Semantic and Cryptographic Foundations ...

The security and privacy (S&P) by design principle, advocated in the new European GDPR, dictates that data protection should be embedded since the early design phase of IT infrastructures. Unfortunately, state-of-the-art technologies are inadequate to realize this principle. Indeed, while security research has traditionally focused on isolated components (e.g., an individual program) or a single layer (software, hardware, cryptography, network, etc.), modern IT infrastructures have become more and more interconnected, featuring multiple components and layers, whose dependencies are crucial for security and privacy purposes.