Access to your production environment must be guarded jealously, even among your own team of developers.
Practice
Advertisement
Transactions and Serverless are Made for Each Other
Serverless cloud platforms should be used to deploy stateful applications.
Confidential Computing or Cryptographic Computing?
Trade-offs between secure computation via cryptography and hardware enclaves.
Toward Effective AI Support for Developers
Insights into the opportunities and concerns that developers have with using AI in their work.
You Don’t Know Jack about Bandwidth
Fixes to IP networking help ISPs and other companies make better use of their bandwidth.
Elevating Security with Arm CCA
RME introduces a new kind of confidential compute environment called a realm.
Cloud computing poses challenges for systems that require confidentiality.
Trustworthy AI Using Confidential Federated Learning
Classic federated learning emphasizes security and privacy, at the cost of transparency and accountability. Confidential Federated Learning addresses this gap.
A Perspectival Mirror of the Elephant
Language bias sets a cultural barrier online and has serious implications for how Internet-based platforms reach across societal divides.
Free and Open Source Software–and Other Market Failures
Computing has scientific roots, and if it is not open source, it is not science.
From Open Access to Guarded Trust
Engineers stand at a unique confluence, where the exhilarating promise of innovation meets the sobering responsibility of trust stewardship.
Developer Ecosystems for Software Safety
Building safety and security considerations into the design of the developer ecosystem.
Adopting and Sustaining Microservice-Based Software Development
The microservice approach to software development offers an alternative to the conventional monolith style.
Resolving the Human-Subjects Status of ML’s Crowdworkers
What ethical framework should govern the interaction of ML researchers and crowdworkers?
The popularity of RISC-V and lower barriers to entry have led a number of parties to design some or all of an instruction set for the architecture.
Access to a system should not imply authority to use it. Enter the principle of complete mediation.
Device Onboarding Using FDO and the Untrusted Installer Model
FDO’s untrusted model is contrasted with Wi-Fi Easy Connect to illustrate the advantages of each mechanism.
Improving Testing of Deep-Learning Systems
A combination of differential and mutation testing results in better test data.
In the post-pandemic world, businesses are often handling a combination of on-site and remote workers. To be successful, this requires a new set of management tools.
In software companies a natural conflict exists between security teams and product delivery teams—one's nature is to slow down progress, the other wants to speed it up. The secret is to view security as an enabler, not a hindrance.
Confidential computing enables users to authenticate code running in TEEs, but users also need evidence this code is trustworthy.
Shape the Future of Computing
ACM encourages its members to take a direct hand in shaping the future of the association. There are more ways than ever to get involved.
Get InvolvedCommunications of the ACM (CACM) is now a fully Open Access publication.
By opening CACM to the world, we hope to increase engagement among the broader computer science community and encourage non-members to discover the rich resources ACM has to offer.
Learn More