My talk on redesigning programming language infrastructure for enforcing information flow policies for security.

1. Rethinking Language
Infrastructure for
Privacy
Jean Yang
Ph.D. Candidate, MIT
6.19.13
@gigaom #structureconf

2. Privacy is hard.

3. Many points of failure.
getLocation(user)
findAllUsers(location)
findTopLocations()
Only friends
can see GPS
location.
Desired Policy
Policy
Implementation
Policy
Policy

4. Increasingly complex policies.
Only friends
can see GPS
location.
Desired Policy
who are local
within next five
hours

5. Easier if we separate policies
from other functionality.
getLocation(user)
findAllUsers(location)
findTopLocations()
Only friends
can see GPS
location.
Involves information flow: need
language integration!
Policy Implementation Other Implementation

6. Jeeves, a language for
automatically enforcing privacy.
 : 
findTopLocations()
findTopLocations[ ] findTopLocations[ ]

7. Jeeves: current status.
Jeeves
runtime
In progress In progress
http://jeeveslang.org

8. jeanyang [at] mit [dot] edu