Software and cloud security

Jethro Beekman

Abstract:

"It's impossible to make absolutely secure systems" and "assume you're already hacked" are common phrases you'll hear from InfoSec professionals these days. While there is some truth to these statements, the actual truth is that most software in use today is laughably insecure. In this talk I'll explore how you to combine the age-old techniques of privilege separation, capabilities and cryptography with new developments in secure hardware (e.g. Intel SGX) and static analysis and programming languages (e.g. Rust) to write actually secure software.

Bio:

Jethro G. Beekman is working on next-generation cloud computing security at Fortanix. Jethro received his M.S. and Ph.D. degrees in Electrical Engineering and Computer Sciences from the University of California at Berkeley in 2014 and 2016, respectively. Before that, he received his B.Sc. degree in Electrical Engineering from the University of Twente, The Netherlands, in 2011. His current research interests include cloud security, secure enclaves, side-channel countermeasures, as well as network and hardware security.

Time and Place

Monday, May 8, 4:15pm
Gates 415