USENIX Courses

McSee - Evaluating Advanced Rowhammer Attacks and Defenses via Automated DRAM Traffic Analysis

Explore automated DRAM traffic analysis revealing critical gaps in DDR5 Rowhammer defenses and memory controller behaviors using the McSee platform.

• YouTube
• 10 minutes
• Self-Paced
• Free Video

SoK - So, You Think You Know All About Secure Randomized Caches?

Explore systematic analysis of secure randomized cache designs and their defense mechanisms against side-channel attacks in modern computer systems.

• YouTube
• 14 minutes
• Self-Paced
• Free Video

Enhanced Label-Only Membership Inference Attacks with Fewer Queries

Discover DHAttack, a novel label-only membership inference attack that achieves superior performance with minimal queries, overcoming sample and direction diversity challenges.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Hey Mum, I Dropped My Phone Down the Toilet - Investigating Hi Mum and Dad SMS Scams in the United Kingdom

Uncover how "Hi Mum and Dad" SMS scams work through empirical research analyzing 711 scammer interactions, revealing deception tactics and mitigation strategies.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Exploiting Inaccurate Branch History in Side-Channel Attacks

Uncover novel CPU vulnerabilities through branch prediction analysis, revealing three new attack primitives including Spectre variants and BiasScope for cross-privilege exploitation.

• YouTube
• 13 minutes
• Self-Paced
• Free Video

ECC.fail - Mounting Rowhammer Attacks on DDR4 Servers with ECC Memory

Discover how researchers successfully executed the first Rowhammer attack on Intel DDR4 ECC servers, bypassing memory protections to flip bits and compromise RSA keys without crashes.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

DP-BREM - Differentially-Private and Byzantine-Robust Federated Learning with Client Momentum

Discover how to achieve both differential privacy and Byzantine robustness in federated learning using client momentum to expose malicious attacks while preserving data privacy.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

"Please Don't Send That Bot Anything" - A Mixed-Methods Study of Personal Impersonation Attacks Targeting Digital Payments on Social Media

Uncover how personal impersonation attacks exploit social media trust to redirect digital payments, revealing attacker tactics and proposing platform security enhancements.

• YouTube
• 10 minutes
• Self-Paced
• Free Video

Encarsia - Evaluating CPU Fuzzers via Automatic Bug Injection

Discover how Encarsia framework automatically injects bugs into RISC-V CPU designs to evaluate hardware fuzzer effectiveness and reveal limitations in current testing approaches.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

BLuEMan - A Stateful Simulation-based Fuzzing Framework for Open-Source RTOS Bluetooth Low Energy Protocol Stacks

Discover BLuEMan, a simulation-based fuzzing framework for testing Bluetooth Low Energy protocol stacks in RTOS environments, achieving 18-162x faster testing speeds and uncovering new CVEs.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Thunderdome - Timelock-Free Rationally-Secure Virtual Channels

Explore Thunderdome, a revolutionary timelock-free payment channel network that uses wardens and game theory to enable secure multi-hop blockchain transactions.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

Gotta Detect 'Em All - Fake Base Station and Multi-Step Attack Detection in Cellular Networks

Discover how to detect fake base stations and multi-step attacks in cellular networks using machine learning techniques with 96% accuracy and real-time protection capabilities.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

SoK: Data Reconstruction Attacks Against Machine Learning Models - Definition, Metrics, and Benchmark

Explore a unified taxonomy and formal definitions for data reconstruction attacks against ML models, featuring new evaluation metrics and LLM-based visual assessment frameworks.

• YouTube
• 14 minutes
• Self-Paced
• Free Video

TimeTravel - Real-time Timing Drift Attack on System Time Using Acoustic Waves

Discover how acoustic waves can manipulate system time through RTC vulnerabilities, enabling forward/backward timing drift attacks with up to 93% accuracy on real-time systems.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Vulnerability of Text-Matching in ML/AI Conference Reviewer Assignments to Collusions

Uncover vulnerabilities in ML/AI conference reviewer assignment systems and how collusion rings exploit text-matching algorithms to manipulate peer review processes.

• YouTube
• 15 minutes
• Self-Paced
• Free Video