Microservice architectures offer scalability but create data protection challenges as sensitive data flows freely between many services.
Confidential computing uses hardware-based trusted execution environments (TEEs) to isolate data and code during processing, providing verifiable proof through remote attestation.
Implementing privacy-enhancing technologies at scale is difficult due to microservice flexibility, the need for fine-grained purpose limitation, and providing verifiable transparency.
A proposed architecture uses serverless computing to isolate sensitive data logic within a trusted execution environment, combined with pseudonymization for end-to-end protection.
Remote attestation allows third parties to verify workloads, enabling trusted management of key services like KMS and attestation services for hardware-backed access control.
The solution combines serverless computing, end-to-end data protection, and third-party verification to secure sensitive data in microservices while preserving flexibility.
20:46Mingshen Sun
59:34Liz Moy
29:31Adam Larter
29:00Alex Soto
29:34Reto Kaeser
04:57Hissan Usmani
23:24Keno Dreßel
28:30Amir Friedman, Martin Reynolds & Yair Etziony
.gif?w=240&auto=compress,format)
Jobs that call for the skills explored in this talk.
