Raluca Ada Popa

Raluca Ada Popa

Raluca Ada Popa

Blindbox enables Deep Packet Inspection middle boxes to analyze encrypted HTTPS traffic for intrusions and data exfiltration without decrypting the data, thereby preserving end-to-end privacy. The system achieves this through a novel searchable encryption scheme and Secure Multi-Party Computation protocols that allow keyword matching over tokenized payloads while resisting frequency analysis. Although short-lived connections incur latency due to handshake overhead, the architecture delivers Snort-competitive detection speeds with negligible impact on long-lived enterprise connections, representing a practical step toward confidential computing for organizations like Microsoft and Sky High.