BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Talks.cam//talks.cam.ac.uk//
X-WR-CALNAME:Talks.cam
BEGIN:VEVENT
SUMMARY:A Framework for Automatically Enforcing Privacy Policies - Jean Ya
 ng\, MIT
DTSTART:20131015T100000Z
DTEND:20131015T110000Z
UID:TALK47644@talks.cam.ac.uk
CONTACT:Microsoft Research Cambridge Talks Admins
DESCRIPTION:It is increasingly important for applications to protect sensi
 tive data. Security policies are difficult to manage because their global 
 nature requires coordinated reasoning and enforcement. To mitigate this\, 
 we propose a policy-agnostic programming model in which the programmer imp
 lements information flow policies separately from the other functionality.
  The programmer may rely on the runtime to automatically produce outputs a
 dhering to these policies. For my Ph.D. thesis\, I have developed the Jeev
 es programming language to explore this model. Jeeves allows programmers t
 o define multiple views of sensitive values along with policies for disclo
 sing these views. The Jeeves semantics describe the dynamic enforcement of
  these policies. We have proven security guarantees about our semantics an
 d implemented Jeeves as an embedded domain-specific language in Scala. We 
 have used our implementation to build a small conference management system
 . The goal of my thesis is to demonstrate the feasibility of policy-agnost
 ic programming in a web framework. Towards this\, we are working on a Pyth
 on implementation of Jeeves and also working on extending Jeeves’s guara
 ntees across the database interface.
LOCATION:Auditorium\, Microsoft Research Ltd\, 21 Station Road\, Cambridge
 \, CB1 2FB
END:VEVENT
END:VCALENDAR