Language-based Techniques for Practical and Trustworthy Secure Multi-party Computations

Secure Multi-party Computation (MPC) enables a set of parties to collaboratively compute, using cryptographic protocols, a function over their private data in a way that the participants do not see each other's data, they only see the final output. Typical MPC examples include statistical computations over joint private data, private set intersection, and auctions. While these applications are examples of monolithic MPC, richer MPC applications move between "normal" (i.e., per-party local) and "secure" (i.e., joint, multi-party secure) modes repeatedly, resulting overall in mixed-mode computations. For example, we might use MPC to implement the role of the dealer in a game of mental poker -- the game will be divided into rounds of local decision-making (e.g. bidding) and joint interaction (e.g. dealing). Mixed-mode computations are also used to improve performance over monolithic secure computations. Starting with the Fairplay project, several MPC frameworks have been proposed in the last decade to help programmers write MPC applications in a high-level language, while the toolchain manages the low-level details. However, these frameworks are either not expressive enough to allow writing mixed-mode applications or lack formal specification, and reasoning capabilities, thereby diminishing the parties' trust in such tools, and the programs written using them. Furthermore, none of the frameworks provides a verified toolchain to run the MPC programs, leaving the potential of security holes that can compromise the privacy of parties' data. This dissertation presents language-based techniques to make MPC more practical and trustworthy. First, it presents the design and implementation of a new MPC Domain Specific Language, called Wysteria, for writing rich mixed-mode MPC applications. Wysteria provides several benefits over previous languages, including a conceptual single thread of control, generic support for more than two parties, high-level abstractions for secret shares, and a fully formalized type system and operational semantics. Using Wysteria, we have implemented several MPC applications, including, for the first time, a card dealing application. The dissertation next presents Wys*, an embedding of Wysteria in F*, a full-featured verification oriented programming language. Wys* improves on Wysteria along three lines: (a) It enables programmers to formally verify the correctness and security properties of their programs. As far as we know, Wys* is the first language to provide verification capabilities for MPC programs. (b) It provides a partially verified toolchain to run MPC programs, and finally (c) It enables the MPC programs to use, with no extra effort, standard language constructs from the host language F*, thereby making it more usable and scalable. Finally, the dissertation develops static analyses that help optimize monolithic MPC programs into mixed-mode MPC programs, while providing similar privacy guarantees as the monolithic versions.

Between Nation and State: Albanian Associations from Ottoman Origins to a Communist Party, 1880 - 1945

This dissertation addresses the broader antecedents of the Communist Party of Albania (CPA) as one of a number of associations whose experience was central to Albanian political history. This long experience dates back to the informal national associations formed in the Ottoman Empire of the late nineteenth century. The dissertation examines the role of these associations which, pursuing language rights and political representation through imperial state reforms, set a pattern that struggled to connect nation and state, rather than asserting the territorial demands for a nation-state familiar across the region. Starting out in the Ottoman Empire, but then maturing in the Albanian diaspora in Romania, Bulgaria, Egypt and the United States, this dissertation shows politically significant processes of longer-term adaptation that created informal associations as institutional structures able to channel collective action. It then traces the reframing of these patterns through their destruction in the Balkan Wars and the First World War to the emergence of communist associations in the interwar period and beyond. This dissertation is a sustained study that traces long-term Ottoman imperial political legacies in the Albanian successor state. The story of the associations, based on hitherto unexamined archival documents, shows that the Albanians possessed a far greater capacity for political mobilization that previously acknowledged by historians. Moreover, the dissertation successfully challenges the conventional wisdom that portrays the Albanians as irreparably divided along sectarian and regional faultlines. It finds that Albanian national activism was civic in character rather than ethnic as elsewhere in the Balkans. The Albanians fought to remain within a multinational framework because this afforded them political security, social advancement and potential economic growth. In the late Ottoman period, this political objective was manifested in the acceptance of the supranational imperial order whereas during the Second World War, in the aspiration to become members of the Comintern internationalist movement. Another important find, is the newly-discovered evidence concerning the founding of the CPA and its wartime conduct as an organization created and led by the Albanians themselves, albeit with Yugoslav ideological assistance under the transnational umbrella of the Comintern.

