We Gave You This Internet, Now Play by Our Rules
Exploring how technologists' assumptions impact user security, challenging common beliefs in the security community, and advocating for more inclusive design practices in Internet platforms.
Hacking Sensors
Exploración de vulnerabilidades en sensores de sistemas críticos, demostrando ataques y discutiendo defensas para dispositivos médicos, drones y wearables. Enfoque en la seguridad de sistemas de detección y actuación.
Putting Privacy Notices to the Test
Exploring challenges and improvements in privacy notices and security warnings, discussing cognitive processes, and presenting user studies to enhance effectiveness through iterative design.
What Cybersecurity Can Learn from the Secret Service
Exploring cybersecurity lessons from Secret Service strategies, focusing on interior defense and environmental control to detect and neutralize intruders effectively despite porous network boundaries.
The Paper Ballot Is Not Enough
Exploring cryptographic techniques for inherent election integrity, challenging results with objective evidence, and improving voter registration confidence.
Secrets at Scale - Automated Bootstrapping of Secrets & Identity in the Cloud
Explore Netflix's innovative approach to securely managing secrets and identities for thousands of microservices in a cloud environment, addressing scalability and self-healing challenges.
Moving Account Recovery Beyond Email and the Secret Question
Innovative account recovery protocol beyond traditional methods, offering user choice, privacy, and potential for end-to-end encryption key recovery. Addresses limitations of current practices in online identity management.
Beyond Warm and Fuzzy - Ethics as a Value Prop
Exploring industry ethics as a crucial factor in balancing privacy, security, innovation, and autonomy in the face of emerging sociotechnical challenges in smart technologies and predictive services.
Lessons Learned While Protecting Gmail
Insights into Gmail's defense strategies against various cyber threats, covering spam detection, phishing prevention, malware scanning, network security, and web frontend protection.
The Global Conversation on Encryption
Explores global government proposals affecting encryption, their potential impacts on security and rights, and how various stakeholders are responding. Discusses ways to support strong encryption policies.
Panopticlick - Fingerprinting Your Web Presence
Explore web fingerprinting techniques and learn effective privacy-enhancing strategies to protect yourself from invasive trackers while browsing the internet.
Building a DDoS Mitigation Pipeline
Explore CloudFlare's automated DDoS mitigation pipeline, featuring real-time threat detection, attack categorization, and centralized iptables management for efficient and rapid response to common attacks.
What Makes Software Exploitation Hard?
Explore Project Zero's mission to make zero-day vulnerabilities harder, discussing technologies and trends that have increased difficulty in vulnerability discovery and exploitation.
Verification, Auditing, and Evidence - If We Didn’t Notice Anything Wrong
Explores end-to-end verifiability in e-voting systems, discussing its implementation in Australia's vVote project and challenges for secure internet voting in government elections.
Keys Under Doormats - Mandating Insecurity
Explores the risks of mandating exceptional access to encrypted data for law enforcement, highlighting potential security vulnerabilities and governance challenges in today's complex Internet environment.
Sanitize, Fuzz, and Harden Your C++ Code
Explore dynamic testing tools for C/C++, including Sanitizers and libFuzzer, to find and prevent various bugs. Learn about security hardening techniques like Control Flow Integrity and Safe Stack.
Usable Security - The Source Awakens
Exploring usable security research beyond end-users, focusing on system administrators and developers. Uses TLS to illustrate security issues across all levels and actors in information systems.
Protecting High Risk Users
Exploring challenges in safeguarding high-risk individuals against cyber threats, focusing on targeted attacks, resource constraints, and real-world experiences in assisting vulnerable NGOs and persons.
NSA TAO Chief on Disrupting Nation State Hackers
NSA's Tailored Access Operations chief discusses effective security practices to thwart network exploitation attempts by sophisticated adversaries, offering insights from the perspective of elite hackers.
Metric Perversity and Bad Decision-Making
Explore how perverse metrics lead to poor decision-making in security and privacy, and learn techniques to avoid these pitfalls for better risk assessment and management.
Technology Abuse Clinics for Survivors of Intimate Partner Violence
Exploring technology abuse in intimate partner violence, this talk presents solutions through community-based clinics and introduces a toolkit for stakeholders to create their own support services.