My research focuses on the secure management of large-scale data. This includes: evaluating threats to privacy in published data; devising anonymization schemes for the safe publication of social networks, network traces, and audit logs; designing database management systems to implement security policies; and theoretically analyzing information disclosure. My current research efforts are primarily focused on the following projects:

Private Dissemination and Analysis of Data

The goal of this work is to understand how accurately aggregate properties about a data set can be studied while preserving the privacy of individual participants. Our recent work focuses on complex graph-structured data and trace data. Please see the following project pages for details, publications, and code releases:

Privacy, Provenance, and Data Retention

The goal of this work is to achieve the benefits of preserving history -- accountability through the ability to audit the past -- while avoiding threats to privacy posed by preserved data. Our work has included investigations of database forensics and models for the protection of audit histories. Please see the following project page for details and publications: