USENIX Courses

Not Everything is Dark and Gloomy - Power Grid Protections Against IoT Demand Attacks

Explores IoT demand attacks on power grids, analyzing cascading outages and system vulnerabilities. Presents findings from a large-scale North American grid study, discussing protective measures and future challenges.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms

Exploring security vulnerabilities in smart home platforms through reverse engineering and phantom device testing, revealing unexpected state transitions and potential attacks.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Hiding in Plain Signal - Physical Signal Overshadowing Attack on LTE

Explores a novel LTE signal injection attack, demonstrating higher success rates than fake base station attacks. Discusses implications and potential countermeasures for this physical signal overshadowing vulnerability.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

RVFuzzer - Finding Input Validation Bugs in Robotic Vehicles through Control-Guided Testing

Discover input validation vulnerabilities in robotic vehicle control systems using RVFuzzer, a testing tool that leverages control models to improve bug detection accuracy and efficiency.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Lessons Learned from Evaluating the Robustness of Defenses to Adversarial Examples

Explore lessons from evaluating adversarial example defenses, common pitfalls, and recommendations for thorough defense assessments in machine learning security research.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Leaky Images - Targeted Privacy Attacks in the Web

Unveils a novel privacy attack exploiting shared images on popular websites, allowing attackers to track user visits and link identities across platforms without using scripts.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

FastKitten - Practical Smart Contracts on Bitcoin

Explore FastKitten, a framework for executing complex smart contracts on Bitcoin using trusted computing environments, offering efficiency and low costs for multi-round applications.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

The Secret Sharer - Evaluating and Testing Unintended Memorization in Neural Networks

Explore techniques to evaluate and mitigate unintended memorization in neural networks, focusing on privacy risks and practical strategies for deep learning practitioners.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

AntiFuzz - Impeding Fuzzing Audits of Binary Executables

Explore techniques to protect binary executables against automated bug-finding tools, focusing on impeding fuzzing, symbolic execution, and hybrid fuzzing approaches while maintaining performance.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

JEDI - Many-to-Many End-to-End Encryption and Key Delegation for IoT

Explore JEDI, a novel end-to-end encryption protocol for IoT systems, addressing security challenges in smart buildings and cities through key delegation and fine-grained access control.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Understanding and Improving Security and Privacy in Multi-User Smart Homes - A Design Exploration and In-Home User Study

Explore security and privacy challenges in multi-user smart homes, examining design principles and a prototype solution for respectful usage and user agency.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Platforms in Everything - Analyzing Ground-Truth Data on the Anatomy and Economics of Bullet-Proof Hosting

Empirical study on Bullet-Proof Hosting provider Maxided, analyzing business model, supply chain, customers, and finances. Reveals shifts in BPH landscape and potential intervention points for disrupting cybercrime-supporting services.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities

Innovative TLS vulnerability scanning methodology reveals widespread CBC padding oracle vulnerabilities, challenging assumptions about their exploitability and highlighting significant security risks in web infrastructure.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

The Art of The Scam - Demystifying Honeypots in Ethereum Smart Contracts

Explores honeypot smart contracts in Ethereum, their prevalence, and impact. Presents HoneyBadger tool for detecting honeypots, analyzing 2M+ contracts and identifying 690 honeypots with 240 victims.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Multi-Queue Fair Queuing

Introduces MQFQ, a fair and efficient scheduler for multi-queue systems, addressing fairness issues in high-speed devices while maintaining scalability and performance.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk