Keep it Simple, Stupid - Why the Usual Password Policies Don't Work, and What to Do About It
Explores ineffective password policies and presents a solution balancing security and usability. Discusses password history, attack models, human factors, and practical experiences with improved strategies.
Developers and Application Security - Who is Responsible?
Explore findings on security responsibilities in software development, discussing implications of IoT and open-source components in everyday devices and applications.
JEA - A PowerShell Toolkit to Secure a Post-Snowden World
Explore JEA, a PowerShell toolkit for enhancing system security by granting admins limited privileges, addressing concerns raised by high-profile data breaches and corporate hacking incidents.
Penetration Testing in the Cloud
Exploring challenges and methods for secure cloud penetration testing, including targeted approaches using Docker instances and internal network interfaces for ethical hacking.
Open Source Identity Management in the Enterprise
Explore Red Hat's integration of open source solutions for seamless enterprise identity management, covering SAML, Kerberos, LDAP, and more. Learn about scaling for cloud environments and best practices.
ReClaim - A Privacy-Preserving Decentralized Social Network
Explore ReClaim, a decentralized social network that prioritizes privacy through homomorphic encryption and peer-to-peer connections, enabling secure communication and data sharing without centralized control.
Facade - High-Throughput, Deniable Censorship Circumvention Using Web Search
Explores a novel censorship circumvention technique using web search terms to encode hidden messages, balancing deniability and performance for improved internet freedom.
An Internet with BRICS Characteristics - Data Sovereignty and the Balkanisation of the Internet
Explores BRICS countries' approaches to data sovereignty, examining their participation in internet governance forums and analyzing potential risks of different interpretations on global internet structure.
Towards a Comprehensive Picture of the Great Firewall's DNS Censorship
Comprehensive analysis of China's Great Firewall DNS censorship, revealing its structure, blacklist, and response patterns through probes from inside and outside the country.
Dr. Hacker, I Presume? - An Experimentally-based Discussion about Security of Teleoperated Surgical Systems
Exploring security vulnerabilities in teleoperated surgical systems and their potential implications, with a focus on developing patient-safe and privacy-preserving robotic surgery technologies.
Privacy-Preserving Microbiome Sequencing Analysis and Storage Systems
Exploring privacy-preserving techniques for microbiome sequencing analysis and storage, adapting methods from human genome studies to ensure data protection while enabling valuable research.
Ethnography of Computer Security Evasions in Healthcare Settings - Circumvention as the Norm
Explores healthcare professionals' workarounds to computer security, examining motivations and behaviors that weaken security policies. Discusses ethnographic methods to understand and address these circumventions.
Searching HIE with Differentiated Privacy Preservation
Innovative technique for protecting patient privacy in Health Information Exchange systems, focusing on preserving visit history confidentiality while enabling effective data sharing across hospitals.
Decision Support for Data Segmentation - Application to Pull Architectures for HIE
Explores decision support techniques for enforcing patient privacy preferences in health record sharing, addressing challenges in modern healthcare information exchange architectures.
Differentially Private Genome Data Dissemination Through Top-Down Specialization
Innovative approach for sharing genomic data while preserving privacy through differential privacy techniques. Explores block splitting, top-down subdivision, and noise addition to protect sensitive information while maintaining data utility.
Malware Prognosis - How to Do Malware Research in Medical Domain
Explore techniques for conducting malware research in healthcare, focusing on unique challenges and methodologies specific to medical devices and systems.
NSF Funding Opportunities for Cybersecurity Education and Workforce Development
Explore NSF funding opportunities for cybersecurity education and workforce development. Learn about available grants and programs to support initiatives in this critical field.
Security Impact of High Resolution Smartphone Cameras
Explores security risks of high-res smartphone cameras, including keystroke capture via facial reflections and fingerprint extraction, with potential for authentication bypass and identity fraud. Proposes mitigation strategies.
Inaudible Sound as a Covert Channel in Mobile Devices
Explores ultrasonic and vibration-based covert channels in mobile devices for data exfiltration, bypassing security measures. Proposes solutions to regulate sound-based vulnerabilities in information flow control.
Beyond Phish - Toward Detecting Fraudulent e-Commerce Websites at Scale
Explore techniques for detecting fraudulent e-commerce websites at scale, moving beyond traditional phishing detection methods to enhance online shopping security.
Unveiling Secrets in Binaries
Efficient heuristics for detecting cryptographic algorithms, state machines, and obfuscated code in binaries. Enhance reverse engineering workflows with architecture-agnostic techniques.