Passport App: The role of SPIFFE and SPIRE in a return to work solution
Talkat Production Identity Day: SPIFFE + SPIRE 2020 · on Tuesday, 2020-11-17· at 14:45· Virtual, Virtual·
summary
A return-to-work Passport app is built that generates a cryptographically signed QR attestation and runs health questionnaires and policy checks entirely on phones so sensitive answers never leave the device; the system uses SPIRE for workload identities, Open Policy Agent for access decisions, and adds differential privacy to aggregated results. Architecture and operational hooks are proven in deployment to limit logged data to non-sensitive metrics and to enforce per-workload crypto identities.
AI-written summary · about
chapters (10)
- 0:00Start
- 1:15Security vs Privacy
- 2:01Problem Statement: Neural Networks Learn
- 2:55Neural Networks Learn Sensitive Information
- 3:48Result: Overfitting increases privacy loss!
- 5:20Federated Learning
- 7:10Differential Privacy
- 9:11Security: Zero Trust
- 10:19Trusted Execution Environments
- 11:43Passport
related talks
49mReal World SPIFFE Scenarios and Outcomes
32mProduction Workload Identity with SPIRE
33mUniform Workload Identity Everywhere: SPIRE Integrations and Extensibility
36mSPIFFE: In Theory and in Practice
32mA Platform-Agnostic Approach to Securing Workloads
34mDon't Mind the Gap: Securely Accessing Cloud Resources From Anywhere With SPIFFE/SPIRE
36mFederated Identity for Distributed Systems: Understanding SPIFFE
36mIntroducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I]