From 231df81483be949492f8076d293c9d2698adc91d Mon Sep 17 00:00:00 2001 From: Tyler Sorensen Date: Wed, 14 Oct 2020 12:48:29 -0700 Subject: [PATCH] added Kalev's talk --- content/lsd-seminar/2020fa.md | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/content/lsd-seminar/2020fa.md b/content/lsd-seminar/2020fa.md index 6589506..08e36c0 100644 --- a/content/lsd-seminar/2020fa.md +++ b/content/lsd-seminar/2020fa.md @@ -22,7 +22,7 @@ Talks will be advertised on the [lsd-group](https://groups.google.com/a/ucsc.edu |[Oct. 2](#oct-2) | None | Social event and class introduction (not public)| |[Oct. 9](#oct-9) | [Matthías Páll Gissurarson](https://mpg.is/) | Weakening Type Systems for Faster Prototyping | |[Oct. 16](#oct-16) | [Wen Kokke](https://wen.works/) | An introduction to Session Types | -|[Oct. 23](#oct-23) | [Kalev Alpernas](https://kalevalp.github.io/) | _TBD_| +|[Oct. 23](#oct-23) | [Kalev Alpernas](https://kalevalp.github.io/) | Correct and Secure Serverless Computing | |[Oct. 30](#oct-30) | [Daniel Lehmann](http://software-lab.org/people/Daniel_Lehmann.html) | Everything Old is New Again: Binary Security of WebAssembly| |[Nov. 6](#nov-6) | [Uma Zalakain](https://umazalakain.info/) | _TBD_| |[Nov. 13](#nov-13) | [Katherine Ye](https://www.cs.cmu.edu/~kqy/) | _TBD_| @@ -58,9 +58,19 @@ Class introduction **Speaker:** [Kalev Alpernas](https://kalevalp.github.io/) (_Tel Aviv University_) -**Title:** _TBD_ +**Title:** Correct and Secure Serverless Computing -**Abstract:** _TBD_ +**Abstract:** Serverless computing is a popular cloud computing paradigm that allows for easy deployment, rapid prototyping, + and effortless, near-unlimited scalability. However, serverless computing can provide these benefits by introducing several restrictions and limitations on cloud applications, including limiting task execution time, requiring the use of ephemeral execution + environments, and requiring that programs adopt an event-driven programming model. These limitations make it harder to write correct and secure applications. + +In this talk I will present two projects aimed at bridging these security and correctness gaps. The first—Trapeze—is + a runtime IFC system that guarantees termination-sensitive non-interference, + ensuring that sensitive data never leaks from a serverless application. The second—Watchtower—is a runtime monitoring system that checks for violation of arbitrary temporal correctness properties that cross-cut the entire application reporting to the user + when violations occur. Watchtower also includes a record-and-replay component for locally reproducing and debugging property violations. + +**Bio:** Kalev is a 4th year PhD candidate at Tel Aviv University, under the supervision of Prof. Mooly Sagiv. His + research interests are in the intersection of serverless computing and PL/formal methods. # Oct. 30