Verifiable ASICs
Explore verifiable computation for untrusted ASICs, enabling high-assurance execution without compromising performance. Learn about the Zebra system's implementation and its potential to match trusted platform performance.
A Tough Call - Mitigating Advanced Code-Reuse Attacks at the Binary Level
Explores advanced techniques for mitigating code-reuse attacks at the binary level, focusing on improving Control-Flow Integrity and reducing potential targets for indirect branches.
Verena - End-to-End Integrity Protection for Web Applications
Explore end-to-end integrity protection for web applications, focusing on safeguarding sensitive information against server-side attacks and ensuring data authenticity for users.
Beauty and the Beast - Diverting Modern Web Browsers to Build Unique Browser Fingerprints
Explore how modern web technologies enable unique browser fingerprinting, its effectiveness on various devices, and potential privacy implications in the evolving digital landscape.
Users Really Do Plug in USB Drives They Find
Investigates end-user behavior with found USB drives through a controlled experiment, revealing high success rates and quick responses, driven by altruistic intentions rather than technical incompetence.
Everyone Hates Robocalls - A Survey of Techniques against Telephone Spam
Comprehensive survey of telephone spam defenses, analyzing current techniques' shortcomings and proposing evaluation criteria for effective solutions to combat the growing robocall problem.
Helping Johnny to Analyze Malware - A Usability-Optimized Decompiler and Malware Analysis User Study
Explore a usability-optimized decompiler for malware analysis, featuring readability improvements that significantly enhance analysts' ability to understand and combat complex malicious software.
Prepose - Privacy, Security, and Reliability for Gesture-Based Programming
Explore a novel language and system for secure, private gesture recognition in sensor-based interfaces, addressing privacy concerns and security threats while ensuring fast performance.
You Get Where You're Looking For - The Impact Of Information Sources On Code Security
Explores how developers' choice of information sources affects Android code security, comparing Stack Overflow, official documentation, and books. Highlights trade-offs between usability and security in programming resources.
TaoStore - Overcoming Asynchronicity in Oblivious Data Storage
Explores secure oblivious storage systems for untrusted cloud providers, introducing TaoStore to address asynchronicity issues in multi-user scenarios with overlapping data sets.
A Practical Oblivious Map Data Structure with Secure Deletion and History Independence
Introduces a novel oblivious RAM supporting variable-sized blocks and a history-independent data structure, offering enhanced privacy and efficiency for key/value map operations.
PhotoProof - Cryptographic Image Authentication for Any Set of Permissible Transformations
Cryptographic method for authenticating images while allowing permissible transformations. Enables verification of image integrity and authenticity without revealing sensitive information.
Storytelling for Engineers
Explore effective communication techniques for engineers using storytelling frameworks. Learn to connect with audiences, deliver key information, and inspire action in technical settings.
Multi-Architecture Container Images - Why Bother, and How To
Explore multi-architecture container images: their importance, how registries handle them, and techniques for building cross-platform containers to ensure software compatibility across diverse CPU architectures.
Creating a Distributed Round Robin Scheduler with Etcd
Explore the challenges and insights of building a distributed round-robin scheduler using etcd for persistence and consensus in this developer-focused journey.
Sysadmins' Introduction to Vulnerability Scanning
Explore vulnerability scanning essentials for sysadmins, covering software vulnerabilities, networking, scanning tools, and server inspection. Learn how ops involvement can enhance overall security processes.
The Container Operator's Manual
Practical insights on container adoption in production environments, exploring advantages, challenges, and tradeoffs for engineers and organizations considering containerization at scale.
Distributed Sys Teams
Practical advice on making remote work effective, based on a decade of experience. Explores the importance of distributed teams for system resilience and fostering global collaboration.
GitOps - An Elegant Tool for Hybrid Cloud Kubernetes
Explore GitOps for consistent application management across multiple Kubernetes clusters. Learn deployment, management, and migration techniques through live demonstrations.
The Map Is Not the Territory - How SLOs Lead Us Astray, and What We Can Do about It
Explore SLO limitations in complex services, understand failure modes, and learn best practices for robust SLO construction to improve reliability and decision-making in modern systems.
Pushing through Friction
Strategies for engineering leaders to identify and overcome organizational friction, enhancing team efficiency and driving positive change in complex technical environments.