USENIX

4,228 talks · 1999–2026 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• USENIX Security '26 (Enigma Track) - Discussion with the 2026 USENIX Security Symposium Test of Time 2026
• SOUPS 2025 - "Hello, is this Anna?": Unpacking the Lifecycle of Pig-Butchering Scams 2025
• SOUPS 2025 - "We are not Future-ready": Understanding AI Privacy Risks and Existing Mitigation... 2025
• SOUPS 2025 - "You go now! No trouble!" Understanding the Offboarding Process in Companies from an... 2025
• SOUPS 2025 - Adopting AI to Protect Industrial Control Systems: Assessing Challenges and... 2025
• SOUPS 2025 - Between Court Orders and Platform Policies: Understanding Law Enforcement and Meta... 2025
• SOUPS 2025 - Can You Walk Me Through It? Explainable SMS Phishing Detection using LLM-based Agents 2025
• SOUPS 2025 - Design and Evaluation of Privacy-Preserving Protocols for Agent-Facilitated Mobile... 2025
• SOUPS 2025 - How Predatory Monetization Designs Manifest in Child-Friendly Video Games 2025
• SOUPS 2025 - I never reuse passwords! Development and Validation of a Security and Privacy Social... 2025
• SOUPS 2025 - Integrating Large Language Models into Security Incident Response 2025
• SOUPS 2025 - Keynote Presentation: Minding the (Privacy Research/Practice) Gap 2025
• SOUPS 2025 - Language as Lure: A Naturalistic Study on Pasifika Phishing Susceptibility 2025
• SOUPS 2025 - Measuring NIST Authentication Standards Compliance by Higher Education Institutions 2025
• SOUPS 2025 - Minoritised Ethnic People’s Security and Privacy Concerns and Responses towards... 2025
• SOUPS 2025 - Misuse, Misreporting, Misinterpretation of Statistical Methods in Usable Privacy and... 2025
• SOUPS 2025 - More than Usability: Differential Access to Digital Security and Privacy 2025
• SOUPS 2025 - Playing in the Sandbox: A Study on the Usability of Seccomp 2025
• SOUPS 2025 - Replication: “No one can hack my mind” - 10 years later: An update and outlook on... 2025
• SOUPS 2025 - Safety Perceptions of Generative AI Conversational Agents: Uncovering Perceptual... 2025
• SOUPS 2025 - Shiny Shells, Rusty Cores: A Crowdsourced Security Evaluation of Integrated Web... 2025
• SOUPS 2025 - Smart Spaces, Private Lives: A Culturally Grounded Examination of Privacy Tensions... 2025
• SOUPS 2025 - Spy-oT: Understanding How Users Learn to Use Internet of Things Devices For Abusive... 2025
• SOUPS 2025 - The more accounts I use, the less I have to think': A Longitudinal Study on the... 2025
• SOUPS 2025 - Trust-Enabled Privacy: Social Media Designs to Support Adolescent User Boundary... 2025
• SOUPS 2025 - Unpacking the Social and Emotional Dimensions of Security and Privacy User Engagement 2025
• SOUPS 2025 - User Understandings of Technical Terms in App Privacy Labels 2025
• SOUPS 2025 - Victims, Vigilantes, and Advice Givers: An Analysis of Scam-Related Discourse on Reddit 2025
• SOUPS 2025 - Youth-Centered GAI Risks (YAIR): A Taxonomy of Generative AI Risks from Empirical Data 2025
• SOUPS 2025 - “TikTok, Do Your Thing”: User Reactions to Social Surveillance in the Public Sphere 2025
• SREcon25 Europe/Middle East/Africa - ACK to the Future: TCP in 2025 2025
• SREcon25 Europe/Middle East/Africa - IPv6 in 2025: Quo Vadis? 2025
• SREcon25 Europe/Middle East/Africa - MLOps 2025: A Journey into the Past and the Future 2025
• SOUPS 2024 - "I can say I'm John Travolta...but I'm not John Travolta": Investigating the Impact of 2024
• SOUPS 2024 - "I would not install an app with this label": Privacy Label Impact on Risk Perception 2024
• SOUPS 2024 - "It was honestly just gambling": Investigating the Experiences of Teenage 2024
• SOUPS 2024 - "Say I'm in public...I don't want my nudes to pop up." User Threat Models for Using 2024
• SOUPS 2024 - "Violation of my body:" Perceptions of AI-generated non-consensual (intimate) imagery 2024
• SOUPS 2024 - 'Custodian of Online Communities': How Moderator Mutual Support in Communities Help 2024
• SOUPS 2024 - A Survey of Cybersecurity Professionals’ Perceptions and Experiences of Safety and 2024
• SOUPS 2024 - Authentication UX Design Opportunities for Future Smart Glasses 2024
• SOUPS 2024 - Batman Hacked My Password: A Subtitle-Based Analysis of Password Depiction in Movies 2024
• SOUPS 2024 - Best Practices for Engaging Industry Researchers 2024
• SOUPS 2024 - Beyond Fear and Frustration - Towards a Holistic Understanding of Emotions in 2024
• SOUPS 2024 - Beyond the Office Walls: Understanding Security and Shadow Security Behaviours in a 2024
• SOUPS 2024 - Beyond the West: Exploring the Impact and Regulation of Non-Consensual Image-Disclosure 2024
• SOUPS 2024 - Can Johnny be a whistleblower? A qualitative user study of a social authentication 2024
• SOUPS 2024 - Comparing Malware Evasion Theory with Practice: Results from Interviews with Expert 2024
• SOUPS 2024 - Comparing Teacher and Creator Perspectives on the Design of Cybersecurity and Privacy 2024
• SOUPS 2024 - Cybersecurity Analysts' Perception of AI Security Tools and Practical Implications 2024
• SOUPS 2024 - Designing the Informing Process with Streamers and Bystanders in Live Streaming 2024
• SOUPS 2024 - Digital Nudges for Access Reviews: Guiding Deciders to Revoke Excessive Authorizations 2024
• SOUPS 2024 - Evaluating Privacy Perceptions, Experience, and Behavior of Software Development Teams 2024
• SOUPS 2024 - Evaluating the Usability of Differential Privacy Tools with Data Practitioners 2024
• SOUPS 2024 - Evolving Landscape of Disinformation - Lessons Learned So Far! 2024
• SOUPS 2024 - Exploring Expandable-Grid Designs to Make iOS App Privacy Labels More Usable 2024
• SOUPS 2024 - From Laughter to Concern: Exploring Conversations about Deepfakes on Reddit - Trends 2024
• SOUPS 2024 - How Entertainment Journalists Manage Online Hate and Harassment 2024
• SOUPS 2024 - Human-in-the-Loop for Secure Digital Wallets Transactions 2024
• SOUPS 2024 - Navigating Autonomy: Unveiling Security Experts' Perspectives on Augmented Intelligence 2024
• SOUPS 2024 - Negative Effects of Social Triggers on User Security and Privacy Behaviors 2024
• SOUPS 2024 - Of Mothers and Managers – The Effect of Videos Depicting Gender Stereotypes on Women 2024
• SOUPS 2024 - Privacy Communication Patterns for Domestic Robots 2024
• SOUPS 2024 - Privacy Requirements and Realities of Digital Public Goods 2024
• SOUPS 2024 - Reflecting on Twenty Years of Usable Privacy and Security 2024
• SOUPS 2024 - SecureCheck: Access Contracts, Negotiations, and Recommendations for Data-Sharing 2024
• SOUPS 2024 - The Golden xCOMPASS: The Compass You Need to Navigate through the App-Privacy Universe! 2024
• SOUPS 2024 - Threat modeling state of practice in Dutch organizations 2024
• SOUPS 2024 - Towards Bridging the Research-Practice Gap: Understanding Researcher-Practitioner 2024
• SOUPS 2024 - Understanding How People Share Passwords 2024
• SOUPS 2024 - Well-intended but half-hearted: Hosts’ consideration of guests’ privacy using smart 2024
• SOUPS 2024 - What Drives SMiShing Susceptibility? A U.S. Interview Study of How and Why Mobile Phone 2024
• SOUPS 2024 - What Motivates and Discourages Employees in Phishing Interventions: An Exploration of 2024
• SOUPS 2024 - Who is the IT Department Anyway: An Evaluative Case Study of Shadow IT Mindsets Among 2024
• SOUPS 2024 - Write, Read, or Fix? Exploring Alternative Methods for Secure Development Studies 2024
• SOUPS 2024 - “I do (not) need that Feature!” – Understanding Users’ Awareness and Control of Privacy 2024
• SOUPS 2023 - "Is Reporting Worth the Sacrifice of Revealing What I've Sent?" 2023
• SOUPS 2023 - "Nobody's Happy": Design Insights from Privacy-Conscious Smart Home Power Users... 2023
• SOUPS 2023 - "Stalking is immoral but not illegal": Understanding Security, Cyber Crimes... 2023
• SOUPS 2023 - "There will be less privacy, of course" How and why people in 10 countries expect AI... 2023
• SOUPS 2023 - "Would You Give the Same Priority to the Bank and a Game? I Do Not!" 2023
• SOUPS 2023 - 'Give Me Structure': Synthesis and Evaluation of a (Network) Threat Analysis Process... 2023
• SOUPS 2023 - Adventures in Recovery Land: Testing the Account Recovery of Popular Websites... 2023
• SOUPS 2023 - An Investigation of Teenager Experiences in Social Virtual Reality from Teenagers'... 2023
• SOUPS 2023 - Checking, nudging or scoring? Evaluating e-mail user security tools 2023
• SOUPS 2023 - Data Privacy and Pluralistic Ignorance 2023
• SOUPS 2023 - Dissecting Nudges in Password Managers: Simple Defaults are Powerful 2023
• SOUPS 2023 - Distrust of big tech and a desire for privacy: Understanding the motivations... 2023
• SOUPS 2023 - Evaluating the Impact of Community Oversight for Managing Mobile Privacy and Security 2023
• SOUPS 2023 - Evaluating User Behavior in Smartphone Security: A Psychometric Perspective 2023
• SOUPS 2023 - Evolution of Password Expiry in Companies: Measuring the Adoption of Recommendations... 2023
• SOUPS 2023 - Exploring the Security Culture of Operational Technology (OT) Organisations... 2023
• SOUPS 2023 - Exploring the Usability, Security, and Privacy of Smart Locks from the Perspective... 2023
• SOUPS 2023 - Fight Fire with Fire: Hacktivists' Take on Social Media Misinformation 2023
• SOUPS 2023 - GuardLens: Supporting Safer Online Browsing for People with Visual Impairments 2023
• SOUPS 2023 - ImageAlly: A Human-AI Hybrid Approach to Support Blind People in Detecting... 2023
• SOUPS 2023 - Investigating Security Indicators for Hyperlinking Within the Metaverse 2023
• SOUPS 2023 - Iterative Design of An Accessible Crypto Wallet for Blind Users 2023
• SOUPS 2023 - Lacking the Tools and Support to Fix Friction: Results from an Interview Study... 2023
• SOUPS 2023 - On the Recruitment of Company Developers for Security Studies... 2023
• SOUPS 2023 - Privacy Mental Models of Electronic Health Records: A German Case Study 2023
• SOUPS 2023 - Prospects for Improving Password Selection 2023
• SOUPS 2023 - SoK: I Have the (Developer) Power! Sample Size Estimation for... 2023
• SOUPS 2023 - Tangible 2FA – An In-the-Wild Investigation of User-Defined Tangibles for Two-Factor... 2023
• SOUPS 2023 - Towards Usable Security Analysis Tools for Trigger-Action Programming 2023
• SOUPS 2023 - Understanding the Viability of Gmail's Origin Indicator for Identifying the Sender 2023
• SOUPS 2023 - What can central bank digital currency designers learn from asking potential users? 2023
• SOUPS 2023 - Who Comes Up with this Stuff? Interviewing Authors to Understand How They Produce... 2023
• SOUPS 2023 - Youth understandings of online privacy and security: A dyadic study of children... 2023
• SOUPS 2023 Keynote Address - Weaponizing Technology: Examining the Importance of Privacy... 2023
• SOUPS 2023 Lightning Talk - De-identification in practice: professionals as end users 2023
• SOUPS 2023 Lightning Talk - Decisions and Disruptions 2: Decide Harder 2023
• SOUPS 2023 Lightning Talk - Getting the Message Out: Considering a Connected Products... 2023
• SOUPS 2023 Lightning Talk - Lessons Learned in Communicating Differential Privacy to Data Subjects 2023
• SOUPS 2023 Lightning Talk - Look before you Link: Privacy Risk Inspection of Open Data through... 2023
• SOUPS 2023 Lightning Talk - Optimizing Shoulder-Surfing Resistance in Augmented and Virtual Reality 2023
• SOUPS 2023 Lightning Talk - TAM is not SAM: Acceptance of Security Technology 2023
• SOUPS 2023 Lightning Talk - Towards a more effective system for training tier 1 SOC analysts 2023
• SOUPS 2024 - Media Portrayals of Student Privacy in Higher Education: A 2013-2023 Review 2023
• SOUPS 2022 - "As soon as it's a risk, I want to require MFA": How Administrators Configure... 2022
• SOUPS 2022 - "I don’t know why I check this...'' Investigating Expert Users' Strategies to Detect... 2022
• SOUPS 2022 - An Empirical Study of a Decentralized Identity Wallet... 2022
• SOUPS 2022 - An open door may tempt a saint: Examining situational and individual determinants... 2022
• SOUPS 2022 - Anti-Privacy and Anti-Security Advice on TikTok: Case Studies of Technology-Enabled... 2022
• SOUPS 2022 - Aunties, Strangers, and the FBI: Online Privacy Concerns and Experiences of Muslim... 2022
• SOUPS 2022 - Balancing Power Dynamics in Smart Homes: Nannies' Perspectives on How Cameras... 2022
• SOUPS 2022 - Being Hacked: Understanding Victims' Experiences of IoT Hacking 2022
• SOUPS 2022 - Comparing User Perceptions of Anti-Stalkerware Apps with the Technical Reality 2022
• SOUPS 2022 - Detecting iPhone Security Compromise in Simulated Stalking Scenarios: Strategies and... 2022
• SOUPS 2022 - Do Password Managers Nudge Secure (Random) Passwords? 2022
• SOUPS 2022 - DualCheck: Exploiting Human Verification Tasks for Opportunistic Online Safety... 2022
• SOUPS 2022 - Evaluating the Usability of Privacy Choice Mechanisms 2022
• SOUPS 2022 - Exploring User Authentication with Windows Hello in a Small Business Environment 2022
• SOUPS 2022 - Exploring User-Suitable Metaphors for Differentially Private Data Analyses 2022
• SOUPS 2022 - If You Can’t Get Them to the Lab: Evaluating a Virtual Study Environment with... 2022
• SOUPS 2022 - Improving Password Generation Through the Design of a Password Composition Policy... 2022
• SOUPS 2022 - Increasing security without decreasing usability: A comparison of various verifiable... 2022
• SOUPS 2022 - Industrial practitioners' mental models of adversarial machine learning 2022
• SOUPS 2022 - Investigating How University Students in the United States Encounter and Deal With... 2022
• SOUPS 2022 - Is it a concern or a preference? An investigation into the ability of privacy scales... 2022
• SOUPS 2022 - Let The Right One In: Attestation as a Usable CAPTCHA Alternative 2022
• SOUPS 2022 - Let’s Hash: Helping Developers with Password Security 2022
• SOUPS 2022 - Normative and Non-Social Beliefs about Sensor Data: Implications for Collective... 2022
• SOUPS 2022 - On recruiting and retaining users for security-sensitive longitudinal measurement... 2022
• SOUPS 2022 - Password policies of most top websites fail to follow best practices 2022
• SOUPS 2022 - Presenting Suspicious Details in User-Facing E-mail Headers Does Not Improve... 2022
• SOUPS 2022 - Replication: How Well Do My Results Generalize Now? The External Validity of Online... 2022
• SOUPS 2022 - Replication: Stories as Informal Lessons about Security 2022
• SOUPS 2022 - Replication: The Effect of Differential Privacy Communication on German Users'... 2022
• SOUPS 2022 - Runtime Permissions for Privacy in Proactive Intelligent Assistants 2022
• SOUPS 2022 - Sharing without Scaring: Enabling Smartphones to Become Aware of Temporary Sharing 2022
• SOUPS 2022 - The Nerd Factor: The Potential of S&P Adepts to Serve as a Social Resource... 2022
• SOUPS 2022 - Understanding Non-Experts’ Security- and Privacy-Related Questions on a Q&A Site 2022
• SOUPS 2022 - Usability and Security of Trusted Platform Module (TPM) Library APIs 2022
• SOUPS 2022 - Users' Perceptions of Chrome Compromised Credential Notification 2022
• SOUPS 2022 -“Fast, Easy, Convenient.” Studying Adoption and Perception of Digital Covid Certificates 2022
• SOUPS 2022 Keynote - Understanding and Reducing Online Misinformation Across 16 Countries... 2022
• SOUPS 2022 Lightning Talk - E-Commerce Payment Security Evaluation and Literature Review 2022
• SOUPS 2022 Lightning Talk - Informed Consent: Are your participants aware of what they share 2022
• SOUPS 2022 Lightning Talk - IoT Inspector: a platform for real-world smart home research 2022
• SOUPS 2022 Lightning Talk - Moving Usable Security and Privacy Research Out of the Lab... 2022
• SOUPS 2022 Lightning Talk - Skilled or Gullible? Gender Stereotypes Related to Computer Security... 2022
• SREcon22 Asia/Pacific - Computing Performance 2022: What's on the Horizon 2022
• USENIX Security '23 - Network Responses to Russia's Invasion of Ukraine in 2022: A Cautionary Tale.. 2022
• SOUPS 2021 - "How I Know For Sure": People's Perspectives on Solely Automated Decision-Making (SADM) 2021
• SOUPS 2021 - "I have no idea what they're trying to accomplish:" Enthusiastic and Casual Signal 2021
• SOUPS 2021 - "I'm Literally Just Hoping This Will Work:'' Obstacles Blocking the Online Security 2021
• SOUPS 2021 - "The Thing Doesn't Have a Name": Learning from Emergent Real-World Interventions in 2021
• SOUPS 2021 - "Whether it's moral is a whole other story": Consumer perspectives on privacy 2021
• SOUPS 2021 - A Fait Accompli? An Empirical Study into the Absence of Consent to Third-Party Tracking 2021
• SOUPS 2021 - A Qualitative Usability Evaluation of the Clang Static Analyzer and libFuzzer with CS 2021
• SOUPS 2021 - An Analysis of the Role of Situated Learning in Starting a Security Culture in a 2021
• SOUPS 2021 - Benefits and Drawbacks of Adopting a Secure Programming Language: Rust as a Case Study 2021
• SOUPS 2021 - Challenges and Threats of Mass Telecommuting: A Qualitative Study of Workers 2021
• SOUPS 2021 - Code Reviewing as Methodology for Online Security Studies with Developers - A Case 2021
• SOUPS 2021 - Comparing Security and Privacy Attitudes Among U.S. Users of Different Smartphone and 2021
• SOUPS 2021 - Concerned but Ineffective: User Perceptions, Methods, and Challenges when Sanitizing 2021
• SOUPS 2021 - Deciding on Personalized Ads: Nudging Developers About User Privacy 2021
• SOUPS 2021 - Decision-Making Errors in Mobile Phishing 2021
• SOUPS 2021 - Designing Toxic Content Classification for a Diversity of Perspectives 2021
• SOUPS 2021 - Evaluating and Redefining Smartphone Permissions with Contextualized Justifications for 2021
• SOUPS 2021 - Examining the Examiners: Students' Privacy and Security Perceptions of Online 2021
• SOUPS 2021 - Exploring Authentication for Security-Sensitive Tasks on Smart Home Voice Assistants 2021
• SOUPS 2021 - Facial Recognition: Understanding Privacy Concerns and Attitudes Across Increasingly 2021
• SOUPS 2021 - Gallery of Latin American Malware 2021
• SOUPS 2021 - Investigating Web Service Account Remediation Advice 2021
• SOUPS 2021 - Keynote Address: Mitigating Technology Abuse in Intimate Partner Violence 2021
• SOUPS 2021 - Knowledge and Capabilities that Non-Expert Users Bring to Phishing Detection 2021
• SOUPS 2021 - Never ever or no matter what: Investigating Adoption Intentions and Misconceptions 2021
• SOUPS 2021 - On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security 2021
• SOUPS 2021 - Please do not use !?_ or your License Plate Number: Analyzing Password Policies in 2021
• SOUPS 2021 - PowerCut and Obfuscator: An Exploration of the Design Space for Privacy-Preserving 2021
• SOUPS 2021 - Proposing the ‘Signature’ Auth Scheme: More Usable AND Secure Than Status Quo 2021
• SOUPS 2021 - Pursuing Usable and Useful Data Downloads Under GDPR/CCPA Access Rights via Co-Design 2021
• SOUPS 2021 - Replication: Effects of Media on the Mental Models of Technical Users 2021
• SOUPS 2021 - SoK: Still Plenty of Phish in the Sea — A Taxonomy of User-Oriented Phishing 2021
• SOUPS 2021 - Solitude: A privacy analysis tool 2021
• SOUPS 2021 - Towards Usable and Secure Location-based Smartphone Authentication 2021
• SOUPS 2021 - Trust by design: a new old requirement 2021
• SOUPS 2021 - Understanding Privacy Attitudes and Concerns Towards Remote Communications During the 2021
• SOUPS 2021 - Understanding Users' Knowledge about the Privacy and Security of Browser Extensions 2021
• SOUPS 2021 - User Perceptions of the Usability and Security of Smartphones as FIDO2 Roaming 2021
• SOUPS 2021 - Using a Blocklist to Improve the Security of User Selection of Android Patterns 2021
• SOUPS 2021 - Virtual Classrooms and Real Harms: Remote Learning at U.S. Universities 2021
• SOUPS 2021 - WebAlly: Making Visual Task-based CAPTCHAs Transferable for People with Visual 2021
• SOUPS 2021 - Why They Ignore English Emails: The Challenges of Non-Native Speakers in Identifying 2021
• SREcon21 - Grand National 2021: Managing Extreme Online Demand at William Hill 2021
• PEPR '22 - Differentially Private Algorithms for 2020 Decennial Census Detailed DHC Race & Ethnicity 2020
• SOUPS 2020 - "I Have a Narrow Thought Process": Constraints on Explanations Connecting Inferences 2020
• SOUPS 2020 - "You've Got Your Nice List of Bugs, Now What?" Vulnerability Discovery and Management 2020
• SOUPS 2020 - An Empirical Study of Wireless Carrier Authentication for SIM Swaps 2020
• SOUPS 2020 - An Ethnographic Understanding of Software (In)Security and a Co-Creation Model 2020
• SOUPS 2020 - An Exploratory Study of Hardware Reverse Engineering — Technical and Cognitive Process 2020
• SOUPS 2020 - An investigation of phishing awareness and education over time: When and how to best 2020
• SOUPS 2020 - Blind and Human: Exploring More Usable Audio CAPTCHA Designs 2020
• SOUPS 2020 - Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations 2020
• SOUPS 2020 - Do Privacy and Security Matter to Everyone? Quantifying and Clustering User-Centric 2020
• SOUPS 2020 - End-to-End File Encryption in Browser with Open Source Penumbra (Lightning Talk) 2020
• SOUPS 2020 - Enhancing Privacy through the Visual Design of Privacy Notices: Exploring the Interplay 2020
• SOUPS 2020 - From Intent to Action: Nudging Users Towards Secure Mobile Payments 2020
• SOUPS 2020 - How Risky Are Real Users' IFTTT Applets? 2020
• SOUPS 2020 - Industry Responses to the European Directive on Security of Network and Information 2020
• SOUPS 2020 - Keynote: Maybe We Have Been Doing This Wrong?: Protester as Persona 2020
• SOUPS 2020 - Knock, Knock. Who’s There? On the Security of LG’s Knock Codes 2020
• SOUPS 2020 - Lessons Learnt from Comparing WhatsApp Privacy Concerns Across Saudi and Indian 2020
• SOUPS 2020 - Making GDPR Usable (Lightning Talk) 2020
• SOUPS 2020 - Overthrowing "Master" Passwords by Throwing Dice (Lightning Talk) 2020
• SOUPS 2020 - Passworld: A Serious Game to Promote Password Awareness and Diversity in an Enterprise 2020
• SOUPS 2020 - Realizing Choice: Online Safeguards for Couples Adapting to Cognitive Challenges 2020
• SOUPS 2020 - Replication: On the Ecological Validity of Online Security Developer Studies 2020
• SOUPS 2020 - Replication: Why We Still Can't Browse in Peace On the Uniqueness and Reidentifiability 2020
• SOUPS 2020 - Security for Smart Cities (Lightning Talk) 2020
• SOUPS 2020 - Security, Availability, and Multiple Information Sources: Exploring Update Behavior 2020
• SOUPS 2020 - Sustainable, Scalable and Secure IoT Architecture (Lightning Talk) 2020
• SOUPS 2020 - Towards Understanding Privacy and Trust in Online Reporting of Sexual Assault 2020
• SOUPS 2020 - Tr(b)usted Identity Proofing (Lightning Talk) 2020
• SOUPS 2020 - Usable Sexurity: Studying People’s Concerns and Strategies When Sexting 2020
• SOUPS 2020 - User Mental Models of Cryptocurrency Systems - A Grounded Theory Approach 2020
• SOUPS 2020 - Why Can't Johnny Fix Vulnerabilities: A Usability Evaluation of Static Analysis Tools 2020
• SOUPS 2020 - “You still use the password after all” – Exploring FIDO2 Security Keys in a Small 2020
• SOUPS 2020- Users Are still Not the Enemy: Applying Security Usability Principles...(Lightning Talk) 2020
• USENIX Security '20 - Panel: The 2020 Election: Remote Voting, Disinformation, and Audit 2020
• USENIX Security '22- The Antrim County 2020 Election Incident: An Independent Forensic Investigation 2020
• SOUPS 2019 - "I don't own the data": End User Perceptions of Smart Home Device Data 2019
• SOUPS 2019 - "I was told to buy a software or lose my computer. I ignored it": A study 2019
• SOUPS 2019 - "Something isn't secure, but I'm not sure how that translates into a problem" 2019
• SOUPS 2019 - "We Can't Live Without Them!" App Developers' Adoption of Ad Networks and Their 2019
• SOUPS 2019 - A Self-Report Measure of End-User Security Attitudes (SA-6) 2019
• SOUPS 2019 - A Typology of Perceived Triggers for End-User Security and Privacy Behaviors 2019
• SOUPS 2019 - A Usability Study of Five Two-Factor Authentication Methods 2019
• SOUPS 2019 - An Empirical Analysis of Data Deletion and Opt-Out Choices on 150 Websites 2019
• SOUPS 2019 - Certified Phishing: Taking a Look at Public Key Certificates of Phishing Websites 2019
• SOUPS 2019 - Communicating Device Confidence Level and Upcoming Re-Authentications in Continuous 2019
• SOUPS 2019 - Cooperative Privacy and Security: Learning from People with Visual Impairments 2019
• SOUPS 2019 - Enhancing Privacy through an Interactive On-demand Incremental Information 2019
• SOUPS 2019 - Evaluating Users’ Perceptions about a System’s Privacy: Differentiating Social 2019
• SOUPS 2019 - Exploring Intentional Behaviour Modifications for Password Typing on Mobile Touchscreen 2019
• SOUPS 2019 - From Usability to Secure Computing and Back Again 2019
• SOUPS 2019 - Investigative Journalism in the Digital Age: Privacy, Security and the Media 2019
• SOUPS 2019 - Keepers of the Machines: Examining How System Administrators Manage Software Updates 2019
• SOUPS 2019 - Monday Lightning Talks 2019
• SOUPS 2019 - More than Smart Speakers: Security and Privacy Perceptions of Smart Home Personal 2019
• SOUPS 2019 - Of Two Minds about Two-Factor: Understanding Everyday FIDO U2F Usability 2019
• SOUPS 2019 - Opening Remarks and Awards SOUPS 2019 2019
• SOUPS 2019 - Personal Information Leakage by Abusing the GDPR 'Right of Access' 2019
• SOUPS 2019 - Privacy and Security Threat Models and Mitigation Strategies of Older Adults 2019
• SOUPS 2019 - Replication: No One Can Hack My Mind Revisiting a Study on Expert and Non-Expert 2019
• SOUPS 2019 - System Administrators Prefer Command Line Interfaces, Don't They? An Exploratory Study 2019
• SOUPS 2019 - The Effect of Entertainment Media on Mental Models of Computer Security 2019
• SOUPS 2019 - The Fog of Warnings: How Non-essential Notifications Blur with Security Warnings 2019
• SOUPS 2019 - Tuesday Lightning Talks 1 2019
• SOUPS 2019 - Tuesday Lightning Talks 2 2019
• SOUPS 2019 - Usability Smells: An Analysis of Developers’ Struggle With Crypto Libraries 2019
• SOUPS 2019 - Why people (don’t) use password managers effectively 2019
• SOUPS 2019 - “There is nothing that I need to keep secret”: Sharing Practices and Concerns 2019
• SREcon18 Asia/Australia - Service Monitoring Manual—2018 Edition 2018
• USENIX Security '16 - 2016 Test of Time Award Panel 2016
• LISA Build 2015 2015
• LISA Build 2015 2015
• SRE@Google: Thousands of DevOps Since 2004 2004
• PEPR '23 - Spot the Fed: Mastodon, the Fediverse, and Why You Can't Run Servers Like It's 1999 1999
• "FAST '22 - Generating Realistic Wear Distributions for SSDs (Work-in-Progress Report)
• "The Word" by Dan Wallach, Rice University
• 3 Myths and 3 Challenges to Bring System Administration out of the Dark Ages
• 3GSE '14 - A Case Study in Helping Students to Covertly Eat Their Classmates
• 3GSE '14 - An Argument for Game Balance: Improving Student Engagement by Matching Difficulty Level
• 3GSE '14 - Capturing Capture the Flag Panel
• 3GSE '14 - Class Capture-the-Flag Exercises
• 3GSE '14 - CyberCIEGE Scenario Design and Implementation
• 3GSE '14 - Elevation of Privilege: Drawing Developers into Threat Modeling
• 3GSE '14 - Learning Obstacles in the Capture The Flag Model
• 3GSE '14 - NSF Funding Opportunities for Cybersecurity Education and Workforce Development
• 3GSE '14 - PicoCTF: A Game-Based Computer Security Competition for High School Students
• 3GSE '14 - Practical Lessons from Creating the Control-Alt-Hack Card Game
• 3GSE '14 - SecurityEmpire: Development and Evaluation of a Digital Game to Promote Cybersecurity
• 3GSE '14 - Ten Years of iCTF: The Good, The Bad, and The Ugly
• 3GSE '14 - The Fun and Future of CTF
• A Security Analysis of the APCO Project 25 Two-Way Radio System
• A Service-Oriented Data Grid: Beyond Storage Virtualization, at USENIX LISA '07
• A Study of Practical Deduplication
• Adapting Social Spam Infrastructure for Political Censorship
• An Agenda for Empirical Cyber Crime Research
• Apache Traffic Server: More Than Just a Proxy
• Ask WINE: Are We Safer Today? Evaluating Operating System Security through Big Data Analysis
• Autonomic Administration: HAL 9000 Meets Gene Roddenberry, at USENIX LISA '07
• Bolt: Faster Reconfiguration in Operating Systems
• Building IronMan, Not Programming
• Can Vulnerability Disclosure Processes Be Responsible, Rational, and Effective?
• Capsicum: Practical Capabilities for UNIX
• Career Information and Workload Warriors - Time Saving Tips and Tricks
• Celebrating USENIX at 50
• Challenges in Network Application Identification
• Classification of UDP Traffic for DDoS Detection
• Clustering Potential Phishing Websites Using DeepMD5
• Comprehensive Experimental Analyses of Automotive Attack Surfaces
• Computer Security and Voting, Invited Talk by David Dill at USENIX Security '07
• Copacetic.
• CSET '20 - APTGen: An Approach towards Generating Practical Dataset Labelled with Targeted...
• CSET '20 - Bridging Missing Gaps in Evaluating DDoS Research
• CSET '20 - Expansion of ICS Testbed for Security Validation based on MITRE ATT&CK Techniques
• CSET '20 - HAI 1.0: HIL-based Augmented ICS Security Dataset
• CSET '20 - Historical Analysis of Exploit Availability Timelines
• CSET '20 - ICS Testbed Tetris: Practical Building Blocks Towards a Cyber Security Resource
• CSET '20 - On Design and Enhancement of Smart Grid Honeypot System for Practical Collection...
• CSET '20 - Representativeness in the Benchmark for Vulnerability Analysis Tools (B-VAT)
• CSET '20 - Toward Orchestration of Complex Networking Experiments
• CSET '20 - Towards Adversarial Phishing Detection
• CSET '20 - UBCIS: Ultimate Benchmark for Container Image Scanning
• Customer Service for Sysadmins
• Data Center Growing Pains, Invited Talk by Lou Marchant at USENIX LISA '07
• Dead Media: What the Obsolete, Unsuccessful, and Experimental Can Teach Us About the Future of Media
• Delay/Disruption Tolerant Networking
• Deployinator: Being Stupid to Be Smart
• Deployinator: Being Stupid to Be Smart
• Deploying Nagios in a Large Enterprise Environment, at USENIX LISA '07
• Design, Implementation and Evaluation of Congestion Control for Multipath TCP
• Designing Storage Systems with Flash
• DevOps: The past and future are here. It's just not evenly distributed (yet).
• Disruptive Innovation: Data Domain Experience
• Dr. Strangevote, Keynote Address by Debra Bowen at USENIX Security '08
• Education vs. Training
• Efficient System-Enforced Deterministic Parallelism
• Embassies: Radically Refactoring the Web
• Emulating Goliath Storage Systems with David
• Enigma Slides Primer
• Erasure Coding in Windows Azure Storage
• Ethernet's Future Trajectory
• Experiences with Scalable Network Operations at Akamai, at USENIX LISA '07
• Exploiting Online Games, Invited Talk by Gary McGraw at USENIX Security '07
• F10: A Fault-Tolerant Engineered Network
• FOCI '14 - An Internet with BRICS Characteristics: Data Sovereignty and the Balkanisation
• FOCI '14 - Catching Bandits and Only Bandits: Privacy-Preserving Intersection Warrants for Lawful
• FOCI '14 - Counting Packets Sent Between Arbitrary Internet Hosts
• FOCI '14 - Facade: High-Throughput, Deniable Censorship Circumvention Using Web Search
• FOCI '14 - Global Network Interference Detection Over the RIPE Atlas Network
• FOCI '14 - ReClaim: a Privacy-Preserving Decentralized Social Network
• FOCI '14 - Security Audit of Safeplug "Tor in a Box"
• FOCI '14 - Symmetric Disclosure: a Fresh Look at k-anonymity
• FOCI '14 - Towards a Comprehensive Picture of the Great Firewall’s DNS Censorship
• FOCI '14 - TRIST: Circumventing Censorship with Transcoding-Resistant Image Steganography
• FOCI '20 - A Comprehensive Study of DNS-over-HTTPS Downgrade Attack
• FOCI '20 - Bystanders’ Privacy: The Perspectives of Nannies on Smart Home Surveillance
• FOCI '20 - Detecting and Evading Censorship-in-Depth: A Case Study of Iran’s Protocol Whitelister
• FOCI '20 - HTTPT: A Probe-Resistant Proxy
• FOCI '20 - Identifying Disinformation Websites Using Infrastructure Features
• FOCI '20 - MIMIQ: Masking IPs with Migration in QUIC
• FOCI '20 - Opening Digital Borders Cautiously yet Decisively: Digital Filtering in Saudi Arabia
• FOCI '20 - Padding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS
• FOCI '20 - Slitheen++: Stealth TLS-based Decoy Routing
• FOCI '20 - Triplet Censors: Demystifying Great Firewall’s DNS Censorship Behavior
• FOCI '20 - Turbo Tunnel, a good way to design censorship circumvention protocols
• GameDay: Creating Resiliency Through Destruction
• GPFS Native RAID for 100,000-Disk Petascale Systems
• GridGraph: Large-Scale Graph Processing on a Single Machine Using 2-Level Hierarchical Partitioning
• HealthTech '13 - Capability Exchange: Improving Access Control Usability in Health IT
• HealthTech '13 - Electronic Prescription for Controlled Substances: A Cybersecurity Perspective
• HealthTech '14 - "Dr. Hacker, I Presume?" An Experimentally-based Discussion about Security
• HealthTech '14 - Adaptive Information Security in Body Sensor-Actuator Networks
• HealthTech '14 - An Evaluation of ECG use in Cryptography for Implantable Medical Devices
• HealthTech '14 - Decision Support for Data Segmentation (DS2): Application to Pull Architectures
• HealthTech '14 - Differentially Private Genome Data Dissemination Through Top-Down Specialization
• HealthTech '14 - Ethnography of Computer Security Evasions in Healthcare Settings: Circumvention
• HealthTech '14 - Malware Prognosis: How to Do Malware Research in Medical Domain
• Healthtech '14 - Panel
• HealthTech '14 - Policy, Expectations and History
• HealthTech '14 - Privacy-Preserving Microbiome Sequencing Analysis and Storage Systems
• HealthTech '14 - Rump Session
• HealthTech '14 - Searching HIE with Differentiated Privacy Preservation
• HealthTech '14 - Securely Connecting Wearable Health Devices to External Displays
• HealthTech '14 - Software Loved by its Vendors and Disliked by 70% of its Users
• Homeless Vikings: BGP Prefix Hijacking and the Spam Wars, at USENIX LISA '07
• Hot-ICE '12 - ECOS: Practical Mobile Application Offloading for Enterprises
• How I Learned to Stop Worrying and Love the Chef
• How University Programs Prepare the Next Generation of Sysadmins
• Implementing IPv6 on a Global Scale: Experiences at Akamai
• IPv6, DNSSEC, RPKI, etc.: What's the Holdup and How Can We Help?
• IPv6: No Longer Optional
• Issues and Trends in Reliably Sanitizing Solid State Disks
• Key Challenges in Defending Against Malicious Socialbots
• Let's Parse to Prevent Pwnage
• Linux Systems Capacity Planning: Beyond RRD and top
• LISA Conversations - A Chat with LISA15 Co-Chairs, Amy and Cory
• LISA Conversations - A Chat with LISA16 Co-Chairs, Matt and John
• Managing Asynchrony: An Application Perspective
• Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices
• Mobile Malware, Invited Talk by Mikko Hypponen at USENIX Security '07
• My First Petabyte: Now What?
• NDD: A Decision Diagram for Network Verification
• NDSI '18 - Elastic Scaling of Stateful Network Functions
• netmap: A Novel Framework for Fast Packet I/O
• Network Protocols: Myths, Missteps, and Mysteries
• Network Security in the Medium Term: 2061--2561 AD
• Neuroscience Meets Cryptography: Designing Crypto Primitives Secure Against Rubber Hose Attacks
• NewSQL vs. NoSQL for New OLTP
• No Terabyte Left Behind, Invited Talk by Andrew Hume at USENIX LISA '07
• NSDI18 - Opening Remarks and Best Paper Awards
• Observations on Emerging Threats
• On the Feasibility of Side-Channel Attacks with Brain-Computer Interfaces
• One Size Does Not Fit All in DB Systems
• Open Access at USENIX
• Opening Remarks, Awards LISA '11
• OSDI12 - Spanner: Google’s Globally-Distributed Database
• Overcoming My Biggest Roadblock, Myself. From USENIX Women in Advanced Computing Summit (WiAC'12)
• Panel: Strategies for a Successful Career in Computing
• Panel: What's Next: Storage Evolution or Revolution?
• PEPR '20 - A Backdoor by Any Other Name, and How to Stop It
• PEPR '20 - A Differentially Private Data Analytics API at Scale
• PEPR '20 - Assessing Privacy Risk with the IPA Triad
• PEPR '20 - Beyond Access: Using Abac Frameworks to Implement Privacy and Security Policies
• PEPR '20 - Beyond the Individual: Exploring Data Protection by Design in Connected Communal Spaces
• PEPR '20 - Building an Effective Feedback Loop for Your Privacy Program through Privacy Incident
• PEPR '20 - Building and Deploying a Privacy Preserving Data Analysis Platform
• PEPR '20 - Design of a Privacy Infrastructure for the Internet of Things
• PEPR '20 - Engineering Ethics into the NIST Privacy Framework
• PEPR '20 - How to (In)Effectively Convey Privacy Choices with Icons and Link Text
• PEPR '20 - Improving Usability of Differential Privacy at Scale
• PEPR '20 - Privacy Architecture for Data-Driven Innovation Configure
• PEPR '20 - Privacy in Deployment
• PEPR '20 - Privacy Professional Boss Mode
• PEPR '20 - Product Privacy Journey: Towards a Product Centric Privacy Engineering Framework
• PEPR '20 - Responsible Design through Experimentation: Learnings from LinkedIn
• PEPR '20 - Taking Responsibility for Someone Else's Code: Studying the Privacy Behaviors of Mobile
• PEPR '20 - Throwing Out the Checklist
• PEPR '20 - When Engineers and Lawyers Talk: Right-Sizing Your Data Protection Risk Profile
• PEPR '20 - When Things Go Wrong
• PEPR '20 - Wikipedia and the Lean Data Diet
• PEPR '22 - A Closer Look: Evaluating Location Privacy Empirically
• PEPR '22 - A Way Forward: What We Know (or Not) about CSAM & Privacy
• PEPR '22 - Automating Product Deprecation
• PEPR '22 - Bringing Content Blocking to the Masses
• PEPR '22 - Building a Privacy Testbed
• PEPR '22 - Compiling Python Programs into Differentially Private Ones
• PEPR '22 - Consent on the Fly: Developing Ethical Verbal Consent for Voice Assistants
• PEPR '22 - Creating Effective Labels
• PEPR '22 - Data Mapping at a Billion Dollar Self-Driving Vehicle Startup
• PEPR '22 - Data Privacy Vocabulary (DPV): Concepts for Legal Compliance
• PEPR '22 - Data Structures for Data Privacy: Lessons Learned in Production
• PEPR '22 - Designing an Open-Source Platform for Differentially Private Analytics That Is Usable...
• PEPR '22 - Expanding Differentially Private Solutions: A Python Case Study
• PEPR '22 - Helping Mobile App Developers Create Accurate Privacy Labels
• PEPR '22 - How Developers (Don't) Think about Gender Privacy
• PEPR '22 - Identifying Personal Data by Fusing Elasticsearch with Neural Networks
• PEPR '22 - Informing the Design of Cookie Consent Interfaces with Research
• PEPR '22 - Informing the Design of Privacy Awareness Mechanisms for Users and Bystanders...
• PEPR '22 - Integrating Differential Privacy and Contextual Integrity
• PEPR '22 - Lyft and the California Consumer Privacy Act
• PEPR '22 - Negotiating Privacy/Utility Trade-Offs under Differential Privacy
• PEPR '22 - Panel: DNS Privacy Vs.
• PEPR '22 - Panel: Fueling the Emerging Privacy Tech Industry
• PEPR '22 - Privacy and Respectful Discourse in AI Chatbots
• PEPR '22 - Privacy Audits 101
• PEPR '22 - Privacy Design Flaws
• PEPR '22 - Privacy Firefighting: Incident Management Lessons from (Literal) Fires
• PEPR '22 - Privacy Shift Left: A Machine-Assisted Threat Modeling Approach
• PEPR '22 - Privacy Threat Modeling
• PEPR '22 - Privacy-Preserving Protocols for Smart Camera Systems and Other IoT Devices
• PEPR '22 - Publishing Wikipedia Project Usage Data with Strong Privacy Protections and w/o Tracking
• PEPR '22 - Three Years of Crowdsourcing Network Traffic from Smart Homes
• PEPR '23 - A People-First Approach to Introducing Process and Tools for Technical Privacy Review
• PEPR '23 - Algorithmic Transparency in Personalized Advertising: Learnings from Building "Why Am I
• PEPR '23 - Bad Metrics and Very Bad Decisions
• PEPR '23 - Beware, Data Processing! Proposing Categories for Risk Communication Related to the
• PEPR '23 - Building a Complete Export Ecosystem—From DSAR Automation to Privacy Center
• PEPR '23 - Communicating Differential Privacy Guarantees to Data Subjects
• PEPR '23 - Confirmation Bias in the Privacy Profession: Common Misreading of the NIST Privacy
• PEPR '23 - Cookie Infrastructure at Meta
• PEPR '23 - Counting with STAR: Shipping a Privacy-Preserving Telemetry System to Millions of Users
• PEPR '23 - Data Access Automation at Scale
• PEPR '23 - De-identified, Anonymized, or Aggregated? A Look around the Globe
• PEPR '23 - Demystifying Access Control in the Modern Data Warehouse
• PEPR '23 - Designing a Private Logging Pipeline
• PEPR '23 - Designing for Privacy Needs of Bystanders in Smart Homes: A Systematic Review of
• PEPR '23 - Designing the Pilot Release of Israel's National Registry of Live Births: Reconciling
• PEPR '23 - Evolution of Privacy Pass at Cloudflare
• PEPR '23 - How Does AI Change Privacy? Towards Helping Practitioners Scope, Motivate, and Conduct
• PEPR '23 - How to Break, Then Fix, Differential Privacy on Finite Computers
• PEPR '23 - How to Utilize Your Red Team for Privacy
• PEPR '23 - Looking beyond Prompts for Permissions in Chrome
• PEPR '23 - Per-Record Privacy and Its Application to Heavy-Tailed Economic Data
• PEPR '23 - Plume: Differential Privacy at Scale
• PEPR '23 - Privacy for All: Achieving Inclusive Privacy in the Digital Age
• PEPR '23 - Privacy in the Public Sector: Lessons Learned and Strategies for Success
• PEPR '23 - Privacy Requirements and Realities of Digital Public Goods
• PEPR '23 - Privacy-Preserving Analytics on the Ground
• PEPR '23 - PrivacyTests.org—Open Source Tests of Web Browser Privacy
• PEPR '23 - Protecting User Privacy in Private Set Intersection: A Journey Toward Mitigating User
• PEPR '23 - Putting Privacy on the Map
• PEPR '23 - Reimagining User Authentication for Digital Health Services: A User-Centered Approach
• PEPR '23 - Rethinking Data Minimization from a User-Centered Approach: A Paradigm Shift
• PEPR '23 - Securing and Standardizing Data Rights Requests with a Data Rights Protocol
• PEPR '23 - Striking the Balance: Safeguarding Customer Privacy While Empowering Employees
• PEPR '23 - The Missing Link in Privacy Risk Assessments
• PEPR '23 - Towards the Deployment of Secure Computation Tools in Genomics: A Sociotechnical
• PEPR '23 - Using Content Security Policy for Privacy
• PEPR '23 - WhatsApp Key Transparency
• PEPR '24 - "A Big Deal": How Privacy Engineering Can Streamline the M&A Process
• PEPR '24 - A New Model for International, Privacy-Preserving Data Science
• PEPR '24 - Anonymization Aspects of a Low-latency VoIP Security Analytics System
• PEPR '24 - Approaches and Challenges to Purpose Limitation across Diverse Data Uses
• PEPR '24 - Automating Technical Privacy Reviews Using LLMs
• PEPR '24 - Balancing Privacy: Leveraging Privacy Budgets for Privacy-Enhancing Technologies
• PEPR '24 - Being Intentional: AB Testing and Data Minimization
• PEPR '24 - Building a Protocol to Improve DSR Flexibility and Integration
• PEPR '24 - Building Permissions into Data Modeling
• PEPR '24 - Cache-22: Doing Privacy Engineering with Privacy Standards
• PEPR '24 - Compute Engine Testing with Synthetic Data Generation
• PEPR '24 - Consent Management at Airbnb
• PEPR '24 - Deleting Data at Organizational Scale
• PEPR '24 - Designing a Data Subject Access Rights Tool
• PEPR '24 - Designing for User Privacy: Integrating Differential Privacy into Ad Measurement...
• PEPR '24 - Don't End Up in the PETs Cemetery
• PEPR '24 - Empirical Privacy Metrics: The Bad, the Ugly… and the Good, Maybe?
• PEPR '24 - Empowered User Control: Learnings from Building "Event Level Deletion"
• PEPR '24 - FTC, Privacy, and You
• PEPR '24 - Governing Identity, Respectfully
• PEPR '24 - How We Can Save Anonymization
• PEPR '24 - Learning and Unlearning Your Data in Federated Settings
• PEPR '24 - Lessons Learned Deploying the Global Privacy Control to Millions of Customers
• PEPR '24 - Lineage Quality Measurement
• PEPR '24 - Measuring Privacy Risks in Mobile Apps at Scale
• PEPR '24 - Navigating the Privacy Landscape of AI on the Devices: Challenges and Best Practices
• PEPR '24 - Panel: Data Analytics: Fighting the Privacy Boogeyman
• PEPR '24 - Panel: Privacy Design Patterns for AI Systems: Threats and Protections
• PEPR '24 - Presto-Native Noisy Aggregations for Privacy-Preserving Workflows
• PEPR '24 - Through the Lens of LLMs: Unveiling Differential Privacy Challenges
• PEPR '24 - Utility Analysis for Differentially-Private Pipelines
• PEPR '24 - Why "Safety"? How We Use Measurement to Advance Governance of Technology
• PEPR '25 - Beyond RAG: Building Reliable AI Systems for Privacy Assessments
• PEPR '25 - Breaking Barriers, Not Privacy: Real-World Split Learning across Healthcare Systems
• PEPR '25 - Building an End-to-End De-Identification Pipeline for Advertising Activity Data at...
• PEPR '25 - Building Privacy Products: Field Notes
• PEPR '25 - Career Advice for Privacy Engineers: From Resume to Interview to Finding the Next Job
• PEPR '25 - Data Classification at Scale: Taming the Hydra
• PEPR '25 - Demystifying the Android Telehealth Ecosystem
• PEPR '25 - Enterprise-Scale Privacy for AI: How Canva Scaled Customer Control of Data for AI...
• PEPR '25 - Establishing Privacy Metrics for Genomic Data Analysis
• PEPR '25 - From Existential to Existing Risks of Generative AI: A Taxonomy of Who Is at Risk,...
• PEPR '25 - Harnessing LLMs for Scalable Data Minimization
• PEPR '25 - My $5MM Differential Privacy Visualizations
• PEPR '25 - Network Structure and Privacy: The Re-Identification Risk in Graph Data
• PEPR '25 - Observable...Yet Still Private? An Offensive Privacy Perspective on Observability
• PEPR '25 - OneShield Privacy Guard: Deployable Privacy Solutions for LLMs
• PEPR '25 - Panel: How Privacy Engineers Can Shape the Coming Wave of AI Governance
• PEPR '25 - Practical Considerations for Differential Privacy
• PEPR '25 - Privacy Engineers on the Front Line: Bridging Technical and Managerial Skills
• PEPR '25 - Privacy Paradigms for Law Enforcement Response
• PEPR '25 - Purpose Limitation with Policy Zones: What We Tried That Didn't Work
• PEPR '25 - Remediating Systemic Privacy Incidents
• PEPR '25 - Safetypedia: Crowdsourcing Privacy Inspections
• PEPR '25 - Unlocking Cross-Organizational Insights: Practical MPC for Cloud-Based Data Analytics
• PEPR '25 - UsersFirst: A User-Centric Threat Modeling Framework for Privacy Notice and Choice
• PEPR '25 - Using GenAI to Accelerate Privacy Implementations
• PEPR '25 - Using Privacy Infrastructure to Kickstart AI Governance: NIST AI Risk Management Case...
• PEPR '25 - Verifying Humanness: Personhood Credentials for the Digital Identity Crisis
• PEPR '25 - When Privacy Guarantees Meet Pre-Trained LLMs: A Case Study in Synthetic Data
• PEPR '26 - A DP Framework for Gaining Insights into AI Chatbot Use
• PEPR '26 - Adopting AI in Local Government with Privacy and Equity in Mind: A Case Study of the...
• PEPR '26 - Architecting Scalable Data Lineage Graph for Privacy Compliance and Agentic Analysis
• PEPR '26 - CA-CI: A Normative Framework for Evaluating Privacy and Dignity in AI Governance
• PEPR '26 - Designing for Civic Trust: An Infrastructure to Help Long Beach Residents Manage Their...
• PEPR '26 - Dismantling the Barriers to Personal Data Portability
• PEPR '26 - DPSynth: From Research to Production—Engineering Differentially Private Synthetic...
• PEPR '26 - Enforcement of Data Protection Laws in Africa: Implications for Privacy Engineers
• PEPR '26 - Envisioning and Mitigating Privacy Risks for Consumer-Facing AI Product Concepts...
• PEPR '26 - From Legalese to Logic: Translating Privacy Requirements into Verifiable Controls via...
• PEPR '26 - Generating High-Quality Tabular Synthetic Data at Scale
• PEPR '26 - How Canva Built Simple, Auditable, and Maintainable Data Retention
• PEPR '26 - Mapping the Privacy Workforce in the AI Era
• PEPR '26 - Panel: The AI Architecture Debt—Refactoring Infrastructure for Sustainable Privacy
• PEPR '26 - Privacy in Theory, Bugs in Practice: Grey-Box Testing for Differential Privacy Libraries
• PEPR '26 - Privacy Review for Non-Maniacs
• PEPR '26 - Private AI: Building Trust Through Verifiable Computation
• PEPR '26 - Private Tuning of LLMs in Practice: From VaultGemma to Custom Fine-Tuning
• PEPR '26 - Production Multi-Party Computation via the Distributed Aggregation Protocol
• PEPR '26 - Profile-Then-Simulate: Can LLMs Faithfully Generate Differentially Private Synthetic...
• PEPR '26 - Provenance Without Surveillance: Privacy Engineering for AI Content Transparency
• PEPR '26 - Responding to Regulations Confidently and Efficiently
• PEPR '26 - Scaling Privacy Threat Modeling: From Architects to Developers
• PEPR '26 - Shadow Data in Tool Calls: The Privacy Leak Hiding in Plain Sight
• PEPR '26 - Surfacing Hidden Privacy Risks in Code: Lessons from LLM and Retrieval Assisted Detection
• PEPR '26 - The Disposable Identity: Eliminating Non-Human Identity Risk in Federal Healthcare...
• PEPR '26 - The Emperor's New Embeddings: Obfuscating ML Inputs Doesn't Provide Privacy
• PEPR '26 - Toward Provably Private Insights into AI Use
• PEPR '26 - Training Developers' Privacy Awareness with Enforcement Cases
• PEPR '26 - Turning Privacy Risk Assessment Into 20 Questions for Developers
• PEPR '26 - User (Non-)Compliance with Age Verification: Evidence from a Deceptive Web Experiment
• PEPR '26 - V.O.I.C.E.: A Data-Driven Risk Taxonomy for Synthetic Voice Generation
• PEPR '26 - Vision: Human-as-the-Unit Privacy Management with AI Agents
• PEPR '26 - Why Consent Fails in Practice: Lessons from Web Measurement Studies
• Playing the Certification Game
• Preview: Cloud Computing
• Preview: Graph NNs
• Preview: Hardware and Offloads
• Preview: KV-Stores and Databases
• Preview: ML Serving
• Preview: ML Training
• Preview: Networking
• Preview: Operating Systems
• Preview: Persistent Memory
• Preview: Security and Privacy
• Preview: Storage
• Preview: Verification (Correctness & Debugging)
• Preview: Verification (Correctness)
• Programming Style and Your Brain
• Project Cauã
• Proving Voltaire Right: Security Blunders Dumber Than Dog Snot
• Pyro: A Spatial-Temporal Big-Data Storage System
• Recon: Verifying File System Consistency at Runtime
• Reliably Erasing Data from Flash-Based Solid State Drives
• Revisiting Storage for Smartphones
• RGBDroid: A Novel Response-Based Approach to Android Privilege Escalation Attacks
• RoboBees: An Autonomous Colony of Robotic Pollinators
• S Landau
• ScAINet '20 - Combating Social Media Information Operations with Neural Language Models
• ScAINet '20 - Getting Passive Aggressive about False Positives
• ScAINet '20 - On Adaptive Attacks to Adversarial Example Defenses
• ScAINet '20 - Optimization for Attack Surface Exploration: The Case of TLS
• Searching for Truth, or at Least Data: How to Be an Empiricist Skeptic
• sec20summer paper300 presentation video final
• Security and Privacy Vulnerabilities of In-Car Wireless Networks
• ServerSwitch: A Programmable and High Performance Platform for Data Center Networks
• Sherlock Holmes and the Case of the Advanced Persistent Threat
• Should the Root Prompt Require a Road Test? At USENIX LISA '07
• Slipstream: Automatic Interprocess Communication Optimization
• So You Want to Take Over a Botnet...
• Social Networking with Frientegrity: Privacy and Integrity with an Untrusted Provider
• Software G Forces: The Effects of Acceleration
• Some Thoughts About Concurrency by Ivan Sutherland, Visiting Scientist at Portland State University
• SRcon19 Americas - Designing Resilient Data Pipelines
• SRE Engagement Model Transition in Building and Expanding SRE Team
• SREcom18 Americas - Welcome and Opening Remarks
• SREcon14 - Design Review Best Practices
• SREcon14 - Finding and Resolving Problems at Scale
• SREcon14 - Grilled Cheese at Scale: A Recipe for Stability Practices
• SREcon14 - Keys to SRE
• SREcon14 - Monitoring at “Systems”
• SREcon15 - Architecting and Launching the Halo 4 Services
• SREcon15 - Being Afraid—How Paranoia at Dropbox Protects Your Data
• SREcon15 - Building a Billion User Load Balancer
• SREcon15 - Case Study: Adopting SRE Principles at StackOverflow
• SREcon15 - Collin and the Slingbot
• SREcon15 - Ensuring Success During Disaster
• SREcon15 - Error Budgets and Risks
• SREcon15 - From Zero to Hero: Recommended Practices for Training your Ever-Evolving SRE Teams
• SREcon15 - Incident Analysis
• SREcon15 - Instagration: A Case Study in Cloud Migration at Scale
• SREcon15 - Learning from Mistakes and Outages at Facebook
• SREcon15 - Making Every SRE Hire Count
• SREcon15 - Making the Sum of AWS Networking Greater than Its Parts—Achieving High Availability
• SREcon15 - Monitoring without Infrastructure @ Airbnb
• SREcon15 - Mux: How I Stopped Worrying and Learned to Love the Multiplexing
• SREcon15 - MySQL Automation at Facebook Scale
• SREcon15 - Netflix RaaS: Reliability as a Service
• SREcon15 - Notes from Production Engineering
• SREcon15 - Panel: Ask Me Anything with the SREcon Chairs and Speakers
• SREcon15 - Panel: Educating SRE
• SREcon15 - Panel: Fifty Shades of Grey: Different Models for Reliability Work
• SREcon15 - Panel: The Weeping Angels of Site Reliability
• SREcon15 - Scaling Networks through Software
• SREcon15 - Smart Monitor System For Automatic Anomaly Detection @Baidu
• SREcon15 - SRE Hiring
• SREcon15 Europe - Prometheus: A Next-Generation Monitoring System (Talk)
• SREcon15 Lightning Talks
• SREcon16 - A Young Lady's Illustrated Primer to Technical Decision-Making
• SREcon16 - Avoiding Cascading Failures at eBay?
• SREcon16 - Beyond Repair: Proactive Maintenance Work at Scale
• SREcon16 - Building Reliable Social Infrastructure for Google
• SREcon16 - College Student to SRE: Onboarding Your Entry Level Talent
• SREcon16 - Continuous Deployment to Millions of Users 40 Times a Day
• SREcon16 - Debugging Distributed Systems
• SREcon16 - Doorman: Global Distributed Client Side Rate Limiting
• SREcon16 - Doorman: Global Distributed Client Side Rate Limiting
• SREcon16 - Finding the Order in Chaos
• SREcon16 - From Ops to SRE on a Brazilian Startup
• SREcon16 - Go for SREs Using Python
• SREcon16 - How to Improve a Service by Roasting It
• SREcon16 - Less Alarming Alerts!
• SREcon16 - Lightning Talks
• SREcon16 - Managing Grumpy: Embracing Diversity to Build Stronger Teams
• SREcon16 - Monitoring the Unmeasureable
• SREcon16 - Moving Large Workload from a Public to an OpenStack Private Cloud: Is It Really Worth It?
• SREcon16 - Netflix: 190 Countries and 5 CORE SREs
• SREcon16 - nrrd 911 ic me: The Incident Commander Role
• SREcon16 - Operational Buddhism: Building Reliable Services from Unreliable Components
• SREcon16 - Operations at (Small) Scale
• SREcon16 - Panel: SRE Managers
• SREcon16 - Panel: Who/What Is SRE?
• SREcon16 - Performance Checklists for SREs
• SREcon16 - Privacy Reliability Engineering: Looking at Privacy through the Lens of SRE
• SREcon16 - Putting Together Great SRE Teams
• SREcon16 - Running Consul at Scale—Journey from RFC to Production
• SREcon16 - Server Provisioning in an IPv6 Only World
• SREcon16 - Service Levels and Error Budgets
• SRECon16 - Shaping Reality to Shape Outcomes: Making SRE Work with Uber Growth
• SREcon16 - Shopping Event Reliability
• SREcon16 - SRE at a Start-Up: Lessons from LinkedIn
• SREcon16 - SRE: It’s People All the Way Down
• SREcon16 - SREs + Software Engineers: Making It Work
• SREcon16 - Stepping Up to Scale
• SREcon16 - Terraform at Adobe
• SREcon16 - The Art of Performance Monitoring
• SREcon16 - The Evolution of Global Traffic Routing and Failover
• SREcon16 - The Realities of the Job of Delivering Reliability
• SREcon16 - Transforming Tier 1 Caterpillars to Butterflies
• SREcon16 - Using Salt to Make Infrastructure Consumable (Tasty, Even)
• SREcon16 - What's NetDevOps? How Do I Start?
• SREcon16 Europe - Active Fault Finding in Networks
• SREcon16 Europe - Alerting for Distributed Systems—A Tale of Symptoms and Causes, Signals and Noise
• SREcon16 Europe - Availability Objectives of SoundCloud’s Microservices
• SREcon16 Europe - Bridging Multicast to the Cloud
• SREcon16 Europe - Bridging the Safety Gap from Scripts to Full Auto-Remediation
• SREcon16 Europe - Capacity Planning at Scale
• SREcon16 Europe - Challenges of Machine Learning at Scale
• SREcon16 Europe - Data Privacy Legislation and the Impact on SRE
• SREcon16 Europe - DNS: Old Solution for Modern Problems
• SREcon16 Europe - Doorman: Global Distributed Client Side Rate Limiting
• SREcon16 Europe - Downtime Budgets
• SREcon16 Europe - Extreme OS Kernel Testing
• SREcon16 Europe - Fixing the Internet for Real-Time Applications (Games)
• SREcon16 Europe - Flash Sale Engineering
• SREcon16 Europe - Full-Mesh IPsec Network: 10 Dos and 500 Don'ts
• SREcon16 Europe - Government Needs SRE
• SREcon16 Europe - How to Improve Your Service by Roasting It
• SREcon16 Europe - Incident Response @ FB, Facebook's SEV Process
• SREcon16 Europe - Leading a Team with Values
• SREcon16 Europe - Lessons from Automatic Incident Resolution for a Million Databases
• SREcon16 Europe - Linux Kernel Building, Testing, and Deployment at Facebook
• SREcon16 Europe - Managing Up and Sideways as an SRE
• SREcon16 Europe - Moving a Large Workload from a Public Cloud to an OpenStack Private Cloud...
• SREcon16 Europe - My Service Runs at 99.999%...All Those Tweets about Outages Are Not Real...
• SREcon16 Europe - Next-generation Alerting and Fault Detection
• SREcon16 Europe - Panel: Oncall
• SREcon16 Europe - Past, Present, and Future of Network Operations
• SREcon16 Europe - Production Improvement Review: Taking a Bite Out of Repair Debt
• SREcon16 Europe - Relieving Technical Debt through Short Projects
• SREcon16 Europe - Running Storage at Facebook
• SREcon16 Europe - Scaling Shopify's Multi-Tenant Architecture across Multiple Datacenters
• SREcon16 Europe - Splicing SRE DNA Sequences in the Biggest Software Company on the Planet
• SREcon16 Europe - Techniques and Tools for a Coherent Discussion about Performance in Complex...
• SREcon16 Europe - The Knowledge: Towards a Culture of Engineering Documentation
• SREcon16 Europe - The Many Ways Your Monitoring Is Lying to You
• SREcon16 Europe - The Next Linux Superpower: eBPF Primer
• SREcon16 Europe - The Production Engineering Lifecycle: How We Build, Run, and Disband Great...
• SREcon16 Europe - The Structure and Interpretation of Graphs
• SREcon16 Europe - The Virtuous Cycle: Getting Good Things out of Bad Failures
• SREcon16 Europe - Tier1 Metamorphoses
• SREcon16 Europe - What SRE Means in a Start-up
• SREcon16 Europe-Load Shedding—Approaches, Principles, Experiences, and Impact in Service Management
• SREcon17 Americas - A Million Containers Isn't Cool
• SREcon17 Americas - A Practical Guide to Monitoring and Alerting with Time Series at Scale
• SREcon17 Americas - Ambry—LinkedIn’s Distributed Immutable Object Store
• SREcon17 Americas - Anomaly Detection in Infrequently Occurred Patterns
• SREcon17 Americas - Automated Debugging of Bad Deployments
• SREcon17 Americas - BPerf—Bing.com Cloud Profiling on Production
• SREcon17 Americas - Breaking Things on Purpose
• SREcon17 Americas - Building Real Time Infrastructure at Facebook
• SREcon17 Americas - Changing Old Habits: Meetup’s Path to SRE
• SREcon17 Americas - Deployment Automation: Releasing Quickly and Reliably
• SREcon17 Americas - DNSControl: A DSL for DNS as Code from StackOverflow.com
• SREcon17 Americas - Don't Call Me Remote! Building and Managing Distributed Teams
• SREcon17 Americas - Engineering Reliable Mobile Applications
• SREcon17 Americas - Every Day Is Monday in Operations
• SREcon17 Americas - Feedback Loops: How SREs Benefit and What Is Needed to Realize Their Potential
• SREcon17 Americas - From Combat to Code: How Programming Is Helping Veterans Find Purpose
• SREcon17 Americas - From Engineering Operations to Site Reliability Engineering
• SREcon17 Americas - How Do Your Packets Flow?
• SREcon17 Americas - How Robust Monitoring Powers High Availability for LinkedIn Feed
• SREcon17 Americas - How to Work with Technical Writers
• SREcon17 Americas - I'm Putting Sloths on the Map
• SREcon17 Americas - It's the End of the World as We Know It (I Feel Fine): Engineering for Crisis
• SREcon17 Americas - I’m an SRE Lead! Now What? How to Bootstrap and Organize Your SRE Team
• SREcon17 Americas - Java Hates Linux. Deal with It.
• SREcon17 Americas - Keep Calm and Carry On: Scaling Your Org with Microservices
• SREcon17 Americas - Killing Our Darlings: How to Deprecate Systems
• SREcon17 Americas - Lightning Talks 1
• SREcon17 Americas - Lightning Talks 2
• SREcon17 Americas - Lyft's Envoy: Experiences Operating a Large Service Mesh
• SREcon17 Americas - Making the Most of Your SRE Toolbox: Bootstrapping Your SRE Team through Reuse
• SREcon17 Americas - Observability in the Cambrian Stack Era
• SREcon17 Americas - Panel: Training New SREs
• SREcon17 Americas - Postmortem Action Items: Plan the Work and Work the Plan
• SREcon17 Americas - Principles of Chaos Engineering
• SREcon17 Americas - Reducing MTTR and False Escalations: Event Correlation at LinkedIn
• SREcon17 Americas - Reliability When Everything Is a Platform: Why You Need to SRE Your Customers
• SREcon17 Americas - Root Cause, You're Probably Doing It Wrong
• SREcon17 Americas - So You Want to Be a Wizard
• SREcon17 Americas - Spotify's Love-Hate Relationship with DNS
• SREcon17 Americas - SRE and Presidential Campaigns
• SREcon17 Americas - Ten Persistent SRE Antipatterns Pitfalls on the Road to a Successful SRE Program
• SREcon17 Americas - The Road to Chaos
• SREcon17 Americas - The Service Score Card—Gamifying Operational Excellence
• SREcon17 Americas - Tracking Service Infrastructure at Scale
• SREcon17 Americas - TrafficShift: Avoiding Disasters at Scale
• SREcon17 Americas - Traps and Cookies
• SREcon17 Americas - Tune Your Way to Savings!
• SREcon17 Americas - Zero Trust Networks: Building Trusted Systems in Untrusted Networks
• SREcon17 Americas—So You Want to Be a Wizard
• SREcon17 Asia Australia: Data Checking at Dropbox
• SREcon17 Asia/Australia: A Unit Test Would Have Caught This...
• SREcon17 Asia/Australia: Canary in the Internet Mine
• SREcon17 Asia/Australia: InnoDB to MyRocks Migration in Main MySQL Database at Facebook
• SREcon17 Asia/Australia: Merou: A Decentralized, Audited Authorization Service
• SREcon17 Asia/Australia: A Distribution Framework over ANSIBLE
• SREcon17 Asia/Australia: Accept Partial Failures, Minimize Service Loss
• SREcon17 Asia/Australia: Automated Troubleshooting of Live Site Issues
• SREcon17 Asia/Australia: Azure SREBot More than a Chatbot...
• SREcon17 Asia/Australia: Capacity Planning and Flow Control
• SREcon17 Asia/Australia: Didi: How to Provide a Reliable Ridesharing Service
• SREcon17 Asia/Australia: Distributed Consensus Algorithms
• SREcon17 Asia/Australia: Distributed Scheduler Hell
• SREcon17 Asia/Australia: Draining the Flood—A Combat against Alert Fatigue
• SREcon17 Asia/Australia: Event Correlation: A Fresh Approach towards Reducing MTTR
• SREcon17 Asia/Australia: Focal Impact The Service Pyramid
• SREcon17 Asia/Australia: Golang's Garbage
• SREcon17 Asia/Australia: Good, Better, Best, Mobile User Experience
• SREcon17 Asia/Australia: Graphite@Scale or How to Store Millions of Metrics per Second
• SREcon17 Asia/Australia: How Could Small Teams Get Ready for SRE
• SREcon17 Asia/Australia: How We Built TechLadies in Singapore
• SREcon17 Asia/Australia: LinkedIn SRE From Inception to Global Scale
• SREcon17 Asia/Australia: Managing Capacity @ LinkedIn
• SREcon17 Asia/Australia: Managing Changes Seamlessly on Yahoo's Hadoop Infrastructure Servers
• SREcon17 Asia/Australia: Managing Server Secrets at Scale with a Vaultless Password Manager
• SREcon17 Asia/Australia: Measuring the Success of Incident Management at Atlassian
• SREcon17 Asia/Australia: Next Generation of DevOps AIOps in Practice @Baidu
• SREcon17 Asia/Australia: Open Falcon A Distributed and High Performance Monitoring System
• SREcon17 Asia/Australia: Operationalizing DevOps Teaching
• SREcon17 Asia/Australia: Reliable Launches at Scale
• SREcon17 Asia/Australia: Scaling Reliability at Dropbox Our Journey towards a Distributed Ownership
• SREcon17 Asia/Australia: Smart Monitoring System for Anomaly Detection on Business Trends in Alibaba
• SREcon17 Asia/Australia: SRE Your gRPC—Building Reliable Distributed Systems Illustrated with gRPC
• SREcon17 Asia/Australia: Talking to an OpenStack Cluster in Plain English
• SREcon17 Asia/Australia: Testing for DR Failover Testing
• SREcon17 Europe/Middle East/Africa - 100 Teams, 100 Ways to Fail
• SREcon17 Europe/Middle East/Africa - 6 Ways a Culture of Communication Strengthens...
• SREcon17 Europe/Middle East/Africa - And the CFO Wept: AWS Cost Control
• SREcon17 Europe/Middle East/Africa - Avoiding and Breaking Out of Capacity Prison
• SREcon17 Europe/Middle East/Africa - Building a Culture of Reliability
• SREcon17 Europe/Middle East/Africa - Building an On-Premise Kubernetes...
• SREcon17 Europe/Middle East/Africa - Building an SRE Capability Inside a Large Organization
• SREcon17 Europe/Middle East/Africa - Capturing and Analyzing Millions...
• SREcon17 Europe/Middle East/Africa - Care and Feeding of SRE
• SREcon17 Europe/Middle East/Africa - Case Study: Lessons Learned from Our First Worldwide Outage
• SREcon17 Europe/Middle East/Africa - Cognitive Bias and On-Call
• SREcon17 Europe/Middle East/Africa - Distributed Systems, Like It or Not
• SREcon17 Europe/Middle East/Africa - Diversity and Inclusion in SRE: A Postmortem
• SREcon17 Europe/Middle East/Africa - From Firefighting to Proactive Work: ...
• SREcon17 Europe/Middle East/Africa - Gamifying Reliability Excellence—The Service Score Card
• SREcon17 Europe/Middle East/Africa - Globalizing SRE in a Walkup Culture
• SREcon17 Europe/Middle East/Africa - Have You Tried Turning It off and Turning It on Again?
• SREcon17 Europe/Middle East/Africa - Hiring SREs May Be Literally Impossible
• SREcon17 Europe/Middle East/Africa - How We Try to Make a Lion Bulletproof...
• SREcon17 Europe/Middle East/Africa - Incident Command at the Edge
• SREcon17 Europe/Middle East/Africa - Incident Management and Chatops at Shopify
• SREcon17 Europe/Middle East/Africa - InStream: Large Scale Distribution...
• SREcon17 Europe/Middle East/Africa - Make Haste Slowly: Balancing SRE Diligence in Urgency...
• SREcon17 Europe/Middle East/Africa - Monitoring Cloudflare's Planet-Scale Edge Network
• SREcon17 Europe/Middle East/Africa - Monitoring Design Principles
• SREcon17 Europe/Middle East/Africa - OK Log: Distributed and Coördination-Free Logging
• SREcon17 Europe/Middle East/Africa - Persistent SRE Antipatterns: Pitfalls On the...
• SREcon17 Europe/Middle East/Africa - Postmortem Action Items: Plan the Work and Work the Plan
• SREcon17 Europe/Middle East/Africa - Profiling Node Applications
• SREcon17 Europe/Middle East/Africa - Reducing MTTR and False Escalations: Event...
• SREcon17 Europe/Middle East/Africa - Resiliency Testing with Toxiproxy
• SREcon17 Europe/Middle East/Africa - Run Less Software; Use Less Bits
• SREcon17 Europe/Middle East/Africa - Service with an Angry Smile: Passive-Aggressive Behavior in SRE
• SREcon17 Europe/Middle East/Africa - Show Me the RIGHT Numbers! Are Our Users Happy?
• SREcon17 Europe/Middle East/Africa - SRE Your gRPC...
• SREcon17 Europe/Middle East/Africa - Standing On the Shoulders of Giants...
• SREcon17 Europe/Middle East/Africa - Startup Systems Εngineer's Instruction Manual
• SREcon17 Europe/Middle East/Africa - Tech Leadership in SRE
• SREcon17 Europe/Middle East/Africa - The Cult(Ure) of Strength
• SREcon17 Europe/Middle East/Africa - The Dangers of Being Overly-Paranoid
• SREcon17 Europe/Middle East/Africa - The History of How We Came to Be
• SREcon17 Europe/Middle East/Africa - The Never-Ending Story of Site Reliability
• SREcon17 Europe/Middle East/Africa - The Why, What, and How of Starting an SRE Engagement
• SREcon17 Europe/Middle East/Africa - Traffic Steering using Rum DNS @ LinkedIn
• SREcon17 Europe/Middle East/Africa - Use Load Testing to Build a Proper Mental Model of Your Service
• SREcon17 Europe/Middle East/Africa - Want to Solve Over-Monitoring...
• SREcon17 Europe/Middle East/Africa - When Trouble Comes to Town
• SREcon17 Europe/Middle East/Africa - Why Work with a Tech Writer?
• SREcon17 Europe/Middle East/Africa: Collecting metrics with Snap - the open telemetry framework
• SREcon17 Europe/Middle East/Africa: Decentralized Data
• SREcon17 Europe/Middle East/Africa: Dynamic Documentation in 5 minutes
• SREcon17 Europe/Middle East/Africa: Failovers
• SREcon17 Europe/Middle East/Africa: Resource management and isolation, the non-shiny way
• SREcon17Europe/Middle East/Africa - Lightning Talks
• SREcon18 Americas - Monitoring DNS with Open-Source Solutions
• SREcon18 Americas - "Capacity Prediction" instead of "Capacity Planning":
• SREcon18 Americas - Antics, Drift, and Chaos
• SREcon18 Americas - Approaching the Unacceptable Workload Boundary
• SREcon18 Americas - Architecting a Technical Post Mortem
• SREcon18 Americas - Automatic Metric Screening for Service Diagnosis
• SREcon18 Americas - Beyond Burnout: Mental Health and Neurodiversity in Engineering
• SREcon18 Americas - Bootstrapping an SRE Team:
• SREcon18 Americas - Breaking in a New Job as an SRE
• SREcon18 Americas - Building Shopify's PaaS on Kubernetes
• SREcon18 Americas - Building Successful SRE in Large Enterprises—One Year Later
• SREcon18 Americas - Containerization War Stories
• SREcon18 Americas - Distributed Tracing, Lessons Learned
• SREcon18 Americas - Don’t Ever Change! Are Immutable Deployments Really Simpler, Faster, and Safer?
• SREcon18 Americas - Help Protect Your Data Centers with Safety Constraints
• SREcon18 Americas - How Not to Go Boom: Lessons for SREs from Oil Refineries
• SREcon18 Americas - How SREs Found More than $100 Million Using Failed Customer Interactions
• SREcon18 Americas - If You Don’t Know Where You’re Going, It Doesn’t Matter How Fast You Get There
• SREcon18 Americas - Junior Engineers Are Features, Not Bugs
• SREcon18 Americas - Know Thy Enemy: How to Prioritize and Communicate Risks
• SREcon18 Americas - Leaping from Mainframes to AWS: Technology Time Travel in the Government
• SREcon18 Americas - Learning at Scale Is Hard! Outage Pattern Analysis and Dirty Data
• SREcon18 Americas - Lessons Learned from Five Years of Multi-Cloud at PagerDuty
• SREcon18 Americas - Lessons Learned from Our Main Database Migrations at Facebook
• SREcon18 Americas - Leveraging Multiple Regions to Improve Site Reliability:
• SREcon18 Americas - Operational Excellence in April Fools’ Pranks: Being Funny Is Serious Work!
• SREcon18 Americas - Real World SLOs and SLIs: A Deep Dive
• SREcon18 Americas - Resolving Outages Faster with Better Debugging Strategies
• SREcon18 Americas - Security and SRE: Natural Force Multipliers
• SREcon18 Americas - Security as a Service
• SREcon18 Americas - SparkPost: The Day the DNS Died
• SREcon18 Americas - Stable and Accurate Health-Checking of Horizontally-Scaled Services
• SREcon18 Americas - The History of Fire Escapes
• SREcon18 Americas - Welcome and Opening Remarks
• SREcon18 Americas - What It Really Means to Be an Effective Engineer
• SREcon18 Americas - When to NOT Set SLOs: Lots of Strangers Are Running My Software!
• SREcon18 Americas - Whispers in Chaos: Searching for Weak Signals in Incidents
• SREcon18 Americas - Working with Third Parties Shouldn't Suck
• SREcon18 Americas - Your System Has Recovered from an Incident, but Have Your Developers?
• SREcon18 Asia/Australia - A Tale of One Billion Time Series
• SREcon18 Asia/Australia - A Theory and Practice of Alerting with Service Level Objectives
• SREcon18 Asia/Australia - Achieving Observability into Your Application with OpenCensus
• SREcon18 Asia/Australia - Automatic Datacenter and Service Deployments...
• SREcon18 Asia/Australia - Automatic Traffic Scheduling for Internet Connectivity Failures
• SREcon18 Asia/Australia - Blame. Language. Sharing: Three Tips for...
• SREcon18 Asia/Australia - Building SRE: Culture from the Outside In
• SREcon18 Asia/Australia - Characterizing and Understanding Phases of SRE Practices
• SREcon18 Asia/Australia - Comprehensive Container-Based Service Monitoring with Kubernetes and Istio
• SREcon18 Asia/Australia - Cultural Nuance and Effective Collaboration for Multicultural Teams
• SREcon18 Asia/Australia - Data Visualization for SREs—an Essential Skill for Quick Debugging
• SREcon18 Asia/Australia - Debugging at Scale—Going from Single Box to Production
• SREcon18 Asia/Australia - Do Docs Better: Practical Tips on Delivering...
• SREcon18 Asia/Australia - Doing Things the Hard Way
• SREcon18 Asia/Australia - Ensuring Reliability of High-Performance Applications
• SREcon18 Asia/Australia - Evolution of SRE and Rising Need of SRE Catalyzers
• SREcon18 Asia/Australia - From Monitoring to Automated Testing of Your Infrastructure Code
• SREcon18 Asia/Australia - How to Make Releases Safer in Baidu
• SREcon18 Asia/Australia - How to Serve and Protect (with Client Isolation)
• SREcon18 Asia/Australia - Interviewing for Systems Design Skills
• SREcon18 Asia/Australia - Introduction to Alibaba Monitoring System
• SREcon18 Asia/Australia - Isolation without Containers
• SREcon18 Asia/Australia - Know Thy Enemy: How to Prioritize and Communicate Risks
• SREcon18 Asia/Australia - Lessons Learned from Our Main Database Migrations at Facebook
• SREcon18 Asia/Australia - Mental Models for SREs
• SREcon18 Asia/Australia - Mentoring: A Newcomer's Perspective
• SREcon18 Asia/Australia - Pro Tip: Save Money on Outages by Having a Bot Do the Heavy Lifting
• SREcon18 Asia/Australia - Production Engineering: Connect the Dots
• SREcon18 Asia/Australia - Productionizing Machine-Learning Services: Lessons from Google SRE
• SREcon18 Asia/Australia - PV Monitoring Based on Linear Regression
• SREcon18 Asia/Australia - Quantifying Empathy with Service Level Objectives
• SREcon18 Asia/Australia - Safe Client Behaviour
• SREcon18 Asia/Australia - Scaling a Distributed Stateful System: A LinkedIn Case Study
• SREcon18 Asia/Australia - Scaling Yourself for Managing Distributed Teams...
• SREcon18 Asia/Australia - Shopify's Move from the Data Centre to the Cloud
• SREcon18 Asia/Australia - Smarter Disasters: End-to-End Automation for Incidents
• SREcon18 Asia/Australia - The Evolution of Site Reliability Engineering
• SREcon18 Asia/Australia - You Can't Stop Fires with an Ambulance
• SREcon18 Asia/Australia - You Get What You Measure—Why Metrics Are Important
• SREcon18 Europe - Against On-Call: A Polemic
• SREcon18 Europe - Applying the Principles of Chaos to Serverless
• SREcon18 Europe - Availability, Latency, and Cost: Withstanding Regional Outages
• SREcon18 Europe - Building a Debuggable Go Server
• SREcon18 Europe - Building a Debuggable Go Server
• SREcon18 Europe - Building a Fellowship Program to Mentor and Grow Your SRE Team
• SREcon18 Europe - Can I Tell You a Secret? I See Dead Systems
• SREcon18 Europe - Canarying Well: Lessons Learned from Canarying Large Populations
• SREcon18 Europe - Capacity Planning in Four Parts: Telling the Future without a Crystal Ball
• SREcon18 Europe - Care and Feeding of Data Processing Pipelines
• SREcon18 Europe - Circonus: Design (Failures) Case Study
• SREcon18 Europe - Clearing the Way for SRE in the Enterprise
• SREcon18 Europe - Data Protection Update and Tales from the Introduction of the GDPR
• SREcon18 Europe - Dealing with Dark Debt: Lessons Learnt at Goldman Sachs
• SREcon18 Europe - Delete This: Decommissioning Servers at Scale
• SREcon18 Europe - Deploying SRE Training Best Practices to Production...
• SREcon18 Europe - Ethics in Computing
• SREcon18 Europe - Halt and Don’t Catch Fire
• SREcon18 Europe - How We Un-Scattered Our DNS Setup and Unlocked New Automation Options
• SREcon18 Europe - How We Un-Scattered Our DNS Setup and Unlocked New Automation Options
• SREcon18 Europe - Impact of Network Automation
• SREcon18 Europe - I’m SRE and You Can Too!—A Fine Manual...
• SREcon18 Europe - Junior Engineers Are Features, Not Bugs
• SREcon18 Europe - Keep Building Fresh: Shopify's Journey to Kubernetes
• SREcon18 Europe - Kernel Upgrades at Facebook
• SREcon18 Europe - Know Your Kubernetes Deploys
• SREcon18 Europe - Lessons Learned—Data Driven Hiring 3 Years Later
• SREcon18 Europe - Lightning Talks
• SREcon18 Europe - Managing Misfortune for Best Results
• SREcon18 Europe - Migrating Your Old Server Products to Be Stateless Cloud Services
• SREcon18 Europe - Migrations under Production Load: How to Switch...
• SREcon18 Europe - Not Invented Here Syndrome and Dark Debt: The PagerDuty Story
• SREcon18 Europe - Observability for Emerging Infra: What Got You Here Won't Get You There
• SREcon18 Europe - Panel: Data Pipelines—Scaling and Reliability
• SREcon18 Europe - Real World SLOs and SLIs: A Deep Dive
• SREcon18 Europe - Scalable Coding—Find the Error
• SREcon18 Europe - SoundCloud's Story of Seeking Sustainable SRE
• SREcon18 Europe - SRE for Good: Engineering Intersections between Operations and Social Activism
• SREcon18 Europe - SRE for Mobile Applications
• SREcon18 Europe - SRE Team Lifecycles
• SREcon18 Europe - SRE Theory vs. Practice: A Song of Ice and TireFire
• SREcon18 Europe - Sustainability Starts Early: Creating a Great Ops Internship
• SREcon18 Europe - The 7 Deadly Sins of Documentation
• SREcon18 Europe - The Math behind Project Scheduling, Bug Tracking, and Triage
• SREcon18 Europe - The Myth of Cloud Agnosticism
• SREcon18 Europe - The Nth Region Project: An Open Retrospective
• SREcon18 Europe - The Silver Lining Consortium: Post-Mortems for the Rest of Us
• SREcon18 Europe - This IS NOT Fine: Putting Out (Code) Fires
• SREcon18 Europe - Tradeoffs in Resiliency: Managing the Burden of Data Recoverability
• SREcon18 Europe - What Makes a Good SRE: Findings from the SRE Survey
• SREcon18 Europe - What Medicine Can Teach Us about Being On-Call
• SREcon18 Europe - Y2K and Other Disappointing Disasters: Risk Reduction and Harm Mitigation
• SREcon18 Europe - Your System Has Recovered from an Incident, but Have Your Developers?
• SREcon19 Americas - An Introduction to GraphQL
• SREcon19 Americas - Aperture: A Non-Cooperative, Client-Side Load Balancing Algorithm
• SREcon19 Americas - Automating the Management of the Operational Health of Cloud Accounts at Scale
• SREcon19 Americas - Benefits of Taking the Less Traveled Road with Containers Infrastructure
• SREcon19 Americas - Capacity Prediction in External Services
• SREcon19 Americas - Case Study: Implementing SLOs for a New Service
• SREcon19 Americas - Code-Yellow: Helping Operations Top-Heavy Teams the Smart Way
• SREcon19 Americas - Complexity: The Crucial Ingredient in Your Kitchen
• SREcon19 Americas - Creating a Code Review Culture
• SREcon19 Americas - Differences in SRE Implementations across Companies
• SREcon19 Americas - Extending the Error Budget Model to Security and Feature Freshness
• SREcon19 Americas - Fault Tree Analysis Applied to Apache Kafka
• SREcon19 Americas - Fixing On-Call When Nobody Thinks It's (Too) Broken
• SREcon19 Americas - From Black Box to a Known Quantity: How to Build Predictable, Reliable ML-based
• SREcon19 Americas - How Did Things Go Right? Learning More from Incidents
• SREcon19 Americas - Inside the Kube: A Guided Tour of Kubernetes Cluster Setup
• SREcon19 Americas - Keeping the Balance: Internet-Scale Loadbalancing Demystified
• SREcon19 Americas - Latency SLOs Done Right
• SREcon19 Americas - Learning from Learnings: Anatomy of Three Incidents
• SREcon19 Americas - Lessons Learned in Black Box Monitoring 25,000 Endpoints...
• SREcon19 Americas - Lightning Talks
• SREcon19 Americas - Madaari: Ordering for the Monkeys
• SREcon19 Americas - Migrating a Monolith to the Cloud
• SREcon19 Americas - Mindfulness in SRE: Monitoring and Alerting for One's Self
• SREcon19 Americas - One on One SRE
• SREcon19 Americas - Operating within Normal Parameters: Monitoring Kubernetes
• SREcon19 Americas - Optimizing for Learning
• SREcon19 Americas - Pragmatic Automation
• SREcon19 Americas - Resilience Engineering Mythbusting
• SREcon19 Americas - Running Excellent Retrospectives: Talking for Humans
• SREcon19 Americas - Scaling SRE Organizations: The Journey from 1 to Many Teams
• SREcon19 Americas - Service Discovery Challenges at Scale
• SREcon19 Americas - Shipping Software with an SRE Mindset
• SREcon19 Americas - SRE & Product Management: How to Level up Your Team (and Career!)...
• SREcon19 Americas - SRE Classroom - How to Design a Distributed System in 3 Hours
• SREcon19 Americas - Strategies to Edit Production Data
• SREcon19 Americas - Sublinear Scaling in Practice: The 1k SRE Project
• SREcon19 Americas - Tackling Kafka, with a Small Team
• SREcon19 Americas - Testing in Production at Scale
• SREcon19 Americas - The Curse of SRE Autonomy and How to Manage It
• SREcon19 Americas - The Ops in Serverless
• SREcon19 Americas - Tracing, Fast and Slow: Digging into and Improving Your Web Service's
• SREcon19 Americas - Using PRDs and User Journeys to Design User-Friendly Tools
• SREcon19 Americas - Visibility into Loggers (and Other Low Level Services)—Seeing the Trees...
• SREcon19 Americas - What Breaks Our Systems: A Taxonomy of Black Swans
• SREcon19 Americas - What I Wish I Knew before Going On-call
• SREcon19 Americas - Why Are Distributed Systems So Hard?
• SREcon19 Americas - You Don't Have to Love Your Job
• SREcon19 Americas - Zero to SRE
• SREcon19 Asia/Pacific - Ironies of Automation: A Comedy in Three Parts
• SREcon19 Asia/Pacific - Lightning Talks
• SREcon19 Asia/Pacific - Latency SLOs Done Right
• SREcon19 Asia/Pacific - A Dashboard Is Worth a Thousand Words...
• SREcon19 Asia/Pacific - A Tale of Two Postmortems: A Human Factors View
• SREcon19 Asia/Pacific - Ad Hoc SSH Access Using Signed Tokens
• SREcon19 Asia/Pacific - Anomaly Detection on Golden Signals
• SREcon19 Asia/Pacific - Aperture: A Non-Cooperative, Client-Side Load Balancing...
• SREcon19 Asia/Pacific - Automating OS/Platform Upgrades for Service Owners
• SREcon19 Asia/Pacific - Availability—Thinking beyond 9s
• SREcon19 Asia/Pacific - BGP—The Backbone of the Internet
• SREcon19 Asia/Pacific - Building a Scalable Network Event Executor Using GO
• SREcon19 Asia/Pacific - Building Blocks of Distributed Systems: Parts 1 & 2
• SREcon19 Asia/Pacific - Building Centralized Caching Infrastructure at Scale
• SREcon19 Asia/Pacific - Capacity Planning with Stress Testing
• SREcon19 Asia/Pacific - Challenges of Distributed Teams Such as Languages...
• SREcon19 Asia/Pacific - Collective Mindfulness for Better Decisions in SRE
• SREcon19 Asia/Pacific - Critical Path Analysis—Prioritizing What Matters
• SREcon19 Asia/Pacific - Cross Continent Infrastructure Scaling at Instagram
• SREcon19 Asia/Pacific - Detecting Service Degradation and Failures ...
• SREcon19 Asia/Pacific - Distributed Sys Teams
• SREcon19 Asia/Pacific - Edge Computing: The Next Frontier for Distributed Systems
• SREcon19 Asia/Pacific - Enhance Your Python Code beyond GIL
• SREcon19 Asia/Pacific - Ensuring Site Reliability through Security Controls
• SREcon19 Asia/Pacific - Ethics in SRE
• SREcon19 Asia/Pacific - Extending a Scheduler to Better Support Sharded Services
• SREcon19 Asia/Pacific - Familiar Smells I've Detected in Your Systems Engineering Organization...
• SREcon19 Asia/Pacific - Getting More out of Postmortems and Making Them Less Painful to Do
• SREcon19 Asia/Pacific - HBase Internals and Operations
• SREcon19 Asia/Pacific - High Availability Solution for Large Scale Database Systems
• SREcon19 Asia/Pacific - How (Not) to Scale a Project: A Post-Mortem
• SREcon19 Asia/Pacific - How to Champion SRE Investment to Different Levels of ...
• SREcon19 Asia/Pacific - How to Start On-Boarding of SRE
• SREcon19 Asia/Pacific - How to Trade off Server Utilization and Tail Latency
• SREcon19 Asia/Pacific - How We Used Kafka to Scale Database Infrastructure
• SREcon19 Asia/Pacific - Hybrid XFS—Using SSDs to Supercharge HDDs at Facebook
• SREcon19 Asia/Pacific - Implementing Distributed Consensus Dan Lüdtke, Google
• SREcon19 Asia/Pacific - Leading without Managing: Becoming an SRE Technical Leader
• SREcon19 Asia/Pacific - Let's Build a Distributed File System
• SREcon19 Asia/Pacific - Linux Memory Management at Scale: Under the Hood
• SREcon19 Asia/Pacific - NetRadar: Monitoring the Datacenter Network
• SREcon19 Asia/Pacific - Open Source Firmware at Facebook Design, Deployment, and Demos
• SREcon19 Asia/Pacific - Operating Elasticsearch with Ease at Scale
• SREcon19 Asia/Pacific - Over 600 Million Members and Hundreds of Micro Services...
• SREcon19 Asia/Pacific - Practical Instrumentation for Observability
• SREcon19 Asia/Pacific - Releasing the World's Largest Python Site Every 7 Minutes
• SREcon19 Asia/Pacific - Reliable by Design Adding Value in the Design Review Process
• SREcon19 Asia/Pacific - Retrospectives for Humans a Crash Course
• SREcon19 Asia/Pacific - Shipping Software with an SRE Mindset
• SREcon19 Asia/Pacific - Slack at the Edge
• SREcon19 Asia/Pacific - Software Networking and Interfaces on Linux
• SREcon19 Asia/Pacific - SRE Then vs SRE Now: A Balancing Act between...
• SREcon19 Asia/Pacific - Taming a Beast Improving the Reliability of a Monolithic Web Service
• SREcon19 Asia/Pacific - TCP—Architecture, Enhancements, and Tuning
• SREcon19 Asia/Pacific - The AWS Billing Machine and Optimizing Cloud Costs
• SREcon19 Asia/Pacific - The Bloomberg Story: Building SRE Teams in an "Immeasurable" Organisation
• SREcon19 Asia/Pacific - The Definitive Guide to Make Software Fail on ARM64
• SREcon19 Asia/Pacific - The MTTR Chronicles: Evolution of SRE Self Service Operations Platform
• SREcon19 Asia/Pacific - Traffic Forecasting and Stress Testing Infrastructure
• SREcon19 Asia/Pacific - Tuning Java's G1 Garbage Collector for Realtime Services
• SREcon19 Asia/Pacific - Understanding Business Metrics Can Make You a Better SRE
• SREcon19 Asia/Pacific - Unified Reporting of Service Reliability
• SREcon19 Asia/Pacific - Use Interview Skills of Accident Investigators...
• SREcon19 Asia/Pacific - Using ML to Automate Dynamic Error Categorization
• SREcon19 Asia/Pacific - What Is ML Ops Solutions and Best Practices...
• SREcon19 Asia/Pacific - Why Does My Monitoring Suck?
• SREcon19 Asia/Pacific - Yes, No, Maybe? Error Handling with gRPC Examples
• SREcon19 Europe/Middle East/Africa - Lightning Talks
• SREcon19 Europe/Middle East/Africa - Network Monitor: A Tale of ACKnowledging an Observability Gap
• SREcon19 Europe/Middle East/Africa - A Customer Service Approach to SRE
• SREcon19 Europe/Middle East/Africa - A Systems Approach to Safety and Cybersecurity
• SREcon19 Europe/Middle East/Africa - A Tale of Two Rotations Building a Humane & Effective On Call
• SREcon19 Europe/Middle East/Africa - Advanced Napkin Math: Estimating System...
• SREcon19 Europe/Middle East/Africa - All of Our ML Ideas Are Bad (and We Should Feel Bad)
• SREcon19 Europe/Middle East/Africa - Applicable and Achievable Formal Verification
• SREcon19 Europe/Middle East/Africa - Are We All on the Same Page? Let's Fix That
• SREcon19 Europe/Middle East/Africa - Autopsy of a MySQL Automation Disaster
• SREcon19 Europe/Middle East/Africa - Being Reasonable about SRE
• SREcon19 Europe/Middle East/Africa - Bigtable: A Journey from Binary to Service and the Lessons...
• SREcon19 Europe/Middle East/Africa - Building a Scalable Monitoring System
• SREcon19 Europe/Middle East/Africa - Building Resilience: How to Learn More from Incidents
• SREcon19 Europe/Middle East/Africa - Control Theory for SRE
• SREcon19 Europe/Middle East/Africa - Deploying SRE Training Best Practices to Production: How We...
• SREcon19 Europe/Middle East/Africa - Eventually Consistent Service Discovery
• SREcon19 Europe/Middle East/Africa - Evolution of Observability Tools at Pinterest
• SREcon19 Europe/Middle East/Africa - Expect the Unexpected: Preparing SRE Teams for Responding...
• SREcon19 Europe/Middle East/Africa - Fast, Available, Catastrophically Failing? Safely Avoiding...
• SREcon19 Europe/Middle East/Africa - Fault Tree Analysis Applied to Apache Kafka
• SREcon19 Europe/Middle East/Africa - From Nothing to SRE: Practical Guidance on Implementing...
• SREcon19 Europe/Middle East/Africa - Hiring Great SREs
• SREcon19 Europe/Middle East/Africa - How Stripe Invests in Technical Infrastructure
• SREcon19 Europe/Middle East/Africa - How to Do SRE When You Have No SRE
• SREcon19 Europe/Middle East/Africa - How to SRE When Everything's Already on Fire
• SREcon19 Europe/Middle East/Africa - Latency SLOs Done Right
• SREcon19 Europe/Middle East/Africa - Load Balancing Building Blocks
• SREcon19 Europe/Middle East/Africa - My Life as a Solo SRE
• SREcon19 Europe/Middle East/Africa - One on One SRE
• SREcon19 Europe/Middle East/Africa - Perks and Pitfalls of Building a Remote First Team
• SREcon19 Europe/Middle East/Africa - Prioritizing Trust While Creating Applications
• SREcon19 Europe/Middle East/Africa - Pushing through Friction
• SREcon19 Europe/Middle East/Africa - Refining Systems Data without Losing Fidelity
• SREcon19 Europe/Middle East/Africa - SDKs Are Not Services and What This Means for SREs
• SREcon19 Europe/Middle East/Africa - SLOs for Data-Intensive Services
• SREcon19 Europe/Middle East/Africa - Software Patching Needn't Be a Can of Worms
• SREcon19 Europe/Middle East/Africa - SRE & Product Management How to Level up Your...
• SREcon19 Europe/Middle East/Africa - SRE by Influence, Not Authority: How the New...
• SREcon19 Europe/Middle East/Africa - SRE in the Third Age
• SREcon19 Europe/Middle East/Africa - Support Operations Engineering: Scaling Developer Products...
• SREcon19 Europe/Middle East/Africa - The Map Is Not the Territory: How SLOs Lead Us Astray, ...
• SREcon19 Europe/Middle East/Africa - The SRE I Aspire to Be
• SREcon19 Europe/Middle East/Africa - The Unmonitored Failure Domain: Mental Health
• SREcon19 Europe/Middle East/Africa - Tracing Real-Time Distributed Systems
• SREcon19 Europe/Middle East/Africa - Weathering the Storm: How Early Warnings Save the Farm
• SREcon19 Europe/Middle East/Africa - What Happens When You Type en.wikipedia.org?
• SREcon19 Europe/Middle East/Africa - Why Automating Everything Adds to Your Toil
• SREcon19 Europe/Middle East/Africa - Zero Touch Prod: Towards Safer and More Secure...
• SREcon19 Europe/Middle East/Africa - Zero-Downtime Rebalancing and Data Migration of a Mature...
• SREcon20 Americas - "Disorganizing" Your SRE Organization
• SREcon20 Americas - 9 Years of Failure: How Racing Crappy Cars Made Me a Better SRE
• SREcon20 Americas - A Bartender's Guide to Network Monitoring
• SREcon20 Americas - Achieving Mutual TLS: Secure Pod-to-Pod Communication Without the Hassle
• SREcon20 Americas - Achieving the Ultimate Performance with KVM
• SREcon20 Americas - Are We Getting Better Yet? Progress Toward Safer Operations
• SREcon20 Americas - Automatically Detect the Top Performance & Scalability Issues in Distributed
• SREcon20 Americas - Avoiding Goodhart's Law - Use SLO's as Tools Not Cudgels
• SREcon20 Americas - Building Actionable Code Ownership
• SREcon20 Americas - Building Service Ownership Using Documentation, Telemetry, and a Chance to Make
• SREcon20 Americas - Capacity Planning and Performance Enhancement with Page Reference Sampling
• SREcon20 Americas - Challenges of Starting an SRE Team from Scratch in an Enterprise
• SREcon20 Americas - Cloudy with a Chance of Chaos
• SREcon20 Americas - Confessions of a Systems Engineer: Learning from My 20+ Years of Failure
• SREcon20 Americas - Continuously Improving Culture through Design Decisions
• SREcon20 Americas - Failure is Not an Option! SRE Lessons 50 Years after the Apollo 13 Flight
• SREcon20 Americas - Give Your PXE wings! Bootstrapping Explained
• SREcon20 Americas - Heap Optimization for Go Systems
• SREcon20 Americas - Hot Swap Your Datastore: A Practical Approach and Lessons Learned
• SREcon20 Americas - Identifying Hidden Dependencies
• SREcon20 Americas - Implementing Distributed Consensus
• SREcon20 Americas - Incident Response in Unfamiliar Sociotechnical Systems
• SREcon20 Americas - It's a Trap! How Abstractions Have Failed Us.
• SREcon20 Americas - Jupyter as Incident Response Tool
• SREcon20 Americas - Latency and Availability Error Budgets Done Right at Scale
• SREcon20 Americas - Low Context DevOps: Improving SRE Team Culture through Defaults, Documentation
• SREcon20 Americas - Making Infrastructure More Friendly for Beginners
• SREcon20 Americas - Observing from Incidents
• SREcon20 Americas - Off the Beaten Path: Moving Observability Focus from Your Service
• SREcon20 Americas - Panel: Learning from Adaptations to Coronavirus
• SREcon20 Americas - Pragmatic Security for SRE
• SREcon20 Americas - Production Population Control: My Cattle are Rabbits!
• SREcon20 Americas - Soft Failures, Hard Goals - Accelerating Payments at Scale During the Pandemic
• SREcon20 Americas - Squish Level Objectives: How SRE can Help Align Technical Work to User Benefit
• SREcon20 Americas - SREs at Telecom and Media Industry: Bridging between Legacy and Cloud Native App
• SREcon20 Americas - Study on Human Factors and Team Culture to Improve Pager Fatigue
• SREcon20 Americas - Sustainable Software Engineering & SREs
• SREcon20 Americas - Testing Encyclopedias in Production
• SREcon20 Americas - The Evolution of Traffic Routing in a Streaming World
• SREcon20 Americas - The Good, the Bad and the Ugly: The 3 Learnings of an SRE
• SREcon20 Americas - The Secret Lives of SREs - Controlling the Costs of Coordination across Remote
• SREcon20 Americas - The Smallest Possible SRE Team
• SREcon20 Americas - Weeks of Debugging Can Save You Hours of TLA+
• SREcon20 Americas - When /bin/sh Attacks: Revisiting ""Automate All the Things""
• SREcon20 Americas - Why SREs can't afford to NOT do Chaos Engineering
• SREcon21 - 10 Lessons Learned in 10 Years of SRE
• SREcon21 - A Political Scientist's View on Site Reliability
• SREcon21 - A Principled Approach to Monitoring Streaming Data Infrastructure at Scale
• SREcon21 - A Retrospective: Five Years Later, Was Chaos Engineering Worth It?
• SREcon21 - Automating Performance Tuning with Machine Learning
• SREcon21 - Beyond Goldilocks Reliability
• SREcon21 - Cache for Cash—Speeding Up Production with Kafka and MySQL binlog
• SREcon21 - Cache Strategies with Best Practices
• SREcon21 - Capacity Management for Fun & Profit
• SREcon21 - Ceci N'est Pas un CPU Load
• SREcon21 - Demystifying Machine Learning in Production: Reasoning about a Large-Scale ML Platform
• SREcon21 - Designing an Autonomous Workbench for Data Science on AWS
• SREcon21 - DevOps Ten Years After: Review of a Failure with John Allspaw and Paul Hammond
• SREcon21 - Don't Follow Leaders or "All Models Are Wrong (and So Am I)"
• SREcon21 - Elephant in the Blameless War Room—Accountability
• SREcon21 - Evolution of Incident Management at Slack
• SREcon21 - Experiments for SRE
• SREcon21 - Food for Thought: What Restaurants Can Teach Us about Reliability
• SREcon21 - From 15,000 Database Connections to under 100—A Tech Debt Tale
• SREcon21 - Games We Play to Improve Incident Response Effectiveness
• SREcon21 - Hacking ML into Your Organization
• SREcon21 - Hard Problems We Handle in Incidents but Aren't Recognized
• SREcon21 - Horizontal Data Freshness Monitoring in Complex Pipelines
• SREcon21 - How LinkedIn Performs Maintenances at Scale
• SREcon21 - How Our SREs Safeguard Nanosecond Performance—at Scale—in an Environment Built to Fail
• SREcon21 - How We Built Out Our SRE Department to Support over 100 Million Users for the World's 3rd
• SREcon21 - Improving Observability in Your Observability: Simple Tips for SREs
• SREcon21 - Latency Distributions and Micro-Benchmarking to Identify and Characterize Kernel Hotspots
• SREcon21 - Learning More from Complex Systems
• SREcon21 - Lessons Learned Using the Operator Pattern to Build a Kubernetes Platform
• SREcon21 - Let the Chaos Begin—SRE Chaos Engineering Meets Cybersecurity
• SREcon21 - Let's Bring System Dynamics Back to CS!
• SREcon21 - Leveraging ML to Detect Application HotSpots [@scale, of Course!]
• SREcon21 - Microservices above the Cloud—Designing the International Space Station for Reliability
• SREcon21 - Model Monitoring: Detecting and Analyzing Data Issues
• SREcon21 - MySQL and InnoDB Performance for the Rest of Us
• SREcon21 - Need for SPEED: Site Performance Efficiency, Evaluation and Decision
• SREcon21 - Nine Questions to Build Great Infrastructure Automation Pipelines
• SREcon21 - Nothing to Recommend It: An Interactive ML Outage Fable
• SREcon21 - Of Mice & Elephants
• SREcon21 - Optimizing Cost and Performance with arm64
• SREcon21 - Panel: Engineering Onboarding
• SREcon21 - Panel: Observability
• SREcon21 - Panel: OpML
• SREcon21 - Panel: Unsolved Problems in SRE
• SREcon21 - Practical TLS Advice for Large Infrastructure
• SREcon21 - Reliable Data Processing with Minimal Toil
• SREcon21 - Rethinking the SDLC
• SREcon21 - Scaling for a Pandemic: How We Keep Ahead of Demand for Google Meet during COVID-19
• SREcon21 - SLX: An Extended SLO Framework to Expedite Incident Recovery
• SREcon21 - Sparking Joy for Engineers with Observability
• SREcon21 - Spike Detection in Alert Correlation at LinkedIn
• SREcon21 - SRE "Power Words"—the Lexicon of SRE as an Industry
• SREcon21 - SRE for ML: The First 10 Years and the Next 10
• SREcon21 - Take Me Down to the Paradise City Where the Metric Is Green and Traces Are Pretty
• SREcon21 - Taking Control of Metrics Growth and Cardinality: Tips for Maximizing Your Observability
• SREcon21 - The Origins of USAA's Postmortem of the Week
• SREcon21 - Trustworthy Graceful Degradation: Fault Tolerance across Service Boundaries
• SREcon21 - User Uptime in Practice
• SREcon21 - Watching the Watchers: Generating Absent Alerts for Prometheus
• SREcon21 - What If the Promise of AIOps Was True?
• SREcon21 - What To Do When SRE is Just a New Job Title?
• SREcon21 - What's the Cost of a Millisecond?
• SREcon21 - When Linux Memory Accounting Goes Wrong
• SREcon21 - When Systems Flatline—Enhancing Incident Response with Learnings from the Medical Field
• SREcon21 - You've Lost That Process Feeling: Some Lessons from Resilience Engineering
• SREcon22 Americas - A Fresh Look at Operational Debt
• SREcon22 Americas - A Postmortem of SRE Interviewing
• SREcon22 Americas - Applied Science Fiction: Operating a Research-Led Product
• SREcon22 Americas - Are We There Yet? Metrics-Driven Prioritization for Your Reliability Roadmap
• SREcon22 Americas - Automated Operating System and Environment Certification at LinkedIn...
• SREcon22 Americas - Beyond Distributed Tracing
• SREcon22 Americas - Building a Path to the Future: Mentoring New SREs
• SREcon22 Americas - Building and Running a Diversity-focused Pre-internship Program for SRE
• SREcon22 Americas - Dark Sky Camping: Reducing Alert Pollution with Modern Observability Practices
• SREcon22 Americas - DO, RE, Me: Measuring the Effectiveness of Site Reliability Engineering
• SREcon22 Americas - eBPF: The Next Power Tool of SREs
• SREcon22 Americas - Emergent Organizational Failure: Five Disconnections
• SREcon22 Americas - Exemplars in Practice: Finding the Needle in Your Observability Haystack
• SREcon22 Americas - History-based Latency Prober Tuning
• SREcon22 Americas - How the Metrics Backend Works at Datadog
• SREcon22 Americas - How We Survived (and Thrived) During The Pandemic and Helped Millions...
• SREcon22 Americas - Improving How We Observe Our Observability Data: Techniques for SREs
• SREcon22 Americas - Modeling Alert Quality
• SREcon22 Americas - Principled Performance Analytics
• SREcon22 Americas - Securing Your Software Delivery Chain with Process Auditing
• SREcon22 Americas - Self-Destructing Feature Flags
• SREcon22 Americas - SRE stands for...Skydiving Resilience Engineer
• SREcon22 Americas - Taking the 737 to the Max
• SREcon22 Americas - Tales from the VOID: The Scary Truth about Incident Metrics
• SREcon22 Americas - Ten-year Journey to 10,000 Production Machines
• SREcon22 Americas - The 'Success' in SRE Is Silent
• SREcon22 Americas - The Future of above-the-line Tooling
• SREcon22 Americas - The Pandemic and The Classroom—Enabling Education for Millions
• SREcon22 Americas - The Scientific Method for Resilience
• SREcon22 Americas - Tracing Bare Metal with OpenTelemetry
• SREcon22 Americas - Triaging Real-time Security Threats with eBPF-powered Observability
• SREcon22 Americas - Using Serverless Functions for Real-time Observability
• SREcon22 Asia/Pacific - A Better Way to Manage Stateful Systems: Design for Observability and Robust
• SREcon22 Asia/Pacific - A Post Incident Review Review
• SREcon22 Asia/Pacific - Advanced Linux Kernel Networking Monitoring
• SREcon22 Asia/Pacific - Applying SRE Principles to CI/CD
• SREcon22 Asia/Pacific - Backend API Design for SREs
• SREcon22 Asia/Pacific - Burnout at Scale: What to Try When You Just Can't
• SREcon22 Asia/Pacific - Capacity vs Efficiency: Building a Globally Scalable Cloud Database
• SREcon22 Asia/Pacific - Challenges, Best Practices, and Solutions for Monitoring and Alerting...
• SREcon22 Asia/Pacific - Chaos Engineering at Scale
• SREcon22 Asia/Pacific - Cognitive and Self-Adaptive System for Effective Distributed-Tracing...
• SREcon22 Asia/Pacific - Dashboards and Runbooks: Scrapbooking for Engineers
• SREcon22 Asia/Pacific - Deploying Humans at the Edge of SRE
• SREcon22 Asia/Pacific - Gremlins Exposed: Shining a Light on Mischievous Systems
• SREcon22 Asia/Pacific - How Can We Make Data Integrity Easy?
• SREcon22 Asia/Pacific - How to Not Destroy Your Production Kubernetes Clusters
• SREcon22 Asia/Pacific - Improving Machine Learning Development Reliability
• SREcon22 Asia/Pacific - Improving Observability, Reliability, and Security of Relational Database...
• SREcon22 Asia/Pacific - Infra Eng to Staff SRE: A Tale of Developing Yourself in an Ever Evolving...
• SREcon22 Asia/Pacific - Introducing the Reliability Map – r9y.dev
• SREcon22 Asia/Pacific - Lessons Learned Building a Global Synthetic Monitoring System
• SREcon22 Asia/Pacific - Leveraging Continuous Production Profiling for Providing Insights into...
• SREcon22 Asia/Pacific - Lifecycle of a Sample in the Prometheus TSDB
• SREcon22 Asia/Pacific - Lifecycle of Reusable Automations: Track, Maintain, Deprecate
• SREcon22 Asia/Pacific - Metrics Stream Processing Using Riemann
• SREcon22 Asia/Pacific - Migrating Datastores
• SREcon22 Asia/Pacific - Move Fast and Learn Things: Principles of Cognition, Teaming...
• SREcon22 Asia/Pacific - Observability Is Not Analytics!
• SREcon22 Asia/Pacific - Online Database Reliability, Performance, and Consistency Engineering
• SREcon22 Asia/Pacific - OpenTelemetry and Observability: What, Why, and Why Now?
• SREcon22 Asia/Pacific - Operationalizing ML Training Infra at Meta Scale
• SREcon22 Asia/Pacific - Our Experience Tracking and Driving SLO Adoption at Goldman Sachs
• SREcon22 Asia/Pacific - Principles of Safety and Reliability Learned from US Navy Landing Signal...
• SREcon22 Asia/Pacific - Real-Time Adaptive Controls for Resilient Distributed Systems
• SREcon22 Asia/Pacific - Reliability Reviews in the Wild: Using Data to Drive Production Health
• SREcon22 Asia/Pacific - Site Reliability Evangelism: Practice Start-up within an Established...
• SREcon22 Asia/Pacific - Sustaining Everything, Everywhere, All at Once!
• SREcon22 Asia/Pacific - The Math behind the Incident Aftermath: A Practical Guide to Measuring...
• SREcon22 Asia/Pacific - The Multi Layered Cake of Resilience
• SREcon22 Asia/Pacific - Using the Internet as Your Load-Balancer
• SREcon22 Europe/Middle East/Africa - A Better Way to Manage Command Line Tools: What We Learned...
• SREcon22 Europe/Middle East/Africa - A Case Study in Chaos Testing: Uncovering Kernel Scaling Issues
• SREcon22 Europe/Middle East/Africa - An SRE Guide to Linux Kernel Upgrades
• SREcon22 Europe/Middle East/Africa - Break Free of the Template: Incident Writeups They Want to Read
• SREcon22 Europe/Middle East/Africa - Building Dynamic Configuration into Terraform
• SREcon22 Europe/Middle East/Africa - Caching Entire Systems without Invalidation
• SREcon22 Europe/Middle East/Africa - Commas Save Lives, or at Least LinkedIn
• SREcon22 Europe/Middle East/Africa - Crayon Drawing Is a Vital Engineering Skill
• SREcon22 Europe/Middle East/Africa - Deep Dive: Azure Resource Manager Outage
• SREcon22 Europe/Middle East/Africa - Diamonds with Flaws: Examining the Pressures, Realities, and...
• SREcon22 Europe/Middle East/Africa - Disaster Recovery Testing at Booking.com
• SREcon22 Europe/Middle East/Africa - Dissecting the Humble LSM Tree and SSTable
• SREcon22 Europe/Middle East/Africa - Emotional Disaster Recovery: Debugging the Self with...
• SREcon22 Europe/Middle East/Africa - Engineering for Sustainability
• SREcon22 Europe/Middle East/Africa - Financial Regulators Worldwide Are Getting the Legal Right...
• SREcon22 Europe/Middle East/Africa - Going from 30 to 30 Million SLOs
• SREcon22 Europe/Middle East/Africa - Honey, I Broke the Things: Debugging Gray Failures...
• SREcon22 Europe/Middle East/Africa - How Can SRE Help Security Governance?...
• SREcon22 Europe/Middle East/Africa - How We Drained Every Backbone Router Simultaneously
• SREcon22 Europe/Middle East/Africa - How We Implemented High Throughput Logging at Spotify
• SREcon22 Europe/Middle East/Africa - Hunting for Risky Dependencies in the World of Microservices
• SREcon22 Europe/Middle East/Africa - Is Our Team as Resilient as Our Systems?
• SREcon22 Europe/Middle East/Africa - Knowledge and Power: A Sociotechnical Systems Discussion on...
• SREcon22 Europe/Middle East/Africa - Life after The Chocolate Factory
• SREcon22 Europe/Middle East/Africa - Making the Impossible Impossible: Improving Reliability by...
• SREcon22 Europe/Middle East/Africa - Market Data: Applying SRE Techniques to Legacy Designs
• SREcon22 Europe/Middle East/Africa - Measuring Reliability: What Got Us Here Won't Get Us There
• SREcon22 Europe/Middle East/Africa - Meatbag Systems: How Our Reliability Culture & Practice...
• SREcon22 Europe/Middle East/Africa - Navigating in the Dark
• SREcon22 Europe/Middle East/Africa - Oncall: An Equal Opportunity Waste of Time
• SREcon22 Europe/Middle East/Africa - Over Nine Billion Dollars of SRE Lessons - the James Webb...
• SREcon22 Europe/Middle East/Africa - Passing the Torch - Building a New Grad Program to Mentor...
• SREcon22 Europe/Middle East/Africa - Principled Identification of "Root Causes" Using Techniques...
• SREcon22 Europe/Middle East/Africa - Rock Fishing and Incident Analysis: Increasing Insight
• SREcon22 Europe/Middle East/Africa - Schema-First Application Telemetry
• SREcon22 Europe/Middle East/Africa - Slack's DNSSEC Rollout: Third Time's the Outage
• SREcon22 Europe/Middle East/Africa - SLOs, SREs, and GHGs
• SREcon22 Europe/Middle East/Africa - SRE and ML: Why It Matters
• SREcon22 Europe/Middle East/Africa - SRE as She Is Spoke
• SREcon22 Europe/Middle East/Africa - SRE in Enterprise
• SREcon22 Europe/Middle East/Africa - SRE Is Weird, Down the Stack
• SREcon22 Europe/Middle East/Africa - Statistics for Engineers
• SREcon22 Europe/Middle East/Africa - The Biases Confronting SREs
• SREcon22 Europe/Middle East/Africa - The Math of Scalability
• SREcon22 Europe/Middle East/Africa - The Repeat Incident Fallacy: What Jurassic Park Can Teach Us...
• SREcon22 Europe/Middle East/Africa - Unified Theory of SRE
• SREcon22 Europe/Middle East/Africa - What SRE Could Be: Systems Reliability Engineering
• SREcon23 Americas - Adaptive Concurrency Control for Mixed Analytical Workloads
• SREcon23 Americas - An Organizational Response to Incidents: Designing for Smooth Coordination
• SREcon23 Americas - Avoiding Cachepocalypse in the Land of the Monolith
• SREcon23 Americas - Beacon: Intelligent Latency-Aware and Load Shedding Service Routing
• SREcon23 Americas - Building a Diverse SRE Talent Pipeline
• SREcon23 Americas - Building an APM with OpenTelemetry and OpenSource
• SREcon23 Americas - Chaos-Driven Development: TDD for Distributed Systems
• SREcon23 Americas - Cognitive Apprenticeship in Practice with Alert Triage Hour of Power
• SREcon23 Americas - Confessions of an SRE Manager
• SREcon23 Americas - Epic Incidents of History: The 1979 NORAD Nuclear Near Miss
• SREcon23 Americas - Exploring Disconnects between Reliability Practitioners and Management
• SREcon23 Americas - Far from the Shallows: The Value of Deeper Incident Analysis
• SREcon23 Americas - Financial Resiliency Engineering: Taming Cloud Costs
• SREcon23 Americas - Founder/CTO Perspectives: The Future of Distributed Tracing
• SREcon23 Americas - Hacking the Pachyderm: Scaling Servers and People
• SREcon23 Americas - Handover Communications in Software Operations: Findings from the Field
• SREcon23 Americas - Hell Is Other Platforms
• SREcon23 Americas - How SRE Makes Electric Vehicles
• SREcon23 Americas - How To Take Prometheus Planet Scale: Massively Large Scale Metrics Installations
• SREcon23 Americas - Human Observability of Incident Response
• SREcon23 Americas - If I Can Do It on an Ambulance, You Can Do It in an Office: Scalable Incident
• SREcon23 Americas - Implementing SRE in a Regulated Environment
• SREcon23 Americas - Incident Archaeology: Extracting Value from Paperwork and Narratives
• SREcon23 Americas - Incident Commanders to Incident Analysts: How We Got Here
• SREcon23 Americas - Lessons Learned from 7 Years of Running Developer Platforms
• SREcon23 Americas - Lightning Talks
• SREcon23 Americas - Logs Told Us It Was DNS, It Looked like DNS, It Had to Be DNS, It Wasn't DNS
• SREcon23 Americas - Measuring Real-Life Latency of the Internet: A Netflix Story
• SREcon23 Americas - Not All Minutes Are Equal: The Secret behind SLO Adoption Failure
• SREcon23 Americas - On the Wings of SREs; J.P. Morgan's Journey into the Cloud
• SREcon23 Americas - OpenTelemetry Metrics 101
• SREcon23 Americas - Resiliency Practices in Managing CDN (Content Delivery Network)
• SREcon23 Americas - Scaling Telemetry Systems with Streaming
• SREcon23 Americas - Scaling Terraform at ThousandEyes
• SREcon23 Americas - Seeing the Invisible: Two Years at Wikipedia with W3C's Network Error Logging
• SREcon23 Americas - SRE in Transition: From Startup to Established Business
• SREcon23 Americas - SRE's Critical Role in the COVID-19 Pandemic Response in Government
• SREcon23 Americas - Sto: A Better Way to Store and Query Profiler Data
• SREcon23 Americas - The Best SREs Seem to Be the Ones without an SRE Title—And What We Can Do
• SREcon23 Americas - The Endgame of SRE
• SREcon23 Americas - The Making of an Ultra Low Latency Trading System with Go and Java
• SREcon23 Americas - The Revolution Will Not Be Terraformed: SRE and the Anarchist Style
• SREcon23 Americas - Turning an Incident Report into a Design Issue with TLA+
• SREcon23 Americas - Warding against the Dark Arts: Crafting a Defense Strategy against Botnet DDoS
• SREcon23 Americas - Watering the Roots of Resilience: Learning from Failure with Decision Trees
• SREcon23 Americas - Watering the Roots of Resilience: Learning from Failure with Decision Trees
• SREcon23 Americas - We're Still Down: A Metastable Failure Tale
• SREcon23 Americas - Why This Stuff Is Hard
• SREcon23 Americas - Your Infrastructure Needs to D.I.E.
• SREcon23 Asia/Pacific - An SRE Guide to Linux Kernel Upgrades
• SREcon23 Asia/Pacific - Are We All on the Same Page? Let's Fix That
• SREcon23 Asia/Pacific - Autonomous Automation: How Cloudflare Handles Server Diagnostics...
• SREcon23 Asia/Pacific - Better Observability with No Code Changes
• SREcon23 Asia/Pacific - Beyond Observability - Aligning Technology Performance to Business Outcomes
• SREcon23 Asia/Pacific - Challenges of Managing Real-Time Financial Market Data Storage
• SREcon23 Asia/Pacific - Cultivating Accountability and Resilience
• SREcon23 Asia/Pacific - Distributed Tracing: Adaptive and Telemetry-Based Approach for Effective...
• SREcon23 Asia/Pacific - Fighting Financial Crimes as an SRE
• SREcon23 Asia/Pacific - Finding the Needle in the Haystack: Predicting Storage Device Failures in...
• SREcon23 Asia/Pacific - From "Keeping the Lights On" to "Designing the LEDs": A Detailed Review...
• SREcon23 Asia/Pacific - From Push to Pull: Managing Mutable Infrastructure at a Global Scale
• SREcon23 Asia/Pacific - Functional Resonance Analysis: Diagramming Your System
• SREcon23 Asia/Pacific - Giving Away Your Secrets: Opening Metrics Up to Users
• SREcon23 Asia/Pacific - Hold My Beer - Load Testing. In Production. On Autopilot.
• SREcon23 Asia/Pacific - How Safe Is Your Domain?
• SREcon23 Asia/Pacific - How the Sony PlayStation Network Does SRE
• SREcon23 Asia/Pacific - Humane On-call
• SREcon23 Asia/Pacific - Lessons Learned Running GKE Clusters on Spot Instances
• SREcon23 Asia/Pacific - Leveraging Analytics for Technical Efficiency and Enhanced User Experience
• SREcon23 Asia/Pacific - LiveMLP: ML Platform for Assisting Contact Center Agents in Real-Time
• SREcon23 Asia/Pacific - Mastering Chaos: Achieving Fault Tolerance with Observability-Driven...
• SREcon23 Asia/Pacific - Multicloud and the Chamber of Secrets
• SREcon23 Asia/Pacific - Observability in the MLOps Lifecycle with Prometheus
• SREcon23 Asia/Pacific - Patterns, Not Categories: Learning Across Incidents
• SREcon23 Asia/Pacific - Performance Testing in Keptn Using K6
• SREcon23 Asia/Pacific - Real World Debugging with eBPF
• SREcon23 Asia/Pacific - Start Small, Scale Big: Building and Scaling Platforms and SRE Culture...
• SREcon23 Asia/Pacific - Taming Spiky Log Volumes: Maintaining Real-Time Log Accessibility with Kaldb
• SREcon23 Asia/Pacific - The Only Constant Is Change: Lessons from a 25 Year SRE Career
• SREcon23 Asia/Pacific - The Secret Weapon for a Successful SRE Career - And It's Not What You Think!
• SREcon23 Asia/Pacific - Towards Zero Carbon: Implementing Sustainable Battery Lifecycle...
• SREcon23 Asia/Pacific - Transformation Journey of E2E Customer Flow Testing...
• SREcon23 Asia/Pacific - Unleashing Generative AI: Improving Developer Productivity in SRE
• SREcon23 Asia/Pacific - Untangling the Tangled Cloud
• SREcon23 Asia/Pacific - What Is Linux Kernel Keystore and Why You Should Use It in Your Next...
• SREcon23 Europe/Middle East/Africa - 9 Things You Should Do When Starting to Use SLOs
• SREcon23 Europe/Middle East/Africa - A Dual Approach to Accountability Engineering
• SREcon23 Europe/Middle East/Africa - Artificial Intelligence: How Much Will It Cost You?
• SREcon23 Europe/Middle East/Africa - Building a 5-Exaflop Supercomputer for Meta-AI Research and...
• SREcon23 Europe/Middle East/Africa - Cache Me If You Can: How Grafana Labs Scaled Up Their...
• SREcon23 Europe/Middle East/Africa - Cloud, Kubernetes, and Service Networking - Taming the Turtles
• SREcon23 Europe/Middle East/Africa - Continuous Profiling in the Cloud-Native era
• SREcon23 Europe/Middle East/Africa - Dark Matter and Deep State: The Unseen Majority of Everything
• SREcon23 Europe/Middle East/Africa - Deconstructing an Abstraction to Reconstruct an Outage
• SREcon23 Europe/Middle East/Africa - Deploying and Debugging HTTP/3
• SREcon23 Europe/Middle East/Africa - Designing Matrix: A Global Decentralised End-to-End Encrypted..
• SREcon23 Europe/Middle East/Africa - Do Not Thrash the Node.js Event Loop
• SREcon23 Europe/Middle East/Africa - eBPF Superpowers for SRE
• SREcon23 Europe/Middle East/Africa - Embracing the Multi-Party Dilemma: Incident Response Across...
• SREcon23 Europe/Middle East/Africa - From Exceptional Maintenance to Automated Routine Operation:...
• SREcon23 Europe/Middle East/Africa - From Sysadmins to (almost) Flying Unicorns
• SREcon23 Europe/Middle East/Africa - How to Make Your Automation a Better Team Player
• SREcon23 Europe/Middle East/Africa - How to Use Prometheus's Native Histograms
• SREcon23 Europe/Middle East/Africa - HTTP Headers that Make Your Website Go Faster
• SREcon23 Europe/Middle East/Africa - Implementing Open-source Observability within Maersk
• SREcon23 Europe/Middle East/Africa - Implementing SRE in a Telco with Reliability Enhancing...
• SREcon23 Europe/Middle East/Africa - Journey from Fluent Bit, Fluentd and Prometheus to Open...
• SREcon23 Europe/Middle East/Africa - Just the Cryptography You Need to Know for TLS
• SREcon23 Europe/Middle East/Africa - Level 7 Egress Control in Kubernetes: Current Solutions,...
• SREcon23 Europe/Middle East/Africa - Leveraging Unikernels and Kubernetes to (Transparently)...
• SREcon23 Europe/Middle East/Africa - Looking at SRE Needs and Trends over Two Decades with a...
• SREcon23 Europe/Middle East/Africa - Monoceros: Faster and Predictable Services through In-pod...
• SREcon23 Europe/Middle East/Africa - New Grads Becoming New SREs: Catalyzing a “Circle of Life”...
• SREcon23 Europe/Middle East/Africa - Over, Under, Around, and Through: A Detailed Comparison...
• SREcon23 Europe/Middle East/Africa - Overcoming Challenges in Serving Large Language Model
• SREcon23 Europe/Middle East/Africa - Reliable Data for Large ML Models: Principles and Practices
• SREcon23 Europe/Middle East/Africa - Scale Your Future: An Immersive Engineering Programme
• SREcon23 Europe/Middle East/Africa - Scaling Chef Emotionally
• SREcon23 Europe/Middle East/Africa - Should an SRE Care About FinOps? Using Observability to...
• SREcon23 Europe/Middle East/Africa - Should I Use OTel (collectors), or Is Prometheus Good Enough?
• SREcon23 Europe/Middle East/Africa - Silent Spring: What if the GDPR Was Real?
• SREcon23 Europe/Middle East/Africa - SRE for [cyber]security
• SREcon23 Europe/Middle East/Africa - Succeeding as the Lone SRE in a Small Team
• SREcon23 Europe/Middle East/Africa - Symptom-based Alerting for Machine Learning - What I Learned...
• SREcon23 Europe/Middle East/Africa - That Time I Accidentally DDoS'd My Company
• SREcon23 Europe/Middle East/Africa - The Engineer/Manager Pendulum Goes Mainstream
• SREcon23 Europe/Middle East/Africa - The Incident Is The Way: Using Your Incidents to Win...
• SREcon23 Europe/Middle East/Africa - The Value of Reliability
• SREcon23 Europe/Middle East/Africa - The World Blew Up but We’re All Okay: How We Managed a...
• SREcon23 Europe/Middle East/Africa - Tracing the Journey into Distributed Tracing
• SREcon23 Europe/Middle East/Africa - When Clouds Stop Raining Discounts: Surviving the Drought
• SREcon23 Europe/Middle East/Africa - When One Line Took Thousands of Websites Offline
• SREcon23 Europe/Middle East/Africa - You Depend on DNS, This Is How It Works and You Won't...
• SREcon24 Americas - "Logs Told Us It Was Kernel – It Wasn't"
• SREcon24 Americas - 20 Years of SRE: Highs and Lows
• SREcon24 Americas - 99.99% of Your Traces Are (Probably) Trash
• SREcon24 Americas - Automating Disaster Recovery: The Ultimate Reliability Challenge
• SREcon24 Americas - Build vs. Buy in the Midst of Armageddon
• SREcon24 Americas - Capacity Constraints Unveiled: Navigating Cloud Scaling Realities
• SREcon24 Americas - Compliance & Regulatory Standards Are NOT Incompatible with Modern Development..
• SREcon24 Americas - Cross-System Interaction Failures: Don't Fail through the Cracks
• SREcon24 Americas - Defence at the Boundary of Acceptable Performance
• SREcon24 Americas - From Chaos to Clarity: Deciphering Cache Inconsistencies in a Distributed...
• SREcon24 Americas - Frontend Design in SRE
• SREcon24 Americas - Gray Failure: The Achilles’ Heel of Cloud-Scale Systems
• SREcon24 Americas - Hard Choices, Tight Timelines: A Closer Look at Skip-level Tradeoff Decisions...
• SREcon24 Americas - Is It Already Time To Version Observability? (Signs Point To Yes.)
• SREcon24 Americas - It Is OK to Be Metastable
• SREcon24 Americas - Lightning Talks
• SREcon24 Americas - Measuring Reliability Culture to Optimize Tradeoffs: Perspectives from an...
• SREcon24 Americas - Meeting the Challenge of Burnout
• SREcon24 Americas - Migrating a Large Scale Search Dataset in Production in a Highly Available...
• SREcon24 Americas - Navigating the Kubernetes Odyssey: Lessons from Early Adoption and Sustained...
• SREcon24 Americas - OIDC and CICD: Why Your CI Pipeline Is Your Greatest Security Threat
• SREcon24 Americas - Optimizing Resilience and Availability by Migrating from JupyterHub to the...
• SREcon24 Americas - Patching Your Way to Compliance with a Small Team and a Pile of Technical Debt
• SREcon24 Americas - Product Reliability for Google Maps
• SREcon24 Americas - Real Talk: What We Think We Know — That Just Ain’t So
• SREcon24 Americas - Resilience in Action
• SREcon24 Americas - Scam or Savings? A Cloud vs. On-Prem Economic Slapfight
• SREcon24 Americas - Sharding: Growing Systems from Node-scale to Planet-scale
• SREcon24 Americas - Storytelling as an Incident Management Skill
• SREcon24 Americas - Strengthening Apache Pinot's Query Processing Engine with Adaptive Server...
• SREcon24 Americas - Synthesizing Sanity with, and in Spite of, Synthetic Monitoring
• SREcon24 Americas - System Performance and Queuing Theory - Concepts and Application
• SREcon24 Americas - Taming the Linux Distribution Sprawl: A Journey to Standardization and...
• SREcon24 Americas - Teaching SRE
• SREcon24 Americas - Thawing the Great Code Slush
• SREcon24 Americas - The Art of SRE: Building People Networks to Amplify Impact
• SREcon24 Americas - The Invisible Door: Reliability Gaps in the Front End
• SREcon24 Americas - The Sins of High Cardinality
• SREcon24 Americas - The Ticking Time Bomb of Observability Expectations
• SREcon24 Americas - Triage with Mental Models
• SREcon24 Americas - What Can You See from Here?
• SREcon24 Americas - What Is Incident Severity, but a Lie Agreed Upon?
• SREcon24 Americas - What We Want Is 90% the Same: Using Your Relationship with Security for Fun..
• SREcon24 Americas - When Your Open Source Turns to the Dark Side
• SREcon24 Europe/Middle East/Africa - A Brief History of Release Engineering
• SREcon24 Europe/Middle East/Africa - A Powerful Logs Management Solution We All Have and Use but...
• SREcon24 Europe/Middle East/Africa - Achieving Excellence: SLO Thresholds That Transform Service...
• SREcon24 Europe/Middle East/Africa - An Exploration in Storing Telemetry in Cloud Object Storage
• SREcon24 Europe/Middle East/Africa - Anomaly Detection in Time Series from Scratch Using...
• SREcon24 Europe/Middle East/Africa - AppStack: An Open Source Cloud Native Platform for Running...
• SREcon24 Europe/Middle East/Africa - Are We Really Engineers?
• SREcon24 Europe/Middle East/Africa - Blast Radius Reduction for Large-Scale Distributed Systems
• SREcon24 Europe/Middle East/Africa - Configuration Languages Are the Bane of Our Existence
• SREcon24 Europe/Middle East/Africa - Dude, You Forgot the Feedback: How Your Open Loop Control...
• SREcon24 Europe/Middle East/Africa - Embrace Fleet Reboots and Make Them Boring
• SREcon24 Europe/Middle East/Africa - Enabling Product Scalability through Load Testing
• SREcon24 Europe/Middle East/Africa - Energy Consumption of Datacenters
• SREcon24 Europe/Middle East/Africa - Enhancing Elasticsearch Performance: Innovative Reindexing...
• SREcon24 Europe/Middle East/Africa - Exploring the Unintended Consequences of Automation in Software
• SREcon24 Europe/Middle East/Africa - Finding the Capacity to Grieve Once More
• SREcon24 Europe/Middle East/Africa - Fixing Your Noisy Pager in 500 Easy Steps
• SREcon24 Europe/Middle East/Africa - From PIDs to Pods: The Life Cycle of an eBPF-Autoinstrumented..
• SREcon24 Europe/Middle East/Africa - Generative AI: Beyond (Just) Hype
• SREcon24 Europe/Middle East/Africa - Get Your Non-SREs Oncall Ready!
• SREcon24 Europe/Middle East/Africa - How a Single API Endpoint Saved Us 3000 CPU
• SREcon24 Europe/Middle East/Africa - How Snowflake Migrated All Alerts and Dashboards to a...
• SREcon24 Europe/Middle East/Africa - How to Host a (Very) Popular Website for 30 Altairian...
• SREcon24 Europe/Middle East/Africa - I Can OIDC You Clearly Now: How We Made Static Credentials a...
• SREcon24 Europe/Middle East/Africa - Incident Groundhog Day
• SREcon24 Europe/Middle East/Africa - Just Buy the Printer: Resilience in Action
• SREcon24 Europe/Middle East/Africa - Lessons from Unix History
• SREcon24 Europe/Middle East/Africa - Lightning Talks
• SREcon24 Europe/Middle East/Africa - Managing the Risk of Software Supply Chain Attacks
• SREcon24 Europe/Middle East/Africa - Mnemonic Rules for Eponymous Laws or: There’s a Law for That!
• SREcon24 Europe/Middle East/Africa - Monitoring Systems as a Service – Walking the Line between...
• SREcon24 Europe/Middle East/Africa - Noisy Neighbors, through Networking
• SREcon24 Europe/Middle East/Africa - NVMe/TCP Makes iSCSI Look like Fortran
• SREcon24 Europe/Middle East/Africa - OMG WTF SSO: A Beginner’s Guide to Single Sign-On...
• SREcon24 Europe/Middle East/Africa - Opening the Box: Diagnosing Operating-System Task-Scheduler...
• SREcon24 Europe/Middle East/Africa - Panel Discussion: Is Reliability a Luxury Good?
• SREcon24 Europe/Middle East/Africa - Red Tide Revert
• SREcon24 Europe/Middle East/Africa - Riot Games: Evolution of Observability at the Gaming Company
• SREcon24 Europe/Middle East/Africa - Rock around the Clock (Synchronization): Improve Performance...
• SREcon24 Europe/Middle East/Africa - Sailing the Database Seas: Applying SRE Principles at Scale
• SREcon24 Europe/Middle East/Africa - Scheduling at Scale: eBPF Schedulers with Sched_ext
• SREcon24 Europe/Middle East/Africa - Science Reliability Engineering for High Performance Computing
• SREcon24 Europe/Middle East/Africa - Selective Reliability Engineering: There Is No Single Source...
• SREcon24 Europe/Middle East/Africa - SRE Saga: The Song of Heroes and Villains
• SREcon24 Europe/Middle East/Africa - SRE Stakeholders: A Spotter’s Guide
• SREcon24 Europe/Middle East/Africa - Survivor: MySQL Island – Outwit, Outplay, Outlast Metadata...
• SREcon24 Europe/Middle East/Africa - Synthetic Monitoring and E2E Testing: 2 Sides of the Same Coin
• SREcon24 Europe/Middle East/Africa - Taming Noisy Benchmark Results Using Change Point Detection
• SREcon24 Europe/Middle East/Africa - The Frontiers of Reliability Engineering
• SREcon24 Europe/Middle East/Africa - The Silent Performance Killers: BIOS and Firmware Updates
• SREcon24 Europe/Middle East/Africa - Transforming Production Readiness
• SREcon24 Europe/Middle East/Africa - Treat Your Code as a Crime Scene
• SREcon24 Europe/Middle East/Africa - What If We Ask Linux to Do Cryptography for Us?
• SREcon24 Europe/Middle East/Africa - When SRE and Security Teams Meet to Face a Crisis
• SREcon24 Europe/Middle East/Africa - When Your SaaS Provider Goes out of Business – Lessons from...
• SREcon24 Europe/Middle East/Africa - Why You’re (Probably) Doing Service Catalogs Wrong
• SREcon24 Europe/Middle East/Africa - You Depend on Time, This Is How It Works and You Won’t...
• SREcon25 Americas - AIOps: Prove It! An Open Letter to Vendors Selling AI for SREs
• SREcon25 Americas - An SRE Approach to Monitoring ML in Production
• SREcon25 Americas - Beyond Sequential: A Recipe for Async Pipeline Observability and Alerting
• SREcon25 Americas - Case Study: A Thundering Herd in the Wild
• SREcon25 Americas - Cattle vs. Pets - A Cost-Effective Elasticsearch Architecture to Scale-Out...
• SREcon25 Americas - Chaos Experiments - Datacenter Stress Testing
• SREcon25 Americas - Distributed Tracing in Action: Our Journey with OpenTelemetry
• SREcon25 Americas - From HAR to OpenTelemetry Trace: Redefining Browser Observability
• SREcon25 Americas - Fully Automated HW SKU Selection System to Optimize Apache Pinot’s Cost-to...
• SREcon25 Americas - Going Multi Cloud in a Hurry with Quality and Style
• SREcon25 Americas - Handling the Largest Domains Migration, Ever!
• SREcon25 Americas - Hijacking Service Discovery to Simulate Dependency Degradation
• SREcon25 Americas - Improving the SRE Experience for 10 Years as a Free, Open, and Automated...
• SREcon25 Americas - Incident Management Metrics That Matter
• SREcon25 Americas - Inclusive SRE: Best Practices for Working with a Visually Impaired Incident...
• SREcon25 Americas - Is the S in SRE for “Security”?
• SREcon25 Americas - Learning from Incidents at Scale; Actually Doing Cross-Incident Analysis
• SREcon25 Americas - Lies Programmers Believe about Memory
• SREcon25 Americas - Lightning Talks
• SREcon25 Americas - Live, Laugh, Log
• SREcon25 Americas - Mapping a Better Future with STPA
• SREcon25 Americas - Maturing Your Data Architecture in a Week: How Bluesky Survived
• SREcon25 Americas - Measuring Availability the Player Focused Way: How Riot Games Changed Its...
• SREcon25 Americas - Mitigating Against Large Scale Systemic Failures in E-Trading
• SREcon25 Americas - Network Flow Data in the Cloud
• SREcon25 Americas - No Time to Do It All! Approaching Overload on DevOps Teams
• SREcon25 Americas - OLTP SQL Database Query Tracing and Linting
• SREcon25 Americas - One Million Builds per Year, Only One Page - Operating Internal Services...
• SREcon25 Americas - OpenTelemetry Semantic Conventions and How to Avoid Broken Observability
• SREcon25 Americas - Optimizing Machine Learning Training Infrastructure: A Governance Approach
• SREcon25 Americas - Per Aspera ad Productum: Turning Processes into Products
• SREcon25 Americas - Please Give Me Back My Network Cables! On Networking Limits in AWS
• SREcon25 Americas - Production Engineering When Trading Billions of Dollars a Day
• SREcon25 Americas - Running DRP Tabletop Exercises
• SREcon25 Americas - Safe Evaluation and Rollout of AI Models
• SREcon25 Americas - Securing Distributed Cache: Achieving Secure-by-Default with Key Challenges &...
• SREcon25 Americas - SRE & Complexification: Where Verbs and Nouns Do Battle
• SREcon25 Americas - Stopping Performance Regression via Changepoint Detection
• SREcon25 Americas - Systems Thinking with Poisoned Systems
• SREcon25 Americas - Tackling Slow Queries: A Practical Approach to Prevention and Correction
• SREcon25 Americas - Taming the Beast: Understanding and Harnessing the Power of HTTP Proxies
• SREcon25 Americas - Technical Debt as Theory Building and Practice
• SREcon25 Americas - Techniques Netflix Uses to Weather Significant Demand Shifts
• SREcon25 Americas - The Perverse Incentives of Reliability
• SREcon25 Americas - The Search for Speed
• SREcon25 Americas - Transformers in SRE Land: Evolving to Manage AI Infrastructure
• SREcon25 Americas - Using Statistical Techniques to Automatically Detect Game-Breaking Issues
• SREcon25 Americas - “How’s the App Doing?” Bringing Mobile Into Your Reliability Picture
• SREcon25 Americas - “On-Call Is Ruining My Life” and Other Tales about Holding the Pager as an SRE
• SREcon25 Europe/Middle East/Africa - ARM Migration Made Practical
• SREcon25 Europe/Middle East/Africa - Auto-Instrumentation for GPU Performance using eBPF
• SREcon25 Europe/Middle East/Africa - Catch Me If You Can: Hunting Misconfigurations Before They...
• SREcon25 Europe/Middle East/Africa - Challenges of Making Large AI Clusters Reliable
• SREcon25 Europe/Middle East/Africa - CPU Utilization: The Hidden Cost of Running Hot
• SREcon25 Europe/Middle East/Africa - Cross-Platform Data Lineage with OpenLineage, A Foundational...
• SREcon25 Europe/Middle East/Africa - Dashboards & Dragons: Reliability Magic for AI Platforms
• SREcon25 Europe/Middle East/Africa - Defending the Global Financial Backbone: Euroclear's...
• SREcon25 Europe/Middle East/Africa - Embedding Platform SREs: A Hybrid Model for Driving Adoption
• SREcon25 Europe/Middle East/Africa - Experimenting with AI-Driven Systems
• SREcon25 Europe/Middle East/Africa - Failover Without Fear: A Practical Guide to Active-Active...
• SREcon25 Europe/Middle East/Africa - Fifty Shades of Caching and How LLMs Paint It Blαck
• SREcon25 Europe/Middle East/Africa - Finding the Needle in a Haystack: Tenant-Level Network...
• SREcon25 Europe/Middle East/Africa - From 4 Hours to 8 Minutes with AI Agents That Transform SRE...
• SREcon25 Europe/Middle East/Africa - From Toil to Empowerment: Building Self-Service Ingress with...
• SREcon25 Europe/Middle East/Africa - From Vibes to Outages: Riding the AI Code Wave
• SREcon25 Europe/Middle East/Africa - Gaining Insights from a Black Box System
• SREcon25 Europe/Middle East/Africa - Honey, I Shrunk the Data Center!
• SREcon25 Europe/Middle East/Africa - How We Used Statistics to Find Toil among 36,000 Changes
• SREcon25 Europe/Middle East/Africa - HyperRouter: Lessons Learnt from Building an L4 Load...
• SREcon25 Europe/Middle East/Africa - Is My Thing Reliable? Adventures in Driving Consistency of...
• SREcon25 Europe/Middle East/Africa - Leader Election: Pitfalls and Alternatives
• SREcon25 Europe/Middle East/Africa - Learning Inside the Box: The Scope of Incident Reviews
• SREcon25 Europe/Middle East/Africa - Lessons from 25 Years in Infra: What’s Changed, What Hasn’t,...
• SREcon25 Europe/Middle East/Africa - Lessons from a Year with Backstage: What Worked, What Didn’t...
• SREcon25 Europe/Middle East/Africa - Lessons from an Asset Manager’s First Embedded SRE
• SREcon25 Europe/Middle East/Africa - Level Up Your Edge: Do You Know Where Your Traffic Comes From?
• SREcon25 Europe/Middle East/Africa - Lightning Talk - AI is Like Chocolate
• SREcon25 Europe/Middle East/Africa - Lightning Talk - Parquet: The Pillar of Modern Telemetry...
• SREcon25 Europe/Middle East/Africa - Lightning Talk - The Executive Signal: How to Cut Through...
• SREcon25 Europe/Middle East/Africa - Lightning Talks - Computers Were a Mistake, We Should Burn...
• SREcon25 Europe/Middle East/Africa - Making Reproducible Builds Faster with Docker Bake
• SREcon25 Europe/Middle East/Africa - Maximizing Utilization for LLM Accelerators
• SREcon25 Europe/Middle East/Africa - Modernizing Incident Response with LLMs, RAG, and the MCP
• SREcon25 Europe/Middle East/Africa - Performance Consistency in the Cloud
• SREcon25 Europe/Middle East/Africa - Practical DORA (Digital Operational Resilience Act) for SREs
• SREcon25 Europe/Middle East/Africa - Profiling Your Code: 5 Tips to Significantly Boost Performance
• SREcon25 Europe/Middle East/Africa - Quality Gates in Production: How We Turn OpenTelemetry...
• SREcon25 Europe/Middle East/Africa - Reliability in Finance: Delivering Quality Market Data at Scale
• SREcon25 Europe/Middle East/Africa - Resilience for AI Workloads at Scale: The Fast and the Finicky!
• SREcon25 Europe/Middle East/Africa - Run, Walk, Crawl, or How We Failed Our Way to SLO Readiness
• SREcon25 Europe/Middle East/Africa - Securing AI at Scale: Practical Defenses against Prompt...
• SREcon25 Europe/Middle East/Africa - Service Messy: Pagerduty's Service Mesh Migration
• SREcon25 Europe/Middle East/Africa - Speeding Up Terraform Caching with OverlayFS
• SREcon25 Europe/Middle East/Africa - STPA for Software Systems–Illuminate the Unknown Unknowns
• SREcon25 Europe/Middle East/Africa - Systematising Production Operations: Reddit Control Tower
• SREcon25 Europe/Middle East/Africa - Tales from the Platform Adoption Mines
• SREcon25 Europe/Middle East/Africa - Taming the Cost of Telemetry: How Riot Games Reined In...
• SREcon25 Europe/Middle East/Africa - The Bitter and the Sweet of Running a Planet-Scale Build &...
• SREcon25 Europe/Middle East/Africa - The Chicken or the Egg: Creating a Stable Preprod...
• SREcon25 Europe/Middle East/Africa - The Computer Wants to Lose Your Data
• SREcon25 Europe/Middle East/Africa - The SRE’s Crystal Ball: Predicting System Performance with...
• SREcon25 Europe/Middle East/Africa - The Un-Incident: Extracting Value from the Gray Area of...
• SREcon25 Europe/Middle East/Africa - Training New Incident Commanders: Pokemon Style!
• SREcon25 Europe/Middle East/Africa - Utilization Is the Key to Efficiency: What It Takes to Run...
• SREcon25 Europe/Middle East/Africa - What Do We Do Now, Now That We’re Happy?
• SREcon25 Europe/Middle East/Africa - What I Wish I Knew Before Choosing Spot Instances
• SREcon25 Europe/Middle East/Africa - Why Risk Management Requires Taking Risks: A Practical Guide...
• SREcon25 Europe/Middle East/Africa - Zero-Regression Network CI/CD for Finance-Grade Reliability
• SREcon26 Americas - 5 Wrong Hypotheses about PostgreSQL Multi-Transaction Locks
• SREcon26 Americas - AI Agents for Incident Investigation: The Good, The Bad, and The Ugly
• SREcon26 Americas - Autonomous Policy Validation: Building AI Agents to Analyze Logs and Identify...
• SREcon26 Americas - Beyond Blanket Freezes: Enabling Safe Innovation During Critical Events at...
• SREcon26 Americas - Beyond Loss and Accuracy: Closing the Observability Gaps in AI Training with...
• SREcon26 Americas - Building SRE Culture (without SREs, Technically)
• SREcon26 Americas - Designing Layered High‑Availability Architectures for PostgreSQL on a Budget
• SREcon26 Americas - Epistemology of Incidents and Problem Solving
• SREcon26 Americas - Escaping Version Skew: Formalizing Compatibility in a World of Partial Rollouts
• SREcon26 Americas - Executing Chaos Engineering in Production at a Critical Financial Institution
• SREcon26 Americas - From Chaos to Confidence: How SREs Can Leverage 50 (and Counting) Failure...
• SREcon26 Americas - From ESXi to Kubernetes: Modernizing 1,400 Edge Locations with Open Source
• SREcon26 Americas - From Thundering Herd to Zero Outages: Building Reliable Inventory Sync
• SREcon26 Americas - Ghosts in the Interview Loop and Avoiding AI Taylorism
• SREcon26 Americas - How Security Incidents Are Different ... and How They're Exactly the Same
• SREcon26 Americas - How We Built Protosockets to Go Beyond HTTP and gRPC
• SREcon26 Americas - How We Debug 1000s of Databases with AI: Lessons from an AI-Assisted Database...
• SREcon26 Americas - Human Factors in the Age of AI Ops: Re-Engineering Trust between Humans and...
• SREcon26 Americas - Infinity Is Not a Strategy: Right‑Sizing the Cloud
• SREcon26 Americas - Intelligent Load Balancing in Kubernetes
• SREcon26 Americas - It's Not Always the Network (But Here's How to Prove It): Kubernetes Packet...
• SREcon26 Americas - Keeping a Hypervisor Fleet Up to Date with Minimal Customer Disruption
• SREcon26 Americas - Lightning Talks
• SREcon26 Americas - Low Latency Serving of Offline Data: Efficient, Safe, and Reliable Data...
• SREcon26 Americas - Mean Time to WTF: Why Developer Experience Frameworks Belong in Your Incident...
• SREcon26 Americas - Observability for LLMs: Understanding What’s Happening Under the Hood
• SREcon26 Americas - Operationalizing Key Management for Regulatory Compliance and Emergency Response
• SREcon26 Americas - Precision Over Proliferation: SRE Approach for Leaner, Smarter and Data-Driven..
• SREcon26 Americas - Reliability Engineering for Hybrid Robot-Cloud Systems
• SREcon26 Americas - Reliability Equilibrium: The Hidden Playbook behind SRE Influence
• SREcon26 Americas - Reliable OpenTelemetry at Scale: No Queue, No Problem
• SREcon26 Americas - Resilient Observability at the Retail Edge: A Lightweight, Scalable, and...
• SREcon26 Americas - Shift-Left Compliance
• SREcon26 Americas - So You Want a New Incident Commander—Lessons from Building Incident Response...
• SREcon26 Americas - Stop Reading Changelogs: Safer Kubernetes Upgrades with Simulation
• SREcon26 Americas - Talking to/with Machines
• SREcon26 Americas - Taming the Unpredictable: Reliability in Chaos
• SREcon26 Americas - The Case of the Misnamed Cities: CAST Analysis of a Google Maps Incident
• SREcon26 Americas - The Critical Resource Is You: Practical Destressing for On-Call Engineers
• SREcon26 Americas - The Evolution of Postgres Performance
• SREcon26 Americas - The Gashlycrumb Tinies of AI Networking You Must Know (or Languish!)
• SREcon26 Americas - The Ironies of AI²
• SREcon26 Americas - The Power of Stories
• SREcon26 Americas - The Unconspicuous Role of Conntrack in Kubernetes Networking
• SREcon26 Americas - The Zero Trust Odyssey: Our Journey to Modernize Internal Access
• SREcon26 Americas - Three Lies We Tell Ourselves about Disaster Recovery and What to Do about Them
• SREcon26 Americas - Unlock High-Frequency Deployments without Blowing Up Prometheus
• SREcon26 Americas - When the Cure Is Worse than the Disease: Metastability in Recovery
• Staying Happy in System Administration
• Surveillance or Security? The Risks Posed by New Wiretapping Technologies
• Surviving Peripheral Failures in Embedded Systems
• Systematically Exploring the Behavior of Control Programs
• The Advanced Persistent Threat
• The DevOps Transformation
• The Evolution of Information Assurance
• The Internet of Things and Sensors and Actuators
• The LHC Computing Challenge, by Tony Cass at USENIX LISA '07
• The LHC Computing Challenge: Preparation, Reality, and Future Outlook
• The Operational Impact of Continuous Deployment
• The Turtles Project: Design and Implementation of Nested Virtualization
• The UCSC Cancer Genomics Hub
• Themis: Detecting Distributed Concurrency Bugs through RPC-Driven Race-Directed Test...
• Thinking Security
• Thread and Memory Placement on NUMA Systems: Asymmetry Matters
• Towards Street-Level Client-Independent IP Geolocation
• Tracking DDoS Attacks: Insights into the Business of Disrupting the Web
• TRIOS '14 - Cosh: Clear OS Data Sharing In An Incoherent World
• TRIOS '14 - Custos: Increasing Security with Secret Storage as a Service
• TRIOS '14 - Fractured Processes: Adaptive, Fine-Grained Process Abstractions
• TRIOS '14 - From Feast to Famine: Managing Mobile Network Resources Across Environments
• TRIOS '14 - Leo: A Profile-Driven Dynamic Optimization Framework for GPU Applications
• TRIOS '14 - Lightning in the Cloud: A Study of Transient Bottlenecks on n-Tier Web Application
• TRIOS '14 - Managing NymBoxes for Identity and Tracking Protection
• TRIOS '14 - MLB: A Memory-aware Load Balancing for Mitigating Memory Contention
• TRIOS '14 - On Sockets and System Calls: Minimizing Context Switches for the Socket API
• TRIOS '14 - Proactive Energy-Aware Programming with PEEK
• TRIOS '14 - Working Set Model for Multithreaded Programs
• UCMS '13 - Beyond Open Source Configuration Management: Rapidly Building Any Cloud at Scale
• UCMS '13 - Continuous Deployment with Ansible
• UCMS '13 - Continuously Integrating Puppet
• UCMS '13 - DevOps, Desired State, and Microsoft Windows
• UCMS '13 - Maintaining Consistency in a Massively Parallel Environment
• UCMS '13 - The Business of Configuration Management
• UCMS '14 - Automating Orchestration in the Cloud with Ubuntu Juju
• UCMS '14 - Configuration as a Service
• UCMS '14 - Continuous Integration and Collaboration in Managed Environments
• UCMS '14 - Software Configuration Management at National Cancer Institute
• UCMS '14 - Software-Defined Infrastructure
• UCMS '14 - The Future of In-container Configuration Management
• UCMS '14 - Things Will Change
• Uncharted Paths
• URES '14 - Building Enterprise Software on GitHub
• URES '14 - By Their Powers Combined—Monitoring and Automated Releases Are Like Peanut Butter
• URES '14 - The Value of Release Engineering as a Force Multiplier
• USENIX Cyberlaw '12 Panel: Technology and Democracy
• USENIX Security '11 - Pico: No More Passwords!
• USENIX Security '13 - Building Securable Infrastructure: Open-Source Private Clouds
• USENIX Security '13 - Confessions of a Recovering Data Broker
• USENIX Security '13 - Dismantling Megamos Crypto: Wirelessly Lockpicking a Vehicle Immobilizer
• USENIX Security '13 - Dr. Felten Goes To Washington: Lessons from 18 Months in Government
• USENIX Security '13 - Security Team 2.0
• USENIX Security '13 - Steal This Movie: Automatically Bypassing DRM Protection in Streaming Media
• USENIX Security '13 - The White House's Priorities for Cybersecurity
• USENIX Security '13 - Tracking the Casino Computer Wars: Who's Winning—the Casino or the Cheat?
• USENIX Security '13 - Windows 8 Security: Supporting User Confidence
• USENIX Security '14 - A Bayesian Approach to Privacy Enforcement in Smartphones
• USENIX Security '14 - A Large-Scale Analysis of the Security of Embedded Firmwares
• USENIX Security '14 - A Large-Scale Analysis of the Security of Embedded Firmwares
• USENIX Security '14 - A Look at Targeted Attacks Through the Lense of an NGO
• USENIX Security '14 - Ad-Hoc Secure Two-Party Computation on Mobile Devices using Hardware Tokens
• USENIX Security '14 - An Internet-Wide View of Internet-Wide Scanning
• USENIX Security '14 - ASM: A Programmable Interface for Extending Android Security
• USENIX Security '14 - Automatically Detecting Vulnerable Websites Before They Turn Malicious
• USENIX Security '14 - BareCloud: Bare-metal Analysis-based Evasive Malware Detection
• USENIX Security '14 - Battling Human Trafficking with Big Data
• USENIX Security '14 - Blanket Execution: Dynamic Similarity Testing for Program Binaries
• USENIX Security '14 - Brahmastra: Driving Apps to Test the Security of Third-Party Components
• USENIX Security '14 - Burst ORAM: Minimizing ORAM Response Times for Bursty Access Patterns
• USENIX Security '14 - BYTEWEIGHT: Learning to Recognize Functions in Binary Code
• USENIX Security '14 - Cardinal Pill Testing of System Virtual Machines
• USENIX Security '14 - DSCRETE: Automatic Rendering of Forensic Information from Memory Images
• USENIX Security '14 - Dynamic Hooks: Hiding Control Flow Changes within Non-Control Data
• USENIX Security '14 - Effective Attacks and Provable Defenses for Website Fingerprinting
• USENIX Security '14 - Enforcing Forward-Edge Control-Flow Integrity in GCC & LLVM
• USENIX Security '14 - Exit from Hell? Reducing the Impact of Amplification DDoS Attacks
• USENIX Security '14 - Faster Private Set Intersection Based on OT Extension
• USENIX Security '14 - FLUSH+RELOAD: A High Resolution, Low Noise, L3 Cache Side-Channel Attack
• USENIX Security '14 - From the Aether to the Ethernet—Attacking the Internet using Broadcast Digital
• USENIX Security '14 - Gyrophone: Recognizing Speech from Gyroscope Signals
• USENIX Security '14 - How To Live In Paradise: Pearls of Wisdom for New and Prospective Faculty
• USENIX Security '14 - Hulk: Eliciting Malicious Behavior in Browser Extensions
• USENIX Security '14 - Information Security War Room
• USENIX Security '14 - iSeeYou: Disabling the MacBook Webcam Indicator LED
• USENIX Security '14 - JIGSAW: Protecting Resource Access by Inferring Programmer Expectations
• USENIX Security '14 - LibFTE: A Toolkit for Constructing Practical, Format-Abiding Encryption
• USENIX Security '14 - Lightning Talks for the One-Track Mind
• USENIX Security '14 - Man vs. Machine: Practical Adversarial Detection of Malicious Crowdsourcing
• USENIX Security '14 - Mimesis Aegis: A Mimicry Privacy Shield–A System’s Approach to Data Privacy
• USENIX Security '14 - Never Been KIST: Tor’s Congestion Management Blossoms with Kernel-Informed
• USENIX Security '14 - On the Effective Prevention of TLS Man-in-the-Middle Attacks in Web
• USENIX Security '14 - On the Feasibility of Large-Scale Infections of iOS Devices
• USENIX Security '14 - On the Practical Exploitability of Dual EC in TLS Implementations
• USENIX Security '14 - Opening Remarks and Awards
• USENIX Security '14 - Optimizing Seed Selection for Fuzzing
• USENIX Security '14 - Oxymoron: Making Fine-Grained Memory Randomization Practical by Allowing
• USENIX Security '14 - Panel Discussion
• USENIX Security '14 - Password Managers: Attacks and Defenses
• USENIX Security '14 - Password Portfolios and the Finite-Effort User: Sustainably Managing Large
• USENIX Security '14 - Peeking into Your App without Actually Seeing It: UI State Inference
• USENIX Security '14 - Phone Phreaks: What We Can Learn From the First Network Hackers?
• USENIX Security '14 - Precise Client-side Protection against DOM-based Cross-Site Scripting
• USENIX Security '14 - Preventing Cryptographic Key Leakage in Cloud Virtual Machines
• USENIX Security '14 - Privacy in Pharmacogenetics: An End-to-End Case Study of Personalized Warfarin
• USENIX Security '14 - Privee: An Architecture for Automatically Analyzing Web Privacy Policies
• USENIX Security '14 - ret2dir: Rethinking Kernel Isolation
• USENIX Security '14 - Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels
• USENIX Security '14 - ROP is Still Dangerous: Breaking Modern Defenses
• USENIX Security '14 - Scheduler-based Defenses against Cross-VM Side-channels
• USENIX Security '14 - SDDR: Light-Weight, Secure Mobile Encounters
• USENIX Security '14 - Security Analysis of a Full-Body Scanner
• USENIX Security '14 - Size Does Matter: Why Using Gadget-Chain Length to Prevent Code-Reuse Attacks
• USENIX Security '14 - SpanDex: Secure Password Tracking for Android
• USENIX Security '14 - SSOScan: Automated Testing of Web Applications for Single Sign-On
• USENIX Security '14 - Static Detection of Second-Order Vulnerabilities in Web Applications
• USENIX Security '14 - Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow
• USENIX Security '14 - Succinct Non-Interactive Zero Knowledge for a von Neumann Architecture
• USENIX Security '14 - TapDance: End-to-Middle Anticensorship without Flow Blocking
• USENIX Security '14 - Targeted Threat Index: Characterizing and Quantifying Politically-Motivated
• USENIX Security '14 - Telepathwords: Preventing Weak Passwords by Reading Users’ Minds
• USENIX Security '14 - The Emperor’s New Password Manager: Security Analysis of Web-based Password
• USENIX Security '14 - The Future of Crypto: Getting from Here to Guarantees
• USENIX Security '14 - The Long “Taile” of Typosquatting Domain Names
• USENIX Security '14 - Towards Detecting Anomalous User Behavior in Online Social Networks
• USENIX Security '14 - Towards Reliable Storage of 56-bit Secrets in Human Memory
• USENIX Security '14 - TRUESET: Faster Verifiable Set Computations
• USENIX Security '14 - Understanding the Dark Side of Domain Parking
• USENIX Security '14 - When Governments Hack Opponents: A Look at Actors and Technology
• USENIX Security '14 - X-Force: Force-Executing Binary Programs for Security Applications
• USENIX Security '14 - XRay: Enhancing the Web’s Transparency with Differential Correlation
• USENIX Security '14 - ZØ: An Optimizing Distributing Zero-Knowledge Compiler
• USENIX Security '16 - A Comprehensive Measurement Study of Domain Generating Malware
• USENIX Security '16 - All Your Queries Are Belong to Us: The Power of File-Injection Attacks...
• USENIX Security '16 - AMD x86 Memory Encryption Technologies
• USENIX Security '16 - An Empirical Study of Textual Key-Fingerprint Representations
• USENIX Security '16 - An In-Depth Analysis of Disassembly on Full-Scale x86/x64 Binaries
• USENIX Security '16 - APISan: Sanitizing API Usages through Semantic Cross-Checking
• USENIX Security '16 - Ariadne: A Minimal Approach to State Continuity
• USENIX Security '16 - ARMageddon: Cache Attacks on Mobile Devices
• USENIX Security '16 - Authenticated Network Time Synchronization
• USENIX Security '16 - AuthLoop: End-to-End Cryptographic Authentication for Telephony...
• USENIX Security '16 - Automatically Detecting Error Handling Bugs Using Error Specifications
• USENIX Security '16 - Crashing Drones and Hijacked Cameras: CyberTrust Meets CyberPhysical
• USENIX Security '16 - Dancing on the Lip of the Volcano: Chosen Ciphertext Attacks on Apple iMessage
• USENIX Security '16 - Defending against Malicious Peripherals with Cinch
• USENIX Security '16 - DRAMA: Exploiting DRAM Addressing for Cross-CPU Attacks
• USENIX Security '16 - DROWN: Breaking TLS Using SSLv2
• USENIX Security '16 - Egalitarian Computing
• USENIX Security '16 - Enhancing Bitcoin Security and Performance with Strong Consistency via...
• USENIX Security '16 - Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks
• USENIX Security '16 - Faster Malicious 2-Party Secure Computation with Online/Offline Dual Execution
• USENIX Security '16 - Finding and Fixing Security Bugs in Flash
• USENIX Security '16 - Fingerprinting Electronic Control Units for Vehicle Intrusion Detection
• USENIX Security '16 - Flip Feng Shui: Hammering a Needle in the Software Stack
• USENIX Security '16 - FlowFence: Practical Data Protection for Emerging IoT Application Frameworks
• USENIX Security '16 - fTPM: A Software-Only Implementation of a TPM Chip
• USENIX Security '16 - Harvesting Inconsistent Security Configurations in Custom Android ROMs...
• USENIX Security '16 - Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability
• USENIX Security '16 - Hidden Voice Commands
• USENIX Security '16 - Identifying and Characterizing Sybils in the Tor Network
• USENIX Security '16 - Internet Jones and the Raiders of the Lost Trackers...
• USENIX Security '16 - Investigating Commercial Pay-Per-Install and the Distribution of Unwanted...
• USENIX Security '16 - k-fingerprinting: A Robust Scalable Website Fingerprinting Technique
• USENIX Security '16 - Lock It and Still Lose It —on the (In)Security of Automotive Remote Keyless
• USENIX Security '16 - Making HTTPS the Default in the World's Largest Bureaucracy
• USENIX Security '16 - Making USB Great Again with USBFILTER
• USENIX Security '16 - Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services
• USENIX Security '16 - Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks
• USENIX Security '16 - Mirror: Enabling Proofs of Data Replication and Retrievability in the Cloud
• USENIX Security '16 - Oblivious Multi-Party Machine Learning on Trusted Processors
• USENIX Security '16 - OblivP2P: An Oblivious Peer-to-Peer Content Sharing System
• USENIX Security '16 - Off-Path TCP Exploits: Global Rate Limit Considered Dangerous
• USENIX Security '16 - On Demystifying the Android Application Framework: Re-Visiting Android...
• USENIX Security '16 - On Omitting Commits and Committing Omissions: Preventing Git Metadata...
• USENIX Security '16 - One Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks...
• USENIX Security '16 - Optimized Invariant Representation of Network Traffic for Detecting Unseen...
• USENIX Security '16 - PIkit: A New Kernel-Independent Processor-Interconnect Rootkit
• USENIX Security '16 - Poking Holes in Information Hiding
• USENIX Security '16 - Post-quantum Key Exchange—A New Hope
• USENIX Security '16 - Practical DIFC Enforcement on Android
• USENIX Security '16 - Predicting, Decrypting, and Abusing WPA2/802.11 Group Keys
• USENIX Security '16 - Privacy and Threat in Practice: Mobile Messaging by Low-Income New Yorkers
• USENIX Security '16 - Privacy in Epigenetics: Temporal Linkability of MicroRNA Expression Profiles
• USENIX Security '16 - Protecting Privacy of BLE Device Users
• USENIX Security '16 - Report from the Field: A CDN's Role in Repelling Attacks against Banking...
• USENIX Security '16 - Request and Conquer: Exposing Cross-Origin Resource Size
• USENIX Security '16 - Sanctum: Minimal Hardware Extensions for Strong Software Isolation
• USENIX Security '16 - Screen after Previous Screens: Spatial-Temporal Recreation of Android App...
• USENIX Security '16 - Secure, Precise, and Fast Floating-Point Operations on x86 Processors
• USENIX Security '16 - Security Competitions
• USENIX Security '16 - Specification Mining for Intrusion Detection in Networked Control Systems
• USENIX Security '16 - Stealing Machine Learning Models via Prediction APIs
• USENIX Security '16 - Teaching Computer Security: Thoughts from the Field
• USENIX Security '16 - The Cut-and-Choose Game and Its Application to Cryptographic Protocols
• USENIX Security '16 - The Ever-Changing Labyrinth: A Large-Scale Analysis of Wildcard DNS Powered...
• USENIX Security '16 - The Million-Key Question—Investigating the Origins of RSA Public Keys
• USENIX Security '16 - The Moral Character of Cryptographic Work
• USENIX Security '16 - The Unfalsifiability of Security Claims
• USENIX Security '16 - Thoth: Comprehensive Policy Compliance in Data Retrieval Systems
• USENIX Security '16 - Towards Measuring and Mitigating Social Engineering Software Download Attacks
• USENIX Security '16 - Tracing Information Flows Between Ad Exchanges Using Retargeted Ads
• USENIX Security '16 - Trusted Browsers for Uncertain Times
• USENIX Security '16 - Undermining Information Hiding (and What to Do about It)
• USENIX Security '16 - UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware
• USENIX Security '16 - Verifying Constant-Time Implementations
• USENIX Security '16 - Virtual U: Defeating Face Liveness Detection by Building Virtual Models...
• USENIX Security '16 - Website-Targeted False Content Injection by Network Operators
• USENIX Security '16 - What Cannot Be Read, Cannot Be Leveraged? Revisiting Assumptions of JIT-ROP...
• USENIX Security '16 - When Governments Attack: Malware Targeting Activists, Lawyers, and Journalists
• USENIX Security '16 - You Are Who You Know and How You Behave: Attribute Inference Attacks...
• USENIX Security '16 - You've Got Vulnerability: Exploring Effective Vulnerability Notifications
• USENIX Security '16 - ZKBoo: Faster Zero-Knowledge for Boolean Circuits
• USENIX Security '16 - zxcvbn: Low-Budget Password Strength Estimation
• USENIX Security '16 - überSpark: Enforcing Verifiable Object Abstractions for Automated...
• USENIX Security '17 - A Longitudinal, End-to-End View of the DNSSEC Ecosystem
• USENIX Security '17 - Syntia: Synthesizing the Semantics of Obfuscated Code
• USENIX Security '17 - "I Have No Idea What I'm Doing" - On the Usability of Deploying HTTPS
• USENIX Security '17 - 6thSense: A Context-aware Sensor-based Attack Detector for Smart Devices
• USENIX Security '17 - A Privacy Analysis of Cross-device Tracking
• USENIX Security '17 - Adaptive Android Kernel Live Patching
• USENIX Security '17 - An Ant in a World of Grasshoppers
• USENIX Security '17 - Attacking the Brain: Races in the SDN Control Plane
• USENIX Security '17 - AuthentiCall: Efficient Identity and Content Authentication for Phone Calls
• USENIX Security '17 - AutoLock DNP
• USENIX Security '17 - AutoLock: Why Cache Attacks on ARM Are Harder Than You Think
• USENIX Security '17 - AWare: Preventing Abuse of Privacy-Sensitive Sensors via Operation Bindings
• USENIX Security '17 - Beauty and the Burst: Remote Identification of Encrypted Video Streams
• USENIX Security '17 - BinSim: Trace-based Semantic Binary Diffing...
• USENIX Security '17 - BLENDER: Enabling Local Search with a Hybrid Differential Privacy Model
• USENIX Security '17 - BootStomp: On the Security of Bootloaders in Mobile Devices
• USENIX Security '17 - CacheD: Identifying Cache-Based Timing Channels in Production Software
• USENIX Security '17 - CAn’t Touch This...
• USENIX Security '17 - CCSP: Controlled Relaxation of Content Security Policies...
• USENIX Security '17 - CHAINIAC: Proactive Software-Update Transparency...
• USENIX Security '17 - Characterizing the Nature and Dynamics of Tor Exit Blocking
• USENIX Security '17 - CLKSCREW: Exposing the Perils of Security-Oblivious Energy Management
• USENIX Security '17 - Computer Security, Privacy, and DNA Sequencing...
• USENIX Security '17 - Constant-Time Callees with Variable-Time Callers
• USENIX Security '17 - Data Hemorrhage, Inequality, and You...
• USENIX Security '17 - DDoS Panel
• USENIX Security '17 - Dead Store Elimination (Still) Considered Harmful
• USENIX Security '17 - Detecting Android Root Exploits by Learning from Root Providers
• USENIX Security '17 - Detecting Credential Spearphishing in Enterprise Settings
• USENIX Security '17 - DeTor: Provably Avoiding Geographic Regions in Tor
• USENIX Security '17 - Differential Privacy: From Theory to Deployment
• USENIX Security '17 - Digtool: A Virtualization-Based Framework for Detecting Kernel Vulnerabilities
• USENIX Security '17 - DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers
• USENIX Security '17 - Efficient Protection of Path-Sensitive Control Security
• USENIX Security '17 - Ensuring Authorized Updates in Multi-user Database-Backed Applications
• USENIX Security '17 - Exploring User Perceptions of Discrimination in Online Targeted Advertising
• USENIX Security '17 - Extension Breakdown...
• USENIX Security '17 - From Problems to Patterns to Practice...
• USENIX Security '17 - Game of Registrars...
• USENIX Security '17 - Global Measurement of DNS Manipulation
• USENIX Security '17 - Hacking in Darkness: Return-oriented Programming against Secure Enclaves
• USENIX Security '17 - HELP: Helper-Enabled In-Band Device Pairing…
• USENIX Security '17 - How Double-Fetch Situations turn into Double-Fetch Vulnerabilities...
• USENIX Security '17 - How the Web Tangled Itself
• USENIX Security '17 - Identifier Binding Attacks and Defenses in Software-Defined Networks
• USENIX Security '17 - Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing
• USENIX Security '17 - kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
• USENIX Security '17 - Locally Differentially Private Protocols for Frequency Estimation
• USENIX Security '17 - Loophole: Timing Attacks on Shared Event Loops in Chrome
• USENIX Security '17 - Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART
• USENIX Security '17 - MCMix: Anonymous Messaging via Secure Multiparty Computation
• USENIX Security '17 - Measuring HTTPS Adoption on the Web
• USENIX Security '17 - Measuring the Insecurity of Mobile Deep Links of Android
• USENIX Security '17 - MPI: Multiple Perspective Attack Investigation...
• USENIX Security '17 - Neural Nets Can Learn Function Type Signatures From Binaries
• USENIX Security '17 - Ninja: Towards Transparent Tracing and Debugging on ARM
• USENIX Security '17 - On the effectiveness of mitigations against floating-point timing channels
• USENIX Security '17 - Opening Remarks and Awards
• USENIX Security '17 - ORide: A Privacy-Preserving yet Accountable Ride-Hailing Service
• USENIX Security '17 - Oscar: A Practical Page-Permissions-Based Scheme...
• USENIX Security '17 - OSS-Fuzz - Google's continuous fuzzing service for open source software
• USENIX Security '17 - PDF Mirage: Content Masking Attack Against Information-Based Online Services
• USENIX Security '17 - Phoenix: Rebirth of a Cryptographic Password-Hardening Service
• USENIX Security '17 - Picking Up My Tab...
• USENIX Security '17 - PlatPal: Detecting Malicious Documents with Platform Diversity
• USENIX Security '17 - Postmortem Program Analysis with Hardware-Enhanced Post-Crash Artifacts
• USENIX Security '17 - Predicting the Resilience of Obfuscated Code...
• USENIX Security '17 - Prime+Abort: A Timer-Free High-Precision L3 Cache Attack using Intel TSX
• USENIX Security '17 - Qapla: Policy compliance for database-backed systems
• USENIX Security '17 - REM: Resource-Efficient Mining for Blockchains
• USENIX Security '17 - Reverse Engineering x86 Processor Microcode
• USENIX Security '17 - ROTE: Rollback Protection for Trusted Execution
• USENIX Security '17 - Same-Origin Policy: Evaluation in Modern Browsers
• USENIX Security '17 - See No Evil, Hear No Evil, Feel No Evil
• USENIX Security '17 - Seeing Through The Same Lens...
• USENIX Security '17 - SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data
• USENIX Security '17 - SmartAuth: User-Centered Authorization for the Internet of Things
• USENIX Security '17 - SmartPool: Practical Decentralized Pooled Mining
• USENIX Security '17 - Speeding up detection of SHA-1 collision attacks...
• USENIX Security '17 - Strong and Efficient Cache Side-Channel Protection...
• USENIX Security '17 - Telling Your Secrets without Page Faults...
• USENIX Security '17 - The Loopix Anonymity System
• USENIX Security '17 - Towards Efficient Heap Overflow Discovery
• USENIX Security '17 - Towards Practical Tools for Side Channel Aware Software Engineering...
• USENIX Security '17 - Transcend: Detecting Concept Drift in Malware Classification Models
• USENIX Security '17 - TrustBase: An Architecture to Repair and Strengthen...
• USENIX Security '17 - USB Snooping Made Easy: Crosstalk Leakage Attacks on USB Hubs
• USENIX Security '17 - Vale: Verifying High-Performance Cryptographic Assembly Code
• USENIX Security '17 - Venerable Variadic Vulnerabilities Vanquished
• USENIX Security '17 - vTZ: Virtualizing ARM TrustZone
• USENIX Security '17 - Walkie-Talkie...
• USENIX Security '17 - When the Weakest Link is Strong...
• USENIX Security '17 - When Your Threat Model Is "Everything": Defensive Security in Modern Newsrooms
• USENIX Security '18 - A Bad Dream: Subverting Trusted Platform Module While You Are Sleeping
• USENIX Security '18 - A Sense of Time for JavaScript and Node.js
• USENIX Security '18 - A4NT: Author Attribute Anonymity by Adversarial Training...
• USENIX Security '18 - ACES: Automatic Compartments for Embedded Systems
• USENIX Security '18 - Acquisitional Rule-based Engine for Discovering Internet-of-Things Devices
• USENIX Security '18 - All Your GPS Are Belong To Us...
• USENIX Security '18 - An Empirical Analysis of Anonymity in Zcash
• USENIX Security '18 - An Empirical Study of Web Resource Manipulation in Real-world Mobile Apps...
• USENIX Security '18 - Analogy Cyber Security—From 0101 to Mixed Signals
• USENIX Security '18 - Analysis of Privacy Protections in Fitness Tracking Social Networks...
• USENIX Security '18 - Arbitrum: Scalable, private smart contracts
• USENIX Security '18 - ATtention Spanned: Comprehensive Vulnerability Analysis of AT Commands...
• USENIX Security '18 - AttriGuard: A Practical Defense Against Attribute Inference Attacks...
• USENIX Security '18 - AttriGuard: A Practical Defense Against Attribute Inference Attacks...
• USENIX Security '18 - Automatic Heap Layout Manipulation for Exploitation
• USENIX Security '18 - Bamboozling Certificate Authorities with BGP
• USENIX Security '18 - BlackIoT: IoT Botnet of High Wattage Devices Can Disrupt the Power Grid
• USENIX Security '18 - BurnBox: Self-Revocable Encryption in a World Of Compelled Access
• USENIX Security '18 - Charm: Facilitating Dynamic Analysis of Device Drivers of Mobile Systems
• USENIX Security '18 - Chipmunk or Pepe? Using Acoustical Analysis to Detect Voice-Channel Fraud
• USENIX Security '18 - Cybersecurity: Is It about Business or Technology?
• USENIX Security '18 - DATA – Differential Address Trace Analysis...
• USENIX Security '18 - Debloating Software through Piece-Wise Compilation and Loading
• USENIX Security '18 - DelegaTEE: Brokered Delegation Using Trusted Execution Environments
• USENIX Security '18 - DelegaTEE: Brokered Delegation Using Trusted Execution Environments
• USENIX Security '18 - Dependence-Preserving Data Compaction for Scalable Forensic Analysis
• USENIX Security '18 - Dependence-Preserving Data Compaction for Scalable Forensic Analysis
• USENIX Security '18 - Discovering Flaws in Security-Focused Static Analysis Tools for Android...
• USENIX Security '18 - Discovering Flaws in Security-Focused Static Analysis Tools...
• USENIX Security '18 - DIZK: A Distributed Zero Knowledge Proof System
• USENIX Security '18 - DIZK: A Distributed Zero Knowledge Proof System
• USENIX Security '18 - Effective Detection of Multimedia Protocol Tunneling using Machine Learning
• USENIX Security '18 - Enabling Refinable Cross-Host Attack Investigation with Efficient Data Flow...
• USENIX Security '18 - End-to-End Measurements of Email Spoofing Attacks
• USENIX Security '18 - End-to-End Measurements of Email Spoofing Attacks
• USENIX Security '18 - End-Users Get Maneuvered: Empirical Analysis of Redirection Hijacking...
• USENIX Security '18 - Enter the Hydra: Towards Principled Bug Bounties and Exploit-Resistant...
• USENIX Security '18 - Erays: Reverse Engineering Ethereum's Opaque Smart Contracts
• USENIX Security '18 - FANCI : Feature-based Automated NXDomain Classification and Intelligence
• USENIX Security '18 - Fast and Service-preserving Recovery from Malware Infections Using CRIU
• USENIX Security '18 - Fear the Reaper: Characterization and Fast Detection of Card Skimmers
• USENIX Security '18 - FlowCog: Context-aware Semantics Extraction and Analysis...
• USENIX Security '18 - Foreshadow: Extracting the Keys to the Intel SGX Kingdom...
• USENIX Security '18 - Forgetting of Passwords: Ecological Theory and Data
• USENIX Security '18 - Formal Security Analysis of Neural Networks using Symbolic Intervals
• USENIX Security '18 - Fp-Scanner: The Privacy Implications of Browser Fingerprint Inconsistencies
• USENIX Security '18 - Freezing the Web: A Study of ReDoS Vulnerabilities...
• USENIX Security '18 - From Patching Delays to Infection Symptoms...
• USENIX Security '18 - FUZE: Towards Facilitating Exploit Generation for Kernel UAF Vulnerabilities
• USENIX Security '18 - GAZELLE: A Low Latency Framework for Secure Neural Network Inference
• USENIX Security '18 - Guarder: A Tunable Secure Allocator
• USENIX Security '18 - HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security
• USENIX Security '18 - How Do Tor Users Interact With Onion Services?
• USENIX Security '18 - IMIX: In-Process Memory Isolation EXtension
• USENIX Security '18 - Injected and Delivered: Fabricating Implicit Control over Actuation Systems...
• USENIX Security '18 - Malicious Management Unit: Why Stopping Cache Attacks in Software...
• USENIX Security '18 - Man-in-the-Machine: Exploiting Ill-Secured Communication Inside the Computer
• USENIX Security '18 - Medical Device Cybersecurity through the FDA Lens
• USENIX Security '18 - Meltdown: Reading Kernel Memory from User Space
• USENIX Security '18 - Modelling and Analysis of a Hierarchy of Distance Bounding Attacks
• USENIX Security '18 - Modelling and Analysis of a Hierarchy of Distance Bounding Attacks
• USENIX Security '18 - MoonShine: Optimizing OS Fuzzer Seed Selection with Trace Distillation
• USENIX Security '18 - NAVEX: Precise and Scalable Exploit Generation for Dynamic Web Applications
• USENIX Security '18 - NetHide: Secure and Practical Network Topology Obfuscation
• USENIX Security '18 - O Single Sign-Off, Where Art Thou? An Empirical Analysis of Single Sign-On
• USENIX Security '18 - Off-Path TCP Exploit: How Wireless Routers Can Jeopardize Your Secrets
• USENIX Security '18 - One&Done: A Single-Decryption EM-Based Attack...
• USENIX Security '18 - Opening Remarks and Awards
• USENIX Security '18 - Panel: From Spam to Speech: Policing the Next Generation of "Unwanted Traffic"
• USENIX Security '18 - Plug and Prey? Measuring the Commoditization of Cybercrime...
• USENIX Security '18 - Polisis: Automated Analysis and Presentation of Privacy Policies...
• USENIX Security '18 - Practical Accountability of Secret Processes
• USENIX Security '18 - Precise and Accurate Patch Presence Test for Binaries
• USENIX Security '18 - Privacy for Tigers
• USENIX Security '18 - QSYM : A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
• USENIX Security '18 - Quack: Scalable Remote Measurement of Application-Layer Censorship
• USENIX Security '18 - Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service...
• USENIX Security '18 - Rethinking Access Control and Authentication for the Home Internet of Things
• USENIX Security '18 - Rethinking Architectures and Abstraction for a World Where...
• USENIX Security '18 - Return Of Bleichenbacher’s Oracle Threat (ROBOT)
• USENIX Security '18 - Return Of Bleichenbacher’s Oracle Threat (ROBOT)
• USENIX Security '18 - SAD THUG...
• USENIX Security '18 - SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior...
• USENIX Security '18 - Security Namespace: Making Linux Security Frameworks Available to Containers
• USENIX Security '18 - Sensitive Information Tracking in Commodity IoT
• USENIX Security '18 - Shielding Software From Privileged Side-Channel Attacks
• USENIX Security '18 - Simple Password-Hardened Encryption Services
• USENIX Security '18 - Skill Squatting Attacks on Amazon Alexa
• USENIX Security '18 - Solving the Next Billion-People Privacy Problem
• USENIX Security '18 - Studying the Impact of Managers on Password Strength and Reuse
• USENIX Security '18 - Tackling runtime-based obfuscation in Android with TIRO
• USENIX Security '18 - teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts
• USENIX Security '18 - The aftermath of a crypto-ransomware attack at a large academic institution
• USENIX Security '18 - The Battle for New York: A Case Study of Applied Digital Threat Modeling...
• USENIX Security '18 - The Broken Shield: Measuring Revocation Effectiveness...
• USENIX Security '18 - The Dangers of Key Reuse: Practical Attacks on IPsec IKE
• USENIX Security '18 - The Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGX
• USENIX Security '18 - The Law and Economics of Bug Bounties
• USENIX Security '18 - The Rewards and Costs of Stronger Passwords in a University...
• USENIX Security '18 - The Second Crypto War—What's Different Now
• USENIX Security '18 - The Secure Socket API: TLS as an Operating System Service
• USENIX Security '18 - Towards a Secure Zero-rating Framework with Three Parties
• USENIX Security '18 - Towards Predicting Efficient and Anonymous Tor Circuits
• USENIX Security '18 - Translation Leak-aside Buffer: Defeating Cache Side-channel Protections
• USENIX Security '18 - Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks...
• USENIX Security '18 - Understanding the Reproducibility of Crowd-reported Security Vulnerabilities
• USENIX Security '18 - Understanding the Reproducibility of Crowd-reported Security Vulnerabilities
• USENIX Security '18 - Unveiling and Quantifying Facebook Exploitation of Sensitive Personal Data...
• USENIX Security '18 - Vetting Single Sign-On SDK Implementations via Symbolic Reasoning
• USENIX Security '18 - We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS
• USENIX Security '18 - When Does Machine Learning FAIL?...
• USENIX Security '18 - Who Is Answering My Queries: Understanding and Characterizing Interception...
• USENIX Security '18 - Who Is Answering My Queries: Understanding and Characterizing Interception...
• USENIX Security '18 - Who Left Open the Cookie Jar?
• USENIX Security '18 - With Great Training Comes Great Vulnerability...
• USENIX Security '18 - WPSE: Fortifying Web Protocols via Browser-Side Security Monitoring
• USENIX Security '18-CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition
• USENIX Security '18-Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels
• USENIX Security '18-Inception: System-Wide Security Testing of Real-World Embedded Systems Software
• USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
• USENIX Security '18-Reading Thieves' Cant: Automatically Identifying & Understanding Dark Jargons...
• USENIX Security '18-Schrödinger’s RAT: Profiling Stakeholders in the Remote Access Trojan Ecosystem
• USENIX Security '19 - 50 Ways to Leak Your Data: An Exploration of Apps'
• USENIX Security '19 - A Billion Open Interfaces for Eve and Mallory: MitM, DoS, and Tracking
• USENIX Security '19 - A Study of the Feasibility of Co-located App Attacks against BLE
• USENIX Security '19 - A Systematic Evaluation of Transient Execution Attacks and Defenses
• USENIX Security '19 - All Things Considered: An Analysis of IoT Devices on Home Networks
• USENIX Security '19 - All Your Clicks Belong to Me: Investigating Click Interception on the Web
• USENIX Security '19 - ALOHA: Auxiliary Loss Optimization for Hypothesis Augmentation
• USENIX Security '19 - AntiFuzz: Impeding Fuzzing Audits of Binary Executables
• USENIX Security '19 - ATTACK2VEC: Leveraging Temporal Word Embeddings to Understand the
• USENIX Security '19 - Baby Steps towards the Precipice: How the Web Became a Scary
• USENIX Security '19 - Back to the Whiteboard: a Principled Approach for the Assessment and
• USENIX Security '19 - Birthday, Name and Bifacial-security: Understanding Passwords
• USENIX Security '19 - BITE: Bitcoin Lightweight Client Privacy using Trusted Execution
• USENIX Security '19 - Blind Bernoulli Trials: A Noninteractive Protocol For Hidden-Weight Coin Flips
• USENIX Security '19 - CANvas: Fast and Inexpensive Automotive Network Mapping
• USENIX Security '19 - Clinical Computer Security for Victims of Intimate Partner Violence
• USENIX Security '19 - Cognitive Triaging of Phishing Attacks
• USENIX Security '19 - Computer Security and Privacy in the Interactions Between Victim
• USENIX Security '19 - CONFIRM: Evaluating Compatibility and Relevance of Control-flow
• USENIX Security '19 - CSI NN: Reverse Engineering of Neural Network Architectures
• USENIX Security '19 - CT-GAN: Malicious Tampering of 3D Medical Imagery using Deep Learning
• USENIX Security '19 - DEEPVSA: Facilitating Value-set Analysis with Deep Learning for
• USENIX Security '19 - Detecting and Characterizing Lateral Phishing at Scale
• USENIX Security '19 - Detecting Missing-Check Bugs via Semantic- and Context-Aware
• USENIX Security '19 - Devils in the Guidance: Predicting Logic Vulnerabilities in Payment
• USENIX Security '19 - Discovering and Understanding the Security Hazards in the
• USENIX Security '19 - Embracing the "Hack." A Better Strategy for Team-Defense
• USENIX Security '19 - EnFuzz: Ensemble Fuzzing with Seed Synchronization among Diverse Fuzzers
• USENIX Security '19 - EnTrust: Regulating Sensor Access by Cooperating Programs
• USENIX Security '19 - ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK)
• USENIX Security '19 - Evaluating Differentially Private Machine Learning in Practice
• USENIX Security '19 - Evaluating Mobile Messengers for Implementation Vulnerabilities
• USENIX Security '19 - Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT
• USENIX Security '19 - EverParse: Verified Secure Zero-Copy Parsers for Authenticated Message Formats
• USENIX Security '19 - Everyone is Different: Client-side Diversification for Defending
• USENIX Security '19 - Exploiting Unprotected I/O Operations in AMD’s Secure Encrypted Virtualization
• USENIX Security '19 - FastKitten: Practical Smart Contracts on Bitcoin
• USENIX Security '19 - FIRM-AFL: High-Throughput Greybox Fuzzing of IoT Firmware via
• USENIX Security '19 - From IP ID to Device ID and KASLR Bypass
• USENIX Security '19 - From Privacy by Design to Data Protection by Design: The Challenges of
• USENIX Security '19 - Fuzzification: Anti-Fuzzing Techniques
• USENIX Security '19 - GRIMOIRE: Synthesizing Structure while Fuzzing
• USENIX Security '19 - HardFails: Insights into Software-Exploitable Hardware Bugs
• USENIX Security '19 - HideMyApp: Hiding the Presence of Sensitive Apps on Android
• USENIX Security '19 - Hiding in Plain Signal: Physical Signal Overshadowing Attack on LTE
• USENIX Security '19 - High Precision Detection of Business Email Compromise
• USENIX Security '19 - Identifying Cache-Based Side Channels through Secret-Augmented
• USENIX Security '19 - Iframes/Popups Are Dangerous in Mobile WebView: Studying and
• USENIX Security '19 - Improving Robustness of ML Classifiers against Realizable Evasio
• USENIX Security '19 - in-toto: Providing farm-to-table guarantees for bits and bytes
• USENIX Security '19 - Inadvertently Making Cyber Criminals Rich: A Comprehensive Study of
• USENIX Security '19 - IODINE: Verifying Constant-Time Execution of Hardware
• USENIX Security '19 - JEDI: Many-to-Many End-to-End Encryption and Key Delegation for IoT
• USENIX Security '19 - KEPLER: Facilitating Control-flow Hijacking Primitive Evaluation for Linux
• USENIX Security '19 - Leaky Images: Targeted Privacy Attacks in the Web
• USENIX Security '19 - Less is More: Quantifying the Security Benefits of Debloating Web Applications
• USENIX Security '19 - Lessons Learned About Building Secure Software: It's About the Developers!
• USENIX Security '19 - Lessons Learned from Evaluating the Robustness of Defenses to
• USENIX Security '19 - Looking from the Mirror: Evaluating IoT Device Security through
• USENIX Security '19 - Losing the Car Keys: Wireless PHY-Layer Insecurity in EV Charging
• USENIX Security '19 - Misleading Authorship Attribution of Source Code using Adversarial Learning
• USENIX Security '19 - Mobile Private Contact Discovery at Scale
• USENIX Security '19 - Mobile Private Contact Discovery at Scale
• USENIX Security '19 - MOPT: Optimized Mutation Scheduling for Fuzzers
• USENIX Security '19 - No Right to Remain Silent: Isolating Malicious Mixes
• USENIX Security '19 - Not Everything is Dark and Gloomy: Power Grid Protections Against IoT
• USENIX Security '19 - On (The Lack Of) Location Privacy in Crowdsourcing Applications
• USENIX Security '19 - Origin-sensitive Control Flow Integrity
• USENIX Security '19 - PAC it up: Towards Pointer Integrity using ARM Pointer Authentication
• USENIX Security '19 - PeX: A Permission Check Analysis Framework for Linux Kernel
• USENIX Security '19 - Platforms in Everything: Analyzing Ground-Truth Data on the Anatomy and
• USENIX Security '19 - Please Pay Inside: Evaluating Bluetooth-based Detection of Gas Pump Skimmers
• USENIX Security '19 - Point Break: A Study of Bandwidth Denial-of-Service Attacks against Tor
• USENIX Security '19 - PolicyLint: Investigating Internal Privacy Policy Contradictions on Google
• USENIX Security '19 - Probability Model Transforming Encoders Against Encoding Attacks
• USENIX Security '19 - Probability Model Transforming Encoders Against Encoding Attacks
• USENIX Security '19 - Protecting accounts from credential stuffing with password breach alerting
• USENIX Security '19 - Protecting Cloud Virtual Machines from Hypervisor and Host Operating
• USENIX Security '19 - Pythia: Remote Oracles for the Masses
• USENIX Security '19 - RAZOR: A Framework for Post-deployment Software Debloating
• USENIX Security '19 - Reading the Tea leaves: A Comparative Analysis of Threat Intelligence
• USENIX Security '19 - Rendered Private: Making GLSL Execution Uniform to Prevent WebGL-based
• USENIX Security '19 - Rendered Private: Making GLSL Execution Uniform to Prevent WebGL-based
• USENIX Security '19 - Robust Website Fingerprinting Through the Cache Occupancy Channel
• USENIX Security '19 - RVFuzzer: Finding Input Validation Bugs in Robotic Vehicles through
• USENIX Security '19 - SafeHidden: An Efficient and Secure Information Hiding Technique Using
• USENIX Security '19 - Scalable Scanning and Automatic Classification of TLS Padding Oracle
• USENIX Security '19 - ScatterCache: Thwarting Cache Attacks via Cache Set Randomization
• USENIX Security '19 - Secure Multi-User Content Sharing for Augmented Reality Applications
• USENIX Security '19 - Security Educational Panel
• USENIX Security '19 - Security Research and Public Policy
• USENIX Security '19 - Seeing is Not Believing: Camouflage Attacks on Image Scaling Algorithms
• USENIX Security '19 - Shining Light on Internet-based Crimes Against Children
• USENIX Security '19 - Shining Light on Internet-based Crimes Against Children
• USENIX Security '19 - simTPM: User-centric TPM for Mobile Devices
• USENIX Security '19 - Site Isolation: Process Separation for Web Sites within the Browser
• USENIX Security '19 - Small World with High Risks: A Study of Security Threats in the npm Ecosystem
• USENIX Security '19 - SPOILER: Speculative Load Hazards Boost Rowhammer and Cache Attacks
• USENIX Security '19 - Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards
• USENIX Security '19 - StrongChain: Transparent and Collaborative Proof-of-Work Consensus
• USENIX Security '19 - Tackling the Trust and Safety Crisis
• USENIX Security '19 - Terminal Brain Damage: Exposing the Graceless Degradation in Deep
• USENIX Security '19 - TESSERACT: Eliminating Experimental Bias in Malware Classification
• USENIX Security '19 - The Anatomy of a Cryptocurrency Pump-and-Dump Scheme
• USENIX Security '19 - The Art of The Scam: Demystifying Honeypots in Ethereum Smart Contracts
• USENIX Security '19 - The Betrayal At Cloud City: An Empirical Analysis Of Cloud-Based Mobile
• USENIX Security '19 - The CrossPath Attack: Disrupting the SDN Control Channel via Shared Links
• USENIX Security '19 - The KNOB is Broken: Exploiting Low Entropy in the Encryption Key
• USENIX Security '19 - The Secret Sharer: Evaluating and Testing Unintended Memorization in
• USENIX Security '19 - The Spies Hacking our Phones are Going Dark, and We're All in Trouble
• USENIX Security '19 - The Web's Identity Crisis: Understanding the Effectiveness of Website Identity
• USENIX Security '19 - Towards the Detection of Inconsistencies in Public Security
• USENIX Security '19 - Tracing Transactions Across Cryptocurrency Ledgers
• USENIX Security '19 - Understanding and Improving Security and Privacy in Multi-User
• USENIX Security '19 - Understanding and Securing Device Vulnerabilities through
• USENIX Security '19 - Understanding iOS-based Crowdturfing Through Hidden UI Analysis
• USENIX Security '19 - Users Really Do Answer Telephone Scams
• USENIX Security '19 - Utility-Optimized Local Differential Privacy Mechanisms for
• USENIX Security '19 - UWB-ED: Distance Enlargement Attack Detection in Ultra-Wideband
• USENIX Security '19 - uXOM: Efficient eXecute-Only Memory on ARM Cortex-M
• USENIX Security '19 - VRASED: A Verified Hardware/Software Co-Design for Remote Attestation
• USENIX Security '19 - WAVE: A Decentralized Authorization Framework with Transitive Delegation
• USENIX Security '19 - WAVE: A Decentralized Authorization Framework with Transitive Delegation
• USENIX Security '19 - What Are You Searching For? A Remote Keylogging Attack
• USENIX Security '19 - When the Signal is in the Noise: Exploiting Diffix's Sticky Noise
• USENIX Security '19 - Why Do Adversarial Attacks Transfer? Explaining Transferability of
• USENIX Security '19 - Wireless Attacks on Aircraft Instrument Landing Systems
• USENIX Security '19 - XONN: XNOR-based Oblivious Deep Neural Network Inference
• USENIX Security '19 - “Johnny, you are fired!” – Spoofing OpenPGP and S/MIME Signatures in Emails
• USENIX Security '20 - ""I am uncomfortable sharing what I can't see"": Privacy Concerns
• USENIX Security '20 - 'I have too much respect for my elders': Understanding South African Mobile
• USENIX Security '20 - (Mostly) Exitless VM Protection from Untrusted Hypervisor through Disaggregate
• USENIX Security '20 - A Comprehensive Quality Evaluation of Security and Privacy Advice on the Web
• USENIX Security '20 - A different cup of TI? The added value of commercial threat intelligence
• USENIX Security '20 - A Formal Analysis of IEEE 802.11's WPA2: Countering the Kracks Caused by...
• USENIX Security '20 - A Longitudinal and Comprehensive Study of the DANE Ecosystem in Email
• USENIX Security '20 - A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis
• USENIX Security '20 - A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis
• USENIX Security '20 - A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking...
• USENIX Security '20 - Achieving Keyless CDNs with Conclaves
• USENIX Security '20 - Actions Speak Louder than Words: Entity-Sensitive Privacy Policy and Data Flow
• USENIX Security '20 - Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks
• USENIX Security '20 - Agamotto: Accelerating Kernel Driver Fuzzing with Lightweight Virtual Machine
• USENIX Security '20 - An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses
• USENIX Security '20 - An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses
• USENIX Security '20 - An Observational Investigation of Reverse Engineers’ Processes
• USENIX Security '20 - An Observational Investigation of Reverse Engineers’ Processes
• USENIX Security '20 - An Off-Chip Attack on Hardware Enclaves via the Memory Bus
• USENIX Security '20 - Analysis of DTLS Implementations Using Protocol State Fuzzing
• USENIX Security '20 - APEX: A Verified Architecture for Proofs of Execution on Remote Devices...
• USENIX Security '20 - AURORA: Statistical Crash Analysis for Automated Root Cause Explanation
• USENIX Security '20 - Automatic Hot Patch Generation for Android Kernels
• USENIX Security '20 - Automatic Techniques to Systematically Discover New Heap Exploitation
• USENIX Security '20 - Automating the Development of Chosen Ciphertext Attacks
• USENIX Security '20 - Automating the Development of Chosen Ciphertext Attacks
• USENIX Security '20 - BesFS: A POSIX Filesystem for Enclaves with a Mechanized Safety Proof
• USENIX Security '20 - Big Numbers - Big Troubles: Systematically Analyzing Nonce Leakage in (EC)DSA
• USENIX Security '20 - Big Numbers - Big Troubles: Systematically Analyzing Nonce Leakage in (EC)DSA
• USENIX Security '20 - BigMAC: Fine-Grained Policy Analysis of Android Firmware
• USENIX Security '20 - BlockSci: Design and applications of a blockchain analysis platform
• USENIX Security '20 - Boxer: Preventing fraud by scanning credit cards
• USENIX Security '20 - Breaking Secure Pairing of Bluetooth Low Energy Using Downgrade Attacks
• USENIX Security '20 - BScout: Direct Whole Patch Presence Test for Java Executables
• USENIX Security '20 - Cache Telepathy: Leveraging Shared Resource Attacks to Learn DNN Architectures
• USENIX Security '20 - Cached and Confused: Web Cache Deception in the Wild
• USENIX Security '20 - Call Me Maybe: Eavesdropping Encrypted LTE Calls With ReVoLTE
• USENIX Security '20 - Cardpliance: PCI DSS Compliance of Android Applications
• USENIX Security '20 - Certified Side Channels
• USENIX Security '20 - Chaperone: Real-time Locking and Loss Prevention for Smartphones
• USENIX Security '20 - Civet: An Efficient Java Partitioning Framework for Hardware Enclaves
• USENIX Security '20 - Composition Kills: A Case Study of Email Sender Authentication
• USENIX Security '20 - CopyCat: Controlled Instruction-Level Attacks on Enclaves
• USENIX Security '20 - COUNTERFOIL: Verifying Provenance of Integrated Circuits using Intrinsic
• USENIX Security '20 - Data Recovery from “Scrubbed” NAND Flash Storage: Need for Analog Sanitization
• USENIX Security '20 - Datalog Disassembly
• USENIX Security '20 - DatashareNetwork: A Decentralized Privacy-Preserving Search Engine
• USENIX Security '20 - DECAF: Automatic, Adaptive De-bloating and Hardening of COTS Firmware
• USENIX Security '20 - DeepHammer: Depleting the Intelligence of Deep Neural Networks through Target
• USENIX Security '20 - DELF: Safeguarding deletion correctness in Online Social Networks
• USENIX Security '20 - Delphi: A Cryptographic Inference Service for Neural Networks
• USENIX Security '20 - Detecting Stuffing of a User’s Credentials at Her Own Accounts
• USENIX Security '20 - Devil’s Whisper: A General Approach for Physical Adversarial Attacks
• USENIX Security '20 - Differentially-Private Control-Flow Node Coverage for Software Usage Analysis
• USENIX Security '20 - Donky: Domain Keys – Efficient In-Process Isolation for RISC-V and x86
• USENIX Security '20 - Drift with Devil: Security of Multi-Sensor Fusion based Localization...
• USENIX Security '20 - Droplet: Decentralized Authorization and Access Control for Encrypted Data
• USENIX Security '20 - EcoFuzz: Adaptive Energy-Saving Greybox Fuzzing as a Variant
• USENIX Security '20 - EcoFuzz: Adaptive Energy-Saving Greybox Fuzzing as a Variant
• USENIX Security '20 - Empirical Measurement of Systemic 2FA Usability
• USENIX Security '20 - EPIC: Every Packet Is Checked in the Data Plane of a Path-Aware Internet
• USENIX Security '20 - Estonian Electronic Identity Card: Security Flaws in Key Management
• USENIX Security '20 - ETHBMC: A Bounded Model Checker for Smart Contracts
• USENIX Security '20 - Everything Old is New Again: Binary Security of WebAssembly
• USENIX Security '20 - Exploring Connections Between Active Learning and Model Extraction
• USENIX Security '20 - FANS: Fuzzing Android Native System Services via Automated Interface Analysis
• USENIX Security '20 - Fawkes: Protecting Privacy against Unauthorized Deep Learning Models
• USENIX Security '20 - FIRMSCOPE: Automatic Uncovering of Privilege-Escalation Vulnerabilities
• USENIX Security '20 - FIRMSCOPE: Automatic Uncovering of Privilege-Escalation Vulnerabilities
• USENIX Security '20 - Frankenstein: Advanced Wireless Fuzzing to Exploit New Bluetooth Escalation...
• USENIX Security '20 - From Control Model to Program: Investigating Robotic Aerial Vehicle Accidents
• USENIX Security '20 - From Needs to Actions to Secure Apps? The Effect of Requirements...
• USENIX Security '20 - FuzzGen: Automatic Fuzzer Generation
• USENIX Security '20 - FuzzGuard: Filtering out Unreachable Inputs in Directed Grey-box Fuzzing
• USENIX Security '20 - Fuzzing Error Handling Code using Context-Sensitive Software Fault Injection
• USENIX Security '20 - Fuzzing Error Handling Code using Context-Sensitive Software Fault Injection
• USENIX Security '20 - GREYONE: Data Flow Sensitive Fuzzing
• USENIX Security '20 - Hall Spoofing: A Non-Invasive DoS Attack on Grid-Tied Solar Inverter
• USENIX Security '20 - HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation
• USENIX Security '20 - High Accuracy and High Fidelity Extraction of Neural Networks
• USENIX Security '20 - Horizontal Privilege Escalation in Trusted Applications
• USENIX Security '20 - Human Distinguishable Visual Key Fingerprints
• USENIX Security '20 - HybCache: Hybrid Side-Channel-Resilient Caches for Trusted Execution...
• USENIX Security '20 - Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited
• USENIX Security '20 - Interpretable Deep Learning under Fire
• USENIX Security '20 - iOS, Your OS, Everybody's OS: Vetting and Analyzing Network Services of iOS
• USENIX Security '20 - iOS, Your OS, Everybody's OS: Vetting and Analyzing Network Services of iOS
• USENIX Security '20 - Justinian's GAAvernor: Robust Distributed Learning with Gradient Aggregation
• USENIX Security '20 - KOOBE: Towards Facilitating Exploit Generation of Kernel Out-Of-Bounds Write
• USENIX Security '20 - Light Commands: Laser-Based Audio Injection Attacks on Voice-Controllable
• USENIX Security '20 - Liveness is Not Enough: Enhancing Fingerprint Authentication with Behavioral
• USENIX Security '20 - Liveness is Not Enough: Enhancing Fingerprint Authentication with Behavioral
• USENIX Security '20 - Local Model Poisoning Attacks to Byzantine-Robust Federated Learning
• USENIX Security '20 - McTiny: Fast High-Confidence Post-Quantum Key Erasure for Tiny Network Servers
• USENIX Security '20 - Measuring and Modeling the Label Dynamics of Online Anti-Malware Engines
• USENIX Security '20 - Measuring and Modeling the Label Dynamics of Online Anti-Malware Engines
• USENIX Security '20 - Medusa: Microarchitectural Data Leakage via Automated Attack Synthesis
• USENIX Security '20 - MIRAGE: Succinct Arguments for Randomized Algorithms with Applications
• USENIX Security '20 - MIRAGE: Succinct Arguments for Randomized Algorithms with Applications
• USENIX Security '20 - Montage: A Neural Network Language Model-Guided JavaScript Engine Fuzzer
• USENIX Security '20 - MUZZ: Thread-aware Grey-box Fuzzing for Effective Bug Hunting in Multithreaded
• USENIX Security '20 - MVP: Detecting Vulnerabilities using Patch-Enhanced Vulnerability Signatures
• USENIX Security '20 - NXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities
• USENIX Security '20 - On Training Robust PDF Malware Classifiers
• USENIX Security '20 - P2IM: Scalable and Hardware-independent Firmware Testing via Automatic
• USENIX Security '20 - Pancake: Frequency Smoothing for Encrypted Data Stores
• USENIX Security '20 - Panel: Digital Contact Tracing
• USENIX Security '20 - ParmeSan: Sanitizer-guided Greybox Fuzzing
• USENIX Security '20 - PARTEMU: Enabling Dynamic Analysis of Real-World TrustZone Software...
• USENIX Security '20 - PCKV: Locally Differentially Private Correlated Key-Value Data Collection
• USENIX Security '20 - PhishTime: Continuous Longitudinal Measurement of the Effectiveness...
• USENIX Security '20 - PHMon: A Programmable Hardware Monitor and Its Security Use Cases
• USENIX Security '20 - Pixel: Multi-signatures for Consensus
• USENIX Security '20 - PKU Pitfalls: Attacks on PKU-based Memory Isolation Systems
• USENIX Security '20 - Plug-N-Pwned: Comprehensive Vulnerability Analysis of OBD-II Dongles...
• USENIX Security '20 - Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS...
• USENIX Security '20 - Preech: A System for Privacy-Preserving Speech Transcription
• USENIX Security '20 - Programmable In-Network Security for Context-aware BYOD Policies
• USENIX Security '20 - RELOAD+REFRESH: Abusing Cache Replacement Policies to Perform Stealthy Cache
• USENIX Security '20 - Remote Side-Channel Attacks on Anonymous Transactions
• USENIX Security '20 - Retrofitting Fine Grain Isolation in the Firefox Renderer
• USENIX Security '20 - SANNS: Scaling Up Secure Approximate k-Nearest Neighbors Search
• USENIX Security '20 - SAVIOR: Securing Autonomous Vehicles with Robust Physical Invariants
• USENIX Security '20 - Scaling Verifiable Computation Using Efficient Set Accumulators
• USENIX Security '20 - SEAL: Attack Mitigation for Encrypted Databases via Adjustable Leakage
• USENIX Security '20 - SEAL: Attack Mitigation for Encrypted Databases via Adjustable Leakage
• USENIX Security '20 - Secure Multi-party Computation of Differentially Private Median
• USENIX Security '20 - Secure parallel computation on national scale volumes of data
• USENIX Security '20 - Security Analysis of Unified Payments Interface and Payment Apps in India
• USENIX Security '20 - See No Evil: Phishing for Permissions with False Transparency
• USENIX Security '20 - SENG, the SGX-Enforcing Network Gateway: Authorizing Communication...
• USENIX Security '20 - SHA-1 is a Shambles: First Chosen-Prefix Collision on SHA-1 and Application
• USENIX Security '20 - ShadowMove: A Stealthy Lateral Movement Strategy
• USENIX Security '20 - Shattered Chain of Trust: Understanding Security Risks in Cross-Cloud IoT
• USENIX Security '20 - Silhouette: Efficient Protected Shadow Stacks for Embedded Systems
• USENIX Security '20 - SkillExplorer: Understanding the Behavior of Skills in Large Scale
• USENIX Security '20 - SmartVerif: Push the Limit of Automation Capability of Verifying Security...
• USENIX Security '20 - SpecFuzz: Bringing Spectre-type vulnerabilities to the surface
• USENIX Security '20 - Stealthy Tracking of Autonomous Vehicles with Cache Side Channels
• USENIX Security '20 - Stolen Memories: Leveraging Model Memorization for Calibrated White-Box
• USENIX Security '20 - Sunrise to Sunset: Analyzing the End-to-end Life Cycle and Effectiveness...
• USENIX Security '20 - Symbolic execution with SymCC: Don't interpret, compile!
• USENIX Security '20 - Sys: A Static/Symbolic Tool for Finding Good Bugs in Good (Browser) Code
• USENIX Security '20 - TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities...
• USENIX Security '20 - Temporal System Call Specialization for Attack Surface Reduction
• USENIX Security '20 - TextShield: Robust Text Classification Based on Multimodal Embedding
• USENIX Security '20 - That Was Then, This Is Now: A Security Evaluation of Password Generation
• USENIX Security '20 - The Ballot is Busted Before the Blockchain: A Security Analysis of Voatz
• USENIX Security '20 - The Impact of Ad-Blockers on Product Search and Purchase Behavior
• USENIX Security '20 - The Industrial Age of Hacking
• USENIX Security '20 - The Tools and Tactics Used in Intimate Partner Surveillance: An Analysis
• USENIX Security '20 - The Unpatchable Silicon: A Full Break of the Bitstream Encryption of Xilinx
• USENIX Security '20 - Timeless Timing Attacks: Exploiting Concurrency to Leak Secrets over Remote
• USENIX Security '20 - Towards HTTPS Everywhere on Android: We Are Not There Yet
• USENIX Security '20 - Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box
• USENIX Security '20 - TPM-FAIL: TPM meets Timing and Lattice Attacks
• USENIX Security '20 - TXSPECTOR: Uncovering Attacks in Ethereum from Transactions
• USENIX Security '20 - Understanding security mistakes developers make: Qualitative analysis...
• USENIX Security '20 - Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning
• USENIX Security '20 - USBFuzz: A Framework for Fuzzing USB Drivers by Device Emulation
• USENIX Security '20 - V0LTpwn: Attacking x86 Processor Integrity from Software
• USENIX Security '20 - Visor: Privacy-Preserving Video Analytics as a Cloud Service
• USENIX Security '20 - Void: A fast and light voice liveness detection system
• USENIX Security '20 - VoteAgain: A scalable coercion-resistant voting system
• USENIX Security '20 - Walking Onions: Scaling Anonymity Networks while Protecting Users
• USENIX Security '20 - What Twitter Knows: Characterizing Ad Targeting Practices, User Perceptions...
• USENIX Security '20 - Who's Calling? Characterizing Robocalls through Audio and Metadata Analysis
• USENIX Security '20 - You Are What You Broadcast: Identification of Mobile and IoT Devices...
• USENIX Security '20 - Zero-delay Lightweight Defenses against Website Fingerprinting
• USENIX Security '20- Shim Shimmeny: Evaluating the Security & Privacy Contributions of Link Shimming
• USENIX Security '21 - Stars Can Tell: A Robust Method to Defend against GPS Spoofing Attacks
• USENIX Security '21 - "It's Stored, Hopefully, on an Encrypted Server'': Mitigating Users'...
• USENIX Security '21 - "It's stressful having all these phones": Investigating Sex Workers' Safety...
• USENIX Security '21 - "It's the Company, the Government, You and I": User Perceptions of...
• USENIX Security '21 - "Now I'm a bit angry:" Individuals' Awareness, Perception, and Responses...
• USENIX Security '21 - "Shhh...be quiet!" Reducing the Unwanted Interruptions of Notification...
• USENIX Security '21 - "Why wouldn't someone think of democracy as a target?"...
• USENIX Security '21 - 'Passwords Keep Me Safe' – Understanding What Children Think about Passwords
• USENIX Security '21 - A Highly Accurate Query-Recovery Attack against Searchable Encryption...
• USENIX Security '21 - A Large Scale Study of User Behavior, Expectations and Engagement with...
• USENIX Security '21 - A Large-Scale Interview Study on Information Security in and Attacks...
• USENIX Security '21 - A Side Journey To Titan
• USENIX Security '21 - A Stealthy Location Identification Attack Exploiting Carrier Aggregation
• USENIX Security '21 - A11y and Privacy don't have to be mutually exclusive: Constraining
• USENIX Security '21 - Abusing Hidden Properties to Attack the Node.js Ecosystem
• USENIX Security '21 - ABY2.0: Improved Mixed-Protocol Secure Two-Party Computation
• USENIX Security '21 - Accurately Measuring Global Risk of Amplification Attacks using AmpMap
• USENIX Security '21 - Acoustics to the Rescue: Physical Key Inference Attack Revisited
• USENIX Security '21 - Adapting Security Warnings to Counter Online Disinformation
• USENIX Security '21 - AdCube: WebVR Ad Fraud and Practical Confinement of Third-Party Ads
• USENIX Security '21 - Adversarial Policy Training against Deep Reinforcement Learning
• USENIX Security '21 - ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks
• USENIX Security '21 - An Analysis of Speculative Type Confusion Vulnerabilities in the Wild
• USENIX Security '21 - An Investigation of the Android Kernel Patch Ecosystem
• USENIX Security '21 - Android SmartTVs Vulnerability Discovery via Log-Guided Fuzzing
• USENIX Security '21 - APICraft: Fuzz Driver Generation for Closed-source SDK Libraries
• USENIX Security '21 - ARCUS: Symbolic Root Cause Analysis of Exploits in Production Systems
• USENIX Security '21 - Are Privacy Dashboards Good for End Users? Evaluating User Perceptions...
• USENIX Security '21 - Assessing Browser-level Defense against IDN-based Phishing
• USENIX Security '21 - ATLAS: A Sequence-based Learning Approach for Attack Investigation
• USENIX Security '21 - Automated Discovery of Denial-of-Service Vulnerabilities in Connected Vehicle
• USENIX Security '21 - Automatic Extraction of Secrets from the Transistor Jungle using...
• USENIX Security '21 - Automatic Firmware Emulation through Invalidity-guided Knowledge Inference
• USENIX Security '21 - Automatic Policy Generation for Inter-Service Access Control of Microservices
• USENIX Security '21 - Balboa: Bobbing and Weaving around Network Censorship
• USENIX Security '21 - Blind Backdoors in Deep Learning Models
• USENIX Security '21 - Blind In/On-Path Attacks and Applications to VPNs
• USENIX Security '21 - Blinder: Partition-Oblivious Hierarchical Scheduling
• USENIX Security '21 - Blitz: Secure Multi-Hop Payments Without Two-Phase Commits
• USENIX Security '21 - Breaking Through Binaries: Compiler-quality Instrumentation for Better
• USENIX Security '21 - CACTI: Captcha Avoidance via Client-side TEE Integration
• USENIX Security '21 - CADE: Detecting and Explaining Concept Drift Samples for Security Applications
• USENIX Security '21 - Can I Take Your Subdomain? Exploring Same-Site Attacks in the Modern Web
• USENIX Security '21 - Can Systems Explain Permissions Better? Understanding Users' Misperceptions...
• USENIX Security '21 - CANARY - a reactive defense mechanism for Controller Area Networks based
• USENIX Security '21 - Capture: Centralized Library Management for Heterogeneous IoT Devices
• USENIX Security '21 - Card Brand Mixup Attack: Bypassing the PIN in non-Visa Cards by Using Them...
• USENIX Security '21 - Catching Phishers By Their Bait: Investigating the Dutch Phishing Landscape
• USENIX Security '21 - Causal Analysis for Software-Defined Networking Attacks
• USENIX Security '21 - Cerebro: A Platform for Multi-Party Cryptographic Collaborative Learning
• USENIX Security '21 - Charger-Surfing: Exploiting a Power Line Side-Channel for Smartphone...
• USENIX Security '21 - CIPHERLEAKS: Breaking Constant-time Cryptography on AMD SEV via...
• USENIX Security '21 - CLARION: Sound and Clear Provenance Tracking for Microservice Deployments
• USENIX Security '21 - Coco: Co-Design and Co-Verification of Masked Software Implementations on CPUs
• USENIX Security '21 - Collective Information Security in Large-Scale Urban Protests
• USENIX Security '21 - Communication–Computation Trade-offs in PIR
• USENIX Security '21 - Compromised or Attacker-Owned: A Large Scale Classification and Study
• USENIX Security '21 - Constraint-guided Directed Greybox Fuzzing
• USENIX Security '21 - Cost-Aware Robust Tree Ensembles for Security Applications
• USENIX Security '21 - Cross-VM and Cross-Processor Covert Channels Exploiting Processor Idle...
• USENIX Security '21 - CSProp: Ciphertext and Signature Propagation Low-Overhead Public-Key...
• USENIX Security '21 - CURE: A Security Architecture with CUstomizable and Resilient Enclaves
• USENIX Security '21 - Data Poisoning Attacks to Local Differential Privacy Protocols
• USENIX Security '21 - Database Reconstruction from Noisy Volumes: A Cache Side-Channel Attack...
• USENIX Security '21 - Deep Entity Classification: Abusive Account Detection for Online Social
• USENIX Security '21 - Deep-Dup: An Adversarial Weight Duplication Attack Framework to Crush Deep
• USENIX Security '21 - DeepReflect: Discovering Malicious Functionality through Binary Reconstruction
• USENIX Security '21 - Defeating DNN-Based Traffic Analysis Systems in Real-Time With Blind
• USENIX Security '21 - DEFInit: An Analysis of Exposed Android Init Routines
• USENIX Security '21 - Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor
• USENIX Security '21 - Detecting Kernel Refcount Bugs with Two-Dimensional Consistency Checking
• USENIX Security '21 - DICE*: A Formally Verified Implementation of DICE Measured Boot
• USENIX Security '21 - Dirty Road Can Attack: Security of Deep Learning based Automated Lane
• USENIX Security '21 - Disrupting Continuity of Apple's Wireless Ecosystem Security: New Tracking
• USENIX Security '21 - Does logic locking work with EDA tools?
• USENIX Security '21 - DOLMA: Securing Speculation with the Principle of Transient Non-Observability
• USENIX Security '21 - Domain Shadowing: Leveraging Content Delivery Networks for Robust Blocking
• USENIX Security '21 - Dompteur: Taming Audio Adversarial Examples
• USENIX Security '21 - Double-Cross Attacks: Subverting Active Learning Systems
• USENIX Security '21 - Driving 2FA Adoption at Scale: Optimizing Two-Factor Authentication...
• USENIX Security '21 - DRMI: A Dataset Reduction Technology based on Mutual Information for Black-box
• USENIX Security '21 - Dynamic proofs of retrievability with low server storage
• USENIX Security '21 - Effect of Mood, Location, Trust, and Presence of Others on Video-Based...
• USENIX Security '21 - Effective Notification Campaigns on the Web: A Matter of Trust, Framing, and
• USENIX Security '21 - ELISE: A Storage Efficient Logging System Powered by Redundancy Reduction
• USENIX Security '21 - Entangled Watermarks as a Defense against Model Extraction
• USENIX Security '21 - EOSAFE: Security Analysis of EOSIO Smart Contracts
• USENIX Security '21 - Evaluating In-Workflow Messages for Improving Mental Models of End-to-End...
• USENIX Security '21 - Evil Under the Sun: Understanding and Discovering Attacks on Ethereum...
• USENIX Security '21 - EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts
• USENIX Security '21 - Examining the Efficacy of Decoy-based and Psychological Cyber Deception
• USENIX Security '21 - Experiences Deploying Multi-Vantage-Point Domain Validation at Let's Encrypt
• USENIX Security '21 - Explanation Beats Context: The Effect of Timing & Rationales on Users'...
• USENIX Security '21 - Explanation-Guided Backdoor Poisoning Attacks Against Malware Classifiers
• USENIX Security '21 - Exposing New Vulnerabilities of Error Handling Mechanism in CAN
• USENIX Security '21 - ExpRace: Exploiting Kernel Races through Raising Interrupts
• USENIX Security '21 - Express: Lowering the Cost of Metadata-hiding Communication with Cryptographic
• USENIX Security '21 - Extracting Training Data from Large Language Models
• USENIX Security '21 - Fantastic Four: Honest-Majority Four-Party Secure Computation With Malicious
• USENIX Security '21 - Finding Bugs Using Your Own Code: Detecting Functionally-similar yet
• USENIX Security '21 - Fine Grained Dataflow Tracking with Proximal Gradients
• USENIX Security '21 - Fingerprinting in Style: Detecting Browser Extensions via Injected Style
• USENIX Security '21 - FlowDist: Multi-Staged Refinement-Based Dynamic Information Flow Analysis for
• USENIX Security '21 - Forecasting Malware Capabilities From Cyber Attack Memory Images
• USENIX Security '21 - Formally Verified Memory Protection for a Commodity Multiprocessor Hypervisor
• USENIX Security '21 - Fragment and Forge: Breaking Wi-Fi Through Frame Aggregation and Fragmentation
• USENIX Security '21 - Frontal Attack: Leaking Control-Flow in SGX via the CPU Frontend
• USENIX Security '21 - Frontrunner Jones and the Raiders of the Dark Forest: An Empirical Study...
• USENIX Security '21 - Fuzzy Labeled Private Set Intersection with Applications to Private...
• USENIX Security '21 - GForce: GPU-Friendly Oblivious and Rapid Neural Network Inference
• USENIX Security '21 - Graph Backdoor
• USENIX Security '21 - Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service
• USENIX Security '21 - HAWatcher: Semantics-Aware Anomaly Detection for Appified Smart Homes
• USENIX Security '21 - Helping Users Automatically Find and Manage Sensitive, Expendable Files...
• USENIX Security '21 - Hermes Attack: Steal DNN Models with Lossless Inference Accuracy
• USENIX Security '21 - Hiding the Access Pattern is Not Enough: Exploiting Search Pattern Leakage...
• USENIX Security '21 - Hopper: Modeling and Detecting Lateral Movement
• USENIX Security '21 - How Great is the Great Firewall? Measuring China's DNS Censorship
• USENIX Security '21 - How to Make Private Distributed Cardinality Estimation Practical...
• USENIX Security '21 - I Always Feel Like Somebody's Sensing Me! A Framework to Detect, Identify, and
• USENIX Security '21 - ICSFuzz: Manipulating I/Os and Repurposing Binary Code to Enable Instrumented
• USENIX Security '21 - Identifying Harmful Media in End-to-End Encrypted Communication...
• USENIX Security '21 - Incrementally Updateable Honey Password Vaults
• USENIX Security '21 - Inexpensive Brainwave Authentication: New Techniques and Insights...
• USENIX Security '21 - Injection Attacks Reloaded: Tunnelling Malicious Payloads over DNS
• USENIX Security '21 - Is Real-time Phishing Eliminated with FIDO? Social Engineering Downgrade
• USENIX Security '21 - Jaqen: A High-Performance Switch-Native Approach for Detecting and Mitigating
• USENIX Security '21 - JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative
• USENIX Security '21 - Jetset: Targeted Firmware Rehosting for Embedded Systems
• USENIX Security '21 - Kalεido: Real-Time Privacy Control for Eye-Tracking Systems
• USENIX Security '21 - KeyForge: Non-Attributable Email from Forward-Forgeable Signatures
• USENIX Security '21 - Leakage of Dataset Properties in Multi-Party Machine Learning
• USENIX Security '21 - LIGHTBLUE: Automatic Profile-Aware Debloating of Bluetooth Stacks
• USENIX Security '21 - Locally Differentially Private Analysis of Graph Statistics
• USENIX Security '21 - Lord of the Ring(s): Side Channel Attacks on the CPU On-Chip Ring...
• USENIX Security '21 - LZR: Identifying Unexpected Internet Services
• USENIX Security '21 - M2MON: Building an MMIO-based Security Reference Monitor for Unmanned Vehicles
• USENIX Security '21 - MAZE: Towards Automated Heap Feng Shui
• USENIX Security '21 - MBA-Blast: Unveiling and Simplifying Mixed Boolean-Arithmetic Obfuscation
• USENIX Security '21 - Messy States of Wiring: Vulnerabilities in Emerging Personal Payment Systems
• USENIX Security '21 - mID: Tracing Screen Photos via Moiré Patterns
• USENIX Security '21 - Mind Your Weight(s): A Large-scale Study on Insufficient Machine Learning
• USENIX Security '21 - Minerva– An Efficient Risk-Limiting Ballot Polling Audit
• USENIX Security '21 - MIRAGE: Mitigating Conflict-Based Cache Attacks with a Practical...
• USENIX Security '21 - MPInspector: A Systematic and Automatic Approach for Evaluating the Security
• USENIX Security '21 - Muse: Secure Inference Resilient to Malicious Clients
• USENIX Security '21 - Mystique: Efficient Conversions for Zero-Knowledge Proofs with Applications...
• USENIX Security '21 - Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types
• USENIX Security '21 - Obfuscation-Resilient Executable Payload Extraction From Packed Malware
• USENIX Security '21 - ObliCheck: Efficient Verification of Oblivious Algorithms with Unobservable
• USENIX Security '21 - On the Design and Misuse of Microcoded (Embedded) Processors—A Cautionary Note
• USENIX Security '21 - On the Routing-Aware Peering against Network-Eclipse Attacks in Bitcoin
• USENIX Security '21 - On the Usability of Authenticity Checks for Hardware Security Tokens
• USENIX Security '21 - Once is Never Enough: Foundations for Sound Statistical Inference in Tor
• USENIX Security '21 - Osiris: Automated Discovery of Microarchitectural Side Channels
• USENIX Security '21 - PACStack: an Authenticated Call Stack
• USENIX Security '21 - Partitioning Oracle Attacks
• USENIX Security '21 - PASAN: Detecting Peripheral Access Concurrency Bugs within Bare-Metal...
• USENIX Security '21 - PatchGuard: A Provably Robust Defense against Adversarial Patches via Small
• USENIX Security '21 - PEARL: Plausibly Deniable Flash Translation Layer using WOM coding
• USENIX Security '21 - People Count: Contact Tracing Apps and Public Health
• USENIX Security '21 - Phishpedia: A Hybrid Deep Learning Based Approach to Visually Identify
• USENIX Security '21 - PhishPrint: Evading Phishing Detection Crawlers by Prior Profiling
• USENIX Security '21 - Poisoning the Unlabeled Dataset of Semi-Supervised Learning
• USENIX Security '21 - PolyScope: Multi-Policy Access Control Analysis to Compute Authorized Attack
• USENIX Security '21 - Poseidon: A New Hash Function for Zero-Knowledge Proof Systems
• USENIX Security '21 - Precise and Scalable Detection of Use-after-Compacting-Garbage-Collection Bugs
• USENIX Security '21 - Pretty Good Phone Privacy
• USENIX Security '21 - Preventing Use-After-Free Attacks with Fast Forward Allocation
• USENIX Security '21 - Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses
• USENIX Security '21 - PriSEC: A Privacy Settings Enforcement Controller
• USENIX Security '21 - Privacy and Integrity Preserving Computations with CRISP
• USENIX Security '21 - Privacy-Preserving and Standard-Compatible AKA Protocol for 5G
• USENIX Security '21 - Private Blocklist Lookups with Checklist
• USENIX Security '21 - PrivateDrop: Practical Privacy-Preserving Authentication for Apple AirDrop
• USENIX Security '21 - PrivSyn: Differentially Private Data Synthesis
• USENIX Security '21 - Protecting Cryptography Against Compelled Self-Incrimination
• USENIX Security '21 - PTAuth: Temporal Memory Safety via Robust Points-to Authentication
• USENIX Security '21 - Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles...
• USENIX Security '21 - Rage Against the Machine Clear: A Systematic Analysis of Machine Clears...
• USENIX Security '21 - ReDMArk: Bypassing RDMA Security Mechanisms
• USENIX Security '21 - ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS
• USENIX Security '21 - Reducing Bias in Modeling Real-world Password Strength via Deep Learning...
• USENIX Security '21 - Reducing HSM Reliance in Payments through Proxy Re-Encryption
• USENIX Security '21 - Reducing Test Cases with Attention Mechanism of Neural Networks
• USENIX Security '21 - Research on the Security of Visual Reasoning CAPTCHA
• USENIX Security '21 - Ripple: A Programmable, Decentralized Link-Flooding Defense Against Adaptive
• USENIX Security '21 - Risky Business? Investigating the Security Practices of Vendors on an Online
• USENIX Security '21 - Rollercoaster: An Efficient Group-Multicast Scheme for Mix Networks
• USENIX Security '21 - SandTrap: Securing JavaScript-driven Trigger-Action Platforms
• USENIX Security '21 - Saphire: Sandboxing PHP Applications with Tailored System Call Allowlists
• USENIX Security '21 - Scalable Detection of Promotional Website Defacements in Black Hat SEO
• USENIX Security '21 - SEAL: Storage-efficient Causality Analysis on Enterprise Logs
• USENIX Security '21 - SEApp: Bringing Mandatory Access Control to Android Apps
• USENIX Security '21 - Searching Encrypted Data with Size-Locked Indexes
• USENIX Security '21 - Security Analysis of the Democracy Live Online Voting System
• USENIX Security '21 - Security Obstacles and Motivations for Small Businesses from a CISO's...
• USENIX Security '21 - SelectiveTaint: Efficient Data Flow Tracking With Static Binary Rewriting
• USENIX Security '21 - Senate: A Maliciously-Secure MPC Platform for Collaborative Analytics
• USENIX Security '21 - SHARD: Fine-Grained Kernel Specialization with Context-Aware Hardening
• USENIX Security '21 - Share First, Ask Later (or Never?) Studying Violations of GDPR's Explicit
• USENIX Security '21 - Sharing More and Checking Less: Leveraging Common Input Keywords to Detect...
• USENIX Security '21 - SiamHAN: IPv6 Address Correlation Attacks on TLS Encrypted Traffic
• USENIX Security '21 - SIGL: Securing Software Installations Through Deep Graph Learning
• USENIX Security '21 - SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial
• USENIX Security '21 - Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited
• USENIX Security '21 - SmarTest: Effectively Hunting Vulnerable Transaction Sequences in Smart...
• USENIX Security '21 - SMASH: Synchronized Many-sided Rowhammer Attacks from JavaScript
• USENIX Security '21 - SocialHEISTing: Understanding Stolen Facebook Accounts
• USENIX Security '21 - Static Detection of Unsafe DMA Accesses in Device Drivers
• USENIX Security '21 - Stealing Links from Graph Neural Networks
• USENIX Security '21 - Strategies and Perceived Risks of Sending Sensitive Documents
• USENIX Security '21 - SWIFT: Super-fast and Robust Privacy-Preserving Machine Learning
• USENIX Security '21 - Swiped: Analyzing Ground-truth Data of a Marketplace for Stolen Debit
• USENIX Security '21 - Swivel: Hardening WebAssembly against Spectre
• USENIX Security '21 - Systematic Evaluation of Privacy Risks of Machine Learning Models
• USENIX Security '21 - SyzVegas: Beating Kernel Fuzzing Odds with Reinforcement Learning
• USENIX Security '21 - T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based
• USENIX Security '21 - The Circle Of Life: A Large-Scale Study of The IoT Malware Lifecycle
• USENIX Security '21 - The Complexities of Healing in Secure Group Messaging: Why Cross-Group Effects
• USENIX Security '21 - The Hijackers Guide To The Galaxy: Off-Path Taking Over Internet Resources
• USENIX Security '21 - The Role of Computer Security Customer Support in Helping Survivors...
• USENIX Security '21 - The Use of Likely Invariants as Feedback for Fuzzers
• USENIX Security '21 - Token-Level Fuzzing
• USENIX Security '21 - Too Good to Be Safe: Tricking Lane Detection in Autonomous Driving with Craft
• USENIX Security '21 - Towards Formal Verification of State Continuity for Enclave Programs
• USENIX Security '21 - U Can't Debug This: Detecting JavaScript Anti-Debugging Techniques in the Wild
• USENIX Security '21 - Understanding and Detecting Disordered Error Handling with Precise Function
• USENIX Security '21 - Understanding Malicious Cross-library Data Harvesting on Android
• USENIX Security '21 - Undo Workarounds for Kernel Bugs
• USENIX Security '21 - UNIFUZZ: A Holistic and Pragmatic Metrics-Driven Platform for Evaluating
• USENIX Security '21 - Using Amnesia to Detect Credential Database Breaches
• USENIX Security '21 - V0Finder: Discovering the Correct Origin of Publicly Reported Software
• USENIX Security '21 - Virtual Secure Platform: A Five-Stage Pipeline Processor over TFHE
• USENIX Security '21 - VScape: Assessing and Escaping Virtual Call Protections
• USENIX Security '21 - WaveGuard: Understanding and Mitigating Audio Adversarial Examples
• USENIX Security '21 - Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender
• USENIX Security '21 - Weaponizing Middleboxes for TCP Reflected Amplification
• USENIX Security '21 - What's in a Name? Exploring CA Certificate Control
• USENIX Security '21 - When Malware Changed Its Mind: An Empirical Study of Variable Program Behavior
• USENIX Security '21 - Where's Crypto?: Automated Identification and Classification of Proprietary...
• USENIX Security '21 - Why Older Adults (Don't) Use Password Managers
• USENIX Security '21 - Why TLS is better without STARTTLS: A Security Analysis of STARTTLS
• USENIX Security '21 - YARIX: Scalable YARA-based Malware Intelligence
• USENIX Security '21 - You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion
• USENIX Security '21- Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security...
• USENIX Security '21-VoltPillager: Hardware-based fault injection attacks against Intel SGX Enclaves
• USENIX Security '22 - QCSD: A QUIC Client-Side Website-Fingerprinting Defence Framework
• USENIX Security '22 - ""Like Lesbians Walking the Perimeter"": Experiences of U.S. LGBTQ+ Folks...
• USENIX Security '22 - ""The Same PIN, Just Longer"": On the (In)Security of Upgrading PINs from 4 to
• USENIX Security '22 - "How Do You Not Lose Friends?": Synthesizing a Design Space of Social Controls
• USENIX Security '22 - "I feel invaded, annoyed, anxious and I may protect myself"...
• USENIX Security '22 - "OK, Siri" or "Hey, Google": Evaluating Voiceprint Distinctiveness via...
• USENIX Security '22 - "They Look at Vulnerability and Use That to Abuse You''
• USENIX Security '22 - 99% False Positives: A Qualitative Study of SOC Analysts' Perspectives
• USENIX Security '22 - A Hardware-Software Co-design for Efficient Intra-Enclave Isolation
• USENIX Security '22 - A Large-scale and Longitudinal Measurement Study of DKIM Deployment
• USENIX Security '22 - A Large-scale Investigation into Geodifferences in Mobile Apps
• USENIX Security '22 - A Large-scale Temporal Measurement of Android Malicious Apps...
• USENIX Security '22 - Aardvark: An Asynchronous Authenticated Dictionary with Applications to
• USENIX Security '22 - Adversarial Detection Avoidance Attacks: Evaluating the robustness
• USENIX Security '22 - ALASTOR: Reconstructing the Provenance of Serverless Intrusions
• USENIX Security '22 - AMD Prefetch Attacks through Power and Time
• USENIX Security '22 - AmpFuzz: Fuzzing for Amplification DDoS Vulnerabilities
• USENIX Security '22 - An Audit of Facebook's Political Ad Policy Enforcement
• USENIX Security '22 - An Experimental Study of GPS Spoofing and Takeover Attacks on UAVs
• USENIX Security '22 - Anycast Agility: Network Playbooks to Fight DDoS
• USENIX Security '22 - Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery...
• USENIX Security '22 - Are Your Sensitive Attributes Private? Novel Model Inversion Attribute
• USENIX Security '22 - Attacks on Deidentification's Defenses
• USENIX Security '22 - Augmenting Decompiler Output with Learned Variable Names and Types
• USENIX Security '22 - AutoDA: Automated Decision-based Iterative Adversarial Attacks
• USENIX Security '22 - Automated Detection of Automated Traffic
• USENIX Security '22 - Automated Side Channel Analysis of Media Software with Manifold Learning
• USENIX Security '22 - Automating Cookie Consent and GDPR Violation Detection
• USENIX Security '22 - Back-Propagating System Dependency Impact for Attack Investigation
• USENIX Security '22 - Backporting Security Patches of Web Applications: A Prototype Design
• USENIX Security '22 - Batched Differentially Private Information Retrieval
• USENIX Security '22 - Bedrock: Programmable Network Support for Secure RDMA Systems
• USENIX Security '22 - Behind the Tube: Exploitative Monetization of Content on YouTube
• USENIX Security '22 - Binoculars: Contention-Based Side-Channel Attacks Exploiting the Page Walker
• USENIX Security '22 - Birds of a Feather Flock Together: How Set Bias Helps to Deanonymize You
• USENIX Security '22 - Blacklight: Scalable Defense for Neural Networks against Query-Based Black-Box
• USENIX Security '22 - BrakTooth: Causing Havoc on Bluetooth Link Manager via Directed Fuzzing
• USENIX Security '22 - Branch History Injection: On the Effectiveness of Hardware Mitigations...
• USENIX Security '22 - Breaking Bridgefy, again: Adopting libsignal is not enough
• USENIX Security '22 - Building an Open, Robust, and Stable Voting-Based Domain Top List
• USENIX Security '22 - CamShield: Securing Smart Cameras through Physical Replication and Isolation
• USENIX Security '22 - Can one hear the shape of a neural network?: Snooping the GPU via Magnetic
• USENIX Security '22 - Caring about Sharing: User Perceptions of Multiparty Data Sharing
• USENIX Security '22 - CellIFT: Leveraging Cells for Scalable and Precise Dynamic Information Flow
• USENIX Security '22 - Characterizing the Security of Github CI Workflows
• USENIX Security '22 - Cheetah: Lean and Fast Secure Two-Party Deep Neural Network Inference
• USENIX Security '22 - Communication-Efficient Triangle Counting under Local Differential Privacy
• USENIX Security '22 - Composable Cachelets: Protecting Enclaves from Cache Side-Channel Attacks
• USENIX Security '22 - COMRace: Detecting Data Race Vulnerabilities in COM Objects
• USENIX Security '22 - Constant-weight PIR: Single-round Keyword PIR via Constant-weight Equality
• USENIX Security '22 - Counting in Regexes Considered Harmful: Exposing ReDoS Vulnerability of
• USENIX Security '22 - Creating a Secure Underlay for the Internet
• USENIX Security '22 - Debloating Address Sanitizer
• USENIX Security '22 - Decomperson: How Humans Decompile and What We Can Learn From It
• USENIX Security '22 - DeepDi: Learning a Relational Graph Convolutional Network Model on Instruction
• USENIX Security '22 - DeepPhish: Understanding User Trust Towards Artificially Generated Profiles...
• USENIX Security '22 - Detecting Logical Bugs of DBMS with Coverage-based Guidance
• USENIX Security '22 - DnD: A Cross-Architecture Deep Neural Network Decompiler
• USENIX Security '22 - DoLTEst: In-depth Downlink Negative Testing Framework for LTE Devices
• USENIX Security '22 - Don't Mesh Around: Side-Channel Attacks and Mitigations on Mesh Interconnects
• USENIX Security '22 - Dos and Don'ts of Machine Learning in Computer Security
• USENIX Security '22 - Double Trouble: Combined Heterogeneous Attacks on Non-Inclusive Cache
• USENIX Security '22 - DoubleStar: Long-Range Attack Towards Depth Estimation based Obstacle
• USENIX Security '22 - Drifuzz: Harvesting Bugs in Device Drivers from Golden Seeds
• USENIX Security '22 - Dynamic Searchable Encryption with Optimal Search in the Presence of Deletions
• USENIX Security '22 - Efficient Differentially Private Secure Aggregation for Federated Learning...
• USENIX Security '22 - Efficient Representation of Numerical Optimization Problems for SNARKs
• USENIX Security '22 - Elasticlave: An Efficient Memory Model for Enclaves
• USENIX Security '22 - Electronic Monitoring Smartphone Apps: An Analysis of Risks from Technical,
• USENIX Security '22 - Empirical Understanding of Deletion Privacy: Experiences, Expectations, and
• USENIX Security '22 - End-to-Same-End Encryption: Modularly Augmenting an App with an Efficient
• USENIX Security '22 - Estimating Incidental Collection in Foreign Intelligence Surveillance
• USENIX Security '22 - Expected Exploitability: Predicting the Development of Functional...
• USENIX Security '22 - Experimental Security Analysis of the App Model in Business Collaboration...
• USENIX Security '22 - Experimenting with Collaborative zk-SNARKs: Zero-Knowledge Proofs for
• USENIX Security '22 - Exploring the Security Boundary of Data Reconstruction via Neuron Exclusivity
• USENIX Security '22 - Exploring the Unchartered Space of Container Registry Typosquatting
• USENIX Security '22 - Faster Yet Safer: Logging System Via Fixed-Key Blockcipher
• USENIX Security '22 - Ferry: State-Aware Symbolic Execution for Exploring State-Dependent Program
• USENIX Security '22 - FIXREVERTER: A Realistic Bug Injection Methodology for Benchmarking Fuzz
• USENIX Security '22 - FLAME: Taming Backdoors in Federated Learning
• USENIX Security '22 - FlowMatrix: GPU-Assisted Information-Flow Analysis through Matrix-Based
• USENIX Security '22 - FOAP: Fine-Grained Open-World Android App Fingerprinting
• USENIX Security '22 - FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies
• USENIX Security '22 - FReD: Identifying File Re-Delegation in Android System Services
• USENIX Security '22 - FreeWill: Automatically Diagnosing Use-after-free Bugs via Reference
• USENIX Security '22 - FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities
• USENIX Security '22 - Fuzzing Hardware Like Software
• USENIX Security '22 - FuzzOrigin: Detecting UXSS vulnerabilities in Browsers through Origin Fuzzing
• USENIX Security '22 - Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing
• USENIX Security '22 - GAROTA: Generalized Active Root-Of-Trust Architecture
• USENIX Security '22 - GET /out: Automated Discovery of Application-Layer Censorship Evasion...
• USENIX Security '22 - Ghost Peak: Practical Distance Reduction Attacks Against HRP UWB Ranging
• USENIX Security '22 - GhostTouch: Targeted Attacks on Touchscreens without Physical Touch
• USENIX Security '22 - Gossamer: Securely Measuring Password-based Logins
• USENIX Security '22 - GPU-accelerated PIR with Client-Independent Preprocessing for Large-Scale
• USENIX Security '22 - Ground Truth for Binary Disassembly is Not Easy
• USENIX Security '22 - Half-Double: Hammering From the Next Row Over
• USENIX Security '22 - Hand Me Your PIN! Inferring ATM PINs of Users Typing with a Covered Hand
• USENIX Security '22 - Hecate: Abuse Reporting in Secure Messengers with Sealed Sender
• USENIX Security '22 - Helping hands: Measuring the impact of a large threat intelligence sharing...
• USENIX Security '22 - Hidden Trigger Backdoor Attack on NLP Models via Linguistic Style Manipulation
• USENIX Security '22 - Hiding in Plain Sight? On the Efficacy of Power Side Channel-Based Control...
• USENIX Security '22 - Holistic Control-Flow Protection on Real-Time Embedded Systems with Kage
• USENIX Security '22 - How and Why People Use Virtual Private Networks
• USENIX Security '22 - How Are Your Zombie Accounts? Understanding Users' Practices & Expectations...
• USENIX Security '22 - How Long Do Vulnerabilities Live in the Code? A Large-Scale Empirical...
• USENIX Security '22 - How Machine Learning Is Solving the Binary Function Similarity Problem
• USENIX Security '22 - How to Abuse and Fix Authenticated Encryption Without Key Commitment
• USENIX Security '22 - How to Peel a Million: Validating and Expanding Bitcoin Clusters
• USENIX Security '22 - HyperDegrade: From GHz to MHz Effective CPU Frequencies
• USENIX Security '22 - Hyperproofs: Aggregating and Maintaining Proofs in Vector Commitments
• USENIX Security '22 - Identity Confusion in WebView-based Mobile App-in-app Ecosystems
• USENIX Security '22 - IHOP: Improved Statistical Query Recovery against Searchable Symmetric
• USENIX Security '22 - In-Kernel Control-Flow Integrity on Commodity OSes using ARM Pointer...
• USENIX Security '22 - Increasing Adversarial Uncertainty to Scale Private Similarity Testing
• USENIX Security '22 - Incremental Offline/Online PIR
• USENIX Security '22 - Inference Attacks Against Graph Neural Networks
• USENIX Security '22 - Inferring Phishing Intention via Webpage Appearance and Dynamics
• USENIX Security '22 - Investigating State-of-the-Art Practices for Fostering Subjective Trust in
• USENIX Security '22 - Jenny: Securing Syscalls for PKU-based Memory Isolation Systems
• USENIX Security '22 - Khaleesi: Breaker of Advertising and Tracking Request Chains
• USENIX Security '22 - Label Inference Attacks Against Vertical Federated Learning
• USENIX Security '22 - Lamphone: Passive Sound Recovery from a Desk Lamp's Light Bulb Vibrations
• USENIX Security '22 - Leaky Forms: A Study of Email and Password Exfiltration Before Form Submission
• USENIX Security '22 - Lend Me Your Ear: Passive Remote Physical Side Channels on PCs
• USENIX Security '22 - LinKRID: Vetting Imbalance Reference Counting in Linux kernel with Symbolic...
• USENIX Security '22 - Loki: Hardening Code Obfuscation Against Automated Attacks
• USENIX Security '22 - LTrack: Stealthy Tracking of Mobile Phones in LTE
• USENIX Security '22 - Lumos: Identifying and Localizing Diverse Hidden IoT Devices...
• USENIX Security '22 - MaDIoT 2.0: Modern High-Wattage IoT Botnet Attacks and Defenses
• USENIX Security '22 - MAGE: Mutual Attestation for a Group of Enclaves without Trusted Third Parties
• USENIX Security '22 - Many Roads Lead To Rome: How Packet Headers Influence DNS Censorship...
• USENIX Security '22 - Measurement by Proxy: On the Accuracy of Online Marketplace Measurements
• USENIX Security '22 - Membership Inference Attacks and Defenses in Neural Network Pruning
• USENIX Security '22 - Midas: Systematic Kernel TOCTTOU Protection
• USENIX Security '22 - Might I Get Pwned: A Second Generation Compromised Credential Checking Service
• USENIX Security '22 - Minefield: A Software-only Protection for SGX Enclaves against DVFS Attacks
• USENIX Security '22 - Mining Node.js Vulnerabilities via Object Dependence Graph and Query
• USENIX Security '22 - Mistrust Plugins You Must: A Large-Scale Study Of Malicious Plugins...
• USENIX Security '22 - Mitigating Membership Inference Attacks by Self-Distillation Through a Novel
• USENIX Security '22 - ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine
• USENIX Security '22 - Morphuzz: Bending (Input) Space to Fuzz Virtual Devices
• USENIX Security '22 - MOVERY: A Precise Approach for Modified Vulnerable Code Clone Discovery from
• USENIX Security '22 - MundoFuzz: Hypervisor Fuzzing with Statistical Coverage Testing and Grammar...
• USENIX Security '22 - Neither Access nor Control: A Longitudinal Investigation of the Efficacy...
• USENIX Security '22 - Networks of Care: Tech Abuse Advocates' Digital Security Practices
• USENIX Security '22 - Off-Path Network Traffic Manipulation via Revitalized ICMP Redirect Attacks
• USENIX Security '22 - Omnes pro uno: Practical Multi-Writer Encrypted Database
• USENIX Security '22 - On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning
• USENIX Security '22 - On the Security Risks of AutoML
• USENIX Security '22 - One-off Disclosure Control by Heterogeneous Generalization
• USENIX Security '22 - Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks...
• USENIX Security '22 - Oops... Code Execution and Content Spoofing: The First Comprehensive Analysis
• USENIX Security '22 - Open to a fault: On the passive compromise of TLS keys via transient errors
• USENIX Security '22 - OpenSSLNTRU: Faster post-quantum TLS key exchange
• USENIX Security '22 - OpenVPN is Open to VPN Fingerprinting
• USENIX Security '22 - Orca: Blocklisting in Sender-Anonymous Messaging
• USENIX Security '22 - OS-Aware Vulnerability Prioritization via Differential Severity Analysis
• USENIX Security '22 - OVRseen: Auditing Network Traffic and Privacy Policies in Oculus VR
• USENIX Security '22 - Pacer: Comprehensive Network Side-Channel Mitigation in the Cloud
• USENIX Security '22 - PatchCleanser: Certifiably Robust Defense against Adversarial Patches...
• USENIX Security '22 - Phish in Sheep's Clothing: Exploring the Authentication Pitfalls...
• USENIX Security '22 - Physical-Layer Attacks Against Pulse Width Modulation-Controlled Actuators
• USENIX Security '22 - Piranha: A GPU Platform for Secure Computation
• USENIX Security '22 - PISTIS: Trusted Computing Architecture for Low-end Embedded Systems
• USENIX Security '22 - Playing for K(H)eaps: Understanding and Improving Linux Kernel Exploit...
• USENIX Security '22 - Playing Without Paying: Detecting Vulnerable Payment Verification in Native
• USENIX Security '22 - Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks
• USENIX Security '22 - PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive
• USENIX Security '22 - Poisoning Attacks to Local Differential Privacy Protocols for Key-Value Data
• USENIX Security '22 - PolyCruise: A Cross-Language Dynamic Information Flow Analysis
• USENIX Security '22 - Polynomial Commitment with a One-to-Many Prover and Applications
• USENIX Security '22 - Pool Inference Attacks on Local Differential Privacy...
• USENIX Security '22 - Post-Quantum Cryptography with Contemporary Co-Processors: Beyond Kronecker,
• USENIX Security '22 - ppSAT: Towards Two-Party Private SAT Solving
• USENIX Security '22 - Practical Data Access Minimization in Trigger-Action Platforms
• USENIX Security '22 - Practical Privacy-Preserving Authentication for SSH
• USENIX Security '22 - Pre-hijacked accounts: An Empirical Study of Security Failures in User Account
• USENIX Security '22 - Private Signaling
• USENIX Security '22 - PrivGuard: Privacy Regulation Compliance Made Easier
• USENIX Security '22 - ProFactory: Improving IoT Security via Formalized Protocol Customization
• USENIX Security '22 - Provably-Safe Multilingual Software Sandboxing using WebAssembly
• USENIX Security '22 - QuORAM: A Quorum-Replicated Fault Tolerant ORAM Datastore
• USENIX Security '22 - Rapid Prototyping for Microarchitectural Attacks
• USENIX Security '22 - RapidPatch: Firmware Hotpatching for Real-Time Embedded Devices
• USENIX Security '22 - RE-Mind: a First Look Inside the Mind of a Reverse Engineer
• USENIX Security '22 - RegexScalpel: Regular Expression Denial of Service (ReDoS) Defense by
• USENIX Security '22 - Regulator: Dynamic Analysis to Detect ReDoS
• USENIX Security '22 - Rendering Contention Channel Made Practical in Web Browsers
• USENIX Security '22 - Repurposing Segmentation as a Practical LVI-NULL Mitigation in SGX
• USENIX Security '22 - RETBLEED: Arbitrary Speculative Code Execution with Return Instructions
• USENIX Security '22 - ReZone: Disarming TrustZone with TEE Privilege Reduction
• USENIX Security '22 - Rolling Colors: Adversarial Laser Exploits against Traffic Light Recognition
• USENIX Security '22 - SAID: State-aware Defense Against Injection Attacks on In-vehicle Network
• USENIX Security '22 - SAPIC+: protocol verifiers of the world, unite!
• USENIX Security '22 - SARA: Secure Android Remote Authorization
• USENIX Security '22 - SCRAPS: Scalable Collective Remote Attestation for Pub-Sub IoT Networks with
• USENIX Security '22 - SecSMT: Securing SMT Processors against Contention-Based Covert Channels
• USENIX Security '22 - Secure Poisson Regression
• USENIX Security '22 - Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks
• USENIX Security '22 - Security and Privacy Perceptions of Third-Party Application Access for Google
• USENIX Security '22 - Security at the End of the Tunnel: The Anatomy of VPN Mental Models Among
• USENIX Security '22 - Seeing is Living? Rethinking the Security of Facial Liveness Verification
• USENIX Security '22 - Seeing the Forest for the Trees: Understanding Security Hazards in the 3GPP...
• USENIX Security '22 - SGXFuzz: Efficiently Synthesizing Nested Structures for SGX Enclave Fuzzing
• USENIX Security '22 - SGXLock: Towards Efficiently Establishing Mutual Distrust Between Host
• USENIX Security '22 - Shuffle-based Private Set Union: Faster and More Secure
• USENIX Security '22 - SIMC: ML Inference Secure Against Malicious Clients at Semi-Honest Cost
• USENIX Security '22 - SkillDetective: Automated Policy-Violation Detection of Voice Assistant...
• USENIX Security '22 - Smart Home Privacy Policies Demystified: A Study of Availability, Content, and
• USENIX Security '22 - Spoki: Unveiling a New Wave of Scanners through a Reactive Network Telescope
• USENIX Security '22 - Stalloris: RPKI Downgrade Attack
• USENIX Security '22 - Stateful Greybox Fuzzing
• USENIX Security '22 - StateFuzz: System Call-Based State-Aware Linux Driver Fuzzing
• USENIX Security '22 - Stick It to The Man: Correcting for Non-Cooperative Behavior of Subjects in
• USENIX Security '22 - SWAPP: A New Programmable Playground for Web Application Security
• USENIX Security '22 - SYMSAN: Time and Space Efficient Concolic Execution via Dynamic Data-flow
• USENIX Security '22 - Synthetic Data – Anonymisation Groundhog Day
• USENIX Security '22 - SyzScope: Revealing High-Risk Security Impacts of Fuzzer-Exposed Bugs in Linux
• USENIX Security '22 - Targeted Deanonymization via the Cache Side Channel: Attacks and Defenses
• USENIX Security '22 - Teacher Model Fingerprinting Attacks Against Transfer Learning
• USENIX Security '22 - The Dangers of Human Touch: Fingerprinting Browser Extensions through...
• USENIX Security '22 - The Security Lottery: Measuring Client-Side Web Security Inconsistencies
• USENIX Security '22 - TheHuzz: Instruction Fuzzing of Processors Using Golden-Reference Models for
• USENIX Security '22 - Themis: Accelerating the Detection of Route Origin Hijacking by Distinguishing
• USENIX Security '22 - Tightly Seal Your Sensitive Pointers with PACTight
• USENIX Security '22 - TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries
• USENIX Security '22 - Total Eclipse of the Heart – Disrupting the InterPlanetary File System
• USENIX Security '22 - Towards Automatically Reverse Engineering Vehicle Diagnostic Protocols
• USENIX Security '22 - Towards More Robust Keyword Spotting for Voice Assistants
• USENIX Security '22 - Transferring Adversarial Robustness Through Robust Representation Matching
• USENIX Security '22 - Trust Dies in Darkness: Shedding Light on Samsung's TrustZone Keymaster Design
• USENIX Security '22 - Twilight: A Differentially Private Payment Channel Network
• USENIX Security '22 - Under the Hood of DANE Mismanagement in SMTP
• USENIX Security '22 - Understanding and Improving Usability of Data Dashboards for Simplified
• USENIX Security '22 - Uninvited Guests: Analyzing the Identity and Behavior of Certificate...
• USENIX Security '22 - Unleash the Simulacrum: Shifting Browser Realities for Robust...
• USENIX Security '22 - Using Trātṛ to tame Adversarial Synchronization
• USENIX Security '22 - V'CER: Efficient Certificate Validation in Constrained Networks
• USENIX Security '22 - VerLoc: Verifiable Localization in Decentralized Systems
• USENIX Security '22 - Watching the watchers: bias and vulnerability in remote proctoring software
• USENIX Security '22 - Watching the Watchers: Practical Video Identification Attack in LTE Networks
• USENIX Security '22 - Web Cache Deception Escalates!
• USENIX Security '22 - WebGraph: Capturing Advertising and Tracking Information Flows
• USENIX Security '22 - When Sally Met Trackers: Web Tracking From the Users' Perspective
• USENIX Security '22 - Where to Recruit for Security Development Studies: Comparing Six Software...
• USENIX Security '22 - Who Are You (I Really Wanna Know)? Detecting Audio DeepFakes Through Vocal
• USENIX Security '22 - Why Users (Don't) Use Password Managers at a Large Educational Institution
• USENIX Security '22 - XDRI Attacks - and - How to Enhance Resilience of Residential Routers
• USENIX Security '22 - Your Microphone Array Retains Your Identity: A Robust Voice Liveness...
• USENIX Security '22 - Zero-Knowledge Middleboxes
• USENIX Security '22 - ÆPIC Leak: Architecturally Leaking Uninitialized Data from the
• USENIX Security '22- TLB;DR: Enhancing TLB-based Attacks with TLB Desynchronized Reverse Engineering
• USENIX Security '22-Hertzbleed: Turning Power Side-Channel Attacks Into Remote Timing Attacks on x86
• USENIX Security '23 - "All of them claim to be the best": Multi-perspective study of VPN user...
• USENIX Security '23 - "I'm going to trust this until it burns me" Parents' Privacy Concerns and...
• USENIX Security '23 - "If I could do this, I feel anyone could:" The Design and Evaluation...
• USENIX Security '23 - "It's the Equivalent of Feeling Like You're in Jail”: Lessons from Firsthand..
• USENIX Security '23 - "My Privacy for their Security": Employees' Privacy Perspectives and...
• USENIX Security '23 - "Un-Equal Online Safety?" A Gender Analysis of Security and Privacy...
• USENIX Security '23 - (M)WAIT for It: Bridging the Gap between Microarchitectural and...
• USENIX Security '23 - A Bug's Life: Analyzing the Lifecycle and Mitigation Process of Content...
• USENIX Security '23 - A comprehensive, formal and automated analysis of the EDHOC protocol
• USENIX Security '23 - A Data-free Backdoor Injection Approach in Neural Networks
• USENIX Security '23 - A Hybrid Alias Analysis and Its Application to Global Variable Protection...
• USENIX Security '23 - A Large Scale Study of the Ethereum Arbitrage Ecosystem
• USENIX Security '23 - A Large-Scale Measurement of Website Login Policies
• USENIX Security '23 - A Mixed-Methods Study of Security Practices of Smart Contract Developers
• USENIX Security '23 - A Peek into the Metaverse: Detecting 3D Model Clones in Mobile Games
• USENIX Security '23 - A Plot is Worth a Thousand Words: Model Information Stealing Attacks via...
• USENIX Security '23 - A Research Framework and Initial Study of Browser Security for the Visually...
• USENIX Security '23 - A Study of China's Censorship and Its Evasion Through the Lens of Online...
• USENIX Security '23 - A Study of Multi-Factor and Risk-Based Authentication Availability
• USENIX Security '23 - A Two-Decade Retrospective Analysis of a University's Vulnerability to...
• USENIX Security '23 - A Verified Confidential Computing as a Service Framework for Privacy...
• USENIX Security '23 - Abuse Vectors: A Framework for Conceptualizing IoT-Enabled Interpersonal Abuse
• USENIX Security '23 - Access Denied: Assessing Physical Risks to Internet Access Networks
• USENIX Security '23 - Account Security Interfaces: Important, Unintuitive, and Untrustworth
• USENIX Security '23 - Account Verification on Social Media: User Perceptions and Paid Enrollment
• USENIX Security '23 - ACFA: Secure Runtime Auditing & Guaranteed Device Healing via Active...
• USENIX Security '23 - ACon^2: Adaptive Conformal Consensus for Provable Blockchain Oracles
• USENIX Security '23 - ACORN: Input Validation for Secure Aggregation
• USENIX Security '23 - ACTOR: Action-Guided Kernel Fuzzing
• USENIX Security '23 - Adversarial Training for Raw-Binary Malware Classifiers
• USENIX Security '23 - Aegis: Mitigating Targeted Bit-flip Attacks against Deep Neural Networks
• USENIX Security '23 - AEX-Notify: Thwarting Precise Single-Stepping Attacks through Interrupt...
• USENIX Security '23 - AIFORE: Smart Fuzzing Based on Automatic Input Format Reverse Engineering
• USENIX Security '23 - AIRS: Explanation for Deep Reinforcement Learning based Security Applications
• USENIX Security '23 - AIRTAG: Towards Automated Attack Investigation by Unsupervised Learning...
• USENIX Security '23 - Aliasing Backdoor Attacks on Pre-trained Models
• USENIX Security '23 - All cops are broadcasting: TETRA under scrutiny
• USENIX Security '23 - AlphaEXP: An Expert System for Identifying Security-Sensitive Kernel Objects
• USENIX Security '23 - An Efficient Design of Intelligent Network Data Plane
• USENIX Security '23 - An Empirical Study & Evaluation of Modern CAPTCHAs
• USENIX Security '23 - An Input-Agnostic Hierarchical Deep Learning Framework for Traffic...
• USENIX Security '23 - Anatomy of a High-Profile Data Breach: Dissecting the Aftermath of a Crypto...
• USENIX Security '23 - AnimateDead: Debloating Web Applications Using Concolic Execution
• USENIX Security '23 - Araña: Discovering and Characterizing Password Guessing Attacks in Practice
• USENIX Security '23 - Are Consumers Willing to Pay for Security and Privacy of IoT Devices?
• USENIX Security '23 - Are You Spying on Me? Large-Scale Analysis on IoT Data Exposure through...
• USENIX Security '23 - ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and...
• USENIX Security '23 - ARGUS: Context-Based Detection of Stealthy IoT Infiltration Attacks
• USENIX Security '23 - ARI: Attestation of Real-time Mission Execution Integrity
• USENIX Security '23 - ARMore: Pushing Love Back Into Binaries
• USENIX Security '23 - Assessing Anonymity Techniques Employed in German Court Decisions: A...
• USENIX Security '23 - ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning..
• USENIX Security '23 - Attacks are Forwarded: Breaking the Isolation of MicroVM-based Containers...
• USENIX Security '23 - Auditing Framework APIs via Inferred App-side Security Specifications
• USENIX Security '23 - Auditing Frameworks Need Resource Isolation: A Systematic Study on the...
• USENIX Security '23 - Auditory Eyesight: Demystifying μs-Precision Keystroke Tracking Attacks on...
• USENIX Security '23 - AURC: Detecting Errors in Program Code and Documentation
• USENIX Security '23 - Authenticated private information retrieval
• USENIX Security '23 - AutoFR: Automated Filter Rule Generation for Adblocking
• USENIX Security '23 - autofz: Automated Fuzzer Composition at Runtime
• USENIX Security '23 - Automata-Guided Control-Flow-Sensitive Fuzz Driver Generation
• USENIX Security '23 - Automated Analysis of Protocols that use Authenticated Encryption: How...
• USENIX Security '23 - Automated Cookie Notice Analysis and Enforcement
• USENIX Security '23 - Automated Exploitable Heap Layout Generation for Heap Overflows Through...
• USENIX Security '23 - Automated Inference on Financial Security of Ethereum Smart Contracts
• USENIX Security '23 - Automated Security Analysis of Exposure Notification Systems
• USENIX Security '23 - Back to School: On the (In)Security of Academic VPNs
• USENIX Security '23 - BalanceProofs: Maintainable Vector Commitments with Fast Aggregation
• USENIX Security '23 - BASECOMP: A Comparative Analysis for Integrity Protection in Cellular...
• USENIX Security '23 - Beyond The Gates: An Empirical Analysis of HTTP-Managed Password Stealers...
• USENIX Security '23 - Beyond Typosquatting: An In-depth Look at Package Confusion
• USENIX Security '23 - Bilingual Problems: Studying the Security Risks Incurred by Native...
• USENIX Security '23 - Black-box Adversarial Example Attack towards FCG Based Android Malware...
• USENIX Security '23 - Bleem: Packet Sequence Oriented Fuzzing for Protocol Implementations
• USENIX Security '23 - BoKASAN: Binary-only Kernel Address Sanitizer for Effective Kernel Fuzzing
• USENIX Security '23 - BotScreen: Trust Everybody, but Cut the Aimbots Yourself
• USENIX Security '23 - Bug Hunters’ Perspectives on the Challenges and Benefits of the Bug Bounty...
• USENIX Security '23 - BunnyHop: Exploiting the Instruction Prefetcher
• USENIX Security '23 - Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables
• USENIX Security '23 - CacheQL: Quantifying and Localizing Cache Side-Channel Vulnerabilities in...
• USENIX Security '23 - Calpric: Inclusive and Fine-grain Labeling of Privacy Policies with...
• USENIX Security '23 - Can a Deep Learning Model for One Architecture Be Used for Others?...
• USENIX Security '23 - CAPatch: Physical Adversarial Patch against Image Captioning Systems
• USENIX Security '23 - Capstone: A Capability-based Foundation for Trustless Secure Memory Access
• USENIX Security '23 - CarpetFuzz: Automatic Program Option Constraint Extraction from...
• USENIX Security '23 - Catch You and I Can: Revealing Source Voiceprint Against Voice Conversion
• USENIX Security '23 - Checking Passwords on Leaky Computers: A Side Channel Analysis of Chrome's...
• USENIX Security '23 - Cheesecloth: Zero-Knowledge Proofs of Real World Vulnerabilities
• USENIX Security '23 - Cipherfix: Mitigating Ciphertext Side-Channel Attacks in Software
• USENIX Security '23 - CipherH: Automated Detection of Ciphertext Side-channel Vulnerabilities in...
• USENIX Security '23 - ClepsydraCache -- Preventing Cache Attacks with Time-Based Evictions
• USENIX Security '23 - CodexLeaks: Privacy Leaks from Code Generation Language Models in GitHub...
• USENIX Security '23 - Collide+Power: Leaking Inaccessible Data with Software-based Power Side...
• USENIX Security '23 - Combating Robocalls with Phone Virtual Assistant Mediated Interaction
• USENIX Security '23 - Confusum Contractum: Confused Deputy Vulnerabilities in Ethereum Smart...
• USENIX Security '23 - Content-Type: multipart/oracle - Tapping into Format Oracles in Email...
• USENIX Security '23 - Continuous Learning for Android Malware Detection
• USENIX Security '23 - Controlled Data Races in Enclaves: Attacks and Detection
• USENIX Security '23 - Cookie Crumbles: Breaking and Fixing Web Session Integrity
• USENIX Security '23 - Credit Karma: Understanding Security Implications of Exposed Cloud Services...
• USENIX Security '23 - Cross Container Attacks: The Bewildered eBPF on Clouds
• USENIX Security '23 - Cryptographic Administration for Secure Group Messaging
• USENIX Security '23 - Cryptographic Deniability: A Multi-perspective Study of User Perceptions...
• USENIX Security '23 - CSHER: A System for Compact Storage with HE-Retrieval
• USENIX Security '23 - Curve Trees: Practical and Transparent Zero-Knowledge Accumulators
• USENIX Security '23 - DAFL: Directed Grey-box Fuzzing guided by Data Dependency
• USENIX Security '23 - DDRace: Finding Concurrency UAF Vulnerabilities in Linux Drivers with...
• USENIX Security '23 - Decompiling x86 Deep Neural Network Executables
• USENIX Security '23 - Defining "Broken": User Experiences and Remediation Tactics When Ad-Blocking..
• USENIX Security '23 - Demystifying Pointer Authentication on Apple M1
• USENIX Security '23 - DeResistor: Toward Detection-Resistant Probing for Evasion of Internet...
• USENIX Security '23 - Design of Access Control Mechanisms in Systems-on-Chip with Formal...
• USENIX Security '23 - Detecting and Handling IoT Interaction Threats in Multi-Platform Multi...
• USENIX Security '23 - Detecting API Post-Handling Bugs Using Code and Description in Patches
• USENIX Security '23 - Detecting Multi-Step IAM Attacks in AWS Environments via Model Checking
• USENIX Security '23 - Detecting Union Type Confusion in Component Object Model
• USENIX Security '23 - Device Tracking via Linux’s New TCP Source Port Selection Algorithm
• USENIX Security '23 - Did the Shark Eat the Watchdog in the NTP Pool? Deceiving the NTP Pool’s...
• USENIX Security '23 - Differential Testing of Cross Deep Learning Framework APIs: Revealing...
• USENIX Security '23 - DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local...
• USENIX Security '23 - Discovering Adversarial Driving Maneuvers against Autonomous Vehicles
• USENIX Security '23 - Distance-Aware Private Set Intersection
• USENIX Security '23 - DISTDET: A Cost-Effective Distributed Cyber Threat Detection System
• USENIX Security '23 - Diving into Robocall Content with SnorCall
• USENIX Security '23 - Don’t be Dense: Efficient Keyword PIR for Sparse Databases
• USENIX Security '23 - Downfall: Exploiting Speculative Data Gathering
• USENIX Security '23 - Downgrading DNSSEC: How to Exploit Crypto Agility for Hijacking Signed Zones
• USENIX Security '23 - DScope: A Cloud-Native Internet Telescope
• USENIX Security '23 - Dubhe: Succinct Zero-Knowledge Proofs for Standard AES and relate...
• USENIX Security '23 - Duoram: A Bandwidth-Efficient Distributed ORAM for 2- and 3-Party Computation
• USENIX Security '23 - DynSQL: Stateful Fuzzing for Database Management Systems with Complex and...
• USENIX Security '23 - Eavesdropping Mobile App Activity via Radio-Frequency Energy Harvesting
• USENIX Security '23 - Educators’ Perspectives of Using (or Not Using) Online Exam Proctoring
• USENIX Security '23 - Efficient 3PC for Binary Circuits with Application to Maliciously-Secure...
• USENIX Security '23 - Efficient Unbalanced Private Set Intersection Cardinality and User-friendly...
• USENIX Security '23 - Egg Hunt in Tesla Infotainment: A First Look at Reverse Engineering of Qt...
• USENIX Security '23 - ELASM: Error-Latency-Aware Scale Management for Fully Homomorphic Encryption
• USENIX Security '23 - EnigMap: External-Memory Oblivious Map for Secure Enclaves
• USENIX Security '23 - Eos: Efficient Private Delegation of zkSNARK Provers
• USENIX Security '23 - Erebus: Access Control for Augmented Reality Systems
• USENIX Security '23 - Ethical Frameworks and Computer Security Trolley Problems: Foundations for...
• USENIX Security '23 - Evading Provenance-Based ML Detectors with Adversarial System Action
• USENIX Security '23 - Every Signature is Broken: On the Insecurity of Microsoft Office’s OOXML...
• USENIX Security '23 - Every Vote Counts: Ranking-Based Training of Federated Learning to Resist...
• USENIX Security '23 - Examining Consumer Reviews to Understand Security and Privacy Issues in the...
• USENIX Security '23 - Examining Power Dynamics and User Privacy in Smart Technology Use Among...
• USENIX Security '23 - Exorcising "Wraith": Protecting LiDAR-based Object Detector in Automated...
• USENIX Security '23 - Exploring Privacy and Incentives Considerations in Adoption of COVID-19...
• USENIX Security '23 - Exploring Tenants' Preferences of Privacy Negotiation in Airbnb
• USENIX Security '23 - Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem...
• USENIX Security '23 - Exploring User Reactions and Mental Models Towards Perceptual Manipulation...
• USENIX Security '23 - Extended Hell(o): A Comprehensive Large-Scale Study on Email...
• USENIX Security '23 - Extending a Hand to Attackers: Browser Privilege Escalation Attacks via...
• USENIX Security '23 - Extracting Protocol Format as State Machine via Controlled Static Loop...
• USENIX Security '23 - Extracting Training Data from Diffusion Models
• USENIX Security '23 - Eye-Shield: Real-Time Protection of Mobile Device Screen Information from...
• USENIX Security '23 - FABRID: Flexible Attestation-Based Routing for Inter-Domain Networks
• USENIX Security '23 - FACE-AUDITOR: Data Auditing in Facial Recognition Systems
• USENIX Security '23 - Fact-Saboteurs: A Taxonomy of Evidence Manipulation Attacks against...
• USENIX Security '23 - Fairness Properties of Face Recognition and Obfuscation Systems
• USENIX Security '23 - Fast IDentity Online with Anonymous Credentials (FIDO-AC)
• USENIX Security '23 - FedVal: Different good or different bad in federated learning
• USENIX Security '23 - Fine-grained Poisoning Attack to Local Differential Privacy Protocols for...
• USENIX Security '23 - FirmSolo: Enabling dynamic analysis of binary Linux-based IoT kernel modules
• USENIX Security '23 - FISHFUZZ: Catch Deeper Bugs by Throwing Larger Nets
• USENIX Security '23 - FloatZone: Accelerating Memory Error Detection using the Floating Point Unit
• USENIX Security '23 - Formal Analysis and Patching of BLE-SC Pairing
• USENIX Security '23 - Formal Analysis of Session-Handling in Secure Messaging: Lifting Security...
• USENIX Security '23 - Formal Analysis of SPDM: Security Protocol and Data Model version 1.2
• USENIX Security '23 - Forming Faster Firmware Fuzzers
• USENIX Security '23 - Fourteen Years in the Life: A Root Server’s Perspective on DNS Resolve...
• USENIX Security '23 - Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues
• USENIX Security '23 - Freaky Leaky SMS: Extracting User Locations by Analyzing SMS Timings
• USENIX Security '23 - FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases
• USENIX Security '23 - FuncTeller: How Well Does eFPGA Hide Functionality?
• USENIX Security '23 - Fuzz The Power: Dual-role State Guided Black-box Fuzzing for USB Power...
• USENIX Security '23 - FuzzJIT: Oracle-Enhanced Fuzzing for JavaScript Engine JIT Compiler
• USENIX Security '23 - Fuzztruction: Using Fault Injection-based Fuzzing to Leverage Implicit...
• USENIX Security '23 - GAP: Differentially Private Graph Neural Networks with Aggregation...
• USENIX Security '23 - Generative Intrusion Detection and Prevention on Data Stream
• USENIX Security '23 - GigaDORAM: Breaking the Billion Address Barrier
• USENIX Security '23 - Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models
• USENIX Security '23 - GLeeFuzz: Fuzzing WebGL Through Error Message Guided Mutation
• USENIX Security '23 - Glimpse: On-Demand PoW Light Client with Constant-Size Storage for DeFi
• USENIX Security '23 - GlitchHiker: Uncovering Vulnerabilities of Image Signal Transmission with IEMI
• USENIX Security '23 - Glowing in the Dark: Uncovering IPv6 Address Discovery and Scanning...
