USENIX Courses

A First Look at Governments' Enterprise Security Guidance

Explore the first systematic analysis of government cybersecurity guidance across 41 countries, revealing inconsistencies in enterprise security recommendations even among allies.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

Shadowed Realities - An Investigation of UI Attacks in WebXR

Uncover novel UI attack techniques in WebXR environments and their impact on user experience through comprehensive taxonomy and 100-participant study findings.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

An Interview Study on Practices, Experiences, and Challenges of Updating Cryptographic Code

Explore insights from 21 experienced developers on cryptographic code updates, revealing challenges, practices, and needs for secure transitions including post-quantum cryptography.

• YouTube
• 14 minutes
• Self-Paced
• Free Video

Serverless Functions Made Confidential and Efficient with Split Containers

Discover how split containers revolutionize serverless security by separating function execution from management, achieving up to 215× performance gains on confidential virtual machines.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Context Matters - Qualitative Insights into Developers' Approaches and Challenges with Software Composition Analysis

Uncover how developers struggle with Software Composition Analysis tools and learn why contextual information is crucial for effective vulnerability management in software projects.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

X.509DoS - Exploiting and Detecting Denial-of-Service Vulnerabilities in Cryptographic Libraries using Crafted X.509 Certificates

Discover how crafted X.509 certificates can exploit DoS vulnerabilities in cryptographic libraries, revealing 18 new security flaws across mainstream implementations.

• YouTube
• 13 minutes
• Self-Paced
• Free Video

Catch-22 - Uncovering Compromised Hosts using SSH Public Keys

Discover how to identify compromised SSH servers at Internet scale using public key authentication challenges, uncovering 21,700+ infected systems across 144 countries without requiring access.

• YouTube
• 12 minutes
• Self-Paced
• Free Video

Abusability of Automation Apps in Intimate Partner Violence

Explore how automation apps like iOS Shortcuts can be exploited for surveillance and harassment in intimate partner violence, revealing security vulnerabilities and detection methods.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

An Industry Interview Study of Software Signing for Supply Chain Security

Explore industry perspectives on software signing challenges through interviews with 18 security practitioners, revealing technical and organizational barriers to supply chain security.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Malicious LLM-Based Conversational AI Makes Users Reveal Personal Information

Discover how malicious LLM-based chatbots can manipulate users into revealing personal information through strategic conversation techniques and social engineering tactics.

• YouTube
• 13 minutes
• Self-Paced
• Free Video

Safe Evaluation and Rollout of AI Models

Explore approaches for safely evaluating and rolling out AI models in production systems, focusing on measuring performance across user inputs to detect regressions requiring fixes or rollbacks.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Shoal++ - High Throughput DAG BFT Can Be Fast and Robust

Discover Shoal++, a novel DAG-based Byzantine Fault Tolerant consensus system that achieves high throughput while reducing latency by up to 60% compared to existing DAG-BFT protocols.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Self-Clocked Round-Robin Packet Scheduling

Discover Self-Clocked Round-Robin Scheduling (SCRR), a parameter-less packet scheduler that improves upon Deficit Round Robin by reducing CPU overhead 23% and application latency 71%.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

PRED - Performance-oriented Random Early Detection for Consistently Stable Performance in Datacenters

Discover PRED, a novel system for automatic RED parameter adjustment in datacenter networks, achieving 66% lower queue length and 80% improved flow completion times through dynamic traffic adaptation.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

MeshTest - End-to-End Testing for Service Mesh Traffic Management

Discover MeshTest, an automated testing framework for service mesh traffic management that generates configurations and test suites to find bugs in systems like Istio and Linkerd.

• YouTube
• 14 minutes
• Self-Paced
• Free Video