USENIX Security Talks & Presentations

USENIX

Risky Business - Investigating the Security Practices of Vendors on an Online Anonymous Market Using Ground-Truth Data

Investigates security practices of vendors on dark web markets, revealing surprising vulnerabilities among digital item sellers compared to drug vendors. Analyzes password strength, 2FA usage, and PGP adoption.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

USENIX

Lock It and Still Lose It - On the -In-Security of Automotive Remote Keyless Entry Systems

Unveils vulnerabilities in automotive remote keyless entry systems, demonstrating how attackers can exploit flaws to gain unauthorized access to vehicles from major manufacturers.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

zxcvbn - Low-Budget Password Strength Estimation

Explore zxcvbn, an innovative password strength estimator that outperforms traditional methods. Learn its efficient design, accuracy, and easy implementation for enhanced online security.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

USENIX

fTPM - A Software-Only Implementation of a TPM Chip

Explore software-based TPM implementation using ARM TrustZone, overcoming hardware limitations to provide robust security features for trusted computing in mobile devices.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

USENIX

Fast, Lean, and Accurate - Modeling Password Guessability Using Neural Networks

Neural networks for modeling password guessability: faster, smaller, and more accurate than existing methods. Enables real-time, client-side password strength evaluation with sub-second latency.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

Small World with High Risks - A Study of Security Threats in the npm Ecosystem

Analyzes security risks in npm ecosystem, revealing vulnerabilities due to dependencies, maintainer influence, and lack of maintenance. Discusses potential mitigations for the JavaScript community.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Tackling the Trust and Safety Crisis

Exploring challenges in building safe, trustworthy tech products for billions globally, drawing from past mistakes and suggesting ways forward in this complex, multidisciplinary issue.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

USENIX

Protecting Accounts from Credential Stuffing with Password Breach Alerting

Explore a privacy-preserving protocol for detecting exposed credentials, its implementation as a cloud service, and its effectiveness in prompting users to update compromised passwords.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

WAVE - A Decentralized Authorization Framework with Transitive Delegation

Explore WAVE, a decentralized authorization framework offering autonomous delegation, enhanced security, and scalability without central trust, as applied to IoT device control.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

In-toto - Providing Farm-to-Table Guarantees for Bits and Bytes

Explore in-toto, a framework ensuring software supply chain integrity from inception to deployment, addressing vulnerabilities and protecting millions of users across various cloud environments.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Reading the Tea Leaves - A Comparative Analysis of Threat Intelligence

Comparative analysis of threat intelligence sources, evaluating metrics, coverage, and effectiveness for cybersecurity defense. Highlights limitations and challenges in using existing data.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

From Privacy by Design to Data Protection by Design - The Challenges of Turning Good Practice into a Legal Obligation

Exploring challenges of implementing Data Protection by Design under GDPR, including legal obligations, assessment criteria, and the role of privacy engineering in meeting comprehensive demands.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

USENIX

Inadvertently Making Cyber Criminals Rich - A Comprehensive Study of Cryptojacking Campaigns at Internet Scale

Comprehensive study on cryptojacking campaigns, revealing underestimated scale, infection methods, and prevalence across the internet. Insights on mining services, attack vectors, and compromised third-party software.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Not Everything is Dark and Gloomy - Power Grid Protections Against IoT Demand Attacks

Explores IoT demand attacks on power grids, analyzing cascading outages and system vulnerabilities. Presents findings from a large-scale North American grid study, discussing protective measures and future challenges.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms

Exploring security vulnerabilities in smart home platforms through reverse engineering and phantom device testing, revealing unexpected state transitions and potential attacks.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk