High Assurance Secure Software Development on the Server Side -English version-

While working on a solution to backup LINE users' most sensitive data, we faced the issue of implementing code that we could trust. How could we run a service while protecting it against both external and internal security threats? We researched and tested multiple solutions to build a secure service running in a trusted execution environment and. In this session, we will present what we have learned along the way. We'll explain the two main solutions we’ve tried, which are HSM and Intel SGX, and how they can be used to build a software chain of trust. Afterwards, we’ll go into detail on some of the deployment issues we faced. Finally, we'll also discuss the issue of software security in a trusted execution environment context and how we started relying more and more on Rust along the way.

■ Category
Security

■ Speaker
Charles Hubain / LINE Plus
Jonas Lejeune / LINE

■ Tech-Verse Website
#techverse_en

■ Slide

■ Other language Movie