• USENIX Security '23 - Going through the motions: AR/VR keylogging from user head motions
• USENIX Security '23 - Gradient Obfuscation Gives a False Sense of Security in Federated Learning
• USENIX Security '23 - Greenhouse: Single-Service Rehosting of Linux-Based Firmware Binaries in...
• USENIX Security '23 - Guarding Serverless Applications with Kalium
• USENIX Security '23 - Hard-label Black-box Universal Adversarial Patch Attack
• USENIX Security '23 - Hash Gone Bad: Automated discovery of protocol attacks that exploit hash...
• USENIX Security '23 - HashTag: Hash-based Integrity Protection for Tagged Architectures
• USENIX Security '23 - HECO: Fully Homomorphic Encryption Compiler
• USENIX Security '23 - Hey Kimya, Is My Smart Speaker Spying on Me? Taking Control of Sensor...
• USENIX Security '23 - Hidden Reality: Caution, Your Hand Gesture Inputs in the Immersive Virtual...
• USENIX Security '23 - Hiding in Plain Sight: An Empirical Study of Web Application Abuse in Malware
• USENIX Security '23 - High Recovery with Fewer Injections: Practical Binary Volumetric Injection...
• USENIX Security '23 - Hoedur: Embedded Firmware Fuzzing using Multi-Stream Inputs
• USENIX Security '23 - HOLMES: Efficient Distribution Testing for Secure Collaborative Learning
• USENIX Security '23 - HOMESPY: The Invisible Sniffer of Infrared Remote Control of Smart TVs
• USENIX Security '23 - HorusEye: A Realtime IoT Malicious Traffic Detection Framework using...
• USENIX Security '23 - Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and Arm SoCs
• USENIX Security '23 - How Effective is Multiple-Vantage-Point Domain Control Validation?
• USENIX Security '23 - How fast do you heal? A taxonomy for post-compromise security in...
• USENIX Security '23 - How the Great Firewall of China Detects and Blocks Fully Encrypted Traffic
• USENIX Security '23 - How to Bind Anonymous Credentials to Humans
• USENIX Security '23 - How to Cover up Anomalous Accesses to Electronic Health Records
• USENIX Security '23 - Humans vs. Machines in Malware Classification
• USENIX Security '23 - HyPFuzz: Formal-Assisted Processor Fuzzing
• USENIX Security '23 - ICSPatch: Automated Vulnerability Localization and Non-Intrusive...
• USENIX Security '23 - Improving Logging to Reduce Permission Over-Granting Mistakes
• USENIX Security '23 - Improving Real-world Password Guessing Attacks via Bi-directional Transformers
• USENIX Security '23 - In the Quest to Protect Users from Side-Channel Attacks – A User-Centred...
• USENIX Security '23 - Inception: Exposing New Attack Surfaces with Training in Transient Execution
• USENIX Security '23 - Inducing Authentication Failures to Bypass Credit Card PINs
• USENIX Security '23 - Inductive Graph Unlearning
• USENIX Security '23 - InfinityGauntlet: Expose Smartphone Fingerprint Authentication to...
• USENIX Security '23 - Instructions Unclear: Undefined Behaviour in Cellular Network Specifications
• USENIX Security '23 - Intender: Fuzzing Intent-Based Networking with Intent-State Transition...
• USENIX Security '23 - Internet Service Providers' and Individuals' Attitudes, Barriers, and...
• USENIX Security '23 - Investigating Verification Behavior and Perceptions of Visual Digital...
• USENIX Security '23 - Is Your Wallet Snitching On You? An Analysis on the Privacy Implications...
• USENIX Security '23 - Isolated and Exhausted: Attacking Operating Systems via Site Isolation in...
• USENIX Security '23 - It's all in your head(set): Side-channel attacks on AR/VR systems
• USENIX Security '23 - IvySyn: Automated Vulnerability Discovery in Deep Learning Frameworks
• USENIX Security '23 - Jinn: Hijacking Safe Programs with Trojans
• USENIX Security '23 - Keep Your Friends Close, but Your Routeservers Closer: Insights into RPK...
• USENIX Security '23 - KENKU: Towards Efficient and Stealthy Black-box Adversarial Attacks against...
• USENIX Security '23 - KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting...
• USENIX Security '23 - Know Your Cybercriminal: Evaluating Attacker Preferences by Measuring...
• USENIX Security '23 - Knowledge Expansion and Counterfactual Interaction for Reference-Based...
• USENIX Security '23 - Lalaine: Measuring and Characterizing Non-Compliance of Apple Privacy Labels
• USENIX Security '23 - Learning Normality is Enough: A Software-based Mitigation against Inaudible...
• USENIX Security '23 - Lessons Lost: Incident Response in the Age of Cyber Insurance and Breach...
• USENIX Security '23 - LibScan: Towards More Precise Third-Party Library Identification for...
• USENIX Security '23 - LightThief: Your Optical Communication Information is Stolen behind the Wall
• USENIX Security '23 - Linear Private Set Union from Multi-Query Reverse Private Membership Test
• USENIX Security '23 - LocIn: Inferring Semantic Location from Spatial Maps in Mixed Reality
• USENIX Security '23 - Log: It’s Big, It’s Heavy, It’s Filled with Personal Data! Measuring the...
• USENIX Security '23 - Long Live The Honey Badger: Robust Asynchronous DPSS and its Applications
• USENIX Security '23 - Lost at C: A User Study on the Security Implications of Large Language Model..
• USENIX Security '23 - Lost in Conversion: Exploit Data Structure Conversion with Attribute Loss...
• USENIX Security '23 - Machine-checking Multi-Round Proofs of Shuffle: Terelius-Wikstrom and...
• USENIX Security '23 - McFIL: Model Counting Functionality-Inherent Leakage
• USENIX Security '23 - Measuring Up to (Reasonable) Consumer Expectations: Providing an Empirical...
• USENIX Security '23 - Medusa Attack: Exploring Security Hazards of In-App QR Code Scanning
• USENIX Security '23 - Meta-Sift: How to Sift Out a Clean Subset in the Presence of Data Poisoning?
• USENIX Security '23 - MINER: A Hybrid Data-Driven Approach for REST API Fuzzing
• USENIX Security '23 - Minimalist: Semi-automated Debloating of PHP Web Applications through...
• USENIX Security '23 - Mitigating Security Risks in Linux with KLAUS: A Method for Evaluating...
• USENIX Security '23 - Mixed Signals: Analyzing Ground-Truth Data on the Users and Economics...
• USENIX Security '23 - MobileAtlas: Geographically Decoupled Measurements in Cellular Networks for...
• USENIX Security '23 - MorFuzz: Fuzzing Processor via Runtime Instruction Morphing enhanced...
• USENIX Security '23 - MTSan: A Feasible and Practical Memory Sanitizer for Fuzzing COTS Binaries
• USENIX Security '23 - Multi-Factor Key Derivation Function (MFKDF) for Fast, Flexible, Secure, &...
• USENIX Security '23 - Multiview: Finding Blind Spots in Access-Deny Issues Diagnosis
• USENIX Security '23 - NAUTILUS: Automated RESTful API Vulnerability Detection
• USENIX Security '23 - Near-Optimal Oblivious Key-Value Stores for Efficient PSI, PSU and Volume...
• USENIX Security '23 - Near-Ultrasound Inaudible Trojan (Nuit): Exploiting Your Speaker to Attack...
• USENIX Security '23 - Network Detection of Interactive SSH Impostors Using Deep Learning
• USENIX Security '23 - NeuroPots: Realtime Proactive Defense against Bit-Flip Attacks in Neural...
• USENIX Security '23 - No Linux, No Problem: Fast and Correct Windows Binary Fuzzing via...
• USENIX Security '23 - No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using...
• USENIX Security '23 - No Single Silver Bullet: Measuring the Accuracy of Password Strength Meters
• USENIX Security '23 - Not All Data are Created Equal: Data and Pointer Prioritization for Scalable..
• USENIX Security '23 - Notice the Imposter! A Study on User Tag Spoofing Attack in Mobile Apps
• USENIX Security '23 - NRDelegationAttack: Complexity DDoS attack on DNS Recursive Resolvers
• USENIX Security '23 - NVLeak: Off-Chip Side-Channel Attacks via Non-Volatile Memory Systems
• USENIX Security '23 - On the Feasibility of Malware Unpacking via Hardware-assisted Loop Profiling
• USENIX Security '23 - On the Security Risks of Knowledge Graph Reasoning
• USENIX Security '23 - One Server for the Price of Two: Simple and Fast Single-Server Private...
• USENIX Security '23 - One Size Does not Fit All: Quantifying the Risk of Malicious App Encounters...
• USENIX Security '23 - One Size Does Not Fit All: Uncovering and Exploiting Cross Platform...
• USENIX Security '23 - Oops..! I Glitched It Again! How to Multi-Glitch the Glitching-Protections...
• USENIX Security '23 - Othered, Silenced and Scapegoated: Understanding the Situated Security of...
• USENIX Security '23 - Panda: Security Analysis of Algorand Smart Contracts
• USENIX Security '23 - Pass2Edit: A Multi-Step Generative Model for Guessing Edited Passwords
• USENIX Security '23 - Password Guessing Using Random Forest
• USENIX Security '23 - PatchVerif: Discovering Faulty Patches in Robotic Vehicles
• USENIX Security '23 - PATROL: Provable Defense against Adversarial Policy in Two-player Games
• USENIX Security '23 - PCAT: Functionality and Data Stealing from Split Learning by Pseudo-Client...
• USENIX Security '23 - PELICAN: Exploiting Backdoors of Naturally Trained Deep Learning Models In...
• USENIX Security '23 - Person Re-identification in 3D Space: A WiFi Vision-based Approach
• USENIX Security '23 - PET: Prevent Discovered Errors from Being Triggered in the Linux Kerne
• USENIX Security '23 - PhyAuth: Physical-Layer Message Authentication for ZigBee Networks
• USENIX Security '23 - Place Your Locks Well: Understanding and Detecting Lock Misuse Bugs
• USENIX Security '23 - POLICYCOMP: Counterpart Comparison of Privacy Policies Uncovers...
• USENIX Security '23 - PoliGraph: Automated Privacy Policy Analysis using Knowledge Graphs
• USENIX Security '23 - PolyFuzz: Holistic Greybox Fuzzing of Multi-Language Systems
• USENIX Security '23 - Pool-Party: Exploiting Browser Resource Pools for Web Tracking
• USENIX Security '23 - PORE: Provably Robust Recommender Systems against Data Poisoning Attacks
• USENIX Security '23 - Powering for Privacy: Improving User Trust in Smart Speaker Microphones with..
• USENIX Security '23 - Powering Privacy: On the Energy Demand and Feasibility of Anonymity...
• USENIX Security '23 - Practical Asynchronous High-threshold Distributed Key Generation and...
• USENIX Security '23 - Precise and Generalized Robustness Certification for Neural Networks
• USENIX Security '23 - Prime Match: A Privacy-Preserving Inventory Matching System
• USENIX Security '23 - Private Proof-of-Stake Blockchains using Differentially-Private Stake...
• USENIX Security '23 - PrivateFL: Accurate, Differentially Private Federated Learning via...
• USENIX Security '23 - PrivGraph: Differentially Private Graph Data Publication by Exploiting...
• USENIX Security '23 - PrivTrace: Differentially Private Trajectory Synthesis by Adaptive Markov...
• USENIX Security '23 - Problematic Advertising and its Disparate Exposure on Facebook
• USENIX Security '23 - PROGRAPHER: An Anomaly Detection System based on Provenance Graph Embedding
• USENIX Security '23 - ProSpeCT: Provably Secure Speculation for the Constant-Time Policy
• USENIX Security '23 - PROVIDENCE: a Flexible Round-by-Round Risk-Limiting Audit
• USENIX Security '23 - Proxy Hunting: Understanding and Characterizing Proxy-based Upgradeable...
• USENIX Security '23 - Pspray: Timing Side-Channel based Linux Kernel Heap Exploitation Technique
• USENIX Security '23 - PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators
• USENIX Security '23 - PUMM: Preventing Use-After-Free Using Execution Unit Partitioning
• USENIX Security '23 - Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret...
• USENIX Security '23 - QFA2SR: Query-Free Adversarial Transfer Attacks to Speaker Recognition Systems
• USENIX Security '23 - Reassembly is Hard: A Reflection on Challenges and Strategies
• USENIX Security '23 - Remote Attacks on Speech Recognition Systems Using Sound from Power Supply
• USENIX Security '23 - Remote Code Execution from SSTI in the Sandbox: Automatically Detecting and...
• USENIX Security '23 - Remote Direct Memory Introspection
• USENIX Security '23 - Rethinking System Audit Architectures for High Event Coverage and...
• USENIX Security '23 - Rethinking White-Box Watermarks on Deep Learning Models under Neural...
• USENIX Security '23 - Reusable Enclaves for Confidential Serverless Computing
• USENIX Security '23 - ReUSB: Replay-Guided USB Driver Fuzzing
• USENIX Security '23 - Reversing, Breaking, and Fixing the French Legislative Election E-Voting...
• USENIX Security '23 - RIDAS: Real-time identification of attack sources on controller area networks
• USENIX Security '23 - Rods with Laser Beams: Understanding Browser Fingerprinting on Phishing Pages
• USENIX Security '23 - Rosetta: Enabling Robust TLS Encrypted Traffic Classification in Diverse...
• USENIX Security '23 - RøB: Ransomware over Modern Web Browsers
• USENIX Security '23 - SAFER: Efficient and Error-Tolerant Binary Instrumentation
• USENIX Security '23 - SandDriller: A Fully-Automated Approach for Testing Language-Based...
• USENIX Security '23 - SCARF – A Low-Latency Block Cipher for Secure Cache-Randomization
• USENIX Security '23 - Secure Floating-Point Training
• USENIX Security '23 - Security Analysis of MongoDB Queryable Encryption
• USENIX Security '23 - Security and Privacy Failures in Popular 2FA Apps
• USENIX Security '23 - SHELTER: Extending Arm CCA with Isolation in User Space
• USENIX Security '23 - Sherlock on Specs: Building LTE Conformance Tests through Automated Reasoning
• USENIX Security '23 - Side-Channel Attacks on Optane Persistent Memory
• USENIX Security '23 - Silent Bugs Matter: A Study of Compiler-Introduced Security Bugs
• USENIX Security '23 - Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
• USENIX Security '23 - SMACK: Semantically Meaningful Adversarial Audio Attack
• USENIX Security '23 - Smart Learning to Find Dumb Contracts
• USENIX Security '23 - Snapping Snap Sync: Practical Attacks on Go Ethereum Synchronising Nodes
• USENIX Security '23 - Sneaky Spy Devices and Defective Detectors: The Ecosystem of Intimate...
• USENIX Security '23 - Sparsity Brings Vulnerabilities: Exploring New Metrics in Backdoor Attacks
• USENIX Security '23 - SpectrEM: Exploiting Electromagnetic Emanations During Transient Execution
• USENIX Security '23 - Speculation at Fault: Modeling and Testing Microarchitectural Leakage of...
• USENIX Security '23 - Spying through Your Voice Assistants: Realistic Voice Command Fingerprinting
• USENIX Security '23 - SQIRL: Grey-Box Detection of SQL Injection Vulnerabilities Using...
• USENIX Security '23 - Squint Hard Enough: Attacking Perceptual Hashing with Adversarial Machine...
• USENIX Security '23 - Squirrel: A Scalable Secure Two-Party Computation Framework for Training...
• USENIX Security '23 - Strategies and Vulnerabilities of Participants in Venezuelan Influence...
• USENIX Security '23 - Subverting Website Fingerprinting Defenses with Robust Traffic Representation
• USENIX Security '23 - Synchronization Storage Channels (S2C): Timer-less Cache Side-Channel...
• USENIX Security '23 - Systematic Assessment of Fuzzers using Mutation Analysis
• USENIX Security '23 - TAP: Transparent and Privacy-Preserving Data Services
• USENIX Security '23 - Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack
• USENIX Security '23 - That Person Moves Like A Car: Misclassification Attack Detection fo...
• USENIX Security '23 - The Blockchain Imitation Game
• USENIX Security '23 - The Case for Learned Provenance Graph Storage Systems
• USENIX Security '23 - The Digital-Safety Risks of Financial Technologies for Survivors of...
• USENIX Security '23 - The Gates of Time: Improving Cache Attacks with Transient Execution
• USENIX Security '23 - The Impostor Among US(B): Off-Path Injection Attacks on USB Communications
• USENIX Security '23 - The Maginot Line: Attacking the Boundary of DNS Caching Protection
• USENIX Security '23 - The Most Dangerous Codec in the World: Finding and Exploiting...
• USENIX Security '23 - The OK Is Not Enough: A Large Scale Study of Consent Dialogs in Smartphone...
• USENIX Security '23 - The Role of Professional Product Reviewers in Evaluating Security and Privacy
• USENIX Security '23 - The Space of Adversarial Strategies
• USENIX Security '23 - The Writing on the Wall and 3D Digital Twins: Personal Information in..
• USENIX Security '23 - Three Lessons From Threema: Analysis of a Secure Messenger
• USENIX Security '23 - Tight Auditing of Differentially Private Machine Learning
• USENIX Security '23 - Time for Change: How Clocks Break UWB Secure Ranging
• USENIX Security '23 - Timeless Timing Attacks and Preload Defenses in Tor's DNS Cache
• USENIX Security '23 - To Cloud or not to Cloud: A Qualitative Study on Self-Hosters' Motivation...
• USENIX Security '23 - Token Spammers, Rug Pulls, and Sniper Bots: An Analysis of the Ecosystem...
• USENIX Security '23 - Towards a General Video-based Keystroke Inference Attack
• USENIX Security '23 - Towards A Proactive ML Approach for Detecting Backdoor Poison Samples
• USENIX Security '23 - Towards Targeted Obfuscation of Adversarial Unsafe Images using...
• USENIX Security '23 - TPatch: A Triggered Physical Adversarial Patch
• USENIX Security '23 - TreeSync: Authenticated Group Management for Messaging Layer Security
• USENIX Security '23 - TRIDENT: Towards Detecting and Mitigating Web-based Social Engineering Attacks
• USENIX Security '23 - Trojan Source: Invisible Vulnerabilities
• USENIX Security '23 - TRust: A Compilation Framework for In-process Isolation to Protect Safe...
• USENIX Security '23 - Tubes Among Us: Analog Attack on Automatic Speaker Identification
• USENIX Security '23 - TVA: A multi-party computation system for secure and expressive time series...
• USENIX Security '23 - Two Sides of the Shield: Understanding Protective DNS adoption factors
• USENIX Security '23 - Two-in-One: A Model Hijacking Attack Against Text Generation Models
• USENIX Security '23 - UCBlocker: Unwanted Call Blocking Using Anonymous Authentication
• USENIX Security '23 - Ultimate SLH: Taking Speculative Load Hardening to the Next Level
• USENIX Security '23 - Uncontained: Uncovering Container Confusion in the Linux Kernel
• USENIX Security '23 - Understand Users' Privacy Perception and Decision of V2X Communication in...
• USENIX Security '23 - UnGANable: Defending Against GAN-based Face Manipulation
• USENIX Security '23 - Union under Duress: Understanding Hazards of Duplicate Resource Mismediation..
• USENIX Security '23 - Unique Identification of 50,000+ Virtual Reality Users from Head & Hand...
• USENIX Security '23 - URET: Universal Robustness Evaluation Toolkit (for Evasion)
• USENIX Security '23 - User Awareness and Behaviors Concerning Encrypted DNS Settings in Web Browsers
• USENIX Security '23 - UVSCAN: Detecting Third-Party Component Usage Violations in IoT Firmware
• USENIX Security '23 - V-Cloak: Intelligibility-, Naturalness- & Timbre-Preserving Real-Time Voice...
• USENIX Security '23 - V1SCAN: Discovering 1-day Vulnerabilities in Reused C/C++ Open-source...
• USENIX Security '23 - VeriZexe: Decentralized Private Computation with Universal Setup
• USENIX Security '23 - VILLAIN: Backdoor Attacks Against Vertical Split Learning
• USENIX Security '23 - VIPER: Spotting Syscall-Guard Variables for Data-Only Attacks
• USENIX Security '23 - VulChecker: Graph-based Vulnerability Localization in Source Code
• USENIX Security '23 - Watch your Watch: Inferring Personality Traits from Wearable Activity Trackers
• USENIX Security '23 - WaterBear: Practical Asynchronous BFT Matching Security Guarantees of...
• USENIX Security '23 - We Really Need to Talk About Session Tickets: A Large-Scale Analysis of...
• USENIX Security '23 - What Are the Chances? Explaining the Epsilon Parameter in Differential Privacy
• USENIX Security '23 - WHIP: Improving Static Vulnerability Detection in Web Application by...
• USENIX Security '23 - Wink: Deniable Secure Messaging
• USENIX Security '23 - Work-From-Home and COVID-19: Trajectories of Endpoint Security Management...
• USENIX Security '23 - X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item...
• USENIX Security '23 - XCheck: Verifying Integrity of 3D Printed Patient-Specific Devices via...
• USENIX Security '23 - xNIDS: Explaining Deep Learning-based Network Intrusion Detection Systems...
• USENIX Security '23 - You Can't See Me: Physical Removal Attacks on LiDAR-based Autonomous...
• USENIX Security '23 - You've Got Report: Measurement and Security Implications of DMARC Reporting
• USENIX Security '23 - Your Exploit is Mine: Instantly Synthesizing Counterattack Smart Contract
• USENIX Security '23 - ZBCAN: A Zero-Byte CAN Defense System
• USENIX Security '23 - zkSaaS: Zero-Knowledge SNARKs as a Service
• USENIX Security '23 - µFUZZ: Redesign of Parallel Fuzzing using Microservice Architecture
• USENIX Security '23 - ​​How Library IT Staff Navigate Privacy and Security Challenges and...
• USENIX Security '23 - “Employees Who Don’t Accept the Time Security Takes Are Not Aware Enough”:...
• USENIX Security '23 - “I wouldn't want my unsafe code to run my pacemaker”: An Interview Study on...
• USENIX Security '23 - “If sighted people know, I should be able to know:” Privacy Perceptions of...
• USENIX Security '23 - “Millions of people are watching you”: Understanding the Digital-Safety...
• USENIX Security '23 - “Security is not my field, I’m a stats guy”: A Qualitative Root Cause...
• USENIX Security '23 - “To Do This Properly, You Need More Resources”: The Hidden Costs of...
• USENIX Security '24 - "Belt and suspenders" or "just red tape"?: Investigating Early Artifacts...
• USENIX Security '24 - "But they have overlooked a few things in Afghanistan:" An Analysis of the...
• USENIX Security '24 - "Did They F***ing Consent to That?": Safer Digital Intimacy via Proactive...
• USENIX Security '24 - "I chose to fight, be brave, and to deal with it": Threat Experiences and...
• USENIX Security '24 - "I Don't Know If We're Doing Good. I Don't Know If We're Doing Bad":...
• USENIX Security '24 - "I feel physically safe but not politically safe": Understanding the Digital..
• USENIX Security '24 - "I just hated it and I want my money back": Data-driven Understanding of...
• USENIX Security '24 - "I really just leaned on my community for support": Barriers, Challenges...
• USENIX Security '24 - "I'm not convinced that they don't collect more than is necessary":...
• USENIX Security '24 - "There are rabbit holes I want to go down that I'm not allowed to go down":...
• USENIX Security '24 - "These results must be false": A usability evaluation of constant-time...
• USENIX Security '24 - "What do you want from theory alone?" Experimenting with Tight Auditing of...
• USENIX Security '24 - "What Keeps People Secure is That They Met The Security Team":...
• USENIX Security '24 - "You have to read 50 different RFCs that contradict each other"...
• USENIX Security '24 - 00SEVen – Re-enabling Virtual Machine Forensics: Introspecting Confidential...
• USENIX Security '24 - 6Sense: Internet-Wide IPv6 Scanning and its Security Applications
• USENIX Security '24 - A Binary-level Thread Sanitizer or Why Sanitizing on the Binary Level is Hard
• USENIX Security '24 - A Broad Comparative Evaluation of Software Debloating Tools
• USENIX Security '24 - A Decade of Privacy-Relevant Android App Reviews: Large Scale Trends
• USENIX Security '24 - A First Physical-World Trajectory Prediction Attack via LiDAR-induced...
• USENIX Security '24 - A Flushing Attack on the DNS Cache
• USENIX Security '24 - A Friend's Eye is A Good Mirror: Synthesizing MCU Peripheral Models from...
• USENIX Security '24 - A High Coverage Cybersecurity Scale Predictive of User Behavior
• USENIX Security '24 - A Linear Reconstruction Approach for Attribute Inference Attacks against...
• USENIX Security '24 - A Mixed-Methods Study on User Experiences and Challenges of Recovery...
• USENIX Security '24 - A NEW HOPE: Contextual Privacy Policies for Mobile Applications and An...
• USENIX Security '24 - A Taxonomy of C Decompiler Fidelity Issues
• USENIX Security '24 - A Wolf in Sheep's Clothing: Practical Black-box Adversarial Attacks for...
• USENIX Security '24 - A World Where We Trust Hard-Won Lessons in Security Research, Technology, ...
• USENIX Security '24 - ABACuS: All-Bank Activation Counters for Scalable and Low Overhead...
• USENIX Security '24 - Abandon All Hope Ye Who Enter Here: A Dynamic, Longitudinal Investigation...
• USENIX Security '24 - Abuse Reporting for Metadata-Hiding Communication Based on Secret Sharing
• USENIX Security '24 - Abuse-Resistant Location Tracking: Balancing Privacy and Safety in the...
• USENIX Security '24 - ACAI: Protecting Accelerator Execution with Arm Confidential Computing...
• USENIX Security '24 - Accelerating Secure Collaborative Machine Learning with Protocol-Aware RDMA
• USENIX Security '24 - ACE: A Model Poisoning Attack on Contribution Evaluation Methods...
• USENIX Security '24 - Adversarial Illusions in Multi-Modal Embeddings
• USENIX Security '24 - Adversary is on the Road: Attacks on Visual SLAM using Unnoticeable...
• USENIX Security '24 - AE-Morpher: Improve Physical Robustness of Adversarial Objects against...
• USENIX Security '24 - Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring...
• USENIX Security '24 - AI Psychiatry: Forensic Investigation of Deep Learning Networks in Memory...
• USENIX Security '24 - All Your Tokens are Belong to Us: Demystifying Address Verification...
• USENIX Security '24 - An Interview Study on Third-Party Cyber Threat Hunting Processes in the U.S...
• USENIX Security '24 - An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models:...
• USENIX Security '24 - Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions...
• USENIX Security '24 - Argus: All your (PHP) Injection-sinks are belong to us.
• USENIX Security '24 - Assessing Suspicious Emails with Banner Warnings Among Blind and Low-Vision...
• USENIX Security '24 - Athena: Analyzing and Quantifying Side Channels of Transport Layer Protocols
• USENIX Security '24 - Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities
• USENIX Security '24 - AttackGNN: Red-Teaming GNNs in Hardware Security Using Reinforcement Learning
• USENIX Security '24 - ATTention Please! An Investigation of the App Tracking Transparency Permission
• USENIX Security '24 - AutoFHE: Automated Adaption of CNNs for Efficient Evaluation over FHE
• USENIX Security '24 - Automated Large-Scale Analysis of Cookie Notice Compliance
• USENIX Security '24 - BackdoorIndicator: Leveraging OOD Data for Proactive Backdoor Detection in...
• USENIX Security '24 - Batch PIR and Labeled PSI with Oblivious Ciphertext Compression
• USENIX Security '24 - BeeBox: Hardening BPF against Transient Execution Attacks
• USENIX Security '24 - Being Transparent is Merely the Beginning: Enforcing Purpose Limitation...
• USENIX Security '24 - Bending microarchitectural weird machines towards practicality
• USENIX Security '24 - Biosignal Authentication Considered Harmful Today
• USENIX Security '24 - Bridging Barriers: A Survey of Challenges and Priorities in the Censorship...
• USENIX Security '24 - BUDAlloc: Defeating Use-After-Free Bugs by Decoupling Virtual Address...
• USENIX Security '24 - CacheWarp: Software-based Fault Injection using Selective State Reset
• USENIX Security '24 - CalcuLatency: Leveraging Cross-Layer Network Latency Measurements to Detect...
• USENIX Security '24 - CAMP: Compiler and Allocator-based Heap Memory Protection
• USENIX Security '24 - CAMP: Compositional Amplification Attacks against DNS
• USENIX Security '24 - Can I Hear Your Face? Pervasive Attack on Voice Authentication Systems with...
• USENIX Security '24 - Can Virtual Reality Protect Users from Keystroke Inference Attacks?
• USENIX Security '24 - CARDSHARK: Understanding and Stablizing Linux Kernel Concurrency Bugs...
• USENIX Security '24 - Cascade: CPU Fuzzing via Intricate Program Generation
• USENIX Security '24 - CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attacks
• USENIX Security '24 - CellularLint: A Systematic Approach to Identify Inconsistent Behavior in...
• USENIX Security '24 - ChainPatrol: Balancing Attack Detection and Classification with Performance...
• USENIX Security '24 - ChainReactor: Automated Privilege Escalation Chain Discovery via AI Planning
• USENIX Security '24 - ClearStamp: A Human-Visible and Robust Model-Ownership Proof based on...
• USENIX Security '24 - Closed-Form Bounds for DP-SGD against Record-level Inference Attacks
• USENIX Security '24 - Co-Designing a Mobile App for Bystander Privacy Protection in Jordanian...
• USENIX Security '24 - CO3: Concolic Co-execution for Firmware
• USENIX Security '24 - Code is not Natural Language: Unlock the Power of Semantics-Oriented Graph...
• USENIX Security '24 - Correction-based Defense Against Adversarial Video Attacks via...
• USENIX Security '24 - Cost-effective Attack Forensics by Recording and Correlating File System...
• USENIX Security '24 - Critical Code Guided Directed Greybox Fuzzing for Commits
• USENIX Security '24 - Cross the Zone: Toward a Covert Domain Hijacking via Shared DNS Infrastructure
• USENIX Security '24 - Cryptographic Analysis of Delta Chat
• USENIX Security '24 - d-DSE: Distinct Dynamic Searchable Encryption Resisting Volume Leakage in...
• USENIX Security '24 - D-Helix: A Generic Decompiler Testing Framework Using Symbolic Differentiation
• USENIX Security '24 - DaCapo: Automatic Bootstrapping Management for Efficient Fully Homomorphic...
• USENIX Security '24 - Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind...
• USENIX Security '24 - DARKFLEECE: Probing the Dark Side of Android Subscription Apps
• USENIX Security '24 - Data Coverage for Guided Fuzzing
• USENIX Security '24 - Data Subjects' Reactions to Exercising Their Right of Access
• USENIX Security '24 - Deciphering Textual Authenticity: A Generalized Strategy through the Lens...
• USENIX Security '24 - DeepEclipse: How to Break White-Box DNN-Watermarking Schemes
• USENIX Security '24 - DEEPTYPE: Refining Indirect Call Targets with Strong Multi-layer Type Analysis
• USENIX Security '24 - Defects-in-Depth: Analyzing the Integration of Effective Defenses against...
• USENIX Security '24 - Defending Against Data Reconstruction Attacks in Federated Learning: An...
• USENIX Security '24 - Demystifying the Security Implications in IoT Device Rental Services
• USENIX Security '24 - Detecting and Mitigating Sampling Bias in Cybersecurity with Unlabeled Data
• USENIX Security '24 - Detecting Kernel Memory Bugs through Inconsistent Memory Management...
• USENIX Security '24 - Devil in the Room: Triggering Audio Backdoors in the Physical World
• USENIX Security '24 - Did the Neurons Read your Book? Document-level Membership Inference for...
• USENIX Security '24 - Diffie-Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi...
• USENIX Security '24 - Digital Discrimination of Users in Sanctioned States: The Case of the Cuba...
• USENIX Security '24 - Dissecting Privacy Perspectives of Websites Around the World: "Aceptar Todo...
• USENIX Security '24 - Divide and Surrender: Exploiting Variable Division Instruction Timing in...
• USENIX Security '24 - DMAAUTH: A Lightweight Pointer Integrity-based Secure Architecture to Defeat..
• USENIX Security '24 - DNN-GP: Diagnosing and Mitigating Model's Faults Using Latent Concepts
• USENIX Security '24 - Do You See How I Pose? Using Poses as an Implicit Authentication Factor for...
• USENIX Security '24 - Does Online Anonymous Market Vendor Reputation Matter?
• USENIX Security '24 - Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large...
• USENIX Security '24 - Don't Waste My Efforts: Pruning Redundant Sanitizer Checks by...
• USENIX Security '24 - DONAPI: Malicious NPM Packages Detector using Behavior Sequence Knowledge...
• USENIX Security '24 - Double Face: Leveraging User Intelligence to Characterize and Recognize...
• USENIX Security '24 - dp-promise: Differentially Private Diffusion Probabilistic Models for Image...
• USENIX Security '24 - DPAdapter: Improving Differentially Private Deep Learning through Noise...
• USENIX Security '24 - DVa: Extracting Victims and Abuse Vectors from Android Accessibility Malware
• USENIX Security '24 - DVSorder: Ballot Randomization Flaws Threaten Voter Privacy
• USENIX Security '24 - EaTVul: ChatGPT-based Evasion Attack Against Software Vulnerability Detection
• USENIX Security '24 - Efficient Privacy Auditing in Federated Learning
• USENIX Security '24 - EL3XIR: Fuzzing COTS Secure Monitors
• USENIX Security '24 - Election Eligibility with OpenID: Turning Authentication into Transferable...
• USENIX Security '24 - ElectionGuard: a Cryptographic Toolkit to Enable Verifiable Elections
• USENIX Security '24 - Enabling Contextual Soft Moderation on Social Media through Contrastive...
• USENIX Security '24 - Enabling Developers, Protecting Users: Investigating Harassment and Safety...
• USENIX Security '24 - Endokernel: A Thread Safe Monitor for Lightweight Subprocess Isolation
• USENIX Security '24 - ENG25519: Faster TLS 1.3 handshake using optimized X25519 and Ed25519
• USENIX Security '24 - Engaging Company Developers in Security Research Studies: A Comprehensive...
• USENIX Security '24 - Enhancing Network Attack Detection with Distributed and In-Network Data...
• USENIX Security '24 - EVOKE: Efficient Revocation of Verifiable Credentials in IoT Networks
• USENIX Security '24 - Exploiting Leakage in Password Managers via Injection Attacks
• USENIX Security '24 - Exploring ChatGPT's Capabilities on Vulnerability Management
• USENIX Security '24 - Exploring Covert Third-party Identifiers through External Storage in the...
• USENIX Security '24 - Exploring digital security and privacy in relative poverty in Germany...
• USENIX Security '24 - Eye of Sauron: Long-Range Hidden Spy Camera Detection and Positioning with...
• USENIX Security '24 - FaceObfuscator: Defending Deep Learning-based Privacy Attacks with Gradient...
• USENIX Security '24 - FakeBehalf: Imperceptible Email Spoofing Attacks against the Delegation...
• USENIX Security '24 - False Claims against Model Ownership Resolution
• USENIX Security '24 - FAMOS: Robust Privacy-Preserving Authentication on Payment Apps via...
• USENIX Security '24 - Fast and Private Inference of Deep Neural Networks by Co-designing...
• USENIX Security '24 - Fast RS-IOP Multivariate Polynomial Commitments and Verifiable Secret Sharing
• USENIX Security '24 - FEASE: Fast and Expressive Asymmetric Searchable Encryption
• USENIX Security '24 - FFXE: Dynamic Control Flow Graph Recovery for Embedded Firmware Binaries
• USENIX Security '24 - Finding Traceability Attacks in the Bluetooth Low Energy Specification...
• USENIX Security '24 - Fingerprinting Obfuscated Proxy Traffic with Encapsulated TLS Handshakes
• USENIX Security '24 - FIRE: Combining Multi-Stage Filtering with Taint Analysis for Scalable...
• USENIX Security '24 - Fledging Will Continue Until Privacy Improves: Empirical Analysis of...
• USENIX Security '24 - Forget and Rewire: Enhancing the Resilience of Transformer-based Models...
• USENIX Security '24 - Formal Security Analysis of Widevine through the W3C EME Standard
• USENIX Security '24 - Formal verification of the PQXDH Post-Quantum key agreement protocol for...
• USENIX Security '24 - Formalizing and Benchmarking Prompt Injection Attacks and Defenses
• USENIX Security '24 - Formalizing Soundness Proofs of Linear PCP SNARKs
• USENIX Security '24 - FraudWhistler: A Resilient, Robust and Plug-and-play Adversarial Example...
• USENIX Security '24 - From One Thousand Pages of Specification to Unveiling Hidden Bugs: Large...
• USENIX Security '24 - From the Childhood Past: Views of Young Adults on Parental Sharing of...
• USENIX Security '24 - Fuzzing BusyBox: Leveraging LLM and Crash Reuse for Embedded Bug Unearthing
• USENIX Security '24 - FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques
• USENIX Security '24 - FVD-DPM: Fine-grained Vulnerability Detection via Conditional Diffusion...
• USENIX Security '24 - GFWeb: Measuring the Great Firewall's Web Censorship at Scale
• USENIX Security '24 - GhostRace: Exploiting and Mitigating Speculative Race Conditions
• USENIX Security '24 - GHunter: Universal Prototype Pollution Gadgets in JavaScript Runtimes
• USENIX Security '24 - GlobalConfusion: TrustZone Trusted Application 0-Days by Design
• USENIX Security '24 - Go Go Gadget Hammer: Flipping Nested Pointers for Arbitrary Data Leakage
• USENIX Security '24 - GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data...
• USENIX Security '24 - GPU Memory Exploitation for Fun and Profit
• USENIX Security '24 - Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD
• USENIX Security '24 - GraphGuard: Private Time-Constrained Pattern Detection Over Streaming...
• USENIX Security '24 - GridSE: Towards Practical Secure Geographic Search via Prefix Symmetric...
• USENIX Security '24 - Guardians of the Galaxy: Content Moderation in the InterPlanetary File System
• USENIX Security '24 - GuideEnricher: Protecting the Anonymity of Ethereum Mixing Service Users...
• USENIX Security '24 - HECKLER: Breaking Confidential VMs with Malicious Interrupts
• USENIX Security '24 - Hermes: Unlocking Security Analysis of Cellular Network Protocols by...
• USENIX Security '24 - Hijacking Attacks against Neural Network by Analyzing Training Data
• USENIX Security '24 - HIVE: A Hardware-assisted Isolated Execution Environment for eBPF on AArch64
• USENIX Security '24 - Holding Secrets Accountable: Auditing Privacy-Preserving Machine Learning
• USENIX Security '24 - How Does a Deep Learning Model Architecture Impact Its Privacy?...
• USENIX Security '24 - How does Endpoint Detection use the MITRE ATT&CK Framework?
• USENIX Security '24 - How WEIRD is Usable Privacy and Security Research?
• USENIX Security '24 - HYPERPILL: Fuzzing for Hypervisor-bugs by Leveraging the Hardware...
• USENIX Security '24 - I Experienced More than 10 DeFi Scams: On DeFi Users' Perception of...
• USENIX Security '24 - I/O-Efficient Dynamic Searchable Encryption meets Forward & Backward Privacy
• USENIX Security '24 - iHunter: Hunting Privacy Violations at Scale in the Software Supply Chain...
• USENIX Security '24 - Improving Indirect-Call Analysis in LLVM with Type and Data-Flow Co-Analysis
• USENIX Security '24 - Improving ML-based Binary Function Similarity Detection by Assessing and...
• USENIX Security '24 - Improving the Ability of Thermal Radiation Based Hardware Trojan Detection
• USENIX Security '24 - In Wallet We Trust: Bypassing the Digital Wallets Payment Security for Free...
• USENIX Security '24 - Indirector: High-Precision Branch Target Injection Attacks Exploiting the...
• USENIX Security '24 - Inf2Guard: An Information-Theoretic Framework for Learning...
• USENIX Security '24 - Inference of Error Specifications and Bug Detection Using Structural...
• USENIX Security '24 - Information Flow Control in Machine Learning through Modular Model...
• USENIX Security '24 - INSIGHT: Attacking Industry-Adopted Learning Resilient Logic Locking...
• USENIX Security '24 - InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege...
• USENIX Security '24 - Instruction Backdoor Attacks Against Customized LLMs
• USENIX Security '24 - Intellectual Property Exposure: Subverting and Securing Intellectual...
• USENIX Security '24 - Into the Dark: Unveiling Internal Site Search Abused for Black Hat SEO
• USENIX Security '24 - Invalidate+Compare: A Timer-Free GPU Cache Attack Primitive
• USENIX Security '24 - Investigating Moderation Challenges to Combating Hate and Harassment: The...
• USENIX Security '24 - Invisibility Cloak: Proactive Defense Against Visual Game Cheating
• USENIX Security '24 - IoT Market Dynamics: An Analysis of Device Sales, Security and Privacy...
• USENIX Security '24 - Is It a Trap? A Large-scale Empirical Study And Comprehensive Assessment...
• USENIX Security '24 - It Doesn't Look Like Anything to Me: Using Diffusion Model to Subvert...
• USENIX Security '24 - K-Waay: Fast and Deniable Post-Quantum X3DH without Ring Signatures
• USENIX Security '24 - Key Recovery Attacks on Approximate Homomorphic Encryption with...
• USENIX Security '24 - KnowPhish: Large Language Models Meet Multimodal Knowledge Graphs for...
• USENIX Security '24 - LaKey: Efficient Lattice-Based Distributed PRFs Enable Scalable Distributed...
• USENIX Security '24 - Landscape More Secure Than Portrait? Zooming Into the Directionality of...
• USENIX Security '24 - LanDscAPe: Exploring LDAP Weaknesses and Data Leaks at Internet Scale
• USENIX Security '24 - Large Language Models for Code Analysis: Do LLMs Really Do Their Job?
• USENIX Security '24 - LaserAdv: Laser Adversarial Attacks on Speech Recognition Systems
• USENIX Security '24 - Leakage-Abuse Attacks Against Structured Encryption for SQL
• USENIX Security '24 - Learning with Semantics: Towards a Semantics-Aware Routing Anomaly Detection
• USENIX Security '24 - Length Leakage in Oblivious Data Access Mechanisms
• USENIX Security '24 - Less Defined Knowledge and More True Alarms: Reference-based Phishing...
• USENIX Security '24 - Less is More: Revisiting the Gaussian Mechanism for Differential Privacy
• USENIX Security '24 - Leveraging Semantic Relations in Code and Data to Enhance Taint Analysis of...
• USENIX Security '24 - LLM-Fuzzer: Scaling Assessment of Large Language Model Jailbreaks
• USENIX Security '24 - Logic Gone Astray: A Security Analysis Framework for the Control Plane...
• USENIX Security '24 - Loopy Hell(ow): Infinite Traffic Loops at the Application Layer
• USENIX Security '24 - Lotto: Secure Participant Selection against Adversarial Servers in Federated..
• USENIX Security '24 - LR-Miner: Static Race Detection in OS Kernels by Mining Locking Rules
• USENIX Security '24 - Lurking in the shadows: Unveiling Stealthy Backdoor Attacks agains...
• USENIX Security '24 - Machine Learning needs Better Randomness Standards: Randomised Smoothing...
• USENIX Security '24 - MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation..
• USENIX Security '24 - Making Them Ask and Answer: Jailbreaking Large Language Models in Few...
• USENIX Security '24 - Malla: Demystifying Real-world Large Language Model Integrated Malicious...
• USENIX Security '24 - Max Attestation Matters: Making Honest Parties Lose Their Incentives in...
• USENIX Security '24 - MD-ML: Super Fast Privacy-Preserving Machine Learning for Malicious...
• USENIX Security '24 - Mempool Privacy via Batched Threshold Encryption: Attacks and Defense
• USENIX Security '24 - MetaSafe: Compiling for Protecting Smart Pointer Metadata to Ensure Safe...
• USENIX Security '24 - MFKDF: Multiple Factors Knocked Down Flat
• USENIX Security '24 - MicGuard: A Comprehensive Detection System against Out-of-band Injection...
• USENIX Security '24 - MIST: Defending Against Membership Inference Attacks Through...
• USENIX Security '24 - MOAT: Towards Safe BPF Kernel Extension
• USENIX Security '24 - ModelGuard: Information-Theoretic Defense Against Model Extraction Attacks
• USENIX Security '24 - Moderating Illicit Online Image Promotion for Unsafe User Generated Content...
• USENIX Security '24 - More Simplicity for Trainers, More Opportunity for Attackers: Black-Box...
• USENIX Security '24 - Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models
• USENIX Security '24 - MultiFuzz: A Multi-Stream Fuzzer For Testing Monolithic Firmware
• USENIX Security '24 - MUSES: Efficient Multi-User Searchable Encrypted Database
• USENIX Security '24 - Navigating the Privacy Compliance Maze: Understanding Risks with...
• USENIX Security '24 - Navigating Traumatic Stress Reactions During Computer Security Interventions
• USENIX Security '24 - Near-Optimal Constrained Padding for Object Retrievals with Dependencies
• USENIX Security '24 - NetShaper: A Differentially Private Network Side-Channel Mitigation System
• USENIX Security '24 - Neural Network Semantic Backdoor Detection and Mitigation: A Causality-Based..
• USENIX Security '24 - Notus: Dynamic Proofs of Liabilities from Zero-knowledge RSA Accumulators
• USENIX Security '24 - O-Ring and K-Star: Efficient Multi-party Private Set Intersection
• USENIX Security '24 - OblivGNN: Oblivious Inference on Transductive and Inductive Graph Neural...
• USENIX Security '24 - On a Collision Course: Unveiling Wireless Attacks to the Aircraft Traffic...
• USENIX Security '24 - On Bridging the Gap between Control Flow Integrity and Attestation Schemes
• USENIX Security '24 - On Data Fabrication in Collaborative Vehicular Perception: Attacks and...
• USENIX Security '24 - On the Criticality of Integrity Protection in 5G Fronthaul Networks
• USENIX Security '24 - On the Difficulty of Defending Contrastive Learning against Backdoor Attacks
• USENIX Security '24 - Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in...
• USENIX Security '24 - Opportunistic Data Flow Integrity for Real-time Cyber-physical Systems...
• USENIX Security '24 - OptFuzz: Optimization Path Guided Fuzzing for JavaScript JIT Compilers
• USENIX Security '24 - OPTIKS: An Optimized Key Transparency System
• USENIX Security '24 - OPTISAN: Using Multiple Spatial Error Defenses to Optimize Stack Memory...
• USENIX Security '24 - ORANalyst: Systematic Testing Framework for Open RAN Implementations
• USENIX Security '24 - Orbital Trust and Privacy: SoK on PKI and Location Privacy Challenges in...
• USENIX Security '24 - Page-Oriented Programming: Subverting Control-Flow Integrity of Commodity..
• USENIX Security '24 - Pandawan: Quantifying Progress in Linux-based Firmware Rehosting
• USENIX Security '24 - PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation...
• USENIX Security '24 - Peep With A Mirror: Breaking The Integrity of Android App Sandboxing via...
• USENIX Security '24 - Penetration Vision through Virtual Reality Headsets: Identifying 360-degree...
• USENIX Security '24 - PentestGPT: Evaluating and Harnessing Large Language Models for Automated...
• USENIX Security '24 - PEPSI: Practically Efficient Private Set Intersection in the Unbalanced...
• USENIX Security '24 - PerfOMR: Oblivious Message Retrieval with Reduced Communication and...
• USENIX Security '24 - PhishDecloaker: Detecting CAPTCHA-cloaked Phishing Websites via Hybrid...
• USENIX Security '24 - PINE: Efficient Verification of a Euclidean Norm Bound of a Secret-Shared...
• USENIX Security '24 - Pixel Thief: Exploiting SVG Filter Leakage in Firefox and Chrome
• USENIX Security '24 - Pixel+ and Pixel++: Compact and Efficient Forward-Secure Multi-Signatures...
• USENIX Security '24 - PIXELMOD: Improving Soft Moderation of Visual Misleading Information on...
• USENIX Security '24 - PointerGuess: Targeted Password Guessing Model Using Pointer Mechanism
• USENIX Security '24 - POPSTAR: Lightweight Threshold Reporting with Reduced Leakage
• USENIX Security '24 - Practical Data-Only Attack Generation
• USENIX Security '24 - Practical Security Analysis of Zero-Knowledge Proof Circuits
• USENIX Security '24 - Privacy Side Channels in Machine Learning Systems
• USENIX Security '24 - Privacy-Preserving Data Aggregation with Public Verifiability Against...
• USENIX Security '24 - PrivImage: Differentially Private Synthetic Image Generation using...
• USENIX Security '24 - Prompt Stealing Attacks Against Text-to-Image Generation Models
• USENIX Security '24 - Property Existence Inference against Generative Models
• USENIX Security '24 - PURE: Payments with UWB RElay-protectio
• USENIX Security '24 - PURL: Safe and Effective Sanitization of Link Decoration
• USENIX Security '24 - Quantifying Privacy Risks of Prompts in Visual Prompt Learning
• USENIX Security '24 - Query Recovery from Easy to Hard: Jigsaw Attack against SSE
• USENIX Security '24 - Rabbit-Mix: Robust Algebraic Anonymous Broadcast from Additive Bases
• USENIX Security '24 - Racing for TLS Certificate Validation: A Hijacker's Guide to the Android...
• USENIX Security '24 - Racing on the Negative Force: Efficient Vulnerability Root-Cause Analysis...
• USENIX Security '24 - RADIUS/UDP Considered Harmful
• USENIX Security '24 - Reconstructing training data from document understanding models
• USENIX Security '24 - RECORD: A RECeption-Only Region Determination Attack on LEO Satellite Users
• USENIX Security '24 - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
• USENIX Security '24 - Relation Mining Under Local Differential Privacy
• USENIX Security '24 - REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative...
• USENIX Security '24 - Remote Keylogging Attacks in Multi-user VR Applications
• USENIX Security '24 - ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with...
• USENIX Security '24 - Rethinking the Invisible Protection against Unauthorized Image Usage in...
• USENIX Security '24 - Rethinking the Security Threats of Stale DNS Glue Records
• USENIX Security '24 - Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron...
• USENIX Security '24 - RustSan: Retrofitting AddressSanitizer for Efficient Sanitization of Rust
• USENIX Security '24 - SafeFetch: Practical Double-Fetch Protection with Kernel-Fetch Caching
• USENIX Security '24 - SAIN: Improving ICS Attack Detection Sensitivity via State-Aware Invariants
• USENIX Security '24 - Scalable Multi-Party Computation Protocols for Machine Learning in the...
• USENIX Security '24 - Scalable Private Set Union, with Stronger Security
• USENIX Security '24 - Scalable Zero-knowledge Proofs for Non-linear Functions in Machine Learning
• USENIX Security '24 - SCAVY: Automated Discovery of Memory Corruption Targets in Linux Kernel for...
• USENIX Security '24 - SDFuzz: Target States Driven Directed Fuzzing
• USENIX Security '24 - SeaK: Rethinking the Design of a Secure Allocator for OS Kernel
• USENIX Security '24 - Secure Account Recovery for a Privacy-Preserving Web Service
• USENIX Security '24 - Security and Privacy Analysis of Samsung's Crowd-Sourced Bluetooth...
• USENIX Security '24 - Security and Privacy Software Creators' Perspectives on Unintended...
• USENIX Security '24 - SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models
• USENIX Security '24 - ShadowBound: Efficient Heap Memory Protection Through Advanced Metadata...
• USENIX Security '24 - Shaken, not Stirred - Automated Discovery of Subtle Attacks on Protocols...
• USENIX Security '24 - Shesha: Multi-head Microarchitectural Leakage Discovery in new-generation...
• USENIX Security '24 - SHiFT: Semi-hosted Fuzz Testing for Embedded Applications
• USENIX Security '24 - Simulated Stress: A Case Study of the Effects of a Simulated Phishing...
• USENIX Security '24 - SIMurai: Slicing Through the Complexity of SIM Card Security Research
• USENIX Security '24 - Single Pass Client-Preprocessing Private Information Retrieval
• USENIX Security '24 - SledgeHammer: Amplifying Rowhammer via Bank-level Parallelism
• USENIX Security '24 - SLUBStick: Arbitrary Memory Writes through Practical Software Cross-Cache...
• USENIX Security '24 - SmartCookie: Blocking Large-Scale SYN Floods with a Split-Proxy Defense...
• USENIX Security '24 - Smudged Fingerprints: Characterizing and Improving the Performance of Web...
• USENIX Security '24 - SnailLoad: Exploiting Remote Network Latency Measurements without JavaScript
• USENIX Security '24 - Snowflake, a censorship circumvention system using temporary WebRTC proxies
• USENIX Security '24 - SOAP: A Social Authentication Protocol
• USENIX Security '24 - SoK (or SoLK?): On the Quantitative Study of Sociodemographic Factors and...
• USENIX Security '24 - SoK: All You Need to Know About On-Device ML Model Extraction - The Gap...
• USENIX Security '24 - SoK: Neural Network Extraction Through Physical Side Channels
• USENIX Security '24 - SoK: Security of Programmable Logic Controllers
• USENIX Security '24 - SoK: State of the Krawlers – Evaluating the Effectiveness of Crawling...
• USENIX Security '24 - SoK: The Good, The Bad, and The Unbalanced: Measuring Structural Limitations..
• USENIX Security '24 - SoK: What Don't We Know? Understanding Security Vulnerabilities in SNARKs
• USENIX Security '24 - SpecLFB: Eliminating Cache Side Channels in Speculative Executions
• USENIX Security '24 - Speculative Denial-of-Service Attacks In Ethereum
• USENIX Security '24 - SPF Beyond the Standard: Management and Operational Challenges in Practice ...
• USENIX Security '24 - Spider-Scents: Grey-box Database-aware Web Scanning for Stored XSS
• USENIX Security '24 - Spill the TeA: An Empirical Study of Trusted Application Rollback...
• USENIX Security '24 - Splitting the Difference on Adversarial Training
• USENIX Security '24 - SpotProxy: Rediscovering the Cloud for Censorship Circumvention
• USENIX Security '24 - Sprints: Intermittent Blockchain PoW Mining
• USENIX Security '24 - SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications
• USENIX Security '24 - Stateful Least Privilege Authorization for the Cloud
• USENIX Security '24 - Stop, Don't Click Here Anymore: Boosting Website Fingerprinting By...
• USENIX Security '24 - Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on...
• USENIX Security '24 - SWOOSH: Efficient Lattice-Based Non-Interactive Key Exchange
• USENIX Security '24 - SymBisect: Accurate Bisection for Fuzzer-Exposed Vulnerabilities
• USENIX Security '24 - SymFit: Making the Common (Concrete) Case Fast for Binary-Code Concolic...
• USENIX Security '24 - Sync+Sync: A Covert Channel Built on fsync with Storage
• USENIX Security '24 - Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation
• USENIX Security '24 - TAPFixer: Automatic Detection and Repair of Home Automation Vulnerabilities...
• USENIX Security '24 - Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number...
• USENIX Security '24 - That Doesn't Go There: Attacks on Shared State in Multi-User Augmented...
• USENIX Security '24 - The Challenges of Bringing Cryptography from Research Papers to Products:...
• USENIX Security '24 - The Decisive Power of Indecision: Low-Variance Risk-Limiting Audits and...
• USENIX Security '24 - The Effect of Design Patterns on (Present and Future) Cookie Consent Decisions
• USENIX Security '24 - The Imitation Game: Exploring Brand Impersonation Attacks on Social Media...
• USENIX Security '24 - The Impact of Exposed Passwords on Honeyword Efficacy
• USENIX Security '24 - The Unpatchables: Why Municipalities Persist in Running Vulnerable Hosts
• USENIX Security '24 - Tickets or Privacy? Understand the Ecosystem of Chinese Ticket Grabbing Apps
• USENIX Security '24 - Tossing in the Dark: Practical Bit-Flipping on Gray-box Deep Neural Networks..
• USENIX Security '24 - Toward Unbiased Multiple-Target Fuzzing with Path Diversity
• USENIX Security '24 - Towards an Effective Method of ReDoS Detection for Non-backtracking Engines
• USENIX Security '24 - Towards Generic Database Management System Fuzzing
• USENIX Security '24 - Towards More Practical Threat Models in Artificial Intelligence Security
• USENIX Security '24 - Towards Privacy and Security in Private Clouds: A Representative Survey on...
• USENIX Security '24 - Towards Privacy-Preserving Social-Media SDKs on Android
• USENIX Security '24 - Transferability of White-box Perturbations: Query-Efficient Adversarial...
• USENIX Security '24 - True Attacks, Attack Attempts, or Benign Triggers? An Empirical Measurement...
• USENIX Security '24 - Trust Me If You Can – How Usable Is Trusted Types In Practice?
• USENIX Security '24 - Two Shuffles Make a RAM: Improved Constant Overhead Zero Knowledge RAM
• USENIX Security '24 - TYGR: Type Inference on Stripped Binaries using Graph Neural Networks
• USENIX Security '24 - UBA-Inf: Unlearning Activated Backdoor Attack with Influence-Driven Camouflage
• USENIX Security '24 - UIHash: Detecting Similar Android UIs through Grid-Based Visual Appearance...
• USENIX Security '24 - Unbalanced Circuit-PSI from Oblivious Key-Value Retrieval
• USENIX Security '24 - Uncovering the Limits of Machine Learning for Automatic Vulnerability...
• USENIX Security '24 - Understanding Ethereum Mempool Security under Asymmetric DoS by Symbolized ...
• USENIX Security '24 - Understanding Help-Seeking and Help-Giving on Social Media for Image-Based...
• USENIX Security '24 - Understanding How to Inform Blind and Low-Vision Users about Data Privacy...
• USENIX Security '24 - Understanding the Security and Privacy Implications of Online Toxic Content...
• USENIX Security '24 - Unleashing the Power of Type-Based Call Graph Construction by Using Regional..
• USENIX Security '24 - Unpacking Privacy Labels: A Measurement and Developer Perspective on...
• USENIX Security '24 - Unveiling IoT Security in Reality: A Firmware-Centric Journey
• USENIX Security '24 - Unveiling the Hunter-Gatherers: Exploring Threat Hunting Practices and...
• USENIX Security '24 - Unveiling the Secrets without Data: Can Graph Neural Networks Be Exploited...
• USENIX Security '24 - Using My Functions Should Follow My Checks: Understanding and Detecting...
• USENIX Security '24 - Verify your Labels! Trustworthy Predictions and Datasets via Confidence Scores
• USENIX Security '24 - VibSpeech: Exploring Practical Wideband Eavesdropping via Bandlimited...
• USENIX Security '24 - VOGUES: Validation of Object Guise using Estimated Components
• USENIX Security '24 - Voice App Developer Experiences with Alexa and Google Assistant: Juggling...
• USENIX Security '24 - VoltSchemer: Use Voltage Noise to Manipulate Your Wireless Charger
• USENIX Security '24 - Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction...
• USENIX Security '24 - Vulnerability-oriented Testing for RESTful APIs
• USENIX Security '24 - VulSim: Leveraging Similarity of Multi-Dimensional Neighbor Embeddings...
• USENIX Security '24 - Web Platform Threats: Automated Detection of Web Security Issues With WPT
• USENIX Security '24 - WEBRR: A Forensic System for Replaying and Investigating Web-Based Attacks...
• USENIX Security '24 - What IF Is Not Enough? Fixing Null Pointer Dereference With Contextual Check
• USENIX Security '24 - What Was Your Prompt? A Remote Keylogging Attack on AI Assistants
• USENIX Security '24 - When the User Is Inside the User Interface: An Empirical Study of UI...
• USENIX Security '24 - When Threads Meet Interrupts: Effective Static Detection of Interrupt-Based...
• USENIX Security '24 - WhisperFuzz: White-Box Fuzzing for Detecting and Locating Timing...
• USENIX Security '24 - Why Aren't We Using Passkeys? Obstacles Companies Face Deploying FIDO2...
• USENIX Security '24 - Windows into the Past: Exploiting Legacy Crypto in Modern OS's Kerberos...
• USENIX Security '24 - Wireless Signal Injection Attacks on VSAT Satellite Modems
• USENIX Security '24 - With Great Power Come Great Side Channels: Statistical Timing Side-Channel...
• USENIX Security '24 - Xplain: Analyzing Invisible Correlations in Model Explanation
• USENIX Security '24 - Yes, One-Bit-Flip Matters! Universal DNN Model Inference Depletion with...
• USENIX Security '24 - You Can Obfuscate, but You Cannot Hide: CrossPoint Attacks against Network...
• USENIX Security '24 - You Cannot Escape Me: Detecting Evasions of SIEM Rules in Enterprise Networks
• USENIX Security '24 - Your Firmware Has Arrived: A Study of Firmware Update Vulnerabilities
• USENIX Security '24 - YPIR: High-Throughput Single-Server PIR with Silent Preprocessing
• USENIX Security '24 - ZenHammer: Rowhammer Attacks on AMD Zen-based Platforms
• USENIX Security '24 - Zero-setup Intermediate-rate Communication Guarantees in a Global Internet
• USENIX Security '24 - zkCross: A Novel Architecture for Cross-Chain Privacy-Preserving Auditing
• USENIX Security '24 - ZKSMT: A VM for Proving SMT Theorems in Zero Knowledge
• USENIX Security '24 - π-Jack: Physical-World Adversarial Attack on Monocular Depth Estimation...
• USENIX Security '25 (Enigma Track) - AI Red Teaming and Automation: Exploring Societal Risks in...
• USENIX Security '25 (Enigma Track) - Building a Voting Machine Everyone Can Trust
• USENIX Security '25 (Enigma Track) - Digital Product Safety: Rejecting Software as Magic
• USENIX Security '25 (Enigma Track) - Everything Old Is New Again: Legal Restrictions on...
• USENIX Security '25 (Enigma Track) - Fighting Fire with Venom: Adversarial Defense Against...
• USENIX Security '25 (Enigma Track) - Inside Out: Security Designed With, Not For
• USENIX Security '25 (Enigma Track) - Please (Don't) Stop the Music: Adversarial Red-Teaming of AI...
• USENIX Security '25 (Enigma Track) - Risk Is Not a Hammer, and Most Hazards Aren't Nails
• USENIX Security '25 (Enigma Track) - Securing Meta's Production PKI Credentials
• USENIX Security '25 (Enigma Track) - Securing Packages in npm, Homebrew, PyPI, Maven Central, and...
• USENIX Security '25 (Enigma Track) - Security Theater Is Canceled: Time for a Real Show
• USENIX Security '25 (Enigma Track) - The Power of Community: Insights and Opportunities
• USENIX Security '25 (Enigma Track) - Trust Agility in an Era of Transient Ties: Rethinking TLS...
• USENIX Security '25 (Enigma Track) - Trusted Hardware for AI Workloads: Extending Confidential...
• USENIX Security '25 (Enigma Track) - Usernames, Passwords, and Security
• USENIX Security '25 (Enigma Track) - Zombie Devices Are Running Amuck!
• USENIX Security '25 - "Please don't send that bot anything": A Mixed-methods Study of Personal...
• USENIX Security '25 - "That's my perspective from 30 years of doing this": An Interview Study on...
• USENIX Security '25 - 'Hey mum, I dropped my phone down the toilet': Investigating Hi Mum...
• USENIX Security '25 - A Comprehensive Formal Security Analysis of OPC UA
• USENIX Security '25 - A First Look at Governments' Enterprise Security Guidance
• USENIX Security '25 - A Formal Analysis of Apple's iMessage PQ3 Protocol
• USENIX Security '25 - Abusability of Automation Apps in Intimate Partner Violence
• USENIX Security '25 - Achilles: A Formal Framework of Leaking Secrets from Signature Schemes via...
• USENIX Security '25 - Addressing the Address Books' (Interdependent) Privacy Issues
• USENIX Security '25 - AirTag-Facilitated Stalking Protection: Evaluating Unwanted Tracking
• USENIX Security '25 - ALERT: Machine Learning-Enhanced Risk Estimation for Databases Supporting...
• USENIX Security '25 - An Industry Interview Study of Software Signing for Supply Chain Security
• USENIX Security '25 - Ares: Comprehensive Path Hijacking Detection via Routing Tree
• USENIX Security '25 - Ariadne: Navigating through the Labyrinth of Data-Driven Customization...
• USENIX Security '25 - Assessing the Aftermath: the Effects of a Global Takedown against...
• USENIX Security '25 - AutoLabel: Automated Fine-Grained Log Labeling for Cyber Attack Dataset
• USENIX Security '25 - BGP Vortex: Update Message Floods Can Create Internet Instabilities
• USENIX Security '25 - BLens: Contrastive Captioning of Binary Functions using Ensemble Embedding
• USENIX Security '25 - BLuEMan: A Stateful Simulation-based Fuzzing Framework for Open-Source RTOS...
• USENIX Security '25 - Bots can Snoop: Uncovering and Mitigating Privacy Risks of Bots in Group Chats
• USENIX Security '25 - Branch Privilege Injection: Compromising Spectre v2 Hardware Mitigations by...
• USENIX Security '25 - Breaking the Blindfold: Deep Learning-based Blind Side-channel Analysis
• USENIX Security '25 - Breaking the Layer Barrier: Remodeling Private Transformer Inference with...
• USENIX Security '25 - BulletCT: Towards More Scalable Ring Confidential Transactions With...
• USENIX Security '25 - CAMP in the Odyssey: Provably Robust Reinforcement Learning with Certified...
• USENIX Security '25 - Catch-22: Uncovering Compromised Hosts using SSH Public Keys
• USENIX Security '25 - CloudFlow: Identifying Security-sensitive Data Flows in Serverless
• USENIX Security '25 - Confusing Value with Enumeration: Studying the Use of CVEs in Academia
• USENIX Security '25 - Context Matters: Qualitative Insights into Developers' Approaches and...
• USENIX Security '25 - Demystifying the (In)Security of QR Code-based Login in Real-world Deployments
• USENIX Security '25 - Distributed Private Aggregation in Graph Neural Networks
• USENIX Security '25 - DNS FLaRE: A Flush-Reload Attack on DNS Forwarders
• USENIX Security '25 - Double-Edged Shield: On the Fingerprintability of Customized Ad Blockers
• USENIX Security '25 - DP-BREM: Differentially-Private and Byzantine-Robust Federated Learning...
• USENIX Security '25 - Dumbo-MPC: Efficient Fully Asynchronous MPC with Optimal Resilience
• USENIX Security '25 - ECC.fail: Mounting Rowhammer Attacks on DDR4 Servers with ECC Memory
• USENIX Security '25 - EchoLLM: LLM-Augmented Acoustic Eavesdropping Attack on Bone Conduction...
• USENIX Security '25 - Efficient Ranking, Order Statistics, and Sorting under CKKS
• USENIX Security '25 - ELFuzz: Efficient Input Generation via LLM-driven Synthesis Over Fuzzer Space
• USENIX Security '25 - EmbedX: Embedding-Based Cross-Trigger Backdoor Attack Against Large Language
• USENIX Security '25 - Enabling Low-Cost Secure Computing on Untrusted In-Memory Architectures
• USENIX Security '25 - Encarsia: Evaluating CPU Fuzzers via Automatic Bug Injection
• USENIX Security '25 - Encrypted Access Logging for Online Accounts: Device Attributions without...
• USENIX Security '25 - Endangered Privacy: Large-Scale Monitoring of Video Streaming Services
• USENIX Security '25 - Enhanced Label-Only Membership Inference Attacks with Fewer Queries
• USENIX Security '25 - eSIMplicity or eSIMplification? Privacy and Security Risks in the eSIM...
• USENIX Security '25 - Exploiting Inaccurate Branch History in Side-Channel Attacks
• USENIX Security '25 - FABLE: Batched Evaluation on Confidential Lookup Tables in 2PC
• USENIX Security '25 - FIXX: FInding eXploits from eXamples
• USENIX Security '25 - Found in Translation: A Generative Language Modeling Approach to Memory...
• USENIX Security '25 - From Constraints to Cracks: Constraint Semantic Inconsistencies as
• USENIX Security '25 - From Purity to Peril: Backdooring Merged Models From "Harmless" Benign...
• USENIX Security '25 - Fuzzing the PHP Interpreter via Dataflow Fusion
• USENIX Security '25 - General-Purpose f-DP Estimation and Auditing in a Black-Box Setting
• USENIX Security '25 - Gotta Detect 'Em All: Fake Base Station and Multi-Step Attack Detection...
• USENIX Security '25 - GPUHammer: Rowhammer Attacks on GPU Memories are Practical
• USENIX Security '25 - GraphAce: Secure Two-Party Graph Analysis Achieving Communication Efficiency
• USENIX Security '25 - H2O2RAM: A High-Performance Hierarchical Doubly Oblivious RAM
• USENIX Security '25 - Harness: Transparent and Lightweight Protection of Vehicle Control on...
• USENIX Security '25 - HubBub: Contention-Based Side-Channel Attacks on USB Hubs
• USENIX Security '25 - I Know What You Said: Unveiling Hardware Cache Side-Channels in Local Large
• USENIX Security '25 - IDFuzz: Intelligent Directed Grey-box Fuzzing
• USENIX Security '25 - Leuvenshtein: Efficient FHE-based Edit Distance Computation with Single...
• USENIX Security '25 - LLFuzz: An Over-the-Air Dynamic Testing Framework for Cellular Baseband...
• USENIX Security '25 - Lost in Translation: Enabling Confused Deputy Attacks on EDA Software...
• USENIX Security '25 - Malicious LLM-Based Conversational AI Makes Users Reveal Personal Information
• USENIX Security '25 - McSee: Evaluating Advanced Rowhammer Attacks and Defenses via Automated...
• USENIX Security '25 - My ZIP isn't your ZIP: Identifying and Exploiting Semantic Gaps Between ZIP
• USENIX Security '25 - Onions Got Puzzled: On the Challenges of Mitigating Denial-of-Service...
• USENIX Security '25 - OwlC: Compiling Security Protocols to Verified, Secure...
• USENIX Security '25 - Pig in a Poke: Automatically Detecting and Exploiting Link Following...
• USENIX Security '25 - POPS: From History to Mitigation of DNS Cache Poisoning Attacks
• USENIX Security '25 - Posthammer: Pervasive Browser-based Rowhammer Attacks with Postponed...
• USENIX Security '25 - Predictive Response Optimization: Using Reinforcement Learning to...
• USENIX Security '25 - Private Investigator: Extracting Personally Identifiable Information...
• USENIX Security '25 - Rectifying Privacy and Efficacy Measurements in Machine Unlearning...
• USENIX Security '25 - REVDECODE: Enhancing Binary Function Matching with Context-Aware Graph...
• USENIX Security '25 - RollingEvidence: Autoregressive Video Evidence via Rolling Shutter Effect
• USENIX Security '25 - Rowhammer-Based Trojan Injection: One Bit Flip Is Sufficient...
• USENIX Security '25 - Save what must be saved: Secure context switching with Sailor
• USENIX Security '25 - Scoop: Mitigation of Recapture Attacks on Provenance-Based...
• USENIX Security '25 - Secure Caches for Compartmentalized Software
• USENIX Security '25 - Security and Privacy Advice for UPI Users in India
• USENIX Security '25 - Self-interpreting Adversarial Images
• USENIX Security '25 - SelfDefend: LLMs Can Defend Themselves against Jailbreaking in...
• USENIX Security '25 - Serverless Functions Made Confidential and Efficient with Split Containers
• USENIX Security '25 - Shadowed Realities: An Investigation of UI Attacks in WebXR
• USENIX Security '25 - SNI5GECT: A Practical Approach to Inject aNRchy into 5G NR
• USENIX Security '25 - SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against...
• USENIX Security '25 - SoK: Automated TTP Extraction from CTI Reports – Are We There Yet?
• USENIX Security '25 - SoK: Data Reconstruction Attacks Against Machine Learning Models...
• USENIX Security '25 - SoK: Efficiency Robustness of Dynamic Deep Learning Systems
• USENIX Security '25 - SoK: Gradient Inversion Attacks in Federated Learning
• USENIX Security '25 - SoK: Inaccessible & Insecure: An Exposition of Authentication Challenges Faced
• USENIX Security '25 - SoK: So, You Think You Know All About Secure Randomized Caches?
• USENIX Security '25 - SoK: Understanding zk-SNARKs: The Gap Between Research and Practice
• USENIX Security '25 - Sometimes Simpler is Better: A Comprehensive Analysis of State-of-the-Art...
• USENIX Security '25 - SpeechGuard: Recoverable and Customizable Speech Privacy Protection...
• USENIX Security '25 - Stack Overflow Meets Replication: Security Research Amid Evolving...
• USENIX Security '25 - Surviving in Dark Forest: Towards Evading the Attacks from Front-Running Bots
• USENIX Security '25 - Systematic Evaluation of Randomized Cache Designs against Cache Occupancy
• USENIX Security '25 - TapTrap: Animation-Driven Tapjacking on Android
• USENIX Security '25 - The Cost of Performance: Breaking ThreadX with Kernel Object Masquerading...
• USENIX Security '25 - Thunderdome: Timelock-Free Rationally-Secure Virtual Channels
• USENIX Security '25 - TimeTravel: Real-time Timing Drift Attack on System Time Using Acoustic Waves
• USENIX Security '25 - TORCHLIGHT: Shedding LIGHT on Real-World Attacks on Cloudless IoT Devices
• USENIX Security '25 - Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level...
• USENIX Security '25 - Tracking You from a Thousand Miles Away! Turning a Bluetooth Device into...
• USENIX Security '25 - Treebeard: A Scalable and Fault Tolerant ORAM Datastore
• USENIX Security '25 - TRex: Practical Type Reconstruction for Binary Code
• USENIX Security '25 - Understanding How Users Prepare for and React to Smartphone Theft
• USENIX Security '25 - Universal Cross-app Attacks: Exploiting and Securing OAuth 2.0 in...
• USENIX Security '25 - Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety...
• USENIX Security '25 - V-ORAM: A Versatile and Adaptive ORAM Framework with Service Transformation...
• USENIX Security '25 - Vest: Verified, Secure, High-Performance Parsing and Serialization for Rust
• USENIX Security '25 - Vulnerability of Text-Matching in ML/AI Conference Reviewer Assignments...
• USENIX Security '25 - Waltzz: WebAssembly Runtime Fuzzing with Stack-Invariant Transformation
• USENIX Security '25 - Websites' Global Privacy Control Compliance at Scale and over Time
• USENIX Security '25 - X.509DoS: Exploiting and Detecting Denial-of-Service Vulnerabilities in
• USENIX Security '25 - Your Shield is My Sword: A Persistent Denial-of-Service Attack via the...
• USENIX Security '25- A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks
• USENIX Security '25- ORTHRUS: Achieving High Quality of Attribution in Provenance-based Intrusion...
• USENIX Security '25- Red Bleed: A Pragmatic Near-Infrared Presentation Attack on Facial Biometric...
• USENIX Security '26 (Enigma Track) - Breaking the Lethal Trifecta: Secure Agentic Computing via...
• USENIX Security '26 (Enigma Track) - Broken Promises: Who's Accountable When VPNs Fail?
• USENIX Security '26 (Enigma Track) - Cryptography at Scale: Building a Practical Cryptographic...
• USENIX Security '26 (Enigma Track) - Detecting Security Posture Drift in AI-Driven Software...
• USENIX Security '26 (Enigma Track) - From Alignment to Access Control: A Unified View of GenAI...
• USENIX Security '26 (Enigma Track) - How Can We Have Private Access to Intelligence?
• USENIX Security '26 (Enigma Track) - If They Can Touch It, They Own It: The Stories We Tell...
• USENIX Security '26 (Enigma Track) - Improving Safety with Privacy: An Exploration of Privacy...
• USENIX Security '26 (Enigma Track) - Red-Teaming for Scraping
• USENIX Security '26 (Enigma Track) - Security Tools Don't Detect Attacks—Humans Do
• USENIX Security '26 (Enigma Track) - Supply Chain Attacks on Open Source: What's Happening, What...
• USENIX Security '26 (Enigma Track) - Technology Is in Its Restrictive Era, And You Can Help Fix It!
• USENIX Security '26 (Enigma Track) - The Six Developers You'll Meet in Security: Why Secure by...
• USENIX Security '26 (Enigma Track) - Verifiable Elections—Now Is the Time
• USENIX Security '26 (Enigma Track) - What Is a PUF and Why Might You Need One?
• USENIX Security '26 (Enigma Track) - Youth Digital Immersion: Cyber Readiness Builds Mental...
• USENIX Security ’17 - Understanding the Mirai Botnet
• USENIX Security ’20 - NetWarden: Mitigating Network Covert Channels while Preserving Performance
• USENIX WiAC G+ Hangout: Encouraging Women Speakers
• Using Throttling and Traffic Shaping to Combat Botnet Spam, at USENIX LISA '07
• VehicleSec '25 - Beyond the Glow: Understanding Luminescent Marker Behavior Against Autonomous...
• VehicleSec '25 - CANdid - An Open-Access Annotated Dataset of Vehicle CAN Bus Traffic
• VehicleSec '25 - CarPlay at Risk: Unveiling Security Threats of Third-Party Infotainment Adapters
• VehicleSec '25 - ConfuSense: Sensor Reconfiguration Attacks for Stealthy UAV Manipulation
• VehicleSec '25 - DrainDead: Emptying Batteries of Parked Electric Vehicles
• VehicleSec '25 - EmuOCPP: Effective and Scalable OCPP Security and Privacy Testing
• VehicleSec '25 - Human Drivers' Awareness of Utility and Privacy Risks of Vehicle-to-Everything...
• VehicleSec '25 - Keynote Presentation: Ten Years After the Jeep Hack: A Retrospective on...
• VehicleSec '25 - Keynote Presentation: What Vehicle Security Can Learn from Medical Device Security
• VehicleSec '25 - Lightning Talk: On-Road Driver Identification Dataset with CyberAttack
• VehicleSec '25 - Lightning Talk: PEPPAR on DS: Platform for Evaluating Physical-Layer and...
• VehicleSec '25 - Lightning Talk: Securing the Future of Marine Data with NMEA OneNet
• VehicleSec '25 - Oblivious Plug&Charge: A Privacy-Preserving EV Charging Scheme based on ORAM
• VehicleSec '25 - Secure FLOATING - Scalable Federated Learning Framework for Real-time Trust in...
• VehicleSec '25 - Short: Breaking the Charge: Exploiting State Manipulation in EV Charging
• VehicleSec '25 - Short: PIBuster: Exploiting a Common Misconfiguration in CCS EV Chargers
• VehicleSec '25 - Short: Unencrypted Flying Objects: Security Lessons from University Small...
• VehicleSec '25 - SoK: Stealing Cars Since Remote Keyless Entry Introduction and How to Defend...
• VehicleSec '25 - Stateful Behavior Inference and Runtime Enforcement for Vehicle Network Security
• VehicleSec '25 - Threat Analysis and Detection in In-Vehicle Infotainment System Leveraging MITRE...
• VehicleSec '25 - WIP: A Black Box System for Automotive Digital Forensics
• VehicleSec '25 - WIP: Blurred Lines -- A GDPR-Compliant Framework for Anonymising Automotive...
• VehicleSec '25 - WIP: Evaluating the End-to-End Impact of False Localization Attacks on vSLAM-...
• VehicleSec '25 - WIP: Evaluation of Threats and Impacts of HD Map Tampering Attacks in Autonomous...
• VehicleSec '25 - WIP: From Detection to Explanation: Using LLMs for Adversarial Scenario Analysis...
• VehicleSec '25 - WIP: Hijacking Attacks on UAV Follow-Me Systems in Realistic Scenarios
• VehicleSec '25 - WIP: Intrusion Detection and Localization for CAN by Extracting Propagation Delay..
• VehicleSec '25 - WIP: Learning Adversarial Attacks on Adaptive Traffic Signal Control Systems...
• VehicleSec '25 - WIP: QKSAN: Towards Multiple Sanitizers for In-vehicle COTS OS Kernels
• VehicleSec '25 - WIP: Understanding the Mechanisms Behind NDT-Based Localization Vulnerabilities...
• VehicleSec '25 - You Can Drive But You Cannot Hide: Detection of Hidden Cellular GPS Vehicle...
• VehicleSec '26 - A Study on Extending the TARA Methodology for Physical AI: A Case Study of ADS
• VehicleSec '26 - AutoHack: A Physically Verified Multi-Bus CAN Dataset for Intrusion Detection...
• VehicleSec '26 - Beyond Classical PKI: A Quantum-Safe Authentication Framework for Automotive OTA...
• VehicleSec '26 - Blind Spot in Sensor Fusion: Exploiting an Architectural Vulnerability to Hijack...
• VehicleSec '26 - Bridging Two TARAs: Integrating MITRE CTSA/CRRA Prioritization into ISO/SAE...
• VehicleSec '26 - CANBERT+: An Optimized Multi-Layer BERT-Based Intrusion Detection for CAN Bus
• VehicleSec '26 - Charge It to My Neighbor: A Relay Attack on ISO 15118 Plug and Charge Payment
• VehicleSec '26 - Digital Eyes on the Road: Using Street Cameras to Verify Traffic Integrity and...
• VehicleSec '26 - E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on the Xiaomi E-Scooter...
• VehicleSec '26 - ESCAR Talk: CAUTION: HIGH VOLTAGE, LOW SECURITY – A Familiar Tale of...
• VehicleSec '26 - ESCAR Talk: Constructive Assurance Cases for Cybersecurity
• VehicleSec '26 - ESCAR Talk: Patchlings: Enabling A/B-Equivalent OTA Updates for Deeply Embedded...
• VehicleSec '26 - Keynote Address: Research Only? Understanding the Scope of Automotive...
• VehicleSec '26 - Keynote Address: The Trajectory of Automotive Cybersecurity and the Role of AI
• VehicleSec '26 - Lightning Talk: The Law Bites Before the Code Does: Designing Vehicle...
• VehicleSec '26 - Lightning Talk: Toward Physical-Layer Fingerprinting of Production Automotive...
• VehicleSec '26 - Lightning Talk: When Collaboration Betrays: The Evolving Attack Surface of...
• VehicleSec '26 - MIRAGE: Detecting Fake Emergency Electronic Brake Light Attacks in V2X Networks...
• VehicleSec '26 - Perspective-Shift Attacks Against Optical Perception Sensors: A Novel Attack...
• VehicleSec '26 - RAIL: Risk-Aware Human-in-the-Loop Framework with Adaptive Intrusion Response...
• VehicleSec '26 - Reversing a Brake ECU Firmware Update
• VehicleSec '26 - RVDebloater: Mode-based Adaptive Firmware Debloating for Robotic Vehicles
• VehicleSec '26 - Seeing is Deceiving: Systematic Vulnerability Analysis of LiDAR-Based Autonomous...
• VehicleSec '26 - SHIELD: Secure Human-Machine Interaction with Evidential Learning and Dynamic...
• VehicleSec '26 - Short: CARdea: Two-Phase Plausibility-Based Vehicle-to-Vehicle Anomaly Detection...
• VehicleSec '26 - Short: Investigating Stealthy Latency Attacks Against Camera-Based Object...
• VehicleSec '26 - Short: Is Your ECU Really Yours?
• VehicleSec '26 - Short: Race to Charge: Concurrency Bugs and State Integrity Violations in EV...
• VehicleSec '26 - Short: VIN2VICTIM: From Vehicle Identification to Targeted Tracking via Data...
• VehicleSec '26 - SLEIGHT: Real-time Closed-Loop Attack Analytics Framework for Holistic Intrusion...
• VehicleSec '26 - WIP: On the Real-World Applicability of Automotive CAN Intrusion Detection Systems
• VehicleSec '26 - WIP: SNFuzz: Gateway-Centric State-Oriented Fuzzing for MQTT-SN
• VEX: Vetting Browser Extensions for Security Vulnerabilities
• Visualizations for Performance Analysis (and More)
• Visualizing DTrace: Sun Storage 7000 Analytics
• Visualizing DTrace: Sun Storage 7000 Analytics
• W32.Duqu: The Precursor to the Next Stuxnet
• WALDIO: Eliminating the Filesystem Journaling in Resolving the Journaling of Journal Anomaly
• What Is Watson?
• What Will Be Hot Next Year?
• Who Wears Me? Bioimpedance as a Passive Biometric
• Why Attend LISA '13?
• Why Attend LISA14?
• Why Attend LISA15
• Why Enigma?
• WiAC '13 - Creating a Personal Brand That Reflects What Really Matters
• WiAC '13 - Free to Be a Kid
• WOOT '13 - "Weird Machines" in ELF: A Spotlight on the Underappreciated Metadata
• WOOT '13 - Cloning Credit Cards: A Combined Pre-play and Downgrade Attack on EMV Contactless
• WOOT '13 - The Page-Fault Weird Machine: Lessons in Instruction-less Computation
• WOOT '14 - An Experience Report on Extracting and Viewing Memory Events via Wireshark
• WOOT '14 - Attacking the Linux PRNG On Android: Weaknesses in Seeding of Entropic Pools
• WOOT '14 - Automated Reverse Engineering using Lego®
• WOOT '14 - Clickjacking Revisited: A Perceptual View of UI Security
• WOOT '14 - Green Lights Forever: Analyzing the Security of Traffic Infrastructure
• WOOT '14 - Hell of a Handshake: Abusing TCP for Reflective Amplification DDoS Attacks
• WOOT '14 - Inaudible Sound as a Covert Channel in Mobile Devices
• WOOT '14 - IPv6 Security: Attacks and Countermeasures in a Nutshell
• WOOT '14 - Lowering the USB Fuzzing Barrier by Transparent Two-Way Emulation
• WOOT '14 - Mouse Trap: Exploiting Firmware Updates in USB Peripherals
• WOOT '14 - Practical Kleptography
• WOOT '14 - Printed Circuit Board Deconstruction Techniques
• WOOT '14 - Security Impact of High Resolution Smartphone Cameras
• WOOT '14 - The End is Nigh: Generic Solving of Text-based CAPTCHAs
• WOOT '14 - Through the Looking-Glass, and What Eve Found There
• WOOT '14 - Tick Tock: Building Browser Red Pills from Timing Side Channels
• WOOT '14 - Zippier ZMap: Internet-Wide Scanning at 10 Gbps
• WOOT '20 - AFL++ : Combining Incremental Steps of Fuzzing Research
• WOOT '20 - Automatic Generation of Compact Printable Shellcodes for x86
• WOOT '20 - Bankrupt Covert Channel: Turning Network Predictability into Vulnerability
• WOOT '20 - BLESA: Spoofing Attacks against Reconnections in Bluetooth Low Energy
• WOOT '20 - Exploiting Uses of Uninitialized Stack Variables in Linux Kernels to Leak Kernel Pointers
• WOOT '20 - Firmware Insider: Bluetooth Randomness is Mostly Random
• WOOT '20 - Hardware Security Is Hard: How Hardware Boundaries Define Platform Security
• WOOT '20 - NFCGate: Opening the Door for NFC Security Research with a Smartphone-Based Toolkit
• WOOT '20 - Office Document Security and Privacy
• WOOT '20 - One Exploit to Rule them All? On the Security of Drop-in Replacement and Counterfeit...
• WOOT '20 - OS Security Is Hard: Why All the Fuzzers in the World Won't Change the Way...
• WOOT '20 - ToothPicker: Apple Picking in the iOS Bluetooth Stack
• WOOT '20 - Unearthing the TrustedCore: A Critical Review on Huawei’s Trusted Execution Environment
• WOOT '20 - When Is a Proof Actually Not?
• WOOT '20 - When Oblivious is Not: Attacks against OPAM
• WOOT '24 - Achilles Heel in Secure Boot: Breaking RSA Authentication and Bitstream Recovery from...
• WOOT '24 - Amplifying Threats: The Role of Multi-Sender Coordination in SMS-Timing-Based Location...
• WOOT '24 - Attacking with Something That Does Not Exist: 'Proof of Non-Existence' Can Exhaust DNS...
• WOOT '24 - Basilisk: Remote Code Execution by Laser Excitation of P–N Junctions Without...
• WOOT '24 - Breaking Espressif’s ESP32 V3: Program Counter Control with Computed Values using...
• WOOT '24 - Engineering a backdoored bitcoin wallet
• WOOT '24 - Exploiting Android’s Hardened Memory Allocator
• WOOT '24 - Introduction to Procedural Debugging through Binary Libification
• WOOT '24 - Lightning Talk: AI Cyber Challenge
• WOOT '24 - Lightning Talk: Lessons Learned from the Embedded Capture-the-Flag (eCTF) competitions
• WOOT '24 - Lightning Talks
• WOOT '24 - MakeShift: Security Analysis of Shimano Di2 Wireless Gear Shifting in Bicycles
• WOOT '24 - Not Quite Write: On the Effectiveness of Store-Only Bounds Checking
• WOOT '24 - Oh No, My RAN! Breaking Into an O-RAN 5G Indoor Base Station
• WOOT '24 - Reverse Engineering the Eufy Ecosystem: A Deep Dive into Security Vulnerabilities...
• WOOT '24 - RIPencapsulation: Defeating IP Encapsulation on TI MSP Devices
• WOOT '24 - SOK: 3D Printer Firmware Attacks on Fused Filament Fabrication
• WOOT '24 - SoK: On the Effectiveness of Control-Flow Integrity in Practice
• WOOT '24 - SoK: Where’s the “up”?! A Comprehensive (bottom-up) Study on the Security of...
• WOOT '24 - The Power of Words: Generating PowerShell Attacks from Natural Language
• WOOT '24 - WhatsApp with privacy? Privacy issues with IM E2EE in the Multi-device setting
• WOOT '25 - Be Write Back: An in-depth Study of Fault Injection Effects on FRAM Technology
• WOOT '25 - Bluetooth Security Testing with BlueToolkit: a Large-Scale Automotive Case Study
• WOOT '25 - BOOTKITTY: A Stealthy Bootkit-Rootkit Against Modern Operating Systems
• WOOT '25 - Comma Separated Vulnerabilities: Detecting Formula Injection in the Wild
• WOOT '25 - DeepRed: A Deep Learning–Powered Command and Control Framework for Multi-Stage Red...
• WOOT '25 - Extract: A PHP Foot-Gun Case Study
• WOOT '25 - Extraction of Secrets from 40nm CMOS Gate Dielectric Breakdown Antifuses by FIB...
• WOOT '25 - FUZZVPN: Finding Vulnerabilities in OpenVPN
• WOOT '25 - GlitchGlück: Enabling Software Vulnerabilities through Guided Hardware Fault Injection
• WOOT '25 - Keynote Presentation: Escaping Cantor's Find-Fix Cycle
• WOOT '25 - Making Acoustic Side-Channel Attacks on Noisy Keyboards Viable with LLM-Assisted...
• WOOT '25 - No Key, No Problem: Vulnerabilities in Master Lock Smart Locks
• WOOT '25 - Oops, It Halted Again: Exploiting PLC Memory for Fun and Profit in Industrial Control...
• WOOT '25 - Prekey Pogo: Investigating Security and Privacy Issues in WhatsApp's Handshake Mechanism
• WOOT '25 - Reality Check on Side-Channels: Lessons learnt from breaking AES on ARM Cortex-A72...
• WOOT '25 - SecurePoC: A Helping Hand to Identify Malicious CVE Proof of Concept Exploits in GitHub
• WOOT '25 - Security through Transparency: Tales from the RP2350 Hacking Challenge
• WOOT '25 - SoK: Automating Kernel Vulnerability Discovery and Exploit Generation
• WOOT '25 - Stealth BGP Hijacks with uRPF Filtering
• WOOT '26 - A Dummy's Guide to Agentic Exploit Generation
• WOOT '26 - Are Neuro-Inspired Multi-Modal Vision-Language Models Resilient to Membership...
• WOOT '26 - Breaking Infrared Recapture Detection: Optical-Synthesis Attacks and Depth-Aware...
• WOOT '26 - CATana: On the Dangers of SIM-Originating AT Commands
• WOOT '26 - Defective by Design: Universal Recovery of All Widevine-Protected Content on Desktop...
• WOOT '26 - DisARMed: Attacking ARM TrustZone from Userspace with Memory Aliasing
• WOOT '26 - Evading and crashing anti-malware solutions via data collection overloading during...
• WOOT '26 - Exploiting Android Apps with Counterfeit Art
• WOOT '26 - Flash [Re]Loaded: Body Bias Injection on Flash Memory
• WOOT '26 - FuzzBT: Holistic-State-Guided Fuzzing for Bluetooth Host Stack in Kernels
• WOOT '26 - HotWire: Real-World Impersonation and Discharge Attacks on Electric Vehicle Charging...
• WOOT '26 - Keynote Address: Click Here to Hack Your Target: A Perspective on the Past...
• WOOT '26 - LIMA: Defining, Benchmarking and Detecting Cross-Layer Vulnerabilities in LLM...
• WOOT '26 - Onelogon: Taking over Active Directory Accounts via Netlogon
• WOOT '26 - OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security
• WOOT '26 - PowerHooK: Enabling Software-Based Power Side Channels Against AMD SEV Technologies...
• WOOT '26 - Practical Attacks on a Decentralized Secure Messenger Session
• WOOT '26 - Protocol Prying: Systematic Vulnerability Research in the AirDrop and Android Quick...
• WOOT '26 - Real-Time Compromise: Investigating RTC Security in Consumer IoT
• WOOT '26 - Security Analysis of LTE Connectivity in Connected Cars: A Case Study of Tesla
• WOOT '26 - SEMSAN: a Configurable Sanitizer for Detecting System-Level Semantic Bugs
• WOOT '26 - SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode
• WOOT '26 - SoK: Insecurity of Cellular Basebands
• WOOT '26 - SoK: Multi-Layer Indirect Call Analysis in the Real World
• WOOT '26 - SoK: The Constant Time Model
• WOOT '26 - Squeezing Juicy Variant Bugs Out of Modern Browsers
• WOOT '26 - Swarm in EM Hay: Particle Swarm-guided Probe Placement for EM SCA
• WOOT '26 - You Have Been LaTeXpOsEd: A Large-Scale Systematic Analysis of Information Leakage...