Privacy Compliance

Timeline: May - June 2022

I worked with the UBC Systopia Lab, UBC’s Computer Systems research lab, during May - June 2022, where I had the opportunity to start a research project from scratch. My research subject was broadly about exploring the data privacy compliance of a serverless application deployed on a cloud environment. Specifically, I focused on how well the design and components of serverless application deployed on Google Cloud Platform protect the privacy of the data. As part of this research project, I worked on the following:

  • Choosing a benchmark application that is sufficiently complex and contains personal data
  • Setting up the application on Google Cloud Platform
    • The Google Cloud services I worked with include App Engine, Cloud Run, Cloud Functions, Pub/Sub, Firebase, Big Query, Cloud Storage, Cloud Build, Cloud Logging, Cloud Tracing
  • Running a series of workloads on the application to trigger certain user requests
  • Adding logging and distributed tracing to various components to investigate how data flows within the application
  • Investigating logs, traces, and access management on Google Cloud Platform to find potential data access breaches
  • Documenting the app architecture, deployment on GCP, my investigation and findings
Gökçe Dilek
Gökçe Dilek
Software Engineer & Open Source Contributor

Related