516 Research Methods in Computer Science Research Methods in Computer Science Lecture 3: Who is Who in Computer Science Research Dominik Wojtczak Dominik Wojtczak Department of Computer Science University of Liverpool Department of Computer Science University of Liverpool 1 / 24 2 / 24 Prizes and Awards Alan M. Turing (1912-1954) Scientific achievement is often recognised by prizes and awards Conferences often give a best paper award, sometimes also a best “The father of modern computer science” student paper award In 1936 introduced Turing machines, as a thought Example: experiment about limits of mechanical computation ICALP Best Paper Prize (Track A, B, C) (Church-Turing thesis) For the best paper, as judged by the program committee Gives rise to the concept of Turing completeness and Professional organisations also give awards based on varying Turing reducibility criteria In 1939/40, Turing designed an electromechanical machine which Example: helped to break the german Enigma code British Computer Society Roger Needham Award His main contribution was an cryptanalytic machine which used Made annually for a distinguished research contribution in computer logic-based techniques science by a UK based researcher within ten years of their PhD In the 1950 paper ‘Computing machinery and intelligence’ Turing Arguably, the most prestigious award in Computer Science is the introduced an experiment, now called the Turing test A. M. Turing Award 2012 is the Alan Turing year! 3 / 24 4 / 24 Turing Award Turing Award Winners What contribution have the following people made? The A. M. Turing Award is given annually by the Association for Who among them has received the Turing Award? Computing Machinery to an individual selected for contributions of a technical nature made Frances E.
    [Show full text]
  • Communications of the Acm
    COMMUNICATIONS CACM.ACM.ORG OF THEACM 10/2015 VOL.58 NO.10 Discovering Genes Involved in Disease and the Mystery of Missing Heritability Crash Consistency Concerns Rise about AI Seeking Anonymity in an Internet Panopticon What Can Be Done about Gender Diversity in Computing? A Lot! Association for Computing Machinery Previous A.M. Turing Award Recipients 1966 A.J. Perlis 1967 Maurice Wilkes 1968 R.W. Hamming 1969 Marvin Minsky 1970 J.H. Wilkinson 1971 John McCarthy 1972 E.W. Dijkstra 1973 Charles Bachman 1974 Donald Knuth 1975 Allen Newell 1975 Herbert Simon 1976 Michael Rabin 1976 Dana Scott 1977 John Backus ACM A.M. TURING AWARD 1978 Robert Floyd 1979 Kenneth Iverson 1980 C.A.R Hoare NOMINATIONS SOLICITED 1981 Edgar Codd 1982 Stephen Cook Nominations are invited for the 2015 ACM A.M. Turing Award. 1983 Ken Thompson 1983 Dennis Ritchie This is ACM’s oldest and most prestigious award and is presented 1984 Niklaus Wirth annually for major contributions of lasting importance to computing. 1985 Richard Karp 1986 John Hopcroft Although the long-term influences of the nominee’s work are taken 1986 Robert Tarjan into consideration, there should be a particular outstanding and 1987 John Cocke 1988 Ivan Sutherland trendsetting technical achievement that constitutes the principal 1989 William Kahan claim to the award. The recipient presents an address at an ACM event 1990 Fernando Corbató 1991 Robin Milner that will be published in an ACM journal. The award is accompanied 1992 Butler Lampson by a prize of $1,000,000. Financial support for the award is provided 1993 Juris Hartmanis 1993 Richard Stearns by Google Inc.
    [Show full text]
  • Speakers and Young Scientists Directory
    SINGAPORE 2016 17 - 22 JANUARY 2016 SPEAKERS AND YOUNG SCIENTISTS DIRECTORY ADVANCING SCIENCE, CREATING TECHNOLOGIES FOR A BETTER WORLD TABLE OF CONTENTS Speakers 3 Young Scientists Index 48 Young Scientists Directory 54 International Advisory Committee 145 SPEAKERS SPEAKERS SPEAKERS NOBEL PRIZE FIELDS MEDAL Prof Ada Yonath Prof Arieh Warshel Prof Cédric Villani Prof Stephen Smale Chemistry (2009) Chemistry (2013) Fields Medal (2010) Fields Medal (1966) Prof Ei-ichi Negishi Sir Anthony Leggett MILLENIUM TECHNOLOGY PRIZE Chemistry (2010) Physics (2003) Prof Michael Grätzel Prof Stuart Parkin Prof Carlo Rubbia Prof David Gross Millennium Technoly Prize (2010) Millennium Technology Award (2014) Physics (1984) Physics (2004) TURING AWARD Prof Gerard ’t Hooft Prof Jerome Friedman Physics (1999) Physics (1990) Prof Andrew Yao Dr Leslie Lamport Turing Award (2000) Turing Award (2013) Prof Serge Haroche Prof Harald zur Hausen Physics (2012) Physiology or Medicine (2008) Prof Leslie Valiant Prof Richard Karp Turing Award (2010) Turing Award (1985) Prof John Robin Warren Sir Richard Roberts Physiology or Medicine (2005) Physiology or Medicine (1993) Sir Tim Hunt Physiology or Medicine (2001) 4 5 SPEAKERS SPEAKERS When Professor Ada Yonath won the 2009 their ability to withstand high temperatures. At the time, others criticised Nobel Prize in Chemistry for her discovery of her decision to work with the little known bacteria, but the discovery the structure of ribosomes, she not only raised of heat-stable enzymes which revolutionised molecular biology soon public interest in science but also inspired a silenced them. By the early 1980s, Prof Yonath was able to create the first greater appreciation for a head of curly hair.
    [Show full text]
  • Message Text
    Keynotes OSTP Future Advanced Computing Ecosystem (FACE) Overview Prof. Manish Parashar Rutgers, OSTP Bio: Manish Parashar is currently serving as Assistant Director for Strategic Computing at the White House Office of Science and Technology Policy (OSTP), where he is leading strategic planning for the Nation's Future Advanced Computing Ecosystem. He is also on an IPA to the US National Science Foundation (NSF) since February 2018 where he is the Office Director of the Office of Advanced Cyberinfrastructure (OAC). At NSF he oversees investments in the exploration development, acquisition and provisioning of state-of-the-art national cyberinfrastructure resources, tools, services and expertise essential to the advancement and transformation of all of science and engineering. He is also leading the development of NSF’s strategic vision for a National Cyberinfrastructure Ecosystem for 21st Century Science and Engineering that responds to rapidly changing application and technology landscapes, as well as blueprints for NSF’s key cyberinfrastructure investments over the next decade. He also serves as the NSF representative for the US National Strategic Computing activities led by the White House Office of Science and Technology Policy (OSTP), and served as co-chair of the Fast Track Action Committee (FTAC) that developed the report titled National Strategic Computing Update: Pioneering the Future of Computing. xv What to Expect for Near-term Quantum Computing Prof. Man-Hong Yung Huawei Bio: Dr. Man-Hong Yung is an associate professor of physics at the Southern University of Science and Technology (SUSTech) located in Shenzhen, China. Currently, he is on sabbatical leave for joining Huawei Technologies as the Chief Scientist for quantum algorithms and software.
    [Show full text]