Green Sprouts - Encouraging Signs of Life from the Department of Defense's Security Strategy - Lisa Wiswell - USENIX Enigma Conference - 2017
Explores DoD's shift towards open security practices, including bug bounties and vulnerability disclosure policies, highlighting progress and implications for researchers and prosecutors.
Internet Voting- What Could Go Wrong? - USENIX Enigma Conference - 2016
Explores security challenges of internet voting, revealing vulnerabilities in existing systems and discussing potential risks to election integrity, privacy, and public trust in digital voting methods.
Capture the Flag: An Owner's Manual - USENIX Enigma 2016
Explore the intricacies of organizing Capture the Flag hacking competitions, from team building to contest design, and learn about the unique challenges and strategies involved in creating engaging cybersecurity events.
Data Integrity Based Attacks in Investigative Domains - USENIX Enigma Conference - 2016
Exploring data integrity attacks in investigative domains, showcasing real-world cases and strategies to defend against misinformation and manipulation in big data analytics.
Several Horror Stories About the Encrypted Web - Peter Eckersley and Yan Zhu - USENIX Enigma Conference - 2016
Explore challenges in web encryption through real-world horror stories from Let's Encrypt and HTTPS Everywhere projects, offering insights into staying secure in a complex digital landscape.
Building a Competitive Hacking Team - USENIX Enigma 2016
Insights on building effective competitive hacking teams, focusing on Capture the Flag contests. Learn strategies for team formation, skill development, and maximizing participation in cybersecurity challenges.
Trust Beyond the First Hop–What Really Happens to Data Sent to HTTPS Websites - USENIX Enigma Conference - 2016
Explore the complex journey of web data beyond HTTPS, examining modern web infrastructure, security indicators, and potential approaches to extend trust beyond initial encryption.
Drops for Stuff: An Analysis of Reshipping Mule Scams - USENIX Enigma 2016
Análisis de estafas de reenvío de paquetes: cómo los cibercriminales monetizan tarjetas robadas mediante reclutamiento de intermediarios inocentes para reenviar productos comprados fraudulentamente al extranjero.
Defending, Detecting, and Responding to Hardware and Firmware Attacks - Teddy Reed - USENIX Enigma Conference - 2016
Explore firmware security, attack surfaces, and defense strategies. Learn to detect vulnerabilities, monitor integrity, and implement deep systems defense for enterprise protection against hardware and firmware attacks.
Modern Automotive Security: History, Disclosure, and Consequences - USENIX Enigma 2016
Explore automotive cybersecurity evolution, vulnerabilities in modern vehicles, and the impact of research disclosure on industry and government responses to these critical issues.
PKI at Scale Using Short-Lived Certificates - USENIX Enigma 2016
Explore PKI deployment challenges at scale, focusing on short-lived certificates for cloud microservices. Learn about operational hurdles, scaling certificate authorities, and maintaining instance trustworthiness.
We Need Something Better—Building STAR Vote - Dana DeBeauvoir - USENIX Enigma Conference - 2016
Exploring the evolution of voting systems, challenges with electronic voting, and the development of STAR Vote for secure, transparent, and auditable elections in Travis County, Texas.
Bullet-Proof Credit Card Processing - Damon McCoy - USENIX Enigma - 2016
Explore the world of bullet-proof credit card processing for counterfeit goods, its ecosystem, and the challenges in disrupting these operations. Learn about rogue payment facilitators and their sophisticated filtering systems.
Hacking Health - Security in Healthcare IT Systems - USENIX Enigma 2016
Explore healthcare IT security challenges, from doctor complexes to patient data access, and learn about vulnerabilities in medical devices, cloud systems, and wearable technology.
Case Studies in Embedded VR - Silvio Cesare - Ekoparty Security Conference - 2022
Explore cutting-edge techniques in embedded VR security, focusing on router vulnerabilities, reverse engineering, and exploit development through real-world case studies.
Knock Knock, Who's There? Identifying Assets in the Cloud - Ben Sadehipour - Ekoparty Security Conference - 2020
Descubre técnicas para identificar activos en la nube y cazar vulnerabilidades en programas de recompensas, con ejemplos prácticos y herramientas útiles.
Radio Experimentation - Dispositivos Inteligentes, ¿Decisiones Inteligentes? - Luis Lubeck - Ekoparty Security Conference - 2020
Explora los riesgos de seguridad en dispositivos inteligentes, analizando su código fuente, tráfico de red y configuraciones inseguras para tomar decisiones informadas sobre su uso.
Red Teaming en Entornos Industriales - César Cuadra & Hernán Parodi - Ekoparty Security Conference - 2020
Técnicas y herramientas de Red Teaming en entornos industriales, incluyendo ataques remotos, phishing y físicos. Análisis de anatomía de ataques y estrategias de cifrado para evaluar la seguridad empresarial.
Social Engineering - Lateral Phishing Attack - Jorge Martin Vila - Ekoparty Security Conference - 2020
Explora técnicas de ingeniería social y phishing lateral, analizando casos reales y estrategias defensivas para mejorar la seguridad en entornos empresariales.
Modern Secure Boot Attacks - Alex Matrosov - Ekoparty Security Conference - 2019
Explore modern Secure Boot attacks, focusing on bypassing Intel Boot Guard in enterprise systems. Learn about hardware Root of Trust, Embedded Controllers, and UEFI Firmware vulnerabilities.
Synthetically Breaking macOS - Patrick Wardle - Ekoparty Security Conference - 2019
Explore macOS security vulnerabilities and bypasses with Patrick Wardle, focusing on synthetic events and code-signing flaws. Learn about potential risks and defensive strategies for Mac users.