K9db: Privacy-Compliant Storage For Web Applications By Construction

Add to your list(s) Download to your calendar using vCal

• Malte Schwarzkopf (Brown University)
• Friday 27 October 2023, 15:00-16:00
• SS03.

If you have a question about this talk, please contact Srinivasan Keshav.

https://cl-cam-ac-uk.zoom.us/j/97216272378?pwd=M2diTFhMTnppckJtNWhFVTBKK0REZz09

Data privacy laws like the EU’s GDPR grant users new rights, such as the right to request access to and deletion of their data. Manual compliance with these requests is error-prone and imposes costly burdens especially on smaller organizations, as non-compliance risks steep fines.

K9db is a new, MySQL-compatible database that complies with privacy laws by construction. The key idea is to make the data ownership and sharing semantics explicit in the storage system. This requires K9db to capture and enforce applications’ complex data ownership and sharing semantics, but in exchange simplifies privacy compliance. Using a small set of schema annotations, K9db infers storage organization, generates procedures for data retrieval and deletion, and reports compliance errors if an application risks violating the GDPR .

Our K9db prototype successfully expresses the data sharing semantics of real web applications, and guides developers to getting privacy compliance right. K9db also matches or exceeds the performance of existing storage systems, at the cost of a modest increase in state size.

Bio: Malte Schwarzkopf is an Assistant Professor of Computer Science at Brown University, where he leads the ETOS group. Malte’s research is on new abstractions that deliver efficient, easy-to-use, and trustworthy computer systems. Recent projects include systems to make web services privacy-compliant by construction, high-performance remote memory, and soft memory, a new form of revocable memory. Malte is a recipient of the NSF CAREER award, a Google Research Award, Brown University’s Henry Merritt Wriston Fellowship and Richard B. Salomon Award, and a class of 2023 Barrett Hazeltine Citation for Excellence in Teaching, Guidance, and Support. His past research received best paper awards at NSDI and EuroSys, as well as the EuroSys 2023 Test of Time Award. Prior to Brown, Malte was a postdoc with MIT ’s PDOS group and completed his PhD at the University of Cambridge. He is still getting used to living in a city not called Cambridge.

This talk is part of the Computer Laboratory Systems Research Group Seminar series.

This talk is included in these lists:

• All Talks (aka the CURE list)
• CL's SRG seminar
• Cambridge Centre for Data-Driven Discovery (C2D3)
• Cambridge talks
• Chris Davis' list
• Computer Laboratory Systems Research Group Seminar
• Department of Computer Science and Technology talks and seminars
• Interested Talks
• SS03
• School of Technology
• Trust & Technology Initiative - interesting events
• bld31
• ndk22's list
• ob366-ai4er
• rp587

Note that ex-directory lists are not shown.