Tahini: Practical and Attestable End to End Privacy Compliance in Distributed Systems скачать в хорошем качестве

Tahini: Practical and Attestable End to End Privacy Compliance in Distributed Systems

Speaker: Alexandre Doukhan, Visiting Researcher, Brown University Abstract: Scalable web applications are built on complex service architectures, which makes privacy properties hard to reason about. This leads to oversight, inconsistent enforcement and data leaks. Existing privacy compliance solutions fail to accommodate needs of common distributed deployments, such as flexibility and performance. Tahini is a framework that provides end-to-end policy enforcement in distributed applications. Developers define policies for local enforcement that can be verifiably enforced on remote services. Tahini upholds end-to-end guarantees while keeping services decoupled by providing a safe and explicit policy conversion abstraction. A lightweight, non-intrusive attestation protocol ensures that client-approved policy configurations are used by the connecting services at runtime. Evaluations reveal Tahini is compatible with complex distributed applications’ policies, inducing acceptable overhead on end-to-end latency in communication-heavy scenarios. Bio: Alexandre Doukhan has pursued a MSc in Cybersecurity at EPFL/ETHZ. He has been working for 2 years as an undergraduate with Pr. Edouard Bugnion on matters of confidential computing and attestation in data centers. He has been working with Pr. Malte Schwarzkopf, on privacy enforcement in the distributed setting as well as AI agents’ security.