{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T10:20:25Z","timestamp":1776334825968,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":64,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,10,23]],"date-time":"2023-10-23T00:00:00Z","timestamp":1698019200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"NSF","award":["2045170"],"award-info":[{"award-number":["2045170"]}]},{"name":"NSF GRFP","award":["2018253025"],"award-info":[{"award-number":["2018253025"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,10,23]]},"DOI":"10.1145\/3600006.3613146","type":"proceedings-article","created":{"date-parts":[[2023,10,3]],"date-time":"2023-10-03T14:44:17Z","timestamp":1696344257000},"page":"434-450","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Edna: Disguising and Revealing User Data in Web Applications"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6157-1980","authenticated-orcid":false,"given":"Lillian","family":"Tsai","sequence":"first","affiliation":[{"name":"CSAIL, MIT, Cambridge, Massachusetts, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-8815-9928","authenticated-orcid":false,"given":"Hannah","family":"Gross","sequence":"additional","affiliation":[{"name":"Brown University, Providence, Rhode Island, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2027-0035","authenticated-orcid":false,"given":"Eddie","family":"Kohler","sequence":"additional","affiliation":[{"name":"Harvard University, Cambridge, Massachusetts, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7098-586X","authenticated-orcid":false,"given":"Frans","family":"Kaashoek","sequence":"additional","affiliation":[{"name":"CSAIL, MIT, Cambridge, Massachusetts, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5066-6332","authenticated-orcid":false,"given":"Malte","family":"Schwarzkopf","sequence":"additional","affiliation":[{"name":"Brown University, Providence, Rhode Island, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,10,23]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"181","volume-title":"Proceedings of the USENIX Annual Technical Conference (ATC)","author":"Ali Muneeb","year":"2016","unstructured":"Muneeb Ali , Jude Nelson , Ryan Shea , and Michael J. Freedman . \"Blockstack: A Global Naming and Storage System Secured by Blockchains \". In: Proceedings of the USENIX Annual Technical Conference (ATC) . Denver, Colorado, USA , June 2016 , pages 181 -- 194 . Muneeb Ali, Jude Nelson, Ryan Shea, and Michael J. Freedman. \"Blockstack: A Global Naming and Storage System Secured by Blockchains\". In: Proceedings of the USENIX Annual Technical Conference (ATC). Denver, Colorado, USA, June 2016, pages 181--194."},{"key":"e_1_3_2_1_2_1","volume-title":"Apple Platform Security","year":"2023","unstructured":"Apple. Apple Platform Security . Apr. 2023 . url: https:\/\/help.apple.com\/pdf\/security\/en_US\/apple-platform-security-guide.pdf (visited on 05\/2022). Apple. Apple Platform Security. Apr. 2023. url: https:\/\/help.apple.com\/pdf\/security\/en_US\/apple-platform-security-guide.pdf (visited on 05\/2022)."},{"key":"e_1_3_2_1_3_1","volume-title":"Celebrities are starting to leave Twitter. Here's a running list","author":"Arkin Daniel","year":"2022","unstructured":"Daniel Arkin . Celebrities are starting to leave Twitter. Here's a running list . Oct. 31, 2022 . url: https:\/\/www.nbcnews.com\/pop-culture\/celebrity\/twitter-celebrities-leaving-elon-musk-rcna54831 (visited on 04\/13\/2023). Daniel Arkin. Celebrities are starting to leave Twitter. Here's a running list. Oct. 31, 2022. url: https:\/\/www.nbcnews.com\/pop-culture\/celebrity\/twitter-celebrities-leaving-elon-musk-rcna54831 (visited on 04\/13\/2023)."},{"key":"e_1_3_2_1_4_1","volume-title":"Nov. 23, 2022. url: https:\/\/economictimes.indiatimes.com\/news\/how-to\/thinking-of-quitting-twitter-heres-the-right-way-to-do-it\/articleshow\/95696874","author":"Augus Daniel","year":"2023","unstructured":"Daniel Augus . Thinking of quitting Twitter? Here's the right way to do it . Nov. 23, 2022. url: https:\/\/economictimes.indiatimes.com\/news\/how-to\/thinking-of-quitting-twitter-heres-the-right-way-to-do-it\/articleshow\/95696874 .cms (visited on 07\/01\/ 2023 ). Daniel Augus. Thinking of quitting Twitter? Here's the right way to do it. Nov. 23, 2022. url: https:\/\/economictimes.indiatimes.com\/news\/how-to\/thinking-of-quitting-twitter-heres-the-right-way-to-do-it\/articleshow\/95696874.cms (visited on 07\/01\/2023)."},{"key":"e_1_3_2_1_5_1","first-page":"566","volume-title":"Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT). Edited by Colin Boyd.","author":"Bellare Mihir","year":"2001","unstructured":"Mihir Bellare , Alexandra Boldyreva , Anand Desai , and David Pointcheval . \" Key-Privacy in Public-Key Encryption\". In: Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT). Edited by Colin Boyd. Nov. 2001 , pages 566 -- 582 . Mihir Bellare, Alexandra Boldyreva, Anand Desai, and David Pointcheval. \"Key-Privacy in Public-Key Encryption\". In: Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT). Edited by Colin Boyd. Nov. 2001, pages 566--582."},{"key":"e_1_3_2_1_6_1","volume-title":"Oracle Technical White Paper","author":"Browder Kristy","year":"2002","unstructured":"Kristy Browder and Mary Ann Davidson . \" The Virtual Private Database in Oracle9iR2\". In: Oracle Technical White Paper , Oracle Corporation 500.280 ( 2002 ). Kristy Browder and Mary Ann Davidson. \"The Virtual Private Database in Oracle9iR2\". In: Oracle Technical White Paper, Oracle Corporation 500.280 (2002)."},{"key":"e_1_3_2_1_7_1","first-page":"387","volume-title":"Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI).","author":"Burkhalter Lukas","year":"2021","unstructured":"Lukas Burkhalter , Nicolas K\u00fcchler , Alexander Viand , Hossein Shafagh , and Anwar Hithnawi . \"Zeph : Cryptographic Enforcement of End-to-End Data Privacy \". In: Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI). July 2021 , pages 387 -- 404 . Lukas Burkhalter, Nicolas K\u00fcchler, Alexander Viand, Hossein Shafagh, and Anwar Hithnawi. \"Zeph: Cryptographic Enforcement of End-to-End Data Privacy\". In: Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI). July 2021, pages 387--404."},{"key":"e_1_3_2_1_8_1","first-page":"2018","author":"Legislature California","year":"2018","unstructured":"California Legislature . The California Consumer Privacy Act of 2018 . June 2018 . url: https:\/\/leginfo.legislature.ca.gov\/faces\/billTextClient.xhtml?bill_id=201720180AB375. California Legislature. The California Consumer Privacy Act of 2018. June 2018. url: https:\/\/leginfo.legislature.ca.gov\/faces\/billTextClient.xhtml?bill_id=201720180AB375.","journal-title":"The California Consumer Privacy Act of"},{"key":"e_1_3_2_1_9_1","volume-title":"World Password Day: How to Improve Your Passwords","author":"Caruthers Michelle","year":"2023","unstructured":"Michelle Caruthers . World Password Day: How to Improve Your Passwords . Apr. 2023 . url: https:\/\/blog.dashlane.com\/world-password-day\/ (visited on 05\/11\/2018). Michelle Caruthers. World Password Day: How to Improve Your Passwords. Apr. 2023. url: https:\/\/blog.dashlane.com\/world-password-day\/ (visited on 05\/11\/2018)."},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings of the 15th Workshop on Hot Topics in Operating Systems (HotOS)","author":"Chajed Tej","year":"2015","unstructured":"Tej Chajed , Jon Gjengset , Jelle van den Hooff, M. Frans Kaashoek, James Mickens, Robert Morris, and Nickolai Zeldovich. \"Amber: Decoupling User Data from Web Applications \". In: Proceedings of the 15th Workshop on Hot Topics in Operating Systems (HotOS) . Kartause Ittingen, Switzerland , May 2015 . Tej Chajed, Jon Gjengset, Jelle van den Hooff, M. Frans Kaashoek, James Mickens, Robert Morris, and Nickolai Zeldovich. \"Amber: Decoupling User Data from Web Applications\". In: Proceedings of the 15th Workshop on Hot Topics in Operating Systems (HotOS). Kartause Ittingen, Switzerland, May 2015."},{"key":"e_1_3_2_1_11_1","volume-title":"MIT CSAIL","author":"Chajed Tej","year":"2016","unstructured":"Tej Chajed , Jon Gjengset , M. Frans Kaashoek , James Mickens , Robert Morris , and Nickolai Zeldovich . Oort : User-Centric Cloud Storage with Global Queries. Technical report MIT-CSAIL-TR-2016-015 . MIT CSAIL , 2016 . Tej Chajed, Jon Gjengset, M. Frans Kaashoek, James Mickens, Robert Morris, and Nickolai Zeldovich. Oort: User-Centric Cloud Storage with Global Queries. Technical report MIT-CSAIL-TR-2016-015. MIT CSAIL, 2016."},{"key":"e_1_3_2_1_12_1","volume-title":"Proceedings of the 2010 USENIX Conference on Web Application Development (WebApps)","author":"Chandra Ramesh","year":"2010","unstructured":"Ramesh Chandra , Priya Gupta , and Nickolai Zeldovich . \" Separating Web Applications from User Data Storage with BSTORE\". In: Proceedings of the 2010 USENIX Conference on Web Application Development (WebApps) . Boston, Massachusetts, USA , 2010 . Ramesh Chandra, Priya Gupta, and Nickolai Zeldovich. \"Separating Web Applications from User Data Storage with BSTORE\". In: Proceedings of the 2010 USENIX Conference on Web Application Development (WebApps). Boston, Massachusetts, USA, 2010."},{"key":"e_1_3_2_1_13_1","first-page":"105","volume-title":"Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation (OSDI).","author":"Chlipala Adam","year":"2010","unstructured":"Adam Chlipala . \" Static Checking of Dynamically-Varying Security Policies in Database-Backed Applications\". In: Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation (OSDI). Jan. 2010 , pages 105 -- 118 . Adam Chlipala. \"Static Checking of Dynamically-Varying Security Policies in Database-Backed Applications\". In: Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation (OSDI). Jan. 2010, pages 105--118."},{"key":"e_1_3_2_1_14_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security).","author":"Cohn-Gordon Katriel","year":"2020","unstructured":"Katriel Cohn-Gordon , Georgios Damaskinos , Divino Neto , Joshi Cordova , Beno\u00edt Reitz , Benjamin Strahs , Daniel Obenshain , Paul Pearce , and Ioannis Papagiannis . \"DELF : Safeguarding deletion correctness in Online Social Networks \". In: Proceedings of the 29th USENIX Security Symposium (USENIX Security). Aug. 2020 . Katriel Cohn-Gordon, Georgios Damaskinos, Divino Neto, Joshi Cordova, Beno\u00edt Reitz, Benjamin Strahs, Daniel Obenshain, Paul Pearce, and Ioannis Papagiannis. \"DELF: Safeguarding deletion correctness in Online Social Networks\". In: Proceedings of the 29th USENIX Security Symposium (USENIX Security). Aug. 2020."},{"key":"e_1_3_2_1_15_1","volume-title":"Elon Musk Completes $44 Billion Deal to Own Twitter","author":"Conger Kate","year":"2022","unstructured":"Kate Conger and Lauren Hirsch . Elon Musk Completes $44 Billion Deal to Own Twitter . Oct. 27, 2022 . url: https:\/\/www.nytimes.com\/2022\/10\/27\/technology\/elon-musk-twitter-deal-complete.html (visited on 04\/13\/2023). Kate Conger and Lauren Hirsch. Elon Musk Completes $44 Billion Deal to Own Twitter. Oct. 27, 2022. url: https:\/\/www.nytimes.com\/2022\/10\/27\/technology\/elon-musk-twitter-deal-complete.html (visited on 04\/13\/2023)."},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of the 17th USENIX Symposium on Operating Systems Design and Implementation (OSDI).","author":"Albab Kinan Dak","year":"2023","unstructured":"Kinan Dak Albab , Ishan Sharma , Justus Adam , Benjamin Kilimnik , Aaron Jeyaraj , Raj Paul , Artem Agvanian , Leonhard Spiegelberg , and Malte Schwarzkopf . \"Pelton : Privacy-Compliant Storage For Web Applications By Construction \". In: Proceedings of the 17th USENIX Symposium on Operating Systems Design and Implementation (OSDI). July 2023 . Kinan Dak Albab, Ishan Sharma, Justus Adam, Benjamin Kilimnik, Aaron Jeyaraj, Raj Paul, Artem Agvanian, Leonhard Spiegelberg, and Malte Schwarzkopf. \"Pelton: Privacy-Compliant Storage For Web Applications By Construction\". In: Proceedings of the 17th USENIX Symposium on Operating Systems Design and Implementation (OSDI). July 2023."},{"key":"e_1_3_2_1_17_1","volume-title":"Heartbreak and Hacking: Dating Apps in the Pandemic","author":"Beer Vincent De","year":"2021","unstructured":"Vincent De Beer . Heartbreak and Hacking: Dating Apps in the Pandemic . Apr. 2021 . url: https:\/\/securityboulevard.com\/2021\/04\/heartbreak-and-hacking-dating-apps-in-the-pandemic\/ (visited on 08\/23\/2023). Vincent De Beer. Heartbreak and Hacking: Dating Apps in the Pandemic. Apr. 2021. url: https:\/\/securityboulevard.com\/2021\/04\/heartbreak-and-hacking-dating-apps-in-the-pandemic\/ (visited on 08\/23\/2023)."},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 11th Conference on Innovative Data Systems Research (CIDR)","author":"Deshpande Amol","year":"2021","unstructured":"Amol Deshpande . \"Sypse : Privacy-first Data Management through Pseudonymization and Partitioning \". In: Proceedings of the 11th Conference on Innovative Data Systems Research (CIDR) . Chaminade, California, USA , Jan. 2021 . Amol Deshpande. \"Sypse: Privacy-first Data Management through Pseudonymization and Partitioning\". In: Proceedings of the 11th Conference on Innovative Data Systems Research (CIDR). Chaminade, California, USA, Jan. 2021."},{"key":"e_1_3_2_1_19_1","volume-title":"Podcast: How AWS KMS could help customers meet encryption and deletion requirements, including GDPR","author":"Doptis Katie","year":"2018","unstructured":"Katie Doptis . Podcast: How AWS KMS could help customers meet encryption and deletion requirements, including GDPR . June 2018 . url: https:\/\/aws.amazon.com\/blogs\/security\/podcast-how-aws-kms-could-help-customers-meet-encryption-and-deletion-requirements-including-gdpr\/ (visited on 04\/08\/2023). Katie Doptis. Podcast: How AWS KMS could help customers meet encryption and deletion requirements, including GDPR. June 2018. url: https:\/\/aws.amazon.com\/blogs\/security\/podcast-how-aws-kms-could-help-customers-meet-encryption-and-deletion-requirements-including-gdpr\/ (visited on 04\/08\/2023)."},{"key":"e_1_3_2_1_20_1","first-page":"1","volume-title":"Proceedings of the USENIX Annual Technical Conference (ATC).","author":"Duplyakin Dmitry","year":"2019","unstructured":"Dmitry Duplyakin , Robert Ricci , Aleksander Maricq , Gary Wong , Jonathon Duerig , Eric Eide , Leigh Stoller , Mike Hibler , David Johnson , Kirk Webb , Aditya Akella , Kuangching Wang , Glenn Ricart , Larry Landweber , Chip Elliott , Michael Zink , Emmanuel Cecchet , Snigdhaswin Kar , and Prabodh Mishra . \" The Design and Operation of CloudLab\". In: Proceedings of the USENIX Annual Technical Conference (ATC). July 2019 , pages 1 -- 14 . Dmitry Duplyakin, Robert Ricci, Aleksander Maricq, Gary Wong, Jonathon Duerig, Eric Eide, Leigh Stoller, Mike Hibler, David Johnson, Kirk Webb, Aditya Akella, Kuangching Wang, Glenn Ricart, Larry Landweber, Chip Elliott, Michael Zink, Emmanuel Cecchet, Snigdhaswin Kar, and Prabodh Mishra. \"The Design and Operation of CloudLab\". In: Proceedings of the USENIX Annual Technical Conference (ATC). July 2019, pages 1--14."},{"key":"e_1_3_2_1_21_1","first-page":"1","article-title":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation)","year":"2016","unstructured":"\" Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) \". In: Official Journal of the European Union L119 ( May 2016 ), pages 1 -- 88 . \"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation)\". In: Official Journal of the European Union L119 (May 2016), pages 1--88.","journal-title":"Official Journal of the European Union L119"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242661"},{"key":"e_1_3_2_1_23_1","first-page":"299","volume-title":"Proceedings of the 18th USENIX Security Symposium (USENIX Security)","author":"Geambasu Roxana","year":"2009","unstructured":"Roxana Geambasu , Tadayoshi Kohno , Amit A. Levy , and Henry M. Levy . \"Vanish: Increasing Data Privacy with Self-destructing Data \". In: Proceedings of the 18th USENIX Security Symposium (USENIX Security) . Montreal, Canada , 2009 , pages 299 -- 316 . Roxana Geambasu, Tadayoshi Kohno, Amit A. Levy, and Henry M. Levy. \"Vanish: Increasing Data Privacy with Self-destructing Data\". In: Proceedings of the 18th USENIX Security Symposium (USENIX Security). Montreal, Canada, 2009, pages 299--316."},{"key":"e_1_3_2_1_24_1","first-page":"47","volume-title":"Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Giffin Daniel B.","year":"2012","unstructured":"Daniel B. Giffin , Amit Levy , Deian Stefan , David Terei , David Mazi\u00e9res , John C. Mitchell , and Alejandro Russo . \"Hails : Protecting Data Privacy in Untrusted Web Applications \". In: Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI) . Hollywood, California, USA , Oct. 2012 , pages 47 -- 60 . Daniel B. Giffin, Amit Levy, Deian Stefan, David Terei, David Mazi\u00e9res, John C. Mitchell, and Alejandro Russo. \"Hails: Protecting Data Privacy in Untrusted Web Applications\". In: Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI). Hollywood, California, USA, Oct. 2012, pages 47--60."},{"key":"e_1_3_2_1_25_1","volume-title":"Crypto-shredding the best solution for cloud system data erasure","author":"Thematic Research GlobalData","year":"2022","unstructured":"GlobalData Thematic Research . Crypto-shredding the best solution for cloud system data erasure . Jan. 2022 . url: https:\/\/www.verdict.co.uk\/crypto-shredding-gdpr-cloud-systems\/ (visited on 04\/08\/2023). GlobalData Thematic Research. Crypto-shredding the best solution for cloud system data erasure. Jan. 2022. url: https:\/\/www.verdict.co.uk\/crypto-shredding-gdpr-cloud-systems\/ (visited on 04\/08\/2023)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3102980.3103007"},{"key":"e_1_3_2_1_27_1","unstructured":"Peter Bhat Harkins. Lobste.rs access pattern statistics for research purposes. Mar. 2018. url: https:\/\/lobste.rs\/s\/cqnzl5\/lobste_rs_access_pattern_statistics_for#c_hj0r1b (visited on 03\/12\/2018).  Peter Bhat Harkins. Lobste.rs access pattern statistics for research purposes. Mar. 2018. url: https:\/\/lobste.rs\/s\/cqnzl5\/lobste_rs_access_pattern_statistics_for#c_hj0r1b (visited on 03\/12\/2018)."},{"key":"e_1_3_2_1_28_1","first-page":"302","volume-title":"Proceedings of the International Workshop on Privacy Enhancing Technologies. Springer","author":"Hayati Katia","year":"2004","unstructured":"Katia Hayati and Mart\u00edn Abadi . \" Language-Based Enforcement of Privacy Policies\". In: Proceedings of the International Workshop on Privacy Enhancing Technologies. Springer , 2004 , pages 302 -- 313 . Katia Hayati and Mart\u00edn Abadi. \"Language-Based Enforcement of Privacy Policies\". In: Proceedings of the International Workshop on Privacy Enhancing Technologies. Springer, 2004, pages 302--313."},{"key":"e_1_3_2_1_29_1","volume-title":"Password-based cryptography specification version 2.0. Technical report","author":"Kaliski Burt","year":"2000","unstructured":"Burt Kaliski . PKCS# 5 : Password-based cryptography specification version 2.0. Technical report . 2000 . Burt Kaliski. PKCS# 5: Password-based cryptography specification version 2.0. Technical report. 2000."},{"key":"e_1_3_2_1_30_1","unstructured":"Eddie Kohler. HotCRP.com privacy policy. Aug. 2020. url: https:\/\/hotcrp.com\/privacy (visited on 12\/07\/2020).  Eddie Kohler. HotCRP.com privacy policy. Aug. 2020. url: https:\/\/hotcrp.com\/privacy (visited on 12\/07\/2020)."},{"key":"e_1_3_2_1_31_1","unstructured":"Eddie Kohler. HotCRP.com. url: https:\/\/hotcrp.com (visited on 02\/03\/2021).  Eddie Kohler. HotCRP.com. url: https:\/\/hotcrp.com (visited on 02\/03\/2021)."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-33752-0_2"},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings of the 6th ACM Workshop on Hot Topics in Networking (HotNets)","author":"Krohn Maxwell","year":"2007","unstructured":"Maxwell Krohn , Alex Yip , Micah Brodsky , Robert Morris , and Michael Walfish . \" A World Wide Web Without Walls\". In: Proceedings of the 6th ACM Workshop on Hot Topics in Networking (HotNets) . Atlanta, Georgia, USA , Nov. 2007 . Maxwell Krohn, Alex Yip, Micah Brodsky, Robert Morris, and Michael Walfish. \"A World Wide Web Without Walls\". In: Proceedings of the 6th ACM Workshop on Hot Topics in Networking (HotNets). Atlanta, Georgia, USA, Nov. 2007."},{"key":"e_1_3_2_1_34_1","unstructured":"Lobsters. url: https:\/\/lobste.rs (visited on 02\/03\/2021). Lobsters. url: https:\/\/lobste.rs (visited on 02\/03\/2021)."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3317550.3321425"},{"key":"e_1_3_2_1_36_1","volume-title":"So you want to leave Twitter: A wellness plan","author":"Mauran Cecily","year":"2022","unstructured":"Cecily Mauran . So you want to leave Twitter: A wellness plan . Oct. 28, 2022 . url: https:\/\/mashable.com\/article\/how-to-leave-twitter-guide-elon-musk (visited on 07\/01\/2023). Cecily Mauran. So you want to leave Twitter: A wellness plan. Oct. 28, 2022. url: https:\/\/mashable.com\/article\/how-to-leave-twitter-guide-elon-musk (visited on 07\/01\/2023)."},{"key":"e_1_3_2_1_37_1","first-page":"1463","volume-title":"Proceedings of the 26th USENIX Security Symposium (USENIX Security)","author":"Mehta Aastha","year":"2017","unstructured":"Aastha Mehta , Eslam Elnikety , Katura Harvey , Deepak Garg , and Peter Druschel . \"Qapla : Policy Compliance for Database-Backed Systems \". In: Proceedings of the 26th USENIX Security Symposium (USENIX Security) . Vancouver, British Columbia , Aug. 2017 , pages 1463 -- 1479 . Aastha Mehta, Eslam Elnikety, Katura Harvey, Deepak Garg, and Peter Druschel. \"Qapla: Policy Compliance for Database-Backed Systems\". In: Proceedings of the 26th USENIX Security Symposium (USENIX Security). Vancouver, British Columbia, Aug. 2017, pages 1463--1479."},{"key":"e_1_3_2_1_38_1","first-page":"49","volume-title":"Personal Data Management with the Databox: What's Inside the Box?\" In: Proceedings of the 2016 ACM Workshop on Cloud-Assisted Networking","author":"Mortier Richard","year":"2016","unstructured":"Richard Mortier , Jianxin Zhao , Jon Crowcroft , Liang Wang , Qi Li , Hamed Haddadi , Yousef Amar , Andy Crabtree , James Colley , Tom Lodge , \" Personal Data Management with the Databox: What's Inside the Box?\" In: Proceedings of the 2016 ACM Workshop on Cloud-Assisted Networking . 2016 , pages 49 -- 54 . Richard Mortier, Jianxin Zhao, Jon Crowcroft, Liang Wang, Qi Li, Hamed Haddadi, Yousef Amar, Andy Crabtree, James Colley, Tom Lodge, et al. \"Personal Data Management with the Databox: What's Inside the Box?\" In: Proceedings of the 2016 ACM Workshop on Cloud-Assisted Networking. 2016, pages 49--54."},{"key":"e_1_3_2_1_39_1","unstructured":"Mozilla Foundation. Tinder (*Privacy Not Included). Mar. 2021. url: https:\/\/foundation.mozilla.org\/en\/privacynotincluded\/tinder\/ (visited on 08\/23\/2023).  Mozilla Foundation. Tinder (*Privacy Not Included). Mar. 2021. url: https:\/\/foundation.mozilla.org\/en\/privacynotincluded\/tinder\/ (visited on 08\/23\/2023)."},{"key":"e_1_3_2_1_40_1","volume-title":"Hey all - I'm out of here. No judgement","author":"Olin Ken","year":"2022","unstructured":"Ken Olin . Hey all - I'm out of here. No judgement ... Oct. 28, 2022 . url: https:\/\/twitter.com\/kenolin1\/status\/1586031904007954433 (visited on 04\/13\/2023). Ken Olin. Hey all - I'm out of here. No judgement... Oct. 28, 2022. url: https:\/\/twitter.com\/kenolin1\/status\/1586031904007954433 (visited on 04\/13\/2023)."