Flock: A Framework for Deploying On-Demand Distributed Trust
Talkat 18th USENIX Symposium on Operating Systems Design and Implementation (OSDI '24) · 2024-07-10..07-12·
summary
Flock claims an on-demand distributed trust architecture that lets each client programmatically deploy serverless instances across three major clouds so an app provider need not broker trust domains. It implements a serverless relay protocol to build secure P2P TLS channels despite NAT, uses MPC-based authentication, IAM keys and certificates for layered auth, and ports five cryptographic modules into eight applications. Evaluation on three cloud providers shows ~1.05x latency and 0.68–2.27x cloud cost versus traditional deployments, demonstrating practical, working performance.
AI-written summary · about
chapters (12)
- 0:00Flock framework intro
- 2:48Distributed trust dilemma
- 4:37User-driven deployment
- 6:00Threat model & trust
- 7:24Serverless for scalability
- 8:47Secure serverless comms
- 10:12Multi-layer auth
- 11:34Digital asset custody
- 12:59Implementation & crypto
- 13:19Performance vs traditional
- 15:05Cost vs traditional
- 16:08Summary
related talks
20mZero-Trust Security Strategy in Serverless App Deployment
14mSecure FLOATING - Scalable Federated Learning Framework for Real-time Trust in...
22mCompliance the Easy Way: Zero-conf mTLS for Dev and smooth Day-2 f...
27mLeveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure
28mJobber: Automating Inter-Tenant Trust in the Cloud
55mZero Trust Security For AlwaysOn APIs
21mEarning Trust in Identity at Scale
27mPlatform-led Zero Trust service networking for Fintech