USENIX Security Talks & Presentations

USENIX

Never Been KIST - Tor’s Congestion Management Blossoms with Kernel-Informed Socket Transport

Explores Tor's congestion issues, proposing KIST algorithm to improve network performance by optimizing socket management using real-time kernel information, reducing latency and increasing throughput.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

USENIX

Eclipse Attacks on Bitcoin’s Peer-to-Peer Network

Explore eclipse attacks on Bitcoin's P2P network, their impact on mining and consensus, and proposed countermeasures to enhance network security while maintaining decentralization.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

Control-Flow Bending - On the Effectiveness of Control-Flow Integrity

Explores Control-Flow Bending attacks on Control-Flow Integrity defenses, revealing vulnerabilities in fine-grained CFI implementations and demonstrating the necessity of shadow stacks for enhanced security against memory corruption.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

USENIX

Protecting Privacy of BLE Device Users

Explores BLE device privacy vulnerabilities and introduces BLE-Guardian, a system protecting user privacy by controlling device discovery and access without modifying existing devices or protocols.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

USENIX

K-Fingerprinting - A Robust Scalable Website Fingerprinting Technique

Explores k-fingerprinting, a robust website fingerprinting technique using random decision forests, demonstrating high accuracy in identifying visited web pages through encrypted connections.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

USENIX

UNVEIL - A Large-Scale, Automated Approach to Detecting Ransomware

Automated approach to detect ransomware through dynamic analysis, focusing on file tampering and desktop changes. Improves detection of evasive ransomware unnoticed by traditional antimalware solutions.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

USENIX

Stealing Machine Learning Models via Prediction APIs

Explores model extraction attacks on machine learning systems, demonstrating vulnerabilities in publicly accessible ML interfaces and proposing potential countermeasures to protect confidential models.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

USENIX

Virtual U - Defeating Face Liveness Detection by Building Virtual Models from Your Public Photos

Innovative approach to bypass face authentication using 3D models created from social media photos, exploiting virtual reality to simulate liveness and fool security systems.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

USENIX

Lock It and Still Lose It - On the -In-Security of Automotive Remote Keyless Entry Systems

Unveils vulnerabilities in automotive remote keyless entry systems, demonstrating how attackers can exploit flaws to gain unauthorized access to vehicles from major manufacturers.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

zxcvbn - Low-Budget Password Strength Estimation

Explore zxcvbn, an innovative password strength estimator that outperforms traditional methods. Learn its efficient design, accuracy, and easy implementation for enhanced online security.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

USENIX

fTPM - A Software-Only Implementation of a TPM Chip

Explore software-based TPM implementation using ARM TrustZone, overcoming hardware limitations to provide robust security features for trusted computing in mobile devices.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

USENIX

Fast, Lean, and Accurate - Modeling Password Guessability Using Neural Networks

Neural networks for modeling password guessability: faster, smaller, and more accurate than existing methods. Enables real-time, client-side password strength evaluation with sub-second latency.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

Small World with High Risks - A Study of Security Threats in the npm Ecosystem

Analyzes security risks in npm ecosystem, revealing vulnerabilities due to dependencies, maintainer influence, and lack of maintenance. Discusses potential mitigations for the JavaScript community.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Tackling the Trust and Safety Crisis

Exploring challenges in building safe, trustworthy tech products for billions globally, drawing from past mistakes and suggesting ways forward in this complex, multidisciplinary issue.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

USENIX

Protecting Accounts from Credential Stuffing with Password Breach Alerting

Explore a privacy-preserving protocol for detecting exposed credentials, its implementation as a cloud service, and its effectiveness in prompting users to update compromised passwords.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk