USENIX Security Talks & Presentations

USENIX

Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible

Humorous critique of tech industry's approach to security, highlighting flaws in machine learning, AI, and IoT while advocating for ethical computing and thoughtful development.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

USENIX

zxcvbn - Low-Budget Password Strength Estimation

Explore zxcvbn, an innovative password strength estimator that outperforms traditional methods. Learn its efficient design, accuracy, and easy implementation for enhanced online security.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

USENIX

The 2020 Election - Remote Voting, Disinformation, and Audit

Expert panel discusses challenges and technologies for safeguarding the 2020 US election amid pandemic concerns, disinformation, and pressure for remote voting, focusing on protecting process legitimacy and integrity.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

USENIX

Steal This Movie - Automatically Bypassing DRM Protection in Streaming Media

Explores a memory-based approach to bypass DRM protection in popular streaming services, demonstrating vulnerabilities in Amazon, Hulu, Spotify, and Netflix's content protection systems.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

USENIX

Shining Light on Internet-based Crimes Against Children

Explores Internet-based child exploitation crimes, their long-term impact on victims, and forensic tools for proactive rescue. Discusses privacy technology's role in both protection and potential misuse.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

USENIX

The Spies Hacking Our Phones Are Going Dark, and We're All in Trouble

Explore the alarming rise of commercial spyware tools used by nation-states for covert surveillance and sabotage. Learn about Citizen Lab's methodology for uncovering abuses and the challenges posed by zero-click attacks.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

USENIX

CSI NN - Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel

Reverse engineering neural networks through electromagnetic side channels, revealing architecture details like activation functions, layers, neurons, and weights using non-invasive techniques on ARM Cortex-M3 microcontrollers.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

USENIX

Shining Light on Internet-based Crimes Against Children

Explores Internet-based child exploitation crimes, their long-term impact on victims, and forensic tools for proactive rescue. Discusses privacy technology's role in both protection and potential misuse.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

USENIX

Wireless Attacks on Aircraft Instrument Landing Systems

Investigates vulnerabilities in aircraft instrument landing systems to wireless attacks using software-defined radio, demonstrating potential for spoofing signals and causing off-runway landings in low-visibility conditions.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

USENIX

Bamboozling Certificate Authorities with BGP

Análisis de vulnerabilidades en la infraestructura de clave pública y demostración de ataques BGP para obtener certificados falsos, con propuestas de contramedidas para mejorar la seguridad.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

USENIX

Foreshadow - Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution

Unveiling Foreshadow: A microarchitectural attack exploiting speculative execution to extract secrets from Intel SGX enclaves, compromising trusted execution environments and remote attestation.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

USENIX

TeEther - Gnawing at Ethereum to Automatically Exploit Smart Contracts

Explore automatic vulnerability detection and exploit generation for Ethereum smart contracts using teEther, a tool that analyzes binary bytecode to identify and exploit security weaknesses.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

USENIX

BlackIoT - IoT Botnet of High Wattage Devices Can Disrupt the Power Grid

Explores potential attacks on power grids using IoT botnets of high-wattage devices, demonstrating vulnerabilities and impacts through simulations on real-world models. Highlights interdependency between IoT and power grid security.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

USENIX

Efail - Breaking S-MIME and OpenPGP Email Encryption Using Exfiltration Channels

Uncovers vulnerabilities in OpenPGP and S/MIME email encryption standards, demonstrating how malleability gadgets can be exploited to reveal encrypted content through exfiltration channels in various email clients.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

USENIX

GAZELLE - A Low Latency Framework for Secure Neural Network Inference

Efficient framework for secure neural network inference combining homomorphic encryption and two-party computation, outperforming existing systems in speed while preserving privacy for cloud-based machine learning.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk