USENIX Best Papers

Filter List View By:

USENIX Security '23

A Two-Decade Retrospective Analysis of a University's Vulnerability to Attacks Exploiting Reused Passwords
Alexandra Nisenoff, University of Chicago and Carnegie Mellon University; Maximilian Golla, University of Chicago / Max Planck Institute for Security and Privacy; Miranda Wei, University of Chicago / University of Washington; Juliette Hainline, University of Chicago; Hayley Szymanek, University of Chicago; Annika Braun, University of Chicago; Annika Hildebrandt, University of Chicago; Blair Christensen, University of Chicago; David Langenberg, University of Chicago; Blase Ur, University of Chicago
Fuzztruction: Using Fault Injection-based Fuzzing to Leverage Implicit Domain Knowledge
Nils Bars, CISPA Helmholtz Center for Information Security; Moritz Schloegel, CISPA Helmholtz Center for Information Security; Tobias Scharnowski, CISPA Helmholtz Center for Information Security; Nico Schiller, Ruhr-Universität Bochum; Thorsten Holz, CISPA Helmholtz Center for Information Security
Remote Direct Memory Introspection
Hongyi Liu, Rice University; Jiarong Xing, Rice University; Yibo Huang, Rice University; Danyang Zhuo, Duke University; Srinivas Devadas, Massachusetts Institute of Technology; Ang Chen, Rice University
A Bug's Life: Analyzing the Lifecycle and Mitigation Process of Content Security Policy Bugs
Gertjan Franken, imec-DistriNet, KU Leuven; Tom Van Goethem, imec-DistriNet, KU Leuven; Lieven Desmet, imec-DistriNet, KU Leuven; Wouter Joosen, imec-DistriNet, KU Leuven
BotScreen: Trust Everybody, but Cut the Aimbots Yourself
Minyeop Choi, KAIST; Gihyuk Ko, Cyber Security Research Center at KAIST and Carnegie Mellon University; Sang Kil Cha, KAIST
Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations
Tadayoshi Kohno, University of Washington; Yasemin Acar, Paderborn University and George Washington University; Wulf Loh, Universität Tübingen
Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models
Shawn Shan, University of Chicago; Jenna Cryan, University of Chicago; Emily Wenger, University of Chicago; Haitao Zheng, University of Chicago; Rana Hanocka, University of Chicago; Ben Y. Zhao, University of Chicago
An Efficient Design of Intelligent Network Data Plane
Guangmeng Zhou, Tsinghua University; Zhuotao Liu, Tsinghua University and Zhongguancun Laboratory; Chuanpu Fu, Tsinghua University; Qi Li, Tsinghua University and Zhongguancun Laboratory; Ke Xu, Tsinghua University and Zhongguancun Laboratory
Don’t be Dense: Efficient Keyword PIR for Sparse Databases
Sarvar Patel, Google; Joon Young Seo, Google; Kevin Yeo, Google and Columbia University
TreeSync: Authenticated Group Management for Messaging Layer Security
Théophile Wallez, Inria Paris; Jonathan Protzenko, Microsoft Research; Benjamin Beurdouche, Mozilla; Karthikeyan Bhargavan, Inria Paris
Hash Gone Bad: Automated discovery of protocol attacks that exploit hash function weaknesses
Vincent Cheval, Inria Paris; Cas Cremers, CISPA Helmholtz Center for Information Security; Alexander Dax, CISPA Helmholtz Center for Information Security and Saarland University; Lucca Hirschi, Université de Lorraine, Inria, CNRS, France; Charlie Jacomme, Inria Paris; Steve Kremer, Université de Lorraine, LORIA, Inria Nancy Grand-Est
Bug Hunters’ Perspectives on the Challenges and Benefits of the Bug Bounty Ecosystem
Omer Akgul, University of Maryland; Taha Eghtesad, Pennsylvania State University; Amit Elazari, University of California, Berkeley; Omprakash Gnawali, University of Houston; Jens Grossklags, Technical University of Munich; Michelle L. Mazurek, University of Maryland; Daniel Votipka, Tufts University; Aron Laszka, Pennsylvania State University
Examining Power Dynamics and User Privacy in Smart Technology Use Among Jordanian Households
Wael Albayaydh, University of Oxford; Ivan Flechais, University of Oxford
Tight Auditing of Differentially Private Machine Learning
Milad Nasr, Google DeepMind; Jamie Hayes, Google DeepMind; Thomas Steinke, Google DeepMind; Borja Balle, DeepMind; Florian Tramèr, ETH Zurich; Matthew Jagielski, Google DeepMind; Nicholas Carlini, Google DeepMind; Andreas Terzis, Google DeepMind
Automated Analysis of Protocols that use Authenticated Encryption: How Subtle AEAD Differences can impact Protocol Security
Cas Cremers, CISPA Helmholtz Center for Information Security; Alexander Dax, CISPA Helmholtz Center for Information Security and Saarland University; Charlie Jacomme, Inria Paris; Mang Zhao, CISPA Helmholtz Center for Information Security and Saarland University
Account Security Interfaces: Important, Unintuitive, and Untrustworthy
Alaa Daffalla, Cornell University; Marina Bohuk, Cornell University; Nicola Dell, Jacobs Institute Cornell Tech; Rosanna Bellini, Cornell University; Thomas Ristenpart, Cornell Tech