NDSS 2023: 94 Papers, Practical Takeaways For Security Teams Now

The Network and Distributed System Security (NDSS) Symposium has long been a cornerstone for professionals dedicated to fortifying digital infrastructures. In 2023, marking its 30th year, the event convened nearly 500 experts in San Diego, California, from February 27 to March 3. This gathering not only celebrated three decades of pioneering work but also propelled forward discussions on pressing cybersecurity challenges. Attendees delved into practical implementations, novel defenses, and the evolving threat landscape, making NDSS 2023 a pivotal moment for the field.

Event Overview and Participation Surge

Hosted at the San Diego Waterfront area, NDSS 2023 drew academics, industry leaders, and practitioners from across the globe. The symposium’s focus on real-world applications distinguished it from purely theoretical conferences. With registration opening early and sessions spanning multiple days, participants engaged in a packed schedule that balanced deep technical dives with networking opportunities.

• Almost 500 attendees, reflecting growing interest in deployable security solutions.
• Co-located workshops expanded coverage to specialized domains like vehicular security and usable privacy.
• Hybrid elements ensured broader accessibility, though in-person interactions fueled innovation.

The event’s milestone status amplified its impact, with retrospectives highlighting progress since 1994. Organizers from the Internet Society and NDSS Foundation emphasized community-driven advancements in securing networks and distributed systems.

Distinguished Keynote Addresses

Keynotes set the tone for intellectual rigor. Richard Ford, from Forward Edge-AI, delivered “ChatGPT Through an Offensive Security Lens: Embracing a Brave New World.” He examined how generative AI tools like ChatGPT could be weaponized by attackers for phishing, malware generation, and reconnaissance. Ford advocated for proactive defenses, urging security teams to harness AI offensively to stay ahead.1

Another highlight was David Brumley’s talk on “Automated Vulnerability Discovery: The Good, The Bad, and The Ugly.” Brumley, from Carnegie Mellon University, showcased tools like Mayhem, which have uncovered thousands of vulnerabilities. He discussed ethical automation in fuzzing and symbolic execution, balancing discovery speed with false positive reduction. These sessions sparked debates on AI’s dual role in security.

Core Technical Program: 94 Cutting-Edge Papers

The heart of NDSS 2023 was its technical program, featuring 94 rigorously peer-reviewed papers. Selections spanned intrusion detection, privacy-preserving protocols, and blockchain security. Authors presented findings on data plane monitoring, Electron app vulnerabilities, and robust counting sketches for high-speed networks.2

Posters complemented papers, with 40 displays allowing interactive feedback. Topics included quantum-resistant cryptography and side-channel mitigations. Reviewers prioritized practical impact, ensuring presentations offered deployable insights.

Co-Located Workshops: Broadening Horizons

NDSS 2023 hosted workshops addressing niche threats. SpaceSec explored satellite and space system vulnerabilities, crucial amid rising commercial space activities. VehicleSec focused on automotive cybersecurity, covering authentication and intrusion detection in connected vehicles.3

USEC, the Symposium on Usable Security and Privacy, highlighted human factors. Sessions dissected password managers’ pitfalls and AI-assisted threat modeling. These events fostered cross-pollination, with findings feeding into the main program.

• VehicleSec: Keynotes on EV battery hacks and V2X protocols.
• SpaceSec: Defenses for low-earth orbit constellations.
• USEC: Empirical studies on phishing susceptibility.

Emerging Themes and Research Trends

Analysis of accepted papers revealed dominant trends. AI/ML integration dominated, with 25% addressing adversarial attacks on models. Quantum threats prompted post-quantum cryptography papers, aligning with NIST standards.4 Supply chain security gained traction post-SolarWinds, emphasizing zero-trust architectures.

Usable security evolved, blending HCI with crypto primitives. Distributed systems papers tackled edge computing risks in 5G/6G eras. Sustainability emerged subtly, with efficient algorithms reducing computational footprints.

Practical Implications for Industry

NDSS 2023 transcended academia, offering actionable takeaways. Ford’s keynote inspired red-team AI exercises, while Brumley’s tools are now in CI/CD pipelines. Posters on Electron security prompted framework updates, mitigating real exploits.

Industry sponsors like Google and Microsoft showcased integrations. Panels discussed public-private partnerships, echoing Internet Society’s deployment goals. Attendees left equipped to enhance protocols like TLS 1.3 and advance DNSSEC adoption.

Community Impact and Future Directions

The 30th anniversary retrospective traced NDSS’s legacy: from early firewall papers to today’s ML defenses. NSF grants supported student attendance, nurturing talent.5 Videos on YouTube extended reach, with highlights from SpaceSec and USEC garnering thousands of views.6

Looking ahead, NDSS 2024 promises deeper quantum and AI focus. Organizers called for diverse submissions, addressing global south challenges.

FAQs

What was the main focus of NDSS 2023?

Practical network and distributed system security, emphasizing implementation and deployment.

How many papers were presented?

94 full papers plus 40 posters, covering diverse threats.

Who delivered the keynotes?

Richard Ford on AI offense and David Brumley on vulnerability automation.

Were there workshops?

Yes, including SpaceSec, VehicleSec, and USEC for specialized topics.

Is NDSS content available online?

Programs, papers, and videos are on the official NDSS site.

Conclusion: Propelling Security Forward

NDSS 2023 exemplified collaborative excellence, blending milestone celebrations with forward-looking research. Its emphasis on deployable tech equips the community against sophisticated threats. As networks evolve, events like NDSS remain indispensable for a secure digital future.