KK
Katrina Khanta
— On the schedule —
Privacy Is Not the Enemy! What Law Enforcement Misunderstands and What Cryptographers Can Do About It
When law enforcement and researchers discuss threat actors targeting children in online gaming environments, the conversation often arrives at a troubling conclusion where they view privacy as the problem. Dr. Khanta's doctoral research investigating the rise in threat actors leveraging immersive online gaming environments to target children for illicit activities, conducted alongside Internet Crimes Against Children (ICAC) Task Force professionals across the United States, found that sentiment to be widespread. Many investigators have come to view encryption and privacy protections as barriers to justice rather than rights worth preserving. This talk pushes back on that framing with evidence from the field. Investigators are often already able to build cases and pursue bad actors without ever touching message content or weakening end-to-end encryption. The problem is not that privacy exists. The problem is that platforms have not been designed to surface the signals that are already legally and ethically available, and that the investigative community is largely unaware of how far Privacy Enhancing Cryptography has come. This session makes the case for a path the field has not yet taken. Techniques such as Zero-Knowledge Proofs (ZKP), Secure Multi-Party Computation (MPC), Private Set Intersection (PSI), and Fully Homomorphic Encryption (FHE) are established cryptographic tools that have not yet been applied to this problem area. The cryptographic community, including those building on libraries such as OpenSSL, are well positioned to close that gap. Protecting children online and protecting everyone's right to privacy are not mutually exclusive. The tools already exist, what is missing is the bridge between the investigative community that needs them and the cryptographic community that builds them. This talk aims to ignite this long overdue conversation.
— Compositor's note —
Dr. Katrina Khanta is a Threat Intelligence Analyst at Microsoft and is based in the Washington, DC area. She possesses a background in International Relations and Chinese, where she began her career writing grants for global initiatives to combating human trafficking, work that gave her an early look at how crime, technology, and human vulnerability play out across borders. This foundation eventually led her into cybersecurity, where her Chinese language made her an asset in tracking Chinese Advanced Persistent Threat (APT) groups as a Cyber Threat Intelligence Analyst. She has since built additional expertise across Digital Forensics & Incident Response (DFIR) and Privacy Compliance, and today works with legal teams on both civil and criminal cases on all matters relating to cyber. Dr. Khanta's doctoral research conducted alongside Internet Crimes Against Children (ICAC) Task Force teams across the United States, examined the increasing threat of bad actors targeting children in immersive online gaming environments and the evolution of their tactics. Dr. Khanta believes strongly that fighting cybercrime and protecting people's privacy should go hand in hand, which is a big part of why the OpenSSL Conference's mission speaks to her. The moment we start treating privacy as an obstacle rather than a right, we've already lost something important. The goal of cybersecurity should be to protect people, and that includes protecting their privacy as well.