Generalized Policy-Based Noninterference for Efficient Confidentiality-Preservation
summary
Hydra implements a mechanism‑independent language and a type system that enforces a generalized noninterference property called S non-interference and automatically maps label-to-mechanism policies to concrete backends. It targets Apache Spark queries, compiles annotated plans that mix Intel SGX, homomorphic encryption and client-side compute, and runs a prototype on an AWS cluster with three heuristics. The claim is end-to-end confidentiality preservation with provable SNI and measurable, often substantial, speedups over single-mechanism deployments.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:07Cloud data confidentiality
- 3:57Hydra architecture
- 5:42Security policy modeling
- 7:08Language design
- 9:40Security property S
- 12:57Type system
- 15:06Hydra workflow
- 15:50Evaluation results
- 16:33Conclusion
- 16:48Q&A
related talks
24mSafeguarding Sensitive Data Access At Scale with Privacy-Enhancing Technologies
27mSecurity++: Hide Your Secrets via a Distributed Hardware Security Mod...
14mNon-interference Preserving Optimising Compilation
28mSealed for All: Multi-Party Confidential Computing, No Trust
40mConfidential Computing and Privacy-Enhancing Technologies - The Landscape
30mK8s meets confidential computing - the different ways of scaling sensitive workloads
26mUse case deep dive: Secure and privacy-preserving cyber threat intelligence exchange
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads