USENIX Courses

MoonShine - Optimizing OS Fuzzer Seed Selection with Trace Distillation

Optimizing OS fuzzer seed selection through trace distillation, improving code coverage and vulnerability detection in Linux kernel testing.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

FUZE - Towards Facilitating Exploit Generation for Kernel Use-After-Free Vulnerabilities

Explore automated exploit generation for kernel Use-After-Free vulnerabilities using FUZE framework, enhancing security analysis efficiency and exploitability evaluation for complex OS kernels.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

QSYM - A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing

Explores QSYM, a fast concolic execution engine for hybrid fuzzing, integrating symbolic emulation with native execution to find bugs in complex software more efficiently than traditional methods.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Malicious Management Unit - Why Stopping Cache Attacks in Software is Harder Than You Think

Explores indirect cache attacks bypassing software-based defenses by exploiting MMU operations, challenging existing security measures and revealing vulnerabilities in cache isolation techniques.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

NetHide - Secure and Practical Network Topology Obfuscation

NetHide: A framework for network topology obfuscation that mitigates link-flooding attacks while preserving debugging capabilities. Leverages programmable network devices to modify path tracing probes at line-rate, balancing security and usability.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Erays - Reverse Engineering Ethereum's Opaque Smart Contracts

Reverse engineering tool for Ethereum smart contracts, providing insights into code complexity, reuse, and linking contracts to public source code. Demonstrates applications in high-value wallets, arbitrage bots, and popular games.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible

Humorous critique of tech industry's approach to security, highlighting flaws in machine learning, AI, and IoT while advocating for ethical computing and thoughtful development.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

More Than Capacity - Performance-Oriented Evolution of Pangu in Alibaba

Evolution of Alibaba's Pangu storage system: embracing SSD and RDMA technologies, reducing I/O latency, and transitioning to performance-oriented storage with innovative designs for improved efficiency and reliability.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Practical Design Considerations for Wide Locally Recoverable Codes - LRCs

Explores wide Locally Recoverable Codes for efficient data storage, introducing novel designs like Uniform Cauchy LRCs that improve reliability and performance in large-scale storage clusters.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Hunting for Risky Dependencies in the World of Microservices

Discover how to identify and mitigate hidden vulnerabilities in microservice architectures using OpenTelemetry, with real-world examples from Google Maps' high-risk dependencies.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

The Biases Confronting SREs

Explore biases in SRE, their impact on organizations, and strategies for mitigation. Learn to identify, discuss, and address cognitive biases and stereotypes to improve workplace equity and SRE integration.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Lamphone - Passive Sound Recovery from a Desk Lamp's Light Bulb Vibrations

Explore Lamphone, a novel optical side-channel attack that recovers sound from desk lamp vibrations, enabling passive eavesdropping from a distance with high-quality results.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models

Novel model inversion attacks on classification models reveal vulnerabilities in ML technologies, potentially leaking sensitive training data. Explores confidence score-based and label-only attacks, demonstrating disparate vulnerability across different…

• YouTube
• 14 minutes
• Self-Paced
• Conference Talk

Who Are You - I Really Wanna Know - Detecting Audio DeepFakes Through Vocal Tract Reconstruction

Explore innovative audio deepfake detection using vocal tract reconstruction. Learn how fluid dynamics and articulatory phonetics can identify impossible anatomical arrangements in synthesized speech.

• YouTube
• 14 minutes
• Self-Paced
• Conference Talk

Immortal Threads - Multithreaded Event-driven Intermittent Computing on Ultra-Low-Power Microcontrollers

Explore a novel programming model for intermittent computing on ultra-low-power microcontrollers, enabling efficient multithreaded processing and event handling with minimal progress loss during power failures.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk