USENIX Courses

A Usability Study of Five Two-Factor Authentication Methods

Comprehensive usability study comparing five two-factor authentication methods, examining setup procedures, user experiences, and preferences to inform better security implementations for online accounts.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Why People - Don't - Use Password Managers Effectively

Explores user attitudes towards password managers, revealing differences between built-in and separate tool users, and provides insights to improve adoption and effective usage of these security tools.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Keepers of the Machines - Examining How System Administrators Manage Software Updates

Examining system administrators' software update management practices, challenges, and potential improvements for multiple machines to enhance organizational cybersecurity.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Privacy and Security Threat Models and Mitigation Strategies of Older Adults

Explores privacy and security perceptions of older adults using smart technologies, identifying unique challenges, misconceptions, and mitigation strategies to inform better design and protection measures.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Personal Information Leakage by Abusing the GDPR 'Right of Access'

Explores GDPR 'Right of Access' vulnerabilities, revealing how impersonation tactics can lead to unauthorized data access. Offers insights on improving identity verification processes for enhanced data protection.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

I Don't Own the Data - End User Perceptions of Smart Home Device Data Practices and Risks

Explores user perceptions of smart home device data practices, revealing uncertainties about data handling and how experiences shape security concerns and behaviors in connected homes.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

The Effect of Entertainment Media on Mental Models of Computer Security

Explores how entertainment media shapes people's understanding of computer security, identifying misconceptions from fictional tropes and examining how viewers evaluate realism in portrayals.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Small World with High Risks - A Study of Security Threats in the npm Ecosystem

Analyzes security risks in npm ecosystem, revealing vulnerabilities due to dependencies, maintainer influence, and lack of maintenance. Discusses potential mitigations for the JavaScript community.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Tackling the Trust and Safety Crisis

Exploring challenges in building safe, trustworthy tech products for billions globally, drawing from past mistakes and suggesting ways forward in this complex, multidisciplinary issue.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

Protecting Accounts from Credential Stuffing with Password Breach Alerting

Explore a privacy-preserving protocol for detecting exposed credentials, its implementation as a cloud service, and its effectiveness in prompting users to update compromised passwords.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

WAVE - A Decentralized Authorization Framework with Transitive Delegation

Explore WAVE, a decentralized authorization framework offering autonomous delegation, enhanced security, and scalability without central trust, as applied to IoT device control.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

In-toto - Providing Farm-to-Table Guarantees for Bits and Bytes

Explore in-toto, a framework ensuring software supply chain integrity from inception to deployment, addressing vulnerabilities and protecting millions of users across various cloud environments.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Reading the Tea Leaves - A Comparative Analysis of Threat Intelligence

Comparative analysis of threat intelligence sources, evaluating metrics, coverage, and effectiveness for cybersecurity defense. Highlights limitations and challenges in using existing data.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

From Privacy by Design to Data Protection by Design - The Challenges of Turning Good Practice into a Legal Obligation

Exploring challenges of implementing Data Protection by Design under GDPR, including legal obligations, assessment criteria, and the role of privacy engineering in meeting comprehensive demands.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Inadvertently Making Cyber Criminals Rich - A Comprehensive Study of Cryptojacking Campaigns at Internet Scale

Comprehensive study on cryptojacking campaigns, revealing underestimated scale, infection methods, and prevalence across the internet. Insights on mining services, attack vectors, and compromised third-party software.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk