diff --git a/content/lsd-seminar/2024wi.md b/content/lsd-seminar/2024wi.md index 8a62a07..0836e02 100644 --- a/content/lsd-seminar/2024wi.md +++ b/content/lsd-seminar/2024wi.md @@ -26,7 +26,7 @@ Talks will be advertised on the [ucsc-lsd-seminar-announce](https://groups.googl | [Feb. 9](#feb-9) | Katherine Philip | Formalizing Type-Directed Specialization | | [Feb. 16](#feb-16) | Laura Israel | The Persistence of Past: A Demand Semantics for Mechanized Cost Analysis of Lazy Programs | | [Feb. 23](#feb-23) | Achilles Benetopoulos | Don't Let APIs Constrain Your Distributed Systems | -| [March 1](#march-1) | Karuna Grewal | _TBD_ | +| [March 1](#march-1) | Karuna Grewal | Expressive Policies for Microservice Networks | | [March 8](#march-8) | Abhiroop Sarkar | _TBD_ | | [March 15](#march-15) | Matthew Davis | _TBD_ | @@ -111,11 +111,33 @@ We introduce Magpie, a distributed single-level store and runtime. Magpie, like **Speaker:** Karuna Grewal -**Title:** _TBD_ - -**Abstract:** _TBD_ - -**Bio:** _TBD_ +**Title:** Expressive Policies for Microservice Networks + +**Abstract:** Microservice-based application deployments need to administer safety +properties while serving requests. However, today such properties can +be specified only in limited ways that can lead to overly permissive +policies and the potential for illegitimate flow of information across +microservices, or ad hoc policy implementations. + +We argue that a range of use cases require safety properties for the +flow of requests across the whole microservice network, rather than +only between adjacent hops. To begin specifying such expressive +policies, we propose a system for declaring and deploying service tree +policies. These policies are compiled down into declarative filters +that are inserted into microservice deployment manifests. We use a +light-weight dynamic monitor based enforcement mechanism, using ideas +from automata theory. Experiments with our preliminary prototype show +that we can capture a wide class of policies that we describe as case +studies. + +(This is a joint work with Brighten Godfrey from UIUC and Justin Hsu +from Cornell University that appeared at HotNets'23.) + +**Bio:** Karuna Grewal is a third year Ph.D. student in the Computer Science +department at Cornell University advised by Prof. Justin Hsu. Her +current research focus is to apply techniques from programming +languages and formal methods to distributed and networked systems with +a focus on security properties. # March 8