USENIX Enigma Conference Courses

When Malware is Packin' Heat

Exploring packing in malware and benign applications, its impact on anti-virus systems, and the challenges in distinguishing between packed malicious and legitimate software.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Going Nuclear - Programmatic Protections against Extreme Vetting, Social Pressures, and Coercion

Explore programmatic options for protecting sensitive data against forced access, including a "nuclear" option to revoke access and wipe data when under threat.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

We Gave You This Internet, Now Play by Our Rules

Exploring how technologists' assumptions impact user security, challenging common beliefs in the security community, and advocating for more inclusive design practices in Internet platforms.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Hacking Sensors

Exploración de vulnerabilidades en sensores de sistemas críticos, demostrando ataques y discutiendo defensas para dispositivos médicos, drones y wearables. Enfoque en la seguridad de sistemas de detección y actuación.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Putting Privacy Notices to the Test

Exploring challenges and improvements in privacy notices and security warnings, discussing cognitive processes, and presenting user studies to enhance effectiveness through iterative design.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

What Cybersecurity Can Learn from the Secret Service

Exploring cybersecurity lessons from Secret Service strategies, focusing on interior defense and environmental control to detect and neutralize intruders effectively despite porous network boundaries.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

The Paper Ballot Is Not Enough

Exploring cryptographic techniques for inherent election integrity, challenging results with objective evidence, and improving voter registration confidence.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Secrets at Scale - Automated Bootstrapping of Secrets & Identity in the Cloud

Explore Netflix's innovative approach to securely managing secrets and identities for thousands of microservices in a cloud environment, addressing scalability and self-healing challenges.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Moving Account Recovery Beyond Email and the Secret Question

Innovative account recovery protocol beyond traditional methods, offering user choice, privacy, and potential for end-to-end encryption key recovery. Addresses limitations of current practices in online identity management.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Beyond Warm and Fuzzy - Ethics as a Value Prop

Exploring industry ethics as a crucial factor in balancing privacy, security, innovation, and autonomy in the face of emerging sociotechnical challenges in smart technologies and predictive services.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Lessons Learned While Protecting Gmail

Insights into Gmail's defense strategies against various cyber threats, covering spam detection, phishing prevention, malware scanning, network security, and web frontend protection.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

The Global Conversation on Encryption

Explores global government proposals affecting encryption, their potential impacts on security and rights, and how various stakeholders are responding. Discusses ways to support strong encryption policies.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Panopticlick - Fingerprinting Your Web Presence

Explore web fingerprinting techniques and learn effective privacy-enhancing strategies to protect yourself from invasive trackers while browsing the internet.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Server-side Second Factors

Statistical framework for measuring login validity using IP and user agent, achieving high accuracy with user history and reputation systems, applicable for new and established services.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Building a DDoS Mitigation Pipeline

Explore CloudFlare's automated DDoS mitigation pipeline, featuring real-time threat detection, attack categorization, and centralized iptables management for efficient and rapid response to common attacks.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk