27th USENIX Security Symposium

WIPS: 3rd Workshop on Inclusive Privacy and Security 9:00am - 12:30pm

WSIW: Workshop on Security Information Workers 2:00pm - 5:30pm

Designing Privacy and Security Tools for Children and Teenagers 9:00am - 5:30pm

WAY 2018: Who Are You?! Adventures in Authentication 2018 9:00am - 12:30pm

WSSP: Workshop on the Human Aspects of Smarthome Security Privacy 2:00pm - 5:30pm

On-site Registration 8:00am - 5:00pm

Opening Remarks 9:00am - 9:10am

Mutually Assured Destruction and the Impending AI Apocalypse 9:10am - 10:10am

Physical Adversarial Examples fo... 10:40am - 11:10am

Fishy Faces: Crafting Adversaria... 11:10am - 11:40am

Rode0day 11:40am - 12:30pm

Spectre Returns! Speculation Att... 2:00pm - 2:30pm

A Feasibility Study of Radio-fre... 2:30pm - 3:00pm

Swipe Your Fingerprints! How Bio... 3:00pm - 3:30pm

Universal Radio Hacker: A Suite... 4:00pm - 4:30pm

Sensorless, Permissionless Infor... 4:30pm - 5:00pm

NEMESYS: Network Message Syntax... 5:00pm - 5:30pm

Welcome and Awards Presentations 9:00am - 9:30am

Beyond the Individual: Usability, Utility and Community 9:30am - 10:30am

Replication Study: A Cross-Country Field Observa...

User Behaviors and Attitudes Under Password Expi...

The Effectiveness of Fear Appeals in Increasing...

Action Needed! Helping Users Find and Complete t...

Informal Support Networks: an investigation into...

Share and Share Alike? An Exploration of Secure...

Characterizing the Use of Browser-Based Blocking...

Can Digital Face-Morphs Influence Attitudes and...

Lightning Talks 3:15pm - 3:45pm

"Privacy is not for me, it's for those rich wome...

"You don't want to be the next meme": College St...

Away From Prying Eyes: Analyzing Usage and Under...

Online Privacy and Aging of Digital Artifacts

Opening Remarks 8:50am - 9:00am

Cyber Operations Stress Survey (... 9:00am - 9:30am

Cybersecurity Research Datasets:... 9:30am - 10:00am

On Designing and Evaluating Phis... 10:00am - 10:30am

DEW: Distributed Experiment Work... 11:00am - 11:30am

Malware Analysis Through High-le... 11:30am - 12:00pm

BNV: Enabling Scalable Network E... 12:00pm - 12:30pm

Round Table: Opportunities and Challenges in Experimentation and... 2:00pm - 3:00pm

AMIsim: Application-layer Advanc... 3:00pm - 3:30pm

Galaxy: A Network Emulation Fram... 3:30pm - 4:00pm

Supporting Docker in Emulab-Base... 4:30pm - 5:00pm

High Performance Tor Experimenta... 5:00pm - 5:30pm

Git-based CTF: A Simple and Effective Approach t...

King of the Hill: A Novel Cybersecurity Competit...

Authenticity, Ethicality, and Motivation: A Form...

Teaching with angr: A Symbolic Execution Curricu...

CLARK – The Cybersecurity Labs a... 11:00am - 11:30am

Mirror, Mirror, On the Wall: Wha... 11:30am - 12:00pm

Lowering the Barriers to Industr... 12:00pm - 12:30pm

Cyber Sleuth Escape Room (Optional Lunch Activit... 1:15pm - 2:00pm

Hackerbot: Attacker Chatbots for Randomised and...

InfoSec Cinema: Using Films for Information Secu...

A Case Study-based Cybersecurity Ethics Curricul...

Phishing Attacks: Learning by Doing

Building the Cyber Pipeline: Outreach Init... 4:00pm - 4:40pm

New America Cybersecurity Fellowship

Lightning Talks 5:00pm - 5:30pm

Break with Refreshments 10:30am - 11:00am

On-site Registration 7:30am - 5:00pm

USENIX Women in Advanced Computing (WiAC) BoF 7:00pm - 8:00pm

Student and Young Professionals Meetup 8:00pm - 9:00pm

Board Game Night 9:00pm - 11:00pm

A Modern History of Offensive Security Research 9:00am - 10:00am

Bitter Harvest: Systematically F... 10:00am - 10:30am

SoK: Make JIT-Spray Great Again 10:30am - 11:00am

Optimizing Recurrent Pulsing Att... 11:30am - 12:00pm

You Snooze, You Lose: Measuring... 12:00pm - 12:30pm

Symbolic Execution of Security P... 2:00pm - 2:30pm

Hitag 2 Hell – Brutally Optimizi... 2:30pm - 3:00pm

Security Analysis of eIDAS – The... 4:00pm - 4:30pm

Browser history re:visited 4:30pm - 5:00pm

Tools for Active and Passive Net... 5:00pm - 5:30pm

SOUPS Town Hall Meeting 7:00pm - 8:00pm

"I've Got Nothing to Lose": Consumers' Risk Perc...

Data Breaches: User Comprehension, Expectations,...

User Comfort with Android Background Resource Ac...

Let Me Out! Evaluating the Effectiveness of Quar...

Developers Deserve Security Warnings, Too: On th...

Security in the Software Development Lifecycle

Deception Task Design in Developer Password Stud...

API Blindspots: Why Experienced Developers Write...

"If I press delete, it's gone" - User Understand...

Programming Experience Might Not Help in Compreh...

"We make it a big deal in the company": Security...

A Comparative Usability Study of Key Management...

Lightning Talks 3:15pm - 3:45pm

When is a Tree Really a Truck? Exploring Mental...

"It's Scary…It's Confusing…It's Dull": How Cyber...

Introducing the Cybersurvival Task: Assessing an...

Ethics Emerging: the Story of Privacy and Securi...

Opening Remarks 9:00am - 9:15am

Taking the Red Pill: Designing Sensors that Reco...

Learning sensitive indoor location from unprotec...

Smart City Security 9:25am - 9:30am

Program analysis of IoT implementations

A(nother) case for research on secure robot apps

Fear The Hacked IoT Medical Devices: the apocaly...

Sensors, IOT, and Car Talks Discussion

Enhancing privacy protection for Aadhaar-like bi...

Privacy-preserving electronic ID on smart phones

Audit for access policy 10:40am - 10:45am

Usable TLS client authentication

Revocation Checking - why is this still so hard?

Science of security or (Science of security, is...

How can we evolve cyber physical security polici...

Authentication, Audit, Usability, and Privacy Discussion 11:10am - 12:30pm

The State of Physical Attacks on Deep Learning S...

Stale time is a security threat

Memory Tagging and how it improves C/C++ memory...

The Algorithmic Bug Bounty 2:15pm - 2:20pm

Learning about protecting distributed infrastruc...

Gb/s true RNG using commodity parts

Security Techniques Discussion 2:35pm - 3:30pm

Account security is broken 4:00pm - 4:08pm

Awareness programs are designed to fail, aka, Be...

Security metrics: is this even possible?

Fielding and securing autonomous combat units

A case for research on digital identities

Research and Practice Discussion 4:40pm - 5:15pm

Awards and Wrap Up 5:15pm - 5:30pm

Opening Remarks 9:00am - 9:10am

Growing the Open Observatory of Network Interference (OONI) 9:10am - 10:10am

Measuring the Political and Social Implications...

Automatically Generating a Large, Culture-Specif...

A Bestiary of Blocking: The Motivations and Mode...

Exploring User Mental Models of End-to-End Encry...

A Cryptographic Airbag for Metadata: Protecting...

HSTS Supports Targeted Surveillance

Measuring Privacy Threats in China-Wide Mobile N...

An analysis of automatic image filtering on WeCh...

From Russia With Crypto: A Political History of...

MultiFlow: Cross-Connection Decoy Routing using...

Analyzing China's Blocking of Unpublished Tor Br...

Rump Session: Special Onion Edit... 5:30pm - 6:00pm

On-site Registration 8:00am - 7:00pm

Fear the Reaper: Characterization and Fast Detec...

BlackIoT: IoT Botnet of High Wattage Devices Can...

Skill Squatting Attacks on Amazon Alexa

CommanderSong: A Systematic Approach for Practic...

Better managed than memorized? Studying the Impa...

Forgetting of Passwords: Ecological Theory and D...

The Rewards and Costs of Stronger Passwords in a...

Rethinking Access Control and Authentication for...

A Sense of Time for JavaScript and Node.js: Firs...

Freezing the Web: A Study of ReDoS Vulnerabiliti...

NAVEX: Precise and Scalable Exploit Generation f...

Rampart: Protecting Web Applications from CPU-Ex...

Opening Remarks and Awards 8:45am - 9:00am

Q: Why Do Keynote Speakers Keep Suggesting That Improving Securi... 9:00am - 10:00am

Fp-Scanner: The Privacy Implications of Browser...

Who Left Open the Cookie Jar? A Comprehensive Ev...

Effective Detection of Multimedia Protocol Tunne...

Quack: Scalable Remote Measurement of Applicatio...

Privacy for Tigers 1:40pm - 2:30pm

Cybersecurity: Is It about Business or Technology? 2:30pm - 3:20pm

Rethinking Architectures and Abstraction for a World... 3:50pm - 4:40pm

Solving the Next Billion-People Privacy Problem 4:40pm - 5:30pm

Community Meeting with the USENIX Security Symposium Steering Co... 7:30pm - 8:30pm

USENIX Security '18 Lightning Talks 8:30pm - 9:30pm

ACES: Automatic Compartments for Embedded System...

IMIX: In-Process Memory Isolation Extension

HeapHopper: Bringing Bounded Model Checking to H...

Guarder: A Tunable Secure Allocator

ATtention Spanned: Comprehensive Vulnerability A...

Charm: Facilitating Dynamic Analysis of Device D...

Inception: System-Wide Security Testing of Real-...

Acquisitional Rule-based Engine for Discovering...

How Do Tor Users Interact With Onion Services?

Towards Predicting Efficient and Anonymous Tor C...

BurnBox: Self-Revocable Encryption in a World Of...

An Empirical Analysis of Anonymity in Zcash

Badge Pickup 7:30am - 5:00pm

Unveiling and Quantifying Facebook Exploitation...

Analysis of Privacy Protections in Fitness Track...

AttriGuard: A Practical Defense Against Attribut...

Polisis: Automated Analysis and Presentation of...

The Battle for New York: A Case Study of Applied...

SAQL: A Stream-based Query System for Real-Time...

MoonShine: Optimizing OS Fuzzer Seed Selection w...

QSYM : A Practical Concolic Execution Engine Tai...

Automatic Heap Layout Manipulation for Exploitat...

FUZE: Towards Facilitating Exploit Generation fo...

Malicious Management Unit: Why Stopping Cache At...

Translation Leak-aside Buffer: Defeating Cache S...

Meltdown: Reading Kernel Memory from User Space

Foreshadow: Extracting the Keys to the Intel SGX...

Analogy Cyber Security—From 0101 to Mixed Signals 9:00am - 9:50am

Chipmunk or Pepe? Using Acoustical Analysis to Detect... 9:50am - 10:40am

NetHide: Secure and Practical Network Topology O...

Towards a Secure Zero-rating Framework with Thre...

Debloating Software through Piece-Wise Compilati...

Precise and Accurate Patch Presence Test for Bin...

From Patching Delays to Infection Symptoms: Usin...

Understanding the Reproducibility of Crowd-repor...

From Spam to Speech: Policing the Next Generation of... 3:40pm - 4:30pm

The Law and Economics of Bug Bounties 4:30pm - 5:20pm

Efail: Breaking S/MIME and OpenPGP Email Encrypt...

The Dangers of Key Reuse: Practical Attacks on I...

One&Done: A Single-Decryption EM-Based Attack on...

DATA – Differential Address Trace Analysis: Find...

Practical Accountability of Secret Processes

DIZK: A Distributed Zero Knowledge Proof System

The Secure Socket API: TLS as an Operating Syste...

Return Of Bleichenbacher’s Oracle Threat (ROBOT)

Bamboozling Certificate Authorities with BGP

The Broken Shield: Measuring Revocation Effectiv...

Plug and Prey? Measuring the Commoditization of...

Reading Thieves' Cant: Automatically Identifying...

Schrödinger’s RAT: Profiling the Stakeholders in...

The aftermath of a crypto-ransomware attack at a...

Badge Pickup 8:00am - 5:00pm

We Still Don’t Have Secure Cross-Domain Requests...

End-to-End Measurements of Email Spoofing Attack...

Who Is Answering My Queries: Understanding and C...

End-Users Get Maneuvered: Empirical Analysis of...

The Guard's Dilemma: Efficient Code-Reuse Attack...

Tackling runtime-based obfuscation in Android wi...

A Bad Dream: Subverting Trusted Platform Module...

Discovering Flaws in Security-Focused Static Ana...

teEther: Gnawing at Ethereum to Automatically Ex...

Enter the Hydra: Towards Principled Bug Bounties...

Arbitrum: Scalable, private smart contracts

Erays: Reverse Engineering Ethereum's Opaque Sma...

All Your GPS Are Belong To Us: Towards Stealthy...

Injected and Delivered: Fabricating Implicit Con...

Modelling and Analysis of a Hierarchy of Distanc...

Off-Path TCP Exploit: How Wireless Routers Can J...

The Second Crypto War—What's Different Now 9:00am - 9:50am

Medical Device Cybersecurity through the FDA Lens 9:50am - 10:40am

With Great Training Comes Great Vulnerability: P...

When Does Machine Learning FAIL? Generalized Tra...

Vetting Single Sign-On SDK Implementations via S...

O Single Sign-Off, Where Art Thou? An Empirical...

WPSE: Fortifying Web Protocols via Browser-Side...

Man-in-the-Machine: Exploiting Ill-Secured Commu...

FlowCog: Context-aware Semantics Extraction and...

Sensitive Information Tracking in Commodity IoT

Enabling Refinable Cross-Host Attack Investigati...

Dependence-Preserving Data Compaction for Scalab...

SAD THUG: Structural Anomaly Detection for Trans...

FANCI : Feature-based Automated NXDomain Classif...

An Empirical Study of Web Resource Manipulation...

Fast and Service-preserving Recovery from Malwar...

DelegaTEE: Brokered Delegation Using Trusted Exe...

Simple Password-Hardened Encryption Services

Security Namespace: Making Linux Security Framew...

Shielding Software From Privileged Side-Channel...

Formal Security Analysis of Neural Networks usin...

Turning Your Weakness Into a Strength: Watermark...

A4NT: Author Attribute Anonymity by Adversarial...

GAZELLE: A Low Latency Framework for Secure Neur...

Badge Pickup 8:00am - 12:00pm