},{"key":"e_1_3_2_1_41_1","first-page":"1","volume-title":"Proceedings of the 16th ACM Workshop on Hot Topics in Networks (HotNets).","author":"Palkar Shoumik","year":"2017","unstructured":"Shoumik Palkar and Matei Zaharia . \" DIY Hosting for Online Privacy\". In: Proceedings of the 16th ACM Workshop on Hot Topics in Networks (HotNets). 2017 , pages 1 -- 7 . Shoumik Palkar and Matei Zaharia. \"DIY Hosting for Online Privacy\". In: Proceedings of the 16th ACM Workshop on Hot Topics in Networks (HotNets). 2017, pages 1--7."},{"key":"e_1_3_2_1_42_1","volume-title":"A Middleware Approach to Scalable Access Control for Database Management Systems\". In: arXiv preprint arXiv:2004.07498","author":"Pappachan Primal","year":"2020","unstructured":"Primal Pappachan , Roberto Yus , Sharad Mehrotra , and Johann-Christoph Freytag . \"Sieve : A Middleware Approach to Scalable Access Control for Database Management Systems\". In: arXiv preprint arXiv:2004.07498 ( 2020 ). Primal Pappachan, Roberto Yus, Sharad Mehrotra, and Johann-Christoph Freytag. \"Sieve: A Middleware Approach to Scalable Access Control for Database Management Systems\". In: arXiv preprint arXiv:2004.07498 (2020)."},{"key":"e_1_3_2_1_43_1","volume-title":"Even Though They Don't Want You to Anymore.","author":"Parab Pranay","year":"2022","unstructured":"Pranay Parab . How to Make a Burner Account on Reddit , Even Though They Don't Want You to Anymore. Jan. 2022 . url: https:\/\/lifehacker.com\/how-to-make-a-burner-account-on-reddit-even-though-the-1848336857 (visited on 12\/08\/2022). Pranay Parab. How to Make a Burner Account on Reddit, Even Though They Don't Want You to Anymore. Jan. 2022. url: https:\/\/lifehacker.com\/how-to-make-a-burner-account-on-reddit-even-though-the-1848336857 (visited on 12\/08\/2022)."},{"key":"e_1_3_2_1_44_1","volume-title":"Marriott Hacking Exposes Data of Up to 500 Million Guests","author":"Perlroth Nicole","year":"2018","unstructured":"Nicole Perlroth , Amie Tsang , and Addam Satariano . Marriott Hacking Exposes Data of Up to 500 Million Guests . Nov. 2018 . url: https:\/\/www.nytimes.com\/2018\/11\/30\/business\/marriott-data-breach.html (visited on 12\/19\/2020). Nicole Perlroth, Amie Tsang, and Addam Satariano. Marriott Hacking Exposes Data of Up to 500 Million Guests. Nov. 2018. url: https:\/\/www.nytimes.com\/2018\/11\/30\/business\/marriott-data-breach.html (visited on 12\/19\/2020)."},{"key":"e_1_3_2_1_45_1","first-page":"85","volume-title":"Proceedings of the 23th ACM Symposium on Operating Systems Principles (SOSP)","author":"Popa Raluca Ada","year":"2011","unstructured":"Raluca Ada Popa , Catherine M. S. Redfield , Nickolai Zeldovich , and Hari Balakrishnan . \"CryptDB : Protecting Confidentiality with Encrypted Query Processing \". In: Proceedings of the 23th ACM Symposium on Operating Systems Principles (SOSP) . Cascais, Portugal , 2011 , pages 85 -- 100 . Raluca Ada Popa, Catherine M. S. Redfield, Nickolai Zeldovich, and Hari Balakrishnan. \"CryptDB: Protecting Confidentiality with Encrypted Query Processing\". In: Proceedings of the 23th ACM Symposium on Operating Systems Principles (SOSP). Cascais, Portugal, 2011, pages 85--100."},{"key":"e_1_3_2_1_46_1","first-page":"157","volume-title":"Proceedings of the 11th USENIX Conference on Networked Systems Design and Implementation (NSDI)","author":"Popa Raluca Ada","year":"2014","unstructured":"Raluca Ada Popa , Emily Stark , Jonas Helfer , Steven Valdez , Nickolai Zeldovich , M. Frans Kaashoek , and Hari Balakrishnan . \" Building Web Applications on Top of Encrypted Data Using Mylar\". In: Proceedings of the 11th USENIX Conference on Networked Systems Design and Implementation (NSDI) . Seattle, Washington, USA , 2014 , pages 157 -- 172 . Raluca Ada Popa, Emily Stark, Jonas Helfer, Steven Valdez, Nickolai Zeldovich, M. Frans Kaashoek, and Hari Balakrishnan. \"Building Web Applications on Top of Encrypted Data Using Mylar\". In: Proceedings of the 11th USENIX Conference on Networked Systems Design and Implementation (NSDI). Seattle, Washington, USA, 2014, pages 157--172."},{"key":"e_1_3_2_1_47_1","first-page":"333","volume-title":"Proceedings of the 21st USENIX Security Symposium (USENIX Security)","author":"Reardon Joel","year":"2012","unstructured":"Joel Reardon , Srdjan Capkun , and David Basin . \" Data Node Encrypted File System : Efficient Secure Deletion for Flash Memory \". In: Proceedings of the 21st USENIX Security Symposium (USENIX Security) . Bellevue, Washington, USA , Aug. 2012 , pages 333 -- 348 . Joel Reardon, Srdjan Capkun, and David Basin. \"Data Node Encrypted File System: Efficient Secure Deletion for Flash Memory\". In: Proceedings of the 21st USENIX Security Symposium (USENIX Security). Bellevue, Washington, USA, Aug. 2012, pages 333--348."},{"key":"e_1_3_2_1_48_1","volume-title":"Bye.","author":"Rhimes Shonda","year":"2022","unstructured":"Shonda Rhimes . Not hanging around for whatever Elon has planned . Bye. Oct. 29, 2022 . url: https:\/\/twitter.com\/shondarhimes\/status\/1586399694896390147 (visited on 04\/13\/2023). Shonda Rhimes. Not hanging around for whatever Elon has planned. Bye. Oct. 29, 2022. url: https:\/\/twitter.com\/shondarhimes\/status\/1586399694896390147 (visited on 04\/13\/2023)."},{"key":"e_1_3_2_1_49_1","volume-title":"Solid: a platform for decentralized social applications based on linked data. Technical report","author":"Sambra Andrei Vlad","year":"2016","unstructured":"Andrei Vlad Sambra , Essam Mansour , Sandro Hawke , Maged Zereba , Nicola Greco , Abdurrahman Ghanem , Dmitri Zagidulin , Ashraf Aboulnaga , and Tim Berners-Lee . Solid: a platform for decentralized social applications based on linked data. Technical report . MIT CSAIL & Qatar Computing Research Institute , 2016 . Andrei Vlad Sambra, Essam Mansour, Sandro Hawke, Maged Zereba, Nicola Greco, Abdurrahman Ghanem, Dmitri Zagidulin, Ashraf Aboulnaga, and Tim Berners-Lee. Solid: a platform for decentralized social applications based on linked data. Technical report. MIT CSAIL & Qatar Computing Research Institute, 2016."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/2465351.2465357"},{"key":"e_1_3_2_1_51_1","unstructured":"Malte Schwarzkopf. websubmit-rs: a simple class submission system. url: https:\/\/github.com\/ms705\/websubmit-rs (visited on 06\/03\/2020).  Malte Schwarzkopf. websubmit-rs: a simple class submission system. url: https:\/\/github.com\/ms705\/websubmit-rs (visited on 06\/03\/2020)."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-33752-0_3"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359176"},{"key":"e_1_3_2_1_54_1","first-page":"243","volume-title":"Proceedings of the 10th USENIX Conference on Usable Privacy and Security (SOUPS)","author":"Stobert Elizabeth","year":"2014","unstructured":"Elizabeth Stobert and Robert Biddle . \" The Password Life Cycle : User Behaviour in Managing Passwords \". In: Proceedings of the 10th USENIX Conference on Usable Privacy and Security (SOUPS) . Menlo Park, California, USA , 2014 , pages 243 -- 255 . Elizabeth Stobert and Robert Biddle. \"The Password Life Cycle: User Behaviour in Managing Passwords\". In: Proceedings of the 10th USENIX Conference on Usable Privacy and Security (SOUPS). Menlo Park, California, USA, 2014, pages 243--255."},{"key":"e_1_3_2_1_55_1","first-page":"77","volume-title":"Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Tang Yang","year":"2012","unstructured":"Yang Tang , Phillip Ames , Sravan Bhamidipati , Ashish Bijlani , Roxana Geambasu , and Nikhil Sarda . \"CleanOS : Limiting Mobile Data Exposure with Idle Eviction \". In: Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI) . Hollywood, California, USA , Oct. 2012 , pages 77 -- 91 . Yang Tang, Phillip Ames, Sravan Bhamidipati, Ashish Bijlani, Roxana Geambasu, and Nikhil Sarda. \"CleanOS: Limiting Mobile Data Exposure with Idle Eviction\". In: Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI). Hollywood, California, USA, Oct. 2012, pages 77--91."},{"key":"e_1_3_2_1_56_1","volume-title":"New Zealand's biggest data breach shows retention is the sleeping giant of data security","author":"The Office of the Privacy Commission","year":"2023","unstructured":"The Office of the Privacy Commission er. New Zealand's biggest data breach shows retention is the sleeping giant of data security . Apr. 2023 . url: https:\/\/www.privacy.org.nz\/publications\/statements-media-releases\/new-zealands-biggest-data-breach-shows-retention-is-the-sleeping-giant-of-data-security\/ (visited on 12\/01\/2022). The Office of the Privacy Commissioner. New Zealand's biggest data breach shows retention is the sleeping giant of data security. Apr. 2023. url: https:\/\/www.privacy.org.nz\/publications\/statements-media-releases\/new-zealands-biggest-data-breach-shows-retention-is-the-sleeping-giant-of-data-security\/ (visited on 12\/01\/2022)."},{"key":"e_1_3_2_1_57_1","volume-title":"Right of Erasure (Right to be Forgotten), and Encryption Key Management","author":"Townsend Patrick","year":"2028","unstructured":"Patrick Townsend . GDPR , Right of Erasure (Right to be Forgotten), and Encryption Key Management . Jan. 2028 . url: https:\/\/info.townsendsecurity.com\/gdpr-right-erasure-encryption-key-management (visited on 04\/08\/2023). Patrick Townsend. GDPR, Right of Erasure (Right to be Forgotten), and Encryption Key Management. Jan. 2028. url: https:\/\/info.townsendsecurity.com\/gdpr-right-erasure-encryption-key-management (visited on 04\/08\/2023)."},{"key":"e_1_3_2_1_58_1","unstructured":"U.S. Department of Education. FERPA. Aug. 1974. url: https:\/\/studentprivacy.ed.gov\/ferpa.  U.S. Department of Education. FERPA. Aug. 1974. url: https:\/\/studentprivacy.ed.gov\/ferpa."},{"key":"e_1_3_2_1_59_1","first-page":"615","volume-title":"Proceedings of the 16th USENIX Symposium on Networked Systems Design and Implementation (NSDI)","author":"Wang Frank","year":"2019","unstructured":"Frank Wang , Ronny Ko , and James Mickens . \"Riverbed : Enforcing User-defined Privacy Constraints in Distributed Web Services \". In: Proceedings of the 16th USENIX Symposium on Networked Systems Design and Implementation (NSDI) . Boston, Massachusetts, USA , Feb. 2019 , pages 615 -- 630 . Frank Wang, Ronny Ko, and James Mickens. \"Riverbed: Enforcing User-defined Privacy Constraints in Distributed Web Services\". In: Proceedings of the 16th USENIX Symposium on Networked Systems Design and Implementation (NSDI). Boston, Massachusetts, USA, Feb. 2019, pages 615--630."},{"key":"e_1_3_2_1_60_1","unstructured":"Caity Weaver and Danya Issawi. 'Finsta ' Explained. Sept. 2021. url: https:\/\/www.nytimes.com\/2021\/09\/30\/style\/finsta-instagram-accounts-senate.html (visited on 12\/08\/2022).  Caity Weaver and Danya Issawi. 'Finsta ' Explained. Sept. 2021. url: https:\/\/www.nytimes.com\/2021\/09\/30\/style\/finsta-instagram-accounts-senate.html (visited on 12\/08\/2022)."},{"key":"e_1_3_2_1_61_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS)","author":"Wolchok Scott","year":"2010","unstructured":"Scott Wolchok , Owen S. Hofmann , Nadia Heninger , Edward W. Felten , J. Alex Halderman , Christopher J. Rossbach , Brent Waters , and Emmett Witchel . \" Defeating Vanish with Low-Cost Sybil Attacks Against Large DHTs\". In: Proceedings of the Network and Distributed System Security Symposium (NDSS) . San Diego, California, USA , Feb. 2010 . Scott Wolchok, Owen S. Hofmann, Nadia Heninger, Edward W. Felten, J. Alex Halderman, Christopher J. Rossbach, Brent Waters, and Emmett Witchel. \"Defeating Vanish with Low-Cost Sybil Attacks Against Large DHTs\". In: Proceedings of the Network and Distributed System Security Symposium (NDSS). San Diego, California, USA, Feb. 2010."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/2103621.2103669"},{"key":"e_1_3_2_1_63_1","first-page":"245","volume-title":"Topics in Cryptology (CT-RSA): The Cryptographers' Track at the RSA Conference.","author":"Yao Frances F","year":"2005","unstructured":"Frances F Yao and Yiqun Lisa Yin . \" Design and analysis of password-based key derivation functions\". In: Topics in Cryptology (CT-RSA): The Cryptographers' Track at the RSA Conference. San Francisco, California, USA : Springer , 2005 , pages 245 -- 261 . Frances F Yao and Yiqun Lisa Yin. \"Design and analysis of password-based key derivation functions\". In: Topics in Cryptology (CT-RSA): The Cryptographers' Track at the RSA Conference. San Francisco, California, USA: Springer, 2005, pages 245--261."},{"key":"e_1_3_2_1_64_1","first-page":"701","volume-title":"Proceedings of the 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Zhang Wen","year":"2022","unstructured":"Wen Zhang , Eric Sheng , Michael Chang , Aurojit Panda , Mooly Sagiv , and Scott Shenker . \"Blockaid : Data Access Policy Enforcement for Web Applications \". In: Proceedings of the 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI) . Carlsbad, California, USA , July 2022 , pages 701 -- 718 . Wen Zhang, Eric Sheng, Michael Chang, Aurojit Panda, Mooly Sagiv, and Scott Shenker. \"Blockaid: Data Access Policy Enforcement for Web Applications\". In: Proceedings of the 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI). Carlsbad, California, USA, July 2022, pages 701--718."}],"event":{"name":"SOSP '23: 29th Symposium on Operating Systems Principles","location":"Koblenz Germany","acronym":"SOSP '23","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems","USENIX"]},"container-title":["Proceedings of the 29th Symposium on Operating Systems Principles"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600006.3613146","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3600006.3613146","content-type":"text\/html","content-version":"vor","intended-application":"syndication"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:36:49Z","timestamp":1750178209000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600006.3613146"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,23]]},"references-count":64,"alternative-id":["10.1145\/3600006.3613146","10.1145\/3600006"],"URL":"https:\/\/doi.org\/10.1145\/3600006.3613146","relation":{},"subject":[],"published":{"date-parts":[[2023,10,23]]},"assertion":[{"value":"2023-10-23","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}