Thoth: Comprehensive Policy Compliance in Data Retrieval Systems
summary
Thoth enforces data-use policies attached to files, sockets and key-value tuples using process-level information flow control and a declarative policy language with typed declassification for things like URLs. Prototype integrates with Apache Lucene, adding a 3,500-line Linux Security Module and a 19,000-line reference monitor (uses OpenSSL), changing only 50 lines of application code out of 300,000. Evaluation on ~50 million Wikipedia docs shows about 3.5% throughput overhead and ~14.2% higher latency (~6.7 ms), demonstrating practical, low-cost enforcement.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:24Data Retrieval Systems
- 7:14Threat Model
- 7:58Thought Policies
- 10:54Key Ideas
- 12:56Type Declassification
- 14:36Enforcement Algorithm
- 16:40Distributed Compliance Layer
- 18:38Performance Evaluation
- 20:32Conclusion
related talks
32mQapla: Policy compliance for database-backed systems
27mOblivious Privacy in a Statically Typed World
43mBuilding Tech That Respects Our Rights
26mRiverbed: Enforcing User-defined Privacy Constraints in Distributed Web Services
22mDynamic Policy Enforcement for Privacy Techniques in Microservice Architectures
40mPrivate Web Search with Tiptoe
45mSafely Capture Institutional Knowledge Using
01h 04mAcademic sessions privacy and surveillance