USENIX Enigma Conference Courses

The State of 0-Day in-the-Wild Exploitation

Comprehensive analysis of 0-day exploits from 2020, offering insights on vulnerabilities, exploitation methods, and strategies to enhance cybersecurity and protect users from unknown threats.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Privacy and Security Nutrition Labels to Inform IoT Consumers

Explore IoT device privacy and security labeling, addressing consumer concerns and empowering informed decisions through transparent, user-friendly information at the point of purchase.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Privacy, Measurably, Isn't Dead

Explore global privacy attitudes through data from 90,000+ respondents across 25+ countries. Discover key findings on current and future privacy perceptions, regional variations, and actionable insights for privacy advocates.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

The Adventurous Tale of Online Voting in Switzerland

Explore Switzerland's 15-year journey with online voting, its challenges, security issues, and the crucial role of international researchers in shaping future regulations and implementation.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Designing Verifiable Health Solutions for Global Pandemic

Exploration of verifiable health solutions for pandemic response, addressing public safety and privacy concerns through attestation, test results, and vaccination history tracking.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Does Your Threat Model Consider Country and Culture? A Case Study of Brazilian Internet Banking Security to Show That It Should

Explores unique cybersecurity challenges in Brazilian internet banking, highlighting how regional factors shape threats and the need for localized threat models in global security assessments.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Quantifying Memory Unsafety and Reactions to It

Explore memory unsafety in C/C++, its prevalence in major projects, and developer reactions. Learn strategies for addressing this critical issue in modern secure development.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Detecting Fake 4G LTE Base Stations in Real Time

Explore techniques for detecting fake 4G LTE base stations in real-time using open-source software and affordable hardware. Learn about IMSI catchers, their prevalence, and strategies to limit their effectiveness.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

What Shark Conservation Teaches Us about Emotionality and Effective Communication Strategies for Security and Privacy

Explore how shark conservation strategies can improve security and privacy communication, avoiding fear-based tactics for more effective public discourse and problem-solving approaches.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Breaking Trust – Shades of Crisis Across an Insecure Software Supply Chain

Explore software supply chain security threats, their impact, and potential solutions through analysis of 115 attacks and vulnerabilities from the past decade.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Hardware - A Double-Edged Sword for Security

Explore hardware's dual role in security: as a trust anchor and potential vulnerability. Learn about system-level threats, real-world examples, and promising solutions for detecting and preventing hardware vulnerabilities.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

A Sound Mind in a Vulnerable Body - Practical Hardware Attacks on Deep Learning

Explores hardware vulnerabilities in deep learning systems, demonstrating how fault injection and side-channel attacks can compromise model accuracy and steal proprietary information, highlighting the need for robust ML-level defenses.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

The Limits of Sandboxing and Next Steps

Exploring sandboxing limitations in Chrome security, discussing OS constraints, and introducing memory safety as a complementary approach to enhance software resilience.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Bringing Usable Crypto to 7 Million Developers

Insights on implementing client-side encryption for databases, covering challenges, solutions, and lessons learned from bringing authenticated encryption to a widely-used NoSQL database.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

How Anonymous Is My Anonymized Data?

Explores data anonymization challenges, focusing on relationships between fields and external information that can compromise privacy. Discusses risk assessment and strategies for protecting sensitive data.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk