Problem I'm Solving: Protecting Sensitive Data is Hard
5
Programmers Must Navigate "Policy Spaghetti"
6
Solution: Allow Programmers to Attach Policies Directly to Data The language and runtime manage policies so the programmer does not need to
7
Jeeves Language and Execution Model
8
Semantics of Output
9
The Pain of Production-Testing a Research Prototype
10
Lessons Learned
11
Jacqueline, a Policy-Agnostic Web Framework
12
Research is Slow
13
Barriers to Industry Adoption
14
Security is no Tindog
15
Unique Challenges for Security Startups • Security is expensive, • Concept is highly technical
16
Cybersecurity Factory
17
Summer 2015 Cohort
18
How Teams Spent the Summer
19
Fun Discovery: Del Monte Foods is Unexpectedly Hip
20
The Security "Prisoner's Dilemma"
21
We Need to Care More
22
Conclusion: Many Pieces to Securing Software
Description:
Explore a comprehensive examination of securing software by construction in this 54-minute conference talk from Philly ETE 2016. Delve into technical ideas from research that aid in building secure software from the ground up, addressing the challenges of protecting sensitive data and navigating complex policy requirements. Learn about innovative approaches like the Jeeves language and execution model, which allows programmers to attach policies directly to data. Discover the practical challenges of implementing research prototypes in production environments and the lessons learned from these experiences. Gain insights into the development of Jacqueline, a policy-agnostic web framework, and understand the barriers to industry adoption of long-term security solutions. Examine the unique challenges faced by security startups and learn about the Cybersecurity Factory accelerator's efforts to bridge the gap between academia and industry. Reflect on the broader implications of security in software development and the need for a collective commitment to prioritizing secure practices in the tech industry.
Read more
Securing Software by Construction: From Research to Industry - Philly ETE 2016