Breaking Trust – Shades of Crisis Across an Insecure Software Supply Chain
Explore software supply chain security threats, their impact, and potential solutions through analysis of 115 attacks and vulnerabilities from the past decade.
Hardware - A Double-Edged Sword for Security
Explore hardware's dual role in security: as a trust anchor and potential vulnerability. Learn about system-level threats, real-world examples, and promising solutions for detecting and preventing hardware vulnerabilities.
A Sound Mind in a Vulnerable Body - Practical Hardware Attacks on Deep Learning
Explores hardware vulnerabilities in deep learning systems, demonstrating how fault injection and side-channel attacks can compromise model accuracy and steal proprietary information, highlighting the need for robust ML-level defenses.
The Limits of Sandboxing and Next Steps
Exploring sandboxing limitations in Chrome security, discussing OS constraints, and introducing memory safety as a complementary approach to enhance software resilience.
Bringing Usable Crypto to 7 Million Developers
Insights on implementing client-side encryption for databases, covering challenges, solutions, and lessons learned from bringing authenticated encryption to a widely-used NoSQL database.
How Anonymous Is My Anonymized Data?
Explores data anonymization challenges, focusing on relationships between fields and external information that can compromise privacy. Discusses risk assessment and strategies for protecting sensitive data.
All Security Is Good(s)- Design Guidance for Economics - L Jean Camp - USENIX Enigma Conference - 2020
Explore economic aspects of security adoption failures, incentive-aligned design, and the balance between information sharing and privacy, with real-world examples and research insights.
The State of the Stalkerware - Eva Galperin - USENIX Enigma Conference - 2020
Eva Galperin discusses recent efforts to combat stalkerware, a covert surveillance tool often used in domestic abuse. She highlights initiatives by security companies, tech giants, and support organizations to protect victims.
Pre-Authentication Messages as a Common Root Cause of Cell Network Attacks - Yomna Nasser - USENIX Enigma - 2020
Explore cell network vulnerabilities, focusing on pre-authentication message exploitation. Learn about IMSI catchers, spoofing attacks, and ongoing efforts to address these security challenges.
BeyondProd- The Origin of Cloud-Native Security at Google - Brandon Baker - USENIX Enigma - 2020
Exploring Google's BeyondProd: A cloud-native security model emphasizing service trust, workload isolation, and automated vulnerability management for microservices-based architectures.
The Abuse Uncertainty Principle, and Other Lessons Learned from Measuring Abuse on the Internet - David Freeman - USENIX Enigma Conference - 2020
Explore strategies for measuring and prioritizing online abuse, including user reports, human labeling, and automated systems. Learn about the "Abuse Uncertainty Principle" and its implications for detection and metrics.
Trustworthy Elections - Joey Dodds, Galois and Free & Fair - USENIX Enigma Conference - 2020
Exploring challenges in US election systems and innovative solutions for trustworthy voting technology, including ElectionGuard and SSITH projects.
Convincing the Loser - Securing Elections Against Modern Threats - Ben Adida - USENIX Enigma - 2019
Explore modern voting system security, from settled practices to ongoing debates. Learn about audits, online voting, accessibility, and the mission of democracy in this informative talk.
It's Not "Our" Data- Do We Want to Create a World of No Surprises? - Denelle Dixon - USENIX Enigma Conference - 2019
Explore data practices, localization, and ethical challenges in the digital age. Learn about Lean Data Principles and ecosystem challenges for a more responsible data-driven world.
Building a Secure Data Market on Blockchain - USENIX Enigma 2019
Explore blockchain-based secure data markets for privacy-preserving analytics and machine learning, addressing challenges and showcasing real-world applications in healthcare and beyond.
User Agent 2.0 - What Can the Browser Do for the User? - Ben Livshits - USENIX Enigma Conference - 2019
Explores browser evolution as a user agent, advocating for smarter security mechanisms and informed decision-making to enhance user privacy and content monetization on the web.
Using Architecture and Abstractions to Design a Security Layer for TLS - USENIX Enigma 2019
Exploring TLS security layer architecture, POSIX socket API abstraction, and simplified certificate validation for easier secure application development and improved system-wide best practices.
How to Predict Which Vulnerabilities Will Be Exploited - Tudor Dumitras - USENIX Enigma Conference - 2019
Explore data-driven methods for predicting vulnerability exploitation, combining technical features and social media insights to assess real-world security risks and guide defensive strategies.
The URLephant in the Room - Emily Stark, Google - USENIX Enigma Conference - 2019
Exploring the challenges of URLs as security indicators, discussing user behavior, phishing attacks, and potential solutions for improving web security and user trust.
Cryptocurrency: Burn It With Fire - Nicholas Weaver - USENIX Enigma Conference - 2019
Exposé critique des cryptomonnaies et blockchains, soulignant leurs failles fondamentales, leur incompatibilité avec la finance moderne et leurs vulnérabilités exploitables, tout en proposant des pistes pour les contrer.
Bits and Bytes, Flesh and Blood, and Saving Real Lives via Clinical Simulations - Joshua Corman - USENIX Enigma - 2018
Explore critical healthcare cybersecurity issues, including connected medicine risks, recent attacks, and innovative clinical hacking simulations to improve patient safety and national security.