Top Stories published by MIT Security Seminar in 2016

Attacking the Network Time Protocol (NTP)

Aanchal Malhotra from Boston University came to the MIT security seminar to talk about attacks on NTP. This talk was related to a paper she published and presented at NDSS 2016. I will give an overview and outline of the talk, and I refer you to the paper…


Beyond Sanitizers: Guided fuzzing and security hardening

Kostya Serebryany from Google came to give a talk about his experience building dynamic testing tools. I’ll present an overview of his talk, which includes work from various papers. To learn more about each individual tool, you can…


TumbleBit: An Untrusted Bitcoin-Compatible Anonymous Payment Hub

Ethan Heilman from Boston University gave a talk on TumbleBit: An Untrusted Bitcoin-Compatible Anonymous Payment Hub. I’ll present an overview of the work, and you can refer to his paper for more details.


CrossFire: An Analysis of Firefox Extension-Reuse Vulnerabilities

Engin Kirda from Northeastern University came to MIT to talk about recent work from his lab regarding Firefox extension-reuse vulnerabilities. I will outline the talk and work here, but for more information and…


CDN on Demand: Affordable DDoS Defense using Untrusted IaaS-Clouds

Yossi Gilad came to give a talk at the MIT on using untrusted IaaS clouds to prevent DDoS attacks, which was published in NDSS 2016. I will outline some keys points in his talk, but for more information, I refer you…


Privacy in a Data-Driven World

Roxana Geambasu from Columbia University came to speak at the MIT security seminar. She broadly talked about privacy in a data-driven world. What does she mean by this? For example, consider Gmail Ads. They serve ads based on information in your emails in Gmail. It’s not…


Thunderstrike: Apple EFI Firmware Security Vulnerabilities

Trammell Hudson came to the MIT security seminar to present his work on finding security bugs in Apple’s EFI firmware. I’ll give a brief overview of his talk and this area, but if you’re interested, you can find more information…