USENIX Security Talks & Presentations

USENIX

Hiding in Plain Signal - Physical Signal Overshadowing Attack on LTE

Explores a novel LTE signal injection attack, demonstrating higher success rates than fake base station attacks. Discusses implications and potential countermeasures for this physical signal overshadowing vulnerability.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

USENIX

RVFuzzer - Finding Input Validation Bugs in Robotic Vehicles through Control-Guided Testing

Discover input validation vulnerabilities in robotic vehicle control systems using RVFuzzer, a testing tool that leverages control models to improve bug detection accuracy and efficiency.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

USENIX

Lessons Learned from Evaluating the Robustness of Defenses to Adversarial Examples

Explore lessons from evaluating adversarial example defenses, common pitfalls, and recommendations for thorough defense assessments in machine learning security research.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

USENIX

Leaky Images - Targeted Privacy Attacks in the Web

Unveils a novel privacy attack exploiting shared images on popular websites, allowing attackers to track user visits and link identities across platforms without using scripts.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

FastKitten - Practical Smart Contracts on Bitcoin

Explore FastKitten, a framework for executing complex smart contracts on Bitcoin using trusted computing environments, offering efficiency and low costs for multi-round applications.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

The Secret Sharer - Evaluating and Testing Unintended Memorization in Neural Networks

Explore techniques to evaluate and mitigate unintended memorization in neural networks, focusing on privacy risks and practical strategies for deep learning practitioners.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

AntiFuzz - Impeding Fuzzing Audits of Binary Executables

Explore techniques to protect binary executables against automated bug-finding tools, focusing on impeding fuzzing, symbolic execution, and hybrid fuzzing approaches while maintaining performance.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

JEDI - Many-to-Many End-to-End Encryption and Key Delegation for IoT

Explore JEDI, a novel end-to-end encryption protocol for IoT systems, addressing security challenges in smart buildings and cities through key delegation and fine-grained access control.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Understanding and Improving Security and Privacy in Multi-User Smart Homes - A Design Exploration and In-Home User Study

Explore security and privacy challenges in multi-user smart homes, examining design principles and a prototype solution for respectful usage and user agency.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Platforms in Everything - Analyzing Ground-Truth Data on the Anatomy and Economics of Bullet-Proof Hosting

Empirical study on Bullet-Proof Hosting provider Maxided, analyzing business model, supply chain, customers, and finances. Reveals shifts in BPH landscape and potential intervention points for disrupting cybercrime-supporting services.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities

Innovative TLS vulnerability scanning methodology reveals widespread CBC padding oracle vulnerabilities, challenging assumptions about their exploitability and highlighting significant security risks in web infrastructure.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

The Art of The Scam - Demystifying Honeypots in Ethereum Smart Contracts

Explores honeypot smart contracts in Ethereum, their prevalence, and impact. Presents HoneyBadger tool for detecting honeypots, analyzing 2M+ contracts and identifying 690 honeypots with 240 victims.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Never Been KIST - Tor’s Congestion Management Blossoms with Kernel-Informed Socket Transport

Explores Tor's congestion issues, proposing KIST algorithm to improve network performance by optimizing socket management using real-time kernel information, reducing latency and increasing throughput.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

USENIX

Eclipse Attacks on Bitcoin’s Peer-to-Peer Network

Explore eclipse attacks on Bitcoin's P2P network, their impact on mining and consensus, and proposed countermeasures to enhance network security while maintaining decentralization.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

Control-Flow Bending - On the Effectiveness of Control-Flow Integrity

Explores Control-Flow Bending attacks on Control-Flow Integrity defenses, revealing vulnerabilities in fine-grained CFI implementations and demonstrating the necessity of shadow stacks for enhanced security against memory corruption.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk