Mike Rosulek, assistant professor of computer science in the College of Engineering at Oregon State University, received a Visa Faculty Research Award to advance methods of customer privacy and fraud detection.
“We’ve known for several decades that cryptography can protect not just data at rest, but also data in use, at least in principle. Finally, in the last several years these cryptographic ideas have been improved to become truly practical,” Rosulek said.
Rosulek and his colleague at Visa, Payman Mohassel, will be working to improve a tool from cryptology called private set intersection, which allows two parties to find items in common on two separate lists without revealing any other information from the lists.
Their research will help make complicated queries faster to process. For example, a company may want to know how many customers they have in common with another company without revealing who those customers are.
The funds will support one graduate student for a year who will be helping to develop new prototypes that would make advanced cryptography practical for companies.
“This award demonstrates that industry leaders see the potential of advanced cryptography to protect data during use and solve real-world privacy challenges,” Rosulek said.
Mike Rosulek, assistant professor of computer science, was selected for a Google Research Award for a grant to advance methods of customer privacy. The award will allow Rosulek to hire a graduate student to work on the project, and give them the opportunity to collaborate with Google researchers and engineers.
“I have lots of ideas in this space, and it will allow me and a student to dive in head first exploring them,” Rosulek says.
Companies are looking for inexpensive ways to share information with each other without violating the privacy of their customers. For example, two companies may want to find out which customers they have in common. A tool from cryptology called private set intersection allows two parties to find items in common on two separate lists without revealing anything else from those lists.
One part of Rosulek’s research seeks to strengthen the security of private set intersection tools while keeping the costs reasonable so that companies are more likely to adopt good practices for keeping their customer’s information secure.
Another part of the project will work on flexible (or “fuzzy”) matching of items on lists such as addresses. Names and street addresses may have differences in spelling, so looking for exact matches between two sets can be too restrictive. Rosulek’s research will seek to modify current techniques to allow for “close enough” matches.
“I’m excited to see that Google is interested in these advanced cryptographic tools. I’m excited that the techniques can be used to protect sensitive user information. And I’m excited about the new technical and mathematical challenges on the roadmap,” Rosulek says.
Mike Rosulek, assistant professor of computer science, brings the area of cryptography to the School of Electrical Engineering and Computer Science.
Computer science grabbed Rosulek’s imagination early on, and at the age of 7 years he was already writing a UFO adventure game. He had the advantage of growing up in a technical household. In fact, his family home was connected to the internet before there was a World Wide Web.
It is perhaps surprising considering he lived in the small town of Fredericksburg, Iowa (population 925) “the dairy capital of Iowa, according to the sign,” Rosulek said.
But computers were a hobby for his father who, although he worked as a minister, was the de facto tech support for the whole town and eventually became a network administrator for the local community college.
Before starting a computer science degree at Iowa State University, Rosulek was essentially self-taught and remembers one of his big Christmas presents in 8th grade was the newest version of Visual Basic.
After graduation, Rosulek continued on to graduate school in computer science at University of Illinois, but by his second year he hadn’t yet found a line of research that interested him. Indeed, he had filled out the paperwork to leave graduate school when he was convinced to stay by a professor who thought he might be interested in the work of a newly hired faculty member who studied cryptography.
“It worked out really well,” Rosulek said. “Cryptography is full of amazing things … it was mind blowing to me. I wanted to know how it worked.”
He describes cryptography as taking problems that are really hard for computers to solve and using them to create robust security systems.
“It’s like making lemonade from lemons,” he said. “The lemons are that we don’t have efficient ways to solve these problems, and the lemonade is that we can turn it around so that if the bad guy wants to break our system he has to solve one of these really hard problems.”
Currently, he is working on secure computation which is the idea that you can make calculations on sensitive data without actually looking at the data. One application could be a research study across several hospitals that cannot share patient data but can submit encrypted data to a secure common location where it is analyzed. Although he has been working mostly at the theory level, Rosulek said he is moving toward applied uses for his work.
“This research has to get out into the real world, because it’s so important and we know that people out there are will have amazing uses for secure computation. It’s just that right now it is computationally expensive. It takes a long time to perform these operations securely, so it’s not yet practical,” he said.
Rosulek started his career at University of Montana and arrived at Oregon State in 2013. As the first member of the security group in the School of Electrical Engineering and Computer Science, Rosulek discovered the students were “chomping at the bit” to have opportunities in the area of security. Before even arriving on campus he received emails from students about security courses and clubs.
“I’ve found the students here to be really sharp. They were able to take any hard problem I could throw at them and eat it up, so I was very pleased. I get to teach right in my sweet spot, so I find it easy to get excited about the material and students get excited too, so everyone has fun,” he said.
Although Rosulek’s two young girls keep him busy enough to not have much time for hobbies, he enjoys creative outlets like playing guitar, singing and photography. And although he likes being able to ride his bike to work year round in Corvallis, he misses snow which was the main subject of his minimalist landscape photography — stark snow scenes with dark trees set against them.
“The work that I do is often proving that something is impossible, but I also like creating something more tangible and I think that’s why I like the artistic outlets of music and photography,” Rosulek said.