USENIX Enigma Conference Courses

Server-side Second Factors

Statistical framework for measuring login validity using IP and user agent, achieving high accuracy with user history and reputation systems, applicable for new and established services.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Building a DDoS Mitigation Pipeline

Explore CloudFlare's automated DDoS mitigation pipeline, featuring real-time threat detection, attack categorization, and centralized iptables management for efficient and rapid response to common attacks.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

What Makes Software Exploitation Hard?

Explore Project Zero's mission to make zero-day vulnerabilities harder, discussing technologies and trends that have increased difficulty in vulnerability discovery and exploitation.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Security and Usability from the Frontlines of Enterprise IT

Exploring the intersection of simplicity, usability, and security in IT controls, sharing insights from Duo's experience protecting diverse organizations and advocating for user-friendly security solutions.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

ToStaticHTML for Everyone - About DOMPurify

Exploring DOM-based XSS sanitation challenges and introducing DOMPurify, a novel solution for secure client-side filtering in modern web applications.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Verification, Auditing, and Evidence - If We Didn’t Notice Anything Wrong

Explores end-to-end verifiability in e-voting systems, discussing its implementation in Australia's vVote project and challenges for secure internet voting in government elections.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Keys Under Doormats - Mandating Insecurity

Explores the risks of mandating exceptional access to encrypted data for law enforcement, highlighting potential security vulnerabilities and governance challenges in today's complex Internet environment.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Sanitize, Fuzz, and Harden Your C++ Code

Explore dynamic testing tools for C/C++, including Sanitizers and libFuzzer, to find and prevent various bugs. Learn about security hardening techniques like Control Flow Integrity and Safe Stack.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Usable Security - The Source Awakens

Exploring usable security research beyond end-users, focusing on system administrators and developers. Uses TLS to illustrate security issues across all levels and actors in information systems.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Protecting High Risk Users

Exploring challenges in safeguarding high-risk individuals against cyber threats, focusing on targeted attacks, resource constraints, and real-world experiences in assisting vulnerable NGOs and persons.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Why Is Usable Security Hard, and What Should We Do About It?

Explore challenges in creating usable security software through Chrome's UI redesign. Learn practical insights and strategies for balancing security and user experience in large-scale applications.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

NSA TAO Chief on Disrupting Nation State Hackers

NSA's Tailored Access Operations chief discusses effective security practices to thwart network exploitation attempts by sophisticated adversaries, offering insights from the perspective of elite hackers.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Metric Perversity and Bad Decision-Making

Explore how perverse metrics lead to poor decision-making in security and privacy, and learn techniques to avoid these pitfalls for better risk assessment and management.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

Technology Abuse Clinics for Survivors of Intimate Partner Violence

Exploring technology abuse in intimate partner violence, this talk presents solutions through community-based clinics and introduces a toolkit for stakeholders to create their own support services.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

Why Is Our Security Research Failing? Five Practices to Change

Análise crítica das falhas na pesquisa de segurança cibernética, identificando 5 desafios principais e propondo recomendações para melhorar a eficácia e relevância dos estudos na área.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk