Privacy Engineering: Not Just for Privacy Engineers
Explore Uber's collaborative approach to privacy engineering, blending data analysis with robust privacy measures to enhance services while ensuring regulatory compliance and user protection.
Countering Adversarial Cyber Campaigns - Alternative Strategies to Cyber War
Explores cyber campaigns as strategic alternatives to war, analyzing their impact on power politics and proposing new measures beyond conventional approaches to address current cyber policy challenges.
Learning from the Dark Web Dimension of Data - Valuing Stolen Data
Exploring the dark web's data economy to understand the true value of compromised information and develop better cybersecurity strategies for businesses and individuals.
If Red Teaming Is Easy - You're Doing It Wrong
Explore the challenges and complexities of effective Red Teaming in cybersecurity, going beyond simple penetration testing to improve organizational defenses through a comprehensive adversarial perspective.
Next Steps for Browser Privacy: Pursuing Protections Beyond Extensions
Exploring privacy improvements beyond browser extensions, focusing on Brave's innovative approaches to enhance user protection and encourage broader research in web privacy.
Hardware Is the New Software - Finding Exploitable Bugs in Hardware Designs
Explore techniques for identifying and exploiting security vulnerabilities in hardware designs, focusing on RISC-V and OR1k CPU architectures using innovative tools and symbolic execution.
Stethoscope: Securely Configuring Devices without Systems Management
Discover Stethoscope, Netflix's open-source tool for secure device configuration. Learn how it guides users to improve security without administrative access, ideal for BYOD environments and third-party collaborations.
Grey Science: Bridging Academic and Underground Cybersecurity Research
Exploring synergies between academic and non-academic cybersecurity research to foster collaboration and innovation in addressing critical security and privacy challenges.
Designing for Interpersonal Security - A New Threat Framework
Explores interpersonal threat modeling for consumer technology, addressing security concerns from cohabitants and shared devices. Challenges traditional assumptions to better protect individuals and at-risk populations.
The Offline Dimension of Online Crime
Exploring the offline dimension of cybercrime, challenging the notion of anonymity and revealing local elements in criminal networks through extensive global fieldwork and interviews.
Rethinking the Detection of Child Sexual Abuse Imagery on the Internet
Longitudinal study on child sexual abuse imagery distribution, revealing challenges in detection and proposing solutions to combat its spread across the Internet.
Why Even Experienced and Highly Intelligent Developers Introduce API Vulnerabilities
Explores why experienced developers introduce vulnerabilities through API misuse, examining cognitive factors and personality traits affecting code security detection abilities.
Modern Mind Control - Public Opinion Manipulation in Our Online World
Explores techniques for manipulating public opinion online, including fake news and social media campaigns. Examines historical precedents, current methods, and ways to identify and trace these influence operations.
Protecting Firefox Data with Content Signatures
Explore Firefox's content signature protocol, designed to protect data integrity against transport intermediaries and server compromises, ensuring secure updates for millions of users.
Custom Processing Unit - Tracing and Patching Intel Atom Microcode
Unveils groundbreaking framework for observing, tracing, and patching Intel Atom microcode execution, offering unprecedented insights into CPU internals and microcode update processes.
Backdooring of Real Time Automotive OS Devices
Explore vulnerabilities in automotive embedded devices, focusing on bare-metal software and real-time constraints. Learn about potential security risks and backdooring techniques in critical automotive systems.
Resting on Feet of Clay - Securely Bootstrapping OPC UA Deployments
Explore security challenges in OPC UA deployments, focusing on secure bootstrapping methods and addressing vulnerabilities in industrial control systems.
Skeletons in the App Sandbox - 5+ Ways to Escape
Explore vulnerabilities in Apple's App Sandbox, uncovering methods to bypass security measures and escape containment, with insights on improving iOS and macOS protection.
Protecting Privacy with Math - Census Bureau Collaboration
Explore mathematical techniques for protecting privacy in data analysis, focusing on differential privacy and its applications in census data collection and statistical safeguards.
Exploiting Windows COM - WinRT Services
Discover techniques for exploiting Windows COM/WinRT services, uncovering vulnerabilities in cross-process communication and UWP applications for potential LPE, RCE, and sandbox escape attacks.
Internal Affairs - Hacking File System Access from the Web
Explore vulnerabilities in the File System Access API, revealing how malicious websites can exploit it for arbitrary code execution and bypass security measures.