Building Secure Systems in Haskell
Explore a novel approach to protecting sensitive data in software systems using language-level information flow control (IFC) in this conference talk from Strange Loop. Dive into LIO, an IFC-security language embedded in Haskell, and learn how it leverages monads and strong typing to enable developers to specify and enforce security policies on data. Discover Hails, a server-side web framework built on LIO, which allows for declarative policy specification alongside the data model, separate from application functionality. Understand how these tools can help construct web applications that inherently protect user data privacy and integrity. Examine real-world examples, including a blogging web app, to see how this approach can prevent data breaches caused by overlooked security checks. Gain insights into the benefits of using Haskell for secure programming, the concept of secure sub-languages, and the practical implementation details of this security-focused development paradigm.