USENIX Best Papers

Filter List View By:

USENIX Security '24

Yes, One-Bit-Flip Matters! Universal DNN Model Inference Depletion with Runtime Code Fault Injection
Shaofeng Li, Peng Cheng Laboratory; Xinyu Wang, Shanghai Jiao Tong University; Minhui Xue, CSIRO's Data61; Haojin Zhu, Shanghai Jiao Tong University; Zhi Zhang, University of Western Australia; Yansong Gao, CSIRO's Data61; Wen Wu, Peng Cheng Laboratory; Xuemin (Sherman) Shen, University of Waterloo
Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation
Fabian Bäumer, Ruhr University Bochum; Marcus Brinkmann, Ruhr University Bochum; Jörg Schwenk, Ruhr University Bochum
Digital Discrimination of Users in Sanctioned States: The Case of the Cuba Embargo
Anna Ablove, University of Michigan; Shreyas Chandrashekaran, University of Michigan; Hieu Le, University of Michigan; Ram Sundara Raman, University of Michigan; Reethika Ramesh, University of Michigan; Harry Oppenheimer, Georgia Institute of Technology; Roya Ensafi, University of Michigan
"I Don't Know If We're Doing Good. I Don't Know If We're Doing Bad": Investigating How Practitioners Scope, Motivate, and Conduct Privacy Work When Developing AI Products
Hao-Ping (Hank) Lee, Carnegie Mellon University; Lan Gao, Georgia Institute of Technology; Stephanie Yang, Georgia Institute of Technology; Jodi Forlizzi, Carnegie Mellon University; Sauvik Das, Carnegie Mellon University
Data Coverage for Guided Fuzzing
Mingzhe Wang, Tsinghua University; Jie Liang, Tsinghua University; Chijin Zhou, Tsinghua University; Zhiyong Wu, Tsinghua University; Jingzhou Fu, Tsinghua University; Zhuo Su, Tsinghua University; Qing Liao, Harbin Institute of Technology; Bin Gu, Beijing Institute of Control Engineering; Bodong Wu, Huawei Technologies Co., Ltd; Yu Jiang, Tsinghua University
Learning with Semantics: Towards a Semantics-Aware Routing Anomaly Detection System
Yihao Chen, Department of Computer Science and Technology & BNRist, Tsinghua University; Qilei Yin, Zhongguancun Laboratory; Qi Li, Institute for Network Sciences and Cyberspace, Tsinghua University; Zhongguancun Laboratory; Zhuotao Liu, Institute for Network Sciences and Cyberspace, Tsinghua University; Zhongguancun Laboratory; Ke Xu, Department of Computer Science and Technology, Tsinghua University; Zhongguancun Laboratory; Yi Xu, Institute for Network Sciences and Cyberspace, Tsinghua University; Zhongguancun Laboratory; Mingwei Xu, Institute for Network Sciences and Cyberspace, Tsinghua University; Zhongguancun Laboratory; Ziqian Liu, China Telecom; Jianping Wu, Department of Computer Science and Technology, Tsinghua University; Zhongguancun Laboratory
PURE: Payments with UWB RElay-protection
Daniele Coppola, ETH Zurich; Giovanni Camurati, ETH Zurich; Claudio Anliker, ETH Zurich; Xenia Hofmeier, ETH Zurich; Patrick Schaller, ETH Zurich; David Basin, ETH Zurich; Srdjan Capkun, ETH Zurich
InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2
Sander Wiebing, Vrije Universiteit Amsterdam; Alvise de Faveri Tron, Vrije Universiteit Amsterdam; Herbert Bos, Vrije Universiteit Amsterdam; Cristiano Giuffrida, Vrije Universiteit Amsterdam
DVSorder: Ballot Randomization Flaws Threaten Voter Privacy
Braden L. Crimmins, University of Michigan; Dhanya Y. Narayanan, University of Michigan; Drew Springall, Auburn University; J. Alex Halderman, University of Michigan
Adversarial Illusions in Multi-Modal Embeddings
Eugene Bagdasaryan, University of Massachusetts Amherst; Rishi Jha, Cornell University; Vitaly Shmatikov, Cornell Tech; Tingwei Zhang, Cornell University
Smudged Fingerprints: Characterizing and Improving the Performance of Web Application Fingerprinting
Brian Kondracki, Stony Brook University; Nick Nikiforakis, Stony Brook University
HYPERPILL: Fuzzing for Hypervisor-bugs by Leveraging the Hardware Virtualization Interface
Alexander Bulekov, EPFL, Boston University, and Amazon; Qiang Liu, EPFL and Zhejiang University; Manuel Egele, Boston University; Mathias Payer, EPFL
Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting
Robin Kirchner, Technische Universität Braunschweig; Jonas Möller, Technische Universität Berlin; Marius Musch, Technische Universität Braunschweig; David Klein, Technische Universität Braunschweig; Konrad Rieck, Technische Universität Berlin; Martin Johns, Technische Universität Braunschweig
Logic Gone Astray: A Security Analysis Framework for the Control Plane Protocols of 5G Basebands
Kai Tu, Pennsylvania State University; Abdullah Al Ishtiaq, Pennsylvania State University; Syed Md Mukit Rashid, Pennsylvania State University; Yilu Dong, Pennsylvania State University; Weixuan Wang, Pennsylvania State University; Tianwei Wu, Pennsylvania State University; Syed Rafiul Hussain, Pennsylvania State University
Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models
Zhiyuan Yu, Washington University in St. Louis; Xiaogeng Liu, University of Wisconsin, Madison; Shunning Liang, Washington University in St. Louis; Zach Cameron, John Burroughs School; Chaowei Xiao, University of Wisconsin, Madison; Ning Zhang, Washington University in St. Louis

WOOT '24

Exploiting Android’s Hardened Memory Allocator
Philipp Mao, EPFL; Elias Valentin Boschung, EPFL; Marcel Busch, EPFL; Mathias Payer, EPFL

SOUPS 2024

Beyond Fear and Frustration - Towards a Holistic Understanding of Emotions in Cybersecurity
Alexandra von Preuschen, Justus-Liebig-University Gießen; Monika C. Schuhmacher, Justus-Liebig-University Gießen; Verena Zimmermann, ETH Zurich

USENIX ATC '24

FastCommit: resource-efficient, performant and cost-effective file system journaling
Harshad Shirwadkar, Google; Saurabh Kadekodi, Google; Theodore Tso, Google
SuperBench: Improving Cloud AI Infrastructure Reliability with Proactive Validation
Yifan Xiong, Microsoft Research; Yuting Jiang, Microsoft Research; Ziyue Yang, Microsoft Research; Lei Qu, Microsoft Research; Guoshuai Zhao, Microsoft; Shuguang Liu, Microsoft; Dong Zhong, Microsoft; Boris Pinzur, Microsoft; Jie Zhang, Microsoft; Yang Wang, Microsoft; Jithin Jose, Microsoft; Hossein Pourreza, Microsoft; Jeff Baxter, Microsoft; Kushal Datta, Microsoft; Prabhat Ram, Microsoft; Luke Melton, Microsoft; Joe Chau, Microsoft; Peng Cheng, Microsoft Research; Yongqiang Xiong, Microsoft Research; Lidong Zhou, Microsoft Research
An Empirical Study of Rust-for-Linux: The Success, Dissatisfaction, and Compromise
Hongyu Li, Beijing University of Posts and Telecommunications; Liwei Guo, University of Electronic Science and Technology of China; Yexuan Yang, Beijing University of Posts and Telecommunications; Shangguang Wang, Beijing University of Posts and Telecommunications (BUPT); Mengwei Xu, Beijing University of Posts and Telecommunications (BUPT)

OSDI '24

VeriSMo: A Verified Security Module for Confidential VMs
Ziqiao Zhou, Microsoft Research; [node:field-speakers-first-name] Anjali, University of Wisconsin-Madison; Weiteng Chen, Microsoft Research; Sishuai Gong, Purdue University; Chris Hawblitzel, Microsoft Research; Weidong Cui, Microsoft Research
Anvil: Verifying Liveness of Cluster Management Controllers
Xudong Sun, University of Illinois Urbana-Champaign; Wenjie Ma, University of Illinois Urbana-Champaign; Jiawei Tyler Gu, University of Illinois Urbana-Champaign; Zicheng Ma, University of Illinois Urbana-Champaign; Tej Chajed, University of Wisconsin-Madison; Jon Howell, VMware Research; Andrea Lattuada, VMware Research; Oded Padon, VMware Research; Lalith Suresh, Feldera; Adriana Szekeres, VMware Research; Tianyin Xu, University of Illinois Urbana-Champaign
ServiceLab: Preventing Tiny Performance Regressions at Hyperscale through Pre-Production Testing
Mike Chow, Meta Platforms; Yang Wang, Meta Platforms and The Ohio State University; William Wang, Meta Platforms; Ayichew Hailu, Meta Platforms; Rohan Bopardikar, Meta Platforms; Bin Zhang, Meta Platforms; Jialiang Qu, Meta Platforms; David Meisner, Meta Platforms; Santosh Sonawane, Meta Platforms; Yunqi Zhang, Meta Platforms; Rodrigo Paim, Meta Platforms; Mack Ward, Meta Platforms; Ivor Huang, Meta Platforms; Matt McNally, Meta Platforms; Daniel Hodges, Meta Platforms; Zoltan Farkas, Meta Platforms; Caner Gocmen, Meta Platforms; Elvis Huang, Meta Platforms; Chunqiang Tang, Meta Platforms

NSDI '24

Democratizing Direct-to-Cell Low Earth Orbit Satellite Networks
Lixin Liu, Tsinghua University; Yuanjie Li, Tsinghua University and Zhongguancun Laboratory; Hewu Li, Tsinghua University and Zhongguancun Laboratory; Jiabo Yang, Tsinghua University; Wei Liu, Tsinghua University; Jingyi Lan, Tsinghua University; Yufeng Wang, Tsinghua University; Jiarui Li, Tsinghua University; Jianping Wu, Tsinghua University and Zhongguancun Laboratory; Qian Wu, Tsinghua University and Zhongguancun Laboratory; Jun Liu, Tsinghua University and Zhongguancun Laboratory; Zeqi Lai, Tsinghua University and Zhongguancun Laboratory
SIEVE is Simpler than LRU: an Efficient Turn-Key Eviction Algorithm for Web Caches
Yazhuo Zhang, Emory University; Juncheng Yang, Carnegie Mellon University; Yao Yue, Pelikan Foundation; Ymir Vigfusson, Emory University and Keystrike; K.V. Rashmi, Carnegie Mellon University
Can't Be Late: Optimizing Spot Instance Savings under Deadlines
Zhanghao Wu, University of California, Berkeley; Wei-Lin Chiang, University of California, Berkeley; Ziming Mao, University of California, Berkeley; Zongheng Yang, University of California, Berkeley; Eric Friedman, University of California, Berkeley and ICSI; Scott Shenker, University of California, Berkeley and ICSI; Ion Stoica, University of California, Berkeley
Autothrottle: A Practical Bi-Level Approach to Resource Management for SLO-Targeted Microservices
Zibo Wang, University of Science and Technology of China and Microsoft Research; Pinghe Li, ETH Zurich; Chieh-Jan Mike Liang, Microsoft Research; Feng Wu, University of Science and Technology of China; Francis Y. Yan, Microsoft Research
Sidekick: In-Network Assistance for Secure End-to-End Transport Protocols
Gina Yuan, Stanford University; Matthew Sotoudeh, Stanford University; David K. Zhang, Stanford University; Michael Welzl, University of Oslo; David Mazières, Stanford University; Keith Winstein, Stanford University
The Bedrock of Byzantine Fault Tolerance: A Unified Platform for BFT Protocols Analysis, Implementation, and Experimentation
Mohammad Javad Amiri, Stony Brook University; Chenyuan Wu, University of Pennsylvania; Divyakant Agrawal, UC Santa Barbara; Amr El Abbadi, UC Santa Barbara; Boon Thau Loo, University of Pennsylvania; Mohammad Sadoghi, UC Davis

FAST '24

We Ain't Afraid of No File Fragmentation: Causes and Prevention of Its Performance Impact on Modern Flash SSDs
Yuhun Jun, Sungkyunkwan University and Samsung Electronics Co., Ltd.; Shinhyun Park, Sungkyunkwan University; Jeong-Uk Kang, Samsung Electronics Co., Ltd.; Sang-Hoon Kim, Ajou University; Euiseong Seo, Sungkyunkwan University
What's the Story in EBS Glory: Evolutions and Lessons in Building Cloud Block Store
Weidong Zhang, Alibaba Group; Erci Xu, Alibaba Group; Qiuping Wang, Alibaba Group; Xiaolu Zhang, Alibaba Group; Yuesheng Gu, Alibaba Group; Zhenwei Lu, Alibaba Group; Tao Ouyang, Alibaba Group; Guanqun Dai, Alibaba Group; Wenwen Peng, Alibaba Group; Zhe Xu, Alibaba Group; Shuo Zhang, Alibaba Group; Dong Wu, Alibaba Group; Yilei Peng, Alibaba Group; Tianyun Wang, Alibaba Group; Haoran Zhang, Alibaba Group; Jiasheng Wang, Alibaba Group; Wenyuan Yan, Alibaba Group; Yuanyuan Dong, Alibaba Group; Wenhui Yao, Alibaba Group; Zhongjie Wu, Alibaba Group; Lingjun Zhu, Alibaba Group; Chao Shi, Alibaba Group; Yinhu Wang, Alibaba Group; Rong Liu, Alibaba Group; Junping Wu, Alibaba Group; Jiaji Zhu, Alibaba Group; Jiesheng Wu, Alibaba Group

USENIX Security '23

Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models
Shawn Shan, University of Chicago; Jenna Cryan, University of Chicago; Emily Wenger, University of Chicago; Haitao Zheng, University of Chicago; Rana Hanocka, University of Chicago; Ben Y. Zhao, University of Chicago
Hash Gone Bad: Automated discovery of protocol attacks that exploit hash function weaknesses
Vincent Cheval, Inria Paris; Cas Cremers, CISPA Helmholtz Center for Information Security; Alexander Dax, CISPA Helmholtz Center for Information Security and Saarland University; Lucca Hirschi, Université de Lorraine, Inria, CNRS, France; Charlie Jacomme, Inria Paris; Steve Kremer, Université de Lorraine, LORIA, Inria Nancy Grand-Est
Don’t be Dense: Efficient Keyword PIR for Sparse Databases
Sarvar Patel, Google; Joon Young Seo, Google; Kevin Yeo, Google and Columbia University
TreeSync: Authenticated Group Management for Messaging Layer Security
Théophile Wallez, Inria Paris; Jonathan Protzenko, Microsoft Research; Benjamin Beurdouche, Mozilla; Karthikeyan Bhargavan, Inria Paris
Bug Hunters’ Perspectives on the Challenges and Benefits of the Bug Bounty Ecosystem
Omer Akgul, University of Maryland; Taha Eghtesad, Pennsylvania State University; Amit Elazari, University of California, Berkeley; Omprakash Gnawali, University of Houston; Jens Grossklags, Technical University of Munich; Michelle L. Mazurek, University of Maryland; Daniel Votipka, Tufts University; Aron Laszka, Pennsylvania State University
Automated Analysis of Protocols that use Authenticated Encryption: How Subtle AEAD Differences can impact Protocol Security
Cas Cremers, CISPA Helmholtz Center for Information Security; Alexander Dax, CISPA Helmholtz Center for Information Security and Saarland University; Charlie Jacomme, Inria Paris; Mang Zhao, CISPA Helmholtz Center for Information Security and Saarland University
Examining Power Dynamics and User Privacy in Smart Technology Use Among Jordanian Households
Wael Albayaydh, University of Oxford; Ivan Flechais, University of Oxford
Tight Auditing of Differentially Private Machine Learning
Milad Nasr, Google DeepMind; Jamie Hayes, Google DeepMind; Thomas Steinke, Google DeepMind; Borja Balle, DeepMind; Florian Tramèr, ETH Zurich; Matthew Jagielski, Google DeepMind; Nicholas Carlini, Google DeepMind; Andreas Terzis, Google DeepMind
Account Security Interfaces: Important, Unintuitive, and Untrustworthy
Alaa Daffalla, Cornell University; Marina Bohuk, Cornell University; Nicola Dell, Jacobs Institute Cornell Tech; Rosanna Bellini, Cornell University; Thomas Ristenpart, Cornell Tech
Remote Direct Memory Introspection
Hongyi Liu, Rice University; Jiarong Xing, Rice University; Yibo Huang, Rice University; Danyang Zhuo, Duke University; Srinivas Devadas, Massachusetts Institute of Technology; Ang Chen, Rice University
A Two-Decade Retrospective Analysis of a University's Vulnerability to Attacks Exploiting Reused Passwords
Alexandra Nisenoff, University of Chicago and Carnegie Mellon University; Maximilian Golla, University of Chicago / Max Planck Institute for Security and Privacy; Miranda Wei, University of Chicago / University of Washington; Juliette Hainline, University of Chicago; Hayley Szymanek, University of Chicago; Annika Braun, University of Chicago; Annika Hildebrandt, University of Chicago; Blair Christensen, University of Chicago; David Langenberg, University of Chicago; Blase Ur, University of Chicago
Fuzztruction: Using Fault Injection-based Fuzzing to Leverage Implicit Domain Knowledge
Nils Bars, CISPA Helmholtz Center for Information Security; Moritz Schloegel, CISPA Helmholtz Center for Information Security; Tobias Scharnowski, CISPA Helmholtz Center for Information Security; Nico Schiller, Ruhr-Universität Bochum; Thorsten Holz, CISPA Helmholtz Center for Information Security
A Bug's Life: Analyzing the Lifecycle and Mitigation Process of Content Security Policy Bugs
Gertjan Franken, imec-DistriNet, KU Leuven; Tom Van Goethem, imec-DistriNet, KU Leuven; Lieven Desmet, imec-DistriNet, KU Leuven; Wouter Joosen, imec-DistriNet, KU Leuven
An Efficient Design of Intelligent Network Data Plane
Guangmeng Zhou, Tsinghua University; Zhuotao Liu, Tsinghua University and Zhongguancun Laboratory; Chuanpu Fu, Tsinghua University; Qi Li, Tsinghua University and Zhongguancun Laboratory; Ke Xu, Tsinghua University and Zhongguancun Laboratory
BotScreen: Trust Everybody, but Cut the Aimbots Yourself
Minyeop Choi, KAIST; Gihyuk Ko, Cyber Security Research Center at KAIST and Carnegie Mellon University; Sang Kil Cha, KAIST
Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations
Tadayoshi Kohno, University of Washington; Yasemin Acar, Paderborn University and George Washington University; Wulf Loh, Universität Tübingen

SOUPS 2023

SoK: I Have the (Developer) Power! Sample Size Estimation for Fisher's Exact, Chi-Squared, McNemar's, Wilcoxon Rank-Sum, Wilcoxon Signed-Rank and t-tests in Developer-Centered Usable Security
Anna-Marie Ortloff, University of Bonn; Christian Tiefenau, University of Bonn; Matthew Smith, University of Bonn, Fraunhofer FKIE

USENIX ATC '23

zpoline: a system call hook mechanism based on binary rewriting
Kenichi Yasukata, IIJ Research Laboratory; Hajime Tazaki, IIJ Research Laboratory; Pierre-Louis Aublin, IIJ Research Laboratory; Kenta Ishiguro, Hosei University
LLFree: Scalable and Optionally-Persistent Page-Frame Allocation
Lars Wrenger, Leibniz Universität Hannover; Florian Rommel, Leibniz Universität Hannover; Alexander Halbuer, Leibniz Universität Hannover; Christian Dietrich, Hamburg University of Technology; Daniel Lohmann, Leibniz Universität Hannover

Pages