Data Security - Theoretical and Real World Approaches to Compartmentalization

Explore data security challenges and solutions in cloud computing through this conference talk. Delve into theoretical and practical approaches to compartmentalization, covering topics such as enforcing security mechanisms, verifying information disclosure, and ensuring consistency across untrusted cloud environments. Learn about formal methods from programming languages, container-based storage solutions like Rook for Ceph, and uniform security policies. Gain insights into the intersection of theory and practice in data security, including secure domain-specific languages, open-source projects, and state-of-the-art approaches to addressing security concerns in cloud environments.

Intro
Outline
Overview
Why Kubernetes
Rook
Sources
Access Control
Buffer Overflow
Go and Rust
Enforce Security
Impossible to Mess Up
Denial
Formal Methods
Abstractions
Programmers Mental Model
Verification
Development Philosophy
Noninterference
Using formal methods