USENIX | The Advanced Computing Systems Association

"There are rabbit holes I want to go down that I'm not allowed to go down": An Investigation of Security Expert Threat Modeling Practices for Medical Devices

Thompson RE, McLaughlin M, Powers C, Votipka D. 2024. "There are rabbit holes I want to go down that I'm not allowed to go down": An Investigation of Security Expert Threat Modeling Practices for Medical Devices. 33rd USENIX Security Symposium (USENIX Security 24). :4909--4926.

{CDN} Cannon: Exploiting {CDN} {Back-to-Origin} Strategies for Amplification Attacks

Lin Z, Lin Z, Liu X, Chen J, Guo R, Chen C, Xiao S. 2024. {CDN} Cannon: Exploiting {CDN} {Back-to-Origin} Strategies for Amplification Attacks. 33rd USENIX Security Symposium (USENIX Security 24). :5717--5734.

Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content

Xie Q, Murali MVignesh Ka, Pearce P, Li F. 2024. Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content. 33rd USENIX Security Symposium (USENIX Security 24). :4607--4624.

Loopy Hell(ow): {Inﬁnite} Traffic Loops at the Application Layer

Pan Y, Ascheman A, Rossow C. 2024. Loopy Hell(ow): {Inﬁnite} Traffic Loops at the Application Layer. 33rd USENIX Security Symposium (USENIX Security 24). :235--252.

Single Pass {Client-Preprocessing} Private Information Retrieval

Lazzaretti A, Papamanthou C. 2024. Single Pass {Client-Preprocessing} Private Information Retrieval. 33rd USENIX Security Symposium (USENIX Security 24). :5967--5984.

Logic Gone Astray: A Security Analysis Framework for the Control Plane Protocols of 5G Basebands

Tu K, Ishtiaq AAl, Rashid SMd Mukit, Dong Y, Wang W, Wu T, Hussain SRafiul. 2024. Logic Gone Astray: A Security Analysis Framework for the Control Plane Protocols of 5G Basebands. 33rd USENIX Security Symposium (USENIX Security 24). :3063--3080.

{DONAPI}: Malicious {NPM} Packages Detector using Behavior Sequence Knowledge Mapping

Huang C, Wang N, Wang Z, Sun S, Li L, Chen J, Zhao Q, Han J, Yang Z, Shi L. 2024. {DONAPI}: Malicious {NPM} Packages Detector using Behavior Sequence Knowledge Mapping. 33rd USENIX Security Symposium (USENIX Security 24). :3765--3782.

{VibSpeech}: Exploring Practical Wideband Eavesdropping via Bandlimited Signal of Vibration-based Side Channel

Wang C, Lin F, Yan H, Wu T, Xu W, Ren K. 2024. {VibSpeech}: Exploring Practical Wideband Eavesdropping via Bandlimited Signal of Vibration-based Side Channel. 33rd USENIX Security Symposium (USENIX Security 24). :3997--4014.

"What Keeps People Secure is That They Met The Security Team": Deconstructing Drivers And Goals of Organizational Security Awareness

Hielscher J, Parkin S. 2024. "What Keeps People Secure is That They Met The Security Team": Deconstructing Drivers And Goals of Organizational Security Awareness. 33rd USENIX Security Symposium (USENIX Security 24). :3295--3312.

{PatchCURE}: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses

Xiang C, Wu T, Dai S, Petit J, Jana S, Mittal P. 2024. {PatchCURE}: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses. 33rd USENIX Security Symposium (USENIX Security 24). :3675--3692.

Pages