The Role of Attachment in a Social Cognitive Model of Social Domain Satisfaction in College Students

The study examined a modified social cognitive model of domain satisfaction (Lent, 2004). In addition to social cognitive variables and trait positive affect, the model included two aspects of adult attachment, attachment anxiety and avoidance. The study extended recent research on well-being and satisfaction in academic, work, and social domains. The adjusted model was tested in a sample of 454 college students, in order to determine the role of adult attachment variables in explaining social satisfaction, above and beyond the direct and indirect effects of trait positive affect. Confirmatory factor analysis found support for 8 correlated factors in the modified model: social domain satisfaction, positive affect, attachment avoidance, attachment anxiety, social support, social self-efficacy, social outcome expectations, and social goal progress. Three alternative structural models were tested to account for the ways in which attachment anxiety and attachment avoidance might relate to social satisfaction. Results of model testing provided support for a model in which attachment avoidance produced only an indirect path to social satisfaction via self-efficacy and social support. Positive affect, avoidance, social support, social self-efficacy, and goal progress each produced significant direct or indirect paths to social domain satisfaction, though attachment anxiety and social outcome expectations did not contribute to the predictive model. Implications of the findings regarding the modified social cognitive model of social domain satisfaction were discussed.

ATTACHMENT, GROWTH AND PERSISTENCE OF CRONOBACTER ON GRANULAR ACTIVATED CARBON FILTERS

Several Cronobacter outbreaks have implicated contaminated drinking water. This study assessed the impact of granular activated carbon (GAC) on the microbial quality of the water produced. A simulated water filter system was installed by filling plastic columns with sterile GAC, followed by sterile water with a dilute nutrient flowing through the column at a steady rate. Carbon columns were inoculated with Cronobacter on the surface, and the effluent monitored for Cronobacter levels. During a second phase, commercial faucet filters were distributed to households for 4-month use. Used filters were backwashed with sterile peptone water, and analyzed for Cronobacter, total aerobic plate count, coliform bacteria and Enterobacteriaceae. Cronobacter colonized the simulated GAC and grew when provided minimal levels of nutrients. Backwashed used filters used in home settings yielded presumptive Escherichia coli, Pseudomonas and other waterborne bacteria. Presumptive Cronobacter strains were identified as negative through biochemical and genetic test.

The Influence of Place Attachment, Aspirations, and Rapidly Changing Environments on Resettlement Decisions

Resettlement associated with development projects results in a variety of negative impacts. This dissertation uses the resettlement context to frame the dynamic relationships formed between peoples and places experiencing development. Two case studies contribute: (a) the border zone of Mozambique’s Limpopo National Park where residents contend with changes to land access and use; and (b) Bairro Chipanga in Moatize, Mozambique where a resettled population struggles to form place attachment and transform the post-resettlement site into a “good” place. Through analysis of data collected at these sites between 2009 and 2015, this dissertation investigates how changing environments impact person-place relationships before and after resettlement occurs. Changing environments create conditions leading to disemplacement—feeling like one no longer belongs—that reduces the environment’s ability to foster place attachment. Research findings indicate that responses taken by individuals living in the changing environment depend heavily upon whether resettlement has already occurred. In a pre-resettlement context, residents adjust their daily lives to diminish the effects of a changing environment and re-create the conditions to which they initially formed an attachment. They accept impoverishing conditions, including a narrowing of the spaces in which they live their daily lives, because it is preferred to the anxiety that accompanies being forced to resettle. In a post-resettlement context, resettlement disrupts the formation of place attachment and resettled peoples become a placeless population. When the resettlement has not resulted in anticipated outcomes, the aspiration for social justice—seeking conditions residents had reason to expect—negatively influences residents’ perspectives about the place. The post-resettlement site becomes a bad place with a future unchanged from the present. At best, this results in a population in which more members are willing to move away from the post-resettlement site, and, at worse, complete disengagement of other members from trying to improve the community. Resettlement thus has the potential to launch a cycle of movement- displacement-movement that prevents an entire generation from establishing place attachment and realizing its benefits. At the very least, resettlement impedes the formation of place attachment to new places. Thus, this dissertation draws attention to the unseen and uncompensated losses of resettlement.