USENIX Security Talks & Presentations

USENIX

Never Been KIST - Tor’s Congestion Management Blossoms with Kernel-Informed Socket Transport

Explores Tor's congestion issues, proposing KIST algorithm to improve network performance by optimizing socket management using real-time kernel information, reducing latency and increasing throughput.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

USENIX

Eclipse Attacks on Bitcoin’s Peer-to-Peer Network

Explore eclipse attacks on Bitcoin's P2P network, their impact on mining and consensus, and proposed countermeasures to enhance network security while maintaining decentralization.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

Control-Flow Bending - On the Effectiveness of Control-Flow Integrity

Explores Control-Flow Bending attacks on Control-Flow Integrity defenses, revealing vulnerabilities in fine-grained CFI implementations and demonstrating the necessity of shadow stacks for enhanced security against memory corruption.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

USENIX

Protecting Privacy of BLE Device Users

Explores BLE device privacy vulnerabilities and introduces BLE-Guardian, a system protecting user privacy by controlling device discovery and access without modifying existing devices or protocols.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

USENIX

K-Fingerprinting - A Robust Scalable Website Fingerprinting Technique

Explores k-fingerprinting, a robust website fingerprinting technique using random decision forests, demonstrating high accuracy in identifying visited web pages through encrypted connections.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

USENIX

UNVEIL - A Large-Scale, Automated Approach to Detecting Ransomware

Automated approach to detect ransomware through dynamic analysis, focusing on file tampering and desktop changes. Improves detection of evasive ransomware unnoticed by traditional antimalware solutions.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

USENIX

Stealing Machine Learning Models via Prediction APIs

Explores model extraction attacks on machine learning systems, demonstrating vulnerabilities in publicly accessible ML interfaces and proposing potential countermeasures to protect confidential models.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

USENIX

Virtual U - Defeating Face Liveness Detection by Building Virtual Models from Your Public Photos

Innovative approach to bypass face authentication using 3D models created from social media photos, exploiting virtual reality to simulate liveness and fool security systems.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

USENIX

The Guard's Dilemma - Efficient Code-Reuse Attacks Against Intel SGX

Explores novel exploitation techniques against Intel SGX, demonstrating vulnerabilities in enclave code without requiring kernel privileges or crashes, even with existing randomization approaches.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

USENIX

Unveiling and Quantifying Facebook Exploitation of Sensitive Personal Data for Advertising Purposes

Unveils Facebook's exploitation of sensitive user data for advertising, quantifying its prevalence and discussing privacy implications under GDPR. Proposes a browser extension for user awareness.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

USENIX

Efail - Breaking S-MIME and OpenPGP Email Encryption Using Exfiltration Channels

Uncovers vulnerabilities in OpenPGP and S/MIME email encryption standards, demonstrating how malleability gadgets can be exploited to reveal encrypted content through exfiltration channels in various email clients.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

USENIX

GAZELLE - A Low Latency Framework for Secure Neural Network Inference

Efficient framework for secure neural network inference combining homomorphic encryption and two-party computation, outperforming existing systems in speed while preserving privacy for cloud-based machine learning.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

MoonShine - Optimizing OS Fuzzer Seed Selection with Trace Distillation

Optimizing OS fuzzer seed selection through trace distillation, improving code coverage and vulnerability detection in Linux kernel testing.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

USENIX

FUZE - Towards Facilitating Exploit Generation for Kernel Use-After-Free Vulnerabilities

Explore automated exploit generation for kernel Use-After-Free vulnerabilities using FUZE framework, enhancing security analysis efficiency and exploitability evaluation for complex OS kernels.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

QSYM - A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing

Explores QSYM, a fast concolic execution engine for hybrid fuzzing, integrating symbolic emulation with native execution to find bugs in complex software more efficiently than traditional methods.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk