Building trustworthy multi-party systems in the cloud (without handling over the keys to the kingdom)

Add to your list(s) Download to your calendar using vCal

• Heidi Howard, Microsoft Research
• Thursday 07 July 2022, 15:00-16:00
• FW11 and https://cl-cam-ac-uk.zoom.us/j/97216272378?pwd=M2diTFhMTnppckJtNWhFVTBKK0REZz09.

If you have a question about this talk, please contact Srinivasan Keshav.

In the pre-cloud era, computer systems were operated directly by the organizations which depended upon them. This approach, that later became known as on-premises, gave organizations great power over their systems, for instance, the ability to control who had access to their data. However, “with great power comes great responsibility” and organizations were left with the ongoing burden of deploying and managing their own systems. Then along came cloud computing, which promised to free organizations of this burden and the mass migration to the cloud began. Cloud computing today has removed much of the responsibility of deploying systems, however, it has also removed much of the power that organizations once had. Organizations must place their trust in the cloud to maintain the confidentiality of their data and the integrity of their code.

In this talk, I will consider whether it is possible to regain control over systems in the cloud (all of the power with none of the responsibility) and even enable multiple untrusted parties to compute together in the cloud. Do not fear, this is not a web3 or cryptocurrency talk 😛. Instead, we will look at TEEs (Trusted Execution Environments) and the emerging ecosystem of software around them. I will introduce CCF (Confidential Consortium Framework), an open-source framework for building a new category of secure, highly available, and confidential applications that focus on multi-party compute in the cloud. By the end of the talk, I hope to have convinced you that distributing systems does not necessarily mean distributing trust in the era of trusted execution in the cloud.

This talk is part of the Computer Laboratory Systems Research Group Seminar series.

This talk is included in these lists:

• All Talks (aka the CURE list)
• CL's SRG seminar
• Cambridge Centre for Data-Driven Discovery (C2D3)
• Cambridge talks
• Chris Davis' list
• Computer Laboratory Systems Research Group Seminar
• Department of Computer Science and Technology talks and seminars
• FW11 and https://cl-cam-ac-uk.zoom.us/j/97216272378?pwd=M2diTFhMTnppckJtNWhFVTBKK0REZz09
• Interested Talks
• School of Technology
• Trust & Technology Initiative - interesting events
• bld31
• ndk22's list
• ob366-ai4er
• rp587

Note that ex-directory lists are not shown.