Security and Usability from the Frontlines of Enterprise IT
Exploring the intersection of simplicity, usability, and security in IT controls, sharing insights from Duo's experience protecting diverse organizations and advocating for user-friendly security solutions.
ToStaticHTML for Everyone - About DOMPurify
Exploring DOM-based XSS sanitation challenges and introducing DOMPurify, a novel solution for secure client-side filtering in modern web applications.
Verification, Auditing, and Evidence - If We Didn’t Notice Anything Wrong
Explores end-to-end verifiability in e-voting systems, discussing its implementation in Australia's vVote project and challenges for secure internet voting in government elections.
Keys Under Doormats - Mandating Insecurity
Explores the risks of mandating exceptional access to encrypted data for law enforcement, highlighting potential security vulnerabilities and governance challenges in today's complex Internet environment.
Sanitize, Fuzz, and Harden Your C++ Code
Explore dynamic testing tools for C/C++, including Sanitizers and libFuzzer, to find and prevent various bugs. Learn about security hardening techniques like Control Flow Integrity and Safe Stack.
Usable Security - The Source Awakens
Exploring usable security research beyond end-users, focusing on system administrators and developers. Uses TLS to illustrate security issues across all levels and actors in information systems.
Protecting High Risk Users
Exploring challenges in safeguarding high-risk individuals against cyber threats, focusing on targeted attacks, resource constraints, and real-world experiences in assisting vulnerable NGOs and persons.
Why Is Usable Security Hard, and What Should We Do About It?
Explore challenges in creating usable security software through Chrome's UI redesign. Learn practical insights and strategies for balancing security and user experience in large-scale applications.
NSA TAO Chief on Disrupting Nation State Hackers
NSA's Tailored Access Operations chief discusses effective security practices to thwart network exploitation attempts by sophisticated adversaries, offering insights from the perspective of elite hackers.
Metric Perversity and Bad Decision-Making
Explore how perverse metrics lead to poor decision-making in security and privacy, and learn techniques to avoid these pitfalls for better risk assessment and management.
Technology Abuse Clinics for Survivors of Intimate Partner Violence
Exploring technology abuse in intimate partner violence, this talk presents solutions through community-based clinics and introduces a toolkit for stakeholders to create their own support services.
Why Is Our Security Research Failing? Five Practices to Change
Análise crítica das falhas na pesquisa de segurança cibernética, identificando 5 desafios principais e propondo recomendações para melhorar a eficácia e relevância dos estudos na área.
The Not Fake News Hour
Humorous tech policy update in "SNL Weekend Update" style, covering security, privacy, and current events. Delivered by Stanford researcher at USENIX Enigma conference.
Understanding Trust and Security Processes in the Open Source Software Ecosystem
Explores security challenges in open source software, including code review, dependency management, and trust issues. Shares insights from interviews and offers practical advice for improving supply chain security.
Building an Automated Machine for Discovering Privacy Violations at Scale
Exploring static analysis techniques for detecting and fixing privacy leaks in large codebases, addressing challenges in building privacy-focused tools for developers and privacy engineers.
A New Process to Tackle Misinformation on Social Media - Prevalence-Based Gradation
Exploring a novel "prevalence-based gradation process" to combat misinformation on social media platforms, focusing on efficient content moderation and calibrated corrective actions based on exposure levels.
Technical Metamorphosis - The 3 Stages of DSAR Automation
Explore the journey of automating Data Subject Access Request fulfillment, from initial steps to advanced validation, enhancing regulatory compliance and user experience.
The Slippery Slope of Cybersecurity Analogies
Explores the use and misuse of analogies in cybersecurity, examining their impact on understanding, development, and policies while providing tips to avoid pitfalls in their application.
Spotting the Differences - Quirks of Machine Learning in Security
Explore challenges in applying machine learning to cybersecurity, including dataset issues, adversarial tactics, and evaluation problems. Learn about potential solutions and future directions in this field.
Adventures in Authentication and Authorization
Explore Netflix's journey in implementing authentication and authorization for microservices, discussing technology choices, challenges, and innovative solutions for a robust zero-trust ecosystem.
Navigating the Sandbox Buffet
Explore diverse sandboxing techniques to isolate risky software, balancing performance, security, and developer experience. Learn to choose the right combination for your workloads.