~/talk

A Case Study in Language-Based Security: Building an I/O Library for Wyvern

on YouTube 16m
Talkat Onward! 2020 · 2020-11-15..11-21· [security, compilers-and-language-design]

speakers

name:Jennifer A. Fish
links:none on file
name:Darya Melicher
links:none on file
name:Jonathan Aldrich
links:none on file

resources

video:https://youtu.be/pKHNY0TPLkc
slides:none on file

summary

A small standard I/O library for Wyvern is built and shown workable: capabilities enforce least privilege by handing narrow file or directory handles (readers/writers only), the existing effect system needs bounded effect members to prevent conflating file and network FFI effects, and format-checking is implemented as a format string extension library that statically prevents mismatched specifiers. The implementation exposes gaps (no covariant type parameters yet) and motivates concrete language extensions.

AI-written summary · about

chapters (17)

  1. 0:00Intro
  2. 0:16Emerging languages build in security features
  3. 1:02What PL-based security features are ready...
  4. 1:14The Wyvern PL has novel security features Wyvern was designed from the ground up to be secure. It has static types, plus
  5. 1:49Building an I/O library is a useful case study • Everything dangerous involves input or output
  6. 2:30Want to limit privileges of untrusted code
  7. 3:08Capabilities give you the ability to do things
  8. 3:37Wyvern's object capabilities control privileges
  9. 4:51Capability granularities in file system design
  10. 5:56Restricting untrusted module privileges
  11. 6:59Other permissions supported by wrapping Missing read-only directory access . Maybe not general enough to justify in design
  12. 8:00Capabilities were effective; tweaks can help
  13. 10:17Abstractions: both specific and general effects
  14. 11:47Global effects can be hard to distinguish
  15. 12:56Solution: Bounded effect members
  16. 14:00Format string language extension adds safety require stdout val x : String - "World" stdout.printf(-)
  17. 15:37Wyvern I/O Library Case Study Takeaways

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.