The Effect of Entertainment Media on Mental Models of Computer Security
Explores how entertainment media shapes people's understanding of computer security, identifying misconceptions from fictional tropes and examining how viewers evaluate realism in portrayals.
Small World with High Risks - A Study of Security Threats in the npm Ecosystem
Analyzes security risks in npm ecosystem, revealing vulnerabilities due to dependencies, maintainer influence, and lack of maintenance. Discusses potential mitigations for the JavaScript community.
Tackling the Trust and Safety Crisis
Exploring challenges in building safe, trustworthy tech products for billions globally, drawing from past mistakes and suggesting ways forward in this complex, multidisciplinary issue.
Protecting Accounts from Credential Stuffing with Password Breach Alerting
Explore a privacy-preserving protocol for detecting exposed credentials, its implementation as a cloud service, and its effectiveness in prompting users to update compromised passwords.
WAVE - A Decentralized Authorization Framework with Transitive Delegation
Explore WAVE, a decentralized authorization framework offering autonomous delegation, enhanced security, and scalability without central trust, as applied to IoT device control.
In-toto - Providing Farm-to-Table Guarantees for Bits and Bytes
Explore in-toto, a framework ensuring software supply chain integrity from inception to deployment, addressing vulnerabilities and protecting millions of users across various cloud environments.
Reading the Tea Leaves - A Comparative Analysis of Threat Intelligence
Comparative analysis of threat intelligence sources, evaluating metrics, coverage, and effectiveness for cybersecurity defense. Highlights limitations and challenges in using existing data.
From Privacy by Design to Data Protection by Design - The Challenges of Turning Good Practice into a Legal Obligation
Exploring challenges of implementing Data Protection by Design under GDPR, including legal obligations, assessment criteria, and the role of privacy engineering in meeting comprehensive demands.
Inadvertently Making Cyber Criminals Rich - A Comprehensive Study of Cryptojacking Campaigns at Internet Scale
Comprehensive study on cryptojacking campaigns, revealing underestimated scale, infection methods, and prevalence across the internet. Insights on mining services, attack vectors, and compromised third-party software.
Not Everything is Dark and Gloomy - Power Grid Protections Against IoT Demand Attacks
Explores IoT demand attacks on power grids, analyzing cascading outages and system vulnerabilities. Presents findings from a large-scale North American grid study, discussing protective measures and future challenges.
Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms
Exploring security vulnerabilities in smart home platforms through reverse engineering and phantom device testing, revealing unexpected state transitions and potential attacks.
Principles of Chaos Engineering
Explore principles of Chaos Engineering to improve resilience in distributed systems. Learn techniques for surfacing inherent chaos and building confidence in system behavior at scale.
I'm an SRE Lead! Now What? How to Bootstrap and Organize Your SRE Team
Practical guide for new SRE leads on organizing teams, managing expectations, and implementing effective strategies. Covers phased approaches, lessons learned, and pitfalls to avoid in SRE journey.
DNSControl - A DSL for DNS as Code from StackOverflow.com
Explore DNSControl, a DNS DSL and compiler enabling DevOps practices for DNS management. Learn how StackOverflow.com automates complex configurations, simplifies updates, and enhances reliability.
Opaque - An Oblivious and Encrypted Distributed Analytics Platform
Explore Opaque, a distributed analytics platform offering strong security for sensitive data through encryption, authentication, and oblivious operators, with optimized performance on Spark SQL.
Live Video Analytics at Scale with Approximation and Delay-Tolerance
Explore VideoStorm, a system for efficient live video analytics at scale, featuring resource management techniques to optimize quality and lag for thousands of concurrent queries.
Clipper - A Low-Latency Online Prediction Serving System
Explore Clipper, a low-latency prediction serving system that enhances machine learning deployment with improved latency, throughput, accuracy, and robustness across various frameworks and applications.
VFP - A Virtual Switch Platform for Host SDN in the Public Cloud
Explore Microsoft Azure's Virtual Filtering Platform (VFP), a programmable virtual switch for host SDN in public clouds. Learn its design, API, flow language, and real-world performance in large-scale deployments.
Efficient Memory Disaggregation with Infiniswap
Explore INFINISWAP: an RDMA-based remote memory paging system that improves application performance by leveraging unused cluster memory, without modifying existing applications or OS.
Bringing IoT to Sports Analytics
Explore IoT applications in sports analytics, focusing on tracking cricket ball trajectories and spin using embedded sensors and radios. Innovative solutions overcome unique challenges in localization and motion tracking.
Prio - Private, Robust, and Scalable Computation of Aggregate Statistics
Learn about Prio, a privacy-preserving system for collecting aggregate statistics. Discover how it protects user data while enabling useful computations through innovative cryptographic techniques.