Cheriton researchers awarded $1.6M from CFI and ORF to protect security and privacy of Canadians

Monday, February 10, 2025

A team of leading cryptography, security, and privacy researchers at the Cheriton School of Computer Science has been awarded $1.6 million through the Canada Foundation for Innovation’s Innovation Fund and the Ontario Research Fund. The project, UPSCOPE: Understanding Privacy, Security, and Cryptography in Online and Physical Environments, aims to develop the algorithms, techniques, tools, and systems to protect our security and privacy in an increasingly interconnected online and physical world.

Under the funding program, CFI and ORF each contribute $800,000, with an additional 20% matched through vendor in-kind contributions or eligible cash contributions.

Led by Professor Ian Goldberg, Canada Research Chair in Privacy Enhancing Technologies, the project brings together Cheriton researchers Professors Yousra Aafer, N. Asokan, Diogo Barradas, Sergey Gorbunov, Mohammad Hajiabadi, Urs Hengartner, Florian Kerschbaum, and Meng Xu.

“Congratulations to the team,” said Raouf Boutaba, University Professor and Director of the Cheriton School of Computer Science. “The research they will conduct will help Canada ensure that privacy and security are at the forefront of public and private sector electronic products and services. Importantly, with CFI and ORF funding, they will develop a research facility that can simulate systems at a global scale while safely isolating potentially harmful devices, such as those infected with malware.”

composite photograph of UPSCOPE research team

Top row (L to R): Ian Goldberg, Yousra Aafer, N. Asokan, Diogo Barradas, Sergey Gorbunov. Bottom row (L top R): Mohammad Hajiabadi, Urs Hengartner, Florian Kerschbaum, Meng Xu

About the UPSCOPE research initiative

The globally connected nature of new data and communications technologies requires the study of their privacy and security implications and the fundamental techniques that underpin many promising defences. Studying global-scale systems, however, comes with risks, in particular the need to do so safely, without harming the privacy or security of existing users of the technologies.

Known as UPSCOPE, the Facility will contain components capable of simulating the global scale of these systems, and of isolating devices under study that may be compromised. UPSCOPE’s overarching long-term goal is to create the algorithms, techniques, tools, and systems to protect the security and privacy of our increasingly interconnected online and physical worlds.

UPSCOPE will consist of two integrated systems. The online environments system includes a network simulation machine, software analysis machines, and programmable networking and Internet traffic generators. The physical environments system consists of the Privacy and Security Investigations Lab — a radio-frequency-shielded space with controlled Internet access — as well as wired networking and isolation equipment, IoT analysis and infrastructure devices.

UPSCOPE will explore security and privacy in data processing and management, machine learning, mobile and smart-home devices, communications, and cryptographic protocols and techniques. This research is directly relevant to Canada’s growing need for improved digital security and privacy protections.

Beyond advancing security and privacy research, UPSCOPE will provide training opportunities for more than 150 students and investigators, equipping them for careers across academia and industry in Canada and beyond. The project also has the potential to influence Canada’s information and communications technology sector, encouraging adoption of stricter information protection policies and protocols.