USENIX Courses

Know Your Kubernetes Deploys

Explore Shopify's approach to securing Kubernetes deployments through container signatures and admission controllers, ensuring a robust software supply chain.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Against On-Call - A Polemic

Challenges traditional on-call practices in tech, analyzing their impact on workers and proposing alternatives for a future without on-call shifts. Explores industry history and calls for change.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Bamboozling Certificate Authorities with BGP

Análisis de vulnerabilidades en la infraestructura de clave pública y demostración de ataques BGP para obtener certificados falsos, con propuestas de contramedidas para mejorar la seguridad.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Foreshadow - Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution

Unveiling Foreshadow: A microarchitectural attack exploiting speculative execution to extract secrets from Intel SGX enclaves, compromising trusted execution environments and remote attestation.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

TeEther - Gnawing at Ethereum to Automatically Exploit Smart Contracts

Explore automatic vulnerability detection and exploit generation for Ethereum smart contracts using teEther, a tool that analyzes binary bytecode to identify and exploit security weaknesses.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Polisis - Automated Analysis and Presentation of Privacy Policies Using Deep Learning

Automated framework for analyzing privacy policies using deep learning, enabling scalable queries and applications like privacy icon assignment and question-answering systems.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

BlackIoT - IoT Botnet of High Wattage Devices Can Disrupt the Power Grid

Explores potential attacks on power grids using IoT botnets of high-wattage devices, demonstrating vulnerabilities and impacts through simulations on real-world models. Highlights interdependency between IoT and power grid security.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Who Is Answering My Queries - Understanding and Characterizing Interception of the DNS Resolution Path

Explores DNS interception by on-path devices, revealing widespread occurrence and potential security risks. Presents novel detection methods and analyzes data from global IP addresses to uncover concerning practices.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Modelling and Analysis of a Hierarchy of Distance Bounding Attacks

Presentation on extending applied pi-calculus to model distance bounding protocols, analyzing security properties, and introducing a new property for protecting uncompromised devices like contactless payment cards.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Characterizing and Understanding Phases of SRE Practices

Explores the evolution of Site Reliability Engineering practices, offering insights into various stages of implementation across key areas like incident response, postmortems, and monitoring to help teams assess and advance their SRE journey.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Citron - Distributed Range Lock Management with One-sided RDMA

Innovative distributed range lock management system using one-sided RDMA, enhancing concurrent access to shared storage with improved throughput and reduced latency compared to CPU-based approaches.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

SHADE - Enable Fundamental Cacheability for Distributed Deep Learning Training

Innovative caching system for distributed deep learning training, improving performance by prioritizing important data samples and enhancing cache hit ratios in I/O-intensive workloads.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Perseus - A Fail-Slow Detection Framework for Cloud Storage Systems

Innovative framework for detecting and analyzing fail-slow failures in cloud storage systems, reducing tail latency and providing insights into root causes through large-scale dataset analysis.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

HadaFS - A File System Bridging the Local and Shared Burst Buffer for Exascale

Innovative file system for exascale supercomputers, bridging local and shared burst buffers. Enhances scalability, performance, and data sharing while addressing metadata management and I/O challenges.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

ROLEX - A Scalable RDMA-oriented Learned Key-Value Store for Disaggregated Memory Systems

Scalable RDMA-oriented learned key-value store for disaggregated memory systems, improving performance on dynamic workloads and addressing challenges in data storage and retrieval.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk