Navigating the Sandbox Buffet
Explore diverse sandboxing techniques to isolate risky software, balancing performance, security, and developer experience. Learn to choose the right combination for your workloads.
Working on the Frontlines - Privacy and Security with Vulnerable Populations
Explore challenges faced by journalists and activists worldwide, and learn about protecting vulnerable populations through public interest technology and frontline privacy and security work.
The Global Privacy Control - Exercising Legal Rights at Scale
Explore how the Global Privacy Control enables users to exercise privacy rights at scale, addressing challenges in data protection and legal compliance across multiple jurisdictions.
Protect2020 - An After Action Report
Insider's analysis of cybersecurity measures during the 2020 US election, examining successes, challenges, and future improvements for safeguarding democratic processes.
The Security Team at the Top - The Board of Directors
Explore how CISOs can effectively engage with boards of directors, build credibility, and leverage this powerful security team to enhance organizational cybersecurity strategies.
When Machine Learning Isn't Private
Exploring privacy risks in machine learning models, focusing on data leakage and extraction techniques. Discusses challenges in prevention and potential solutions for researchers and practitioners.
Security & U.S. Political Campaigns - A Study & Expert Roundtable
Exploring security vulnerabilities in U.S. political campaigns, offering insights and recommendations to protect democratic processes from cyber threats and data breaches.
The Practical Divide between Adversarial ML Research and Security Practice - A Red Team Perspective
Exploring the gap between adversarial ML research and real-world security practices, highlighting challenges and lessons learned from Microsoft's Machine Learning Red Team engagement.
The State of 0-Day in-the-Wild Exploitation
Comprehensive analysis of 0-day exploits from 2020, offering insights on vulnerabilities, exploitation methods, and strategies to enhance cybersecurity and protect users from unknown threats.
Privacy and Security Nutrition Labels to Inform IoT Consumers
Explore IoT device privacy and security labeling, addressing consumer concerns and empowering informed decisions through transparent, user-friendly information at the point of purchase.
Privacy, Measurably, Isn't Dead
Explore global privacy attitudes through data from 90,000+ respondents across 25+ countries. Discover key findings on current and future privacy perceptions, regional variations, and actionable insights for privacy advocates.
The Adventurous Tale of Online Voting in Switzerland
Explore Switzerland's 15-year journey with online voting, its challenges, security issues, and the crucial role of international researchers in shaping future regulations and implementation.
Designing Verifiable Health Solutions for Global Pandemic
Exploration of verifiable health solutions for pandemic response, addressing public safety and privacy concerns through attestation, test results, and vaccination history tracking.
Does Your Threat Model Consider Country and Culture? A Case Study of Brazilian Internet Banking Security to Show That It Should
Explores unique cybersecurity challenges in Brazilian internet banking, highlighting how regional factors shape threats and the need for localized threat models in global security assessments.
Quantifying Memory Unsafety and Reactions to It
Explore memory unsafety in C/C++, its prevalence in major projects, and developer reactions. Learn strategies for addressing this critical issue in modern secure development.
Detecting Fake 4G LTE Base Stations in Real Time
Explore techniques for detecting fake 4G LTE base stations in real-time using open-source software and affordable hardware. Learn about IMSI catchers, their prevalence, and strategies to limit their effectiveness.
What Shark Conservation Teaches Us about Emotionality and Effective Communication Strategies for Security and Privacy
Explore how shark conservation strategies can improve security and privacy communication, avoiding fear-based tactics for more effective public discourse and problem-solving approaches.
Breaking Trust – Shades of Crisis Across an Insecure Software Supply Chain
Explore software supply chain security threats, their impact, and potential solutions through analysis of 115 attacks and vulnerabilities from the past decade.
Hardware - A Double-Edged Sword for Security
Explore hardware's dual role in security: as a trust anchor and potential vulnerability. Learn about system-level threats, real-world examples, and promising solutions for detecting and preventing hardware vulnerabilities.
A Sound Mind in a Vulnerable Body - Practical Hardware Attacks on Deep Learning
Explores hardware vulnerabilities in deep learning systems, demonstrating how fault injection and side-channel attacks can compromise model accuracy and steal proprietary information, highlighting the need for robust ML-level defenses.
The Limits of Sandboxing and Next Steps
Exploring sandboxing limitations in Chrome security, discussing OS constraints, and introducing memory safety as a complementary approach to enhance software resilience.