USENIX Courses

General-Purpose f-DP Estimation and Auditing in a Black-Box Setting

Discover new black-box methods for statistically assessing f-Differential Privacy without prior algorithm knowledge, featuring complete trade-off curve estimation and violation detection.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Harness - Transparent and Lightweight Protection of Vehicle Control on Untrusted Android Automotive Operating System

Discover Harness, a lightweight security framework protecting vehicle control systems from Android Automotive OS vulnerabilities through hypervisor isolation.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Demystifying the (In)Security of QR Code-based Login in Real-world Deployments

Uncover critical security flaws in QR code-based login systems through systematic analysis of 47 top websites, revealing vulnerabilities that enable account takeover and privacy attacks.

• YouTube
• 13 minutes
• Self-Paced
• Free Video

OwlC - Compiling Security Protocols to Verified, Secure, High-Performance Libraries

Discover OwlC, a groundbreaking compiler that automatically generates verified, high-performance Rust libraries from security protocol specifications, bridging formal verification with real-world deployment.

• YouTube
• 13 minutes
• Self-Paced
• Free Video

Scoop - Mitigation of Recapture Attacks on Provenance-Based Media Authentication

Discover how Scoop uses depth sensing to detect recapture attacks against provenance-based media authentication, achieving up to 95% accuracy on mobile devices.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Tracking You from a Thousand Miles Away - Turning a Bluetooth Device into an Apple AirTag Without Root Privileges

Discover how researchers exploit Apple's Find My network to track Bluetooth devices without root access, achieving 90% success rates and posing serious privacy risks.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

GraphAce - Secure Two-Party Graph Analysis Achieving Communication Efficiency

Discover GraphAce, a breakthrough secure two-party graph analysis framework that eliminates edge-related network traffic and achieves up to 99.99% communication savings.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Understanding How Users Prepare for and React to Smartphone Theft

Explore research on smartphone theft victims' preparation strategies, recovery challenges, and emotional impacts, revealing gaps in current security measures and recovery tools.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Assessing the Aftermath - The Effects of a Global Takedown Against DDoS-for-Hire Services

Explore the real-world impact of law enforcement takedowns on DDoS-for-hire services through comprehensive data analysis and underground market research findings.

• YouTube
• 14 minutes
• Self-Paced
• Free Video

CloudFlow - Identifying Security-sensitive Data Flows in Serverless Applications

Discover CloudFlow, a novel framework for static analysis of security-sensitive data flows in serverless applications, addressing unique challenges in cloud computing security.

• YouTube
• 14 minutes
• Self-Paced
• Free Video

RollingEvidence - Autoregressive Video Evidence via Rolling Shutter Effect

Discover how rolling shutter effects in CMOS cameras create tamper-proof video evidence through physical-layer probes and autoregressive encoding for enhanced authenticity verification.

• YouTube
• 10 minutes
• Self-Paced
• Free Video

Your Shield is My Sword - A Persistent Denial-of-Service Attack via the Reuse of Unvalidated Caches in DNSSEC Validation

Uncover a novel DNSSEC vulnerability where troubleshooting mechanisms enable persistent DoS attacks, affecting major DNS services and lasting over 24 hours.

• YouTube
• 12 minutes
• Self-Paced
• Free Video

Ares - Comprehensive Path Hijacking Detection via Routing Tree

Discover Ares, a novel system detecting BGP path hijacking attacks using routing tree analysis and weighted edit distance for comprehensive network security protection.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Confusing Value with Enumeration - Studying the Use of CVEs in Academia

Explore how academic security research misuses CVE identifiers, revealing that 34% of claimed vulnerabilities lack confirmation and examining misconceptions in the review process.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

POPS - From History to Mitigation of DNS Cache Poisoning Attacks

Discover POPS, a novel DNS cache poisoning prevention system that integrates with IPS to detect and mitigate statistical attacks with zero false positives using simple rules and TC flag enhancement.

• YouTube
• 17 minutes
• Self-Paced
• Free Video