USENIX Security Talks & Presentations

USENIX

QSYM - A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing

Explores QSYM, a fast concolic execution engine for hybrid fuzzing, integrating symbolic emulation with native execution to find bugs in complex software more efficiently than traditional methods.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

USENIX

Stealing Machine Learning Models via Prediction APIs

Explores model extraction attacks on machine learning systems, demonstrating vulnerabilities in publicly accessible ML interfaces and proposing potential countermeasures to protect confidential models.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

USENIX

Virtual U - Defeating Face Liveness Detection by Building Virtual Models from Your Public Photos

Innovative approach to bypass face authentication using 3D models created from social media photos, exploiting virtual reality to simulate liveness and fool security systems.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

USENIX

Lock It and Still Lose It - On the -In-Security of Automotive Remote Keyless Entry Systems

Unveils vulnerabilities in automotive remote keyless entry systems, demonstrating how attackers can exploit flaws to gain unauthorized access to vehicles from major manufacturers.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

fTPM - A Software-Only Implementation of a TPM Chip

Explore software-based TPM implementation using ARM TrustZone, overcoming hardware limitations to provide robust security features for trusted computing in mobile devices.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

USENIX

Fast, Lean, and Accurate - Modeling Password Guessability Using Neural Networks

Neural networks for modeling password guessability: faster, smaller, and more accurate than existing methods. Enables real-time, client-side password strength evaluation with sub-second latency.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

USENIX

Small World with High Risks - A Study of Security Threats in the npm Ecosystem

Analyzes security risks in npm ecosystem, revealing vulnerabilities due to dependencies, maintainer influence, and lack of maintenance. Discusses potential mitigations for the JavaScript community.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Tackling the Trust and Safety Crisis

Exploring challenges in building safe, trustworthy tech products for billions globally, drawing from past mistakes and suggesting ways forward in this complex, multidisciplinary issue.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

USENIX

Protecting Accounts from Credential Stuffing with Password Breach Alerting

Explore a privacy-preserving protocol for detecting exposed credentials, its implementation as a cloud service, and its effectiveness in prompting users to update compromised passwords.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Inadvertently Making Cyber Criminals Rich - A Comprehensive Study of Cryptojacking Campaigns at Internet Scale

Comprehensive study on cryptojacking campaigns, revealing underestimated scale, infection methods, and prevalence across the internet. Insights on mining services, attack vectors, and compromised third-party software.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

USENIX

Hiding in Plain Signal - Physical Signal Overshadowing Attack on LTE

Explores a novel LTE signal injection attack, demonstrating higher success rates than fake base station attacks. Discusses implications and potential countermeasures for this physical signal overshadowing vulnerability.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

USENIX

Lessons Learned from Evaluating the Robustness of Defenses to Adversarial Examples

Explore lessons from evaluating adversarial example defenses, common pitfalls, and recommendations for thorough defense assessments in machine learning security research.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

USENIX

Leaky Images - Targeted Privacy Attacks in the Web

Unveils a novel privacy attack exploiting shared images on popular websites, allowing attackers to track user visits and link identities across platforms without using scripts.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

FastKitten - Practical Smart Contracts on Bitcoin

Explore FastKitten, a framework for executing complex smart contracts on Bitcoin using trusted computing environments, offering efficiency and low costs for multi-round applications.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

USENIX

The Secret Sharer - Evaluating and Testing Unintended Memorization in Neural Networks

Explore techniques to evaluate and mitigate unintended memorization in neural networks, focusing on privacy risks and practical strategies for deep learning practitioners.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk