The Origins of USAA's Postmortem of the Week
Discover USAA's journey in establishing an IT-wide Postmortem Review meeting, with tips for implementing your own large-scale review process. Learn from their experiences and insights.
When Systems Flatline - Enhancing Incident Response with Learnings from the Medical Field
Explore how medical field strategies can enhance incident response in tech systems, from algorithm-guided decisions to standardized protocols for effective management and resolution.
Spike Detection in Alert Correlation at LinkedIn
Discover how LinkedIn uses spike detection in alert correlation to quickly identify root causes of outages in their complex microservices architecture, reducing false positives and engineer toil.
Risky Business - Investigating the Security Practices of Vendors on an Online Anonymous Market Using Ground-Truth Data
Investigates security practices of vendors on dark web markets, revealing surprising vulnerabilities among digital item sellers compared to drug vendors. Analyzes password strength, 2FA usage, and PGP adoption.
Accelerating Encrypted Deduplication via SGX
Explore SGXDedup, a novel approach leveraging Intel SGX to accelerate encrypted deduplication for outsourced storage, offering significant performance improvements while maintaining security and efficiency.
ICARUS - Attacking Low Earth Orbit Satellite Networks
Explores vulnerabilities in low Earth orbit satellite networks, introducing ICARUS attacks that exploit global accessibility, low-latency constraints, and network predictability to disrupt communications over large areas.
Avocado - A Secure In-Memory Distributed Storage System
Explore Avocado, a secure in-memory distributed storage system for untrusted cloud environments, offering strong security, fault-tolerance, consistency, and performance through innovative design and implementation.
Addra - Metadata-Private Voice Communication Over Fully Untrusted Infrastructure
Innovative system for metadata-private voice communication, scaling to 32K users with low latency. Utilizes untrusted infrastructure and novel mailbox assignment, improving on existing solutions for secure communication.
Optimizing for Learning
Explore cognitive science techniques to enhance SRE learning, incident response, and team collaboration. Optimize human observability for better system understanding and problem-solving.
Privacy Budget Scheduling
Explores privacy budget scheduling in machine learning, introducing PrivateKube for managing differential privacy as a resource. Presents DPF algorithm for fair allocation of non-replenishable privacy budgets in ML workloads.
Zeph - Cryptographic Enforcement of End-to-End Data Privacy
Cryptographic system for enforcing user-defined privacy policies in real-time data analytics, ensuring compliance and protection against breaches while maintaining scalability and low latency.
Chip Decapping on a Budget
Learn DIY integrated circuit decapping techniques to reveal hidden chip designs using budget-friendly methods. Explore mechanical and chemical removal processes, laser cutting, and more.
Adventures in Hardware Hacking or Building Expensive Tools on a Budget
Explore hardware hacking techniques like CT scanning and chip decapping for non-destructive device analysis, circuit reconstruction, and vulnerability identification in embedded systems and access control.
Whitelisting LD PRELOAD for Fun and No Profit
Explore LD_PRELOAD process injection, its audit system, and whitelisting challenges. Learn about built-in protection vs. bolt-on solutions for Linux security.
5G Protocol Vulnerabilities and Exploits
Explore 5G protocol vulnerabilities and exploits, analyzing real traffic captures to uncover potential security issues in pre-authentication messages and discuss implications for mobile network security.
Command and KubeCTL - Real-World Kubernetes Security for Pentesters
Explore Kubernetes security challenges, attack techniques, and practical advice for pentesters and security practitioners in containerized environments.
Crossing the Border With Your Electronic Devices
Explore legal and technological aspects of protecting digital privacy during border crossings, with insights on device security and traveler rights.
Cisco SMB Products - Critical Vulnerabilities - 0-Day Release
Detailed examination of critical 0-day vulnerabilities in Cisco SMB switches, including web application and API exploits, leading to complete endpoint compromise and data leakage.
Resistance Isn't Futile - A Practical Approach to Prioritizing Defenses with Threat Modeling
Practical approach to threat modeling for prioritizing defenses. Learn to identify relevant adversaries, match them to your organization, and take action to improve security posture.
Voight-Kampff for Email Addresses
Explore email address reputation analysis for identifying spear-phishing and fraud. Learn about EmailRep, a system using OSINT techniques to assess email risk and differentiate real users from attackers.
The Hacker’s Guide to Cybersecurity Policy in 2020
Panel discussion on key cybersecurity policy issues in 2020, featuring experts from government, advocacy, and legal sectors. Covers election security, legislation, research exemptions, and ways for security professionals to engage in policy-making.