Association for Computing Machinery (ACM) Courses

Safe Serializable Secure Scheduling - Transactions and the Trade-Off Between Security and Consistency

Explore the trade-offs between security and consistency in transaction scheduling, with real-world examples and attack demonstrations in information flow control systems.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Enforcing Least Privilege Memory Views for Multithreaded Applications

Explore memory isolation techniques for multithreaded applications, focusing on enforcing least privilege memory views to enhance security and prevent unauthorized access.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Strong Non-Interference and Type-Directed Higher-Order Masking

Explore differential power analysis, masking techniques, and strong non-interference in cryptographic systems. Learn about probing security and noiseless leakage models.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

High Fidelity Data Reduction for Big Data Security Dependency Analyses

Explores data reduction techniques for big data security dependency analyses, focusing on expendable dependencies, controlled loss, and domain knowledge to improve efficiency while maintaining accuracy.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Scalable Graph-based Bug Search for Firmware Images

Scalable graph-based approach for efficient bug detection in firmware images, improving vulnerability search speed and accuracy for IoT devices.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Reliable Third-Party Library Detection in Android and its Security Applications

Explore Android app security, focusing on third-party library detection, fragmentation issues, and vulnerability identification in mobile applications.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Statistical Deobfuscation of Android Applications

Learn techniques for statistically deobfuscating Android apps, including probabilistic graphical models and implementation strategies, to enhance app security and analysis.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Call Me Back! Attacks on System Server and System Apps in Android through Synchronous Callback

Explore Android security vulnerabilities through synchronous callbacks, examining attacks on system servers and apps, and discussing detection methods and defense strategies.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

The Misuse of Android Unix Domain Sockets and Security Implications

Explore Android Unix domain socket vulnerabilities, their security implications, and mitigation strategies in this comprehensive analysis of potential misuse and authentication weaknesses.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Is It Practical to Build a Truly Distributed Payment System? - Keynote

Explore distributed payment systems, mobile money revolution, and the DigiTally project with Ross Anderson. Insights on challenges, field trials, and lessons learned in building truly decentralized financial solutions.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Cybersecurity, Nuclear Security, and Illogical Logic - Keynote by Martin Hellman

Martin Hellman explores cybersecurity, nuclear security, and logical paradoxes, drawing connections between cryptography, national security, and mathematical logic while reflecting on his career and the broader implications of technology.

• YouTube
• 49 minutes
• On-Demand
• Free Video

SandScout - Automatic Detection of Flaws in iOS Sandbox Profiles

Automatic detection of flaws in iOS sandbox profiles using SandScout tool. Explores iOS architecture, sandbox profile language, and presents proof of concept for identifying security vulnerabilities.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Game of Decoys - Optimal Decoy Routing Through Game Theory

Explore game theory's application to optimal decoy routing strategies, enhancing internet censorship circumvention through strategic placement and deployment of decoy routers.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

PREDATOR - Proactive Recognition and Elimination of Domain Abuse at Time-Of-Registration

Proactive system for identifying and preventing domain abuse at registration time, using machine learning to analyze registration patterns and historical data.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Identifying the Scan and Attack Infrastructure Behind Amplification DDoS Attacks

Explore techniques to identify infrastructure behind amplification DDoS attacks, including scanning, honeypots, and trilateration methods for improved cybersecurity defenses.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk