25th USENIX Security Symposium has ended

Create Your Own Event

25th USENIX Security Symposium

8:00am PDT

Continental Breakfast Texas Ballroom Foyer

9:00am PDT

Welcome Texas Ballroom 2–3 Opening Remarks Texas Ballroom Foyer Retelling the Retail Security Story Texas Ballroom 1

9:15am PDT

Large-Scale Automated Vulnerability Addition and the Search for Truth Texas Ballroom 2–3

9:30am PDT

Keynote Address Texas Ballroom 5-7

10:00am PDT

Break with Refreshments Texas Ballroom Foyer

10:30am PDT

Break with Refreshments Texas Ballroom Foyer Acceleration Attacks on PBKDF2: Or, What Is inside the Black-Box of oclHashcat? Texas Ballroom 1

11:00am PDT

Can Knowledge of Technical Debt Help Identify Software Vulnerabilities? Texas Ballroom 2–3 DNS-sly: Avoiding Censorship through Network Complexity Texas Ballroom 5-7 Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS Texas Ballroom 1

11:30am PDT

Chappie Swarm: Persona-Driven Web Corpus Generation Texas Ballroom 2–3 Matryoshka: Hiding Secret Communication in Plain Sight Texas Ballroom 5-7 How to Break Microsoft Rights Management Services Texas Ballroom 1

12:00pm PDT

Honey Sheets: What Happens to Leaked Google Spreadsheets? Texas Ballroom 2–3 GhostPost: Seamless Restoration of Censored Social Media Posts Texas Ballroom 5-7 Putting LTE Security Functions to the Test: A Framework to Evaluate Implementation Correctness Texas Ballroom 1

12:30pm PDT

Eavesdropping One-Time Tokens Over Magnetic Secure Transmission in Samsung Pay Texas Ballroom 1 Lunch Zilker Ballroom 1 and Foyer

1:00pm PDT

Lunch Zilker Ballroom 1 and Foyer

2:00pm PDT

Evaluating Malware Mitigation by Android Market Operators Texas Ballroom 2–3 Censors’ Delay in Blocking Circumvention Proxies Texas Ballroom 5-7 How to Phone Home with Someone Else’s Phone: Information Exfiltration Using Intentional Sound Noise on Gyroscopic Sensors Texas Ballroom 1

2:30pm PDT

A Cybersecurity Test and Evaluation Facility for the Next Generation Air Transportation System (NextGen) Texas Ballroom 2–3 The Politics of Routing: Investigating the Relationship between AS Connectivity and Internet Freedom Texas Ballroom 5-7 Eavesdropping on Fine-Grained User Activities Within Smartphone Apps Over Encrypted Network Traffic Texas Ballroom 1

3:00pm PDT

Providing SCADA Network Data Sets for Intrusion Detection Research Texas Ballroom 2–3 Break with Refreshments Texas Ballroom Foyer Hardware-Assisted Rootkits: Abusing Performance Counters on the ARM and x86 Architectures Texas Ballroom 1

3:30pm PDT

Adblocking and Counter Blocking: A Slice of the Arms Race Texas Ballroom 5-7 Break with Refreshments Texas Ballroom Foyer

3:35pm PDT

Break with Refreshments Texas Ballroom Foyer

4:00pm PDT

Privacy and Security Issues in BAT Web Browsers Texas Ballroom 5-7 AVLeak: Fingerprinting Antivirus Emulators through Black-Box Testing Texas Ballroom 1 Automated Security Experimentation Texas Ballroom 2–3

4:30pm PDT

Mini Break Texas Ballroom Foyer malWASH: Washing Malware to Evade Dynamic Analysis Texas Ballroom 1

4:45pm PDT

Rump Session and Closing Remarks Texas Ballroom 5-7

5:00pm PDT

Non-Deterministic Timers for Hardware Trojan Activation (or How a Little Randomness Can Go the Wrong Way) Texas Ballroom 1

8:00pm PDT

Birds-of-a-Feather Sessions (BoFs) TBA

8:00am PDT

Continental Breakfast Texas Ballroom Foyer

8:45am PDT

Welcome and Discussion Format Texas Ballroom 2–3

9:00am PDT

Learning From Others’ Mistakes: Penetration Testing IoT Devices in the Classroom Texas Ballroom 5-7 Exciting Research Directions in User Authentication Online Texas Ballroom 2–3 Stagefright: An Android Exploitation Case Study Texas Ballroom 1

9:25am PDT

A Tool for Teaching Reverse Engineering Texas Ballroom 5-7

10:00am PDT

Break with Refreshments Texas Ballroom Foyer Fillory of PHY: Toward a Periodic Table of Signal Corruption Exploits and Polyglots in Digital Radio Texas Ballroom 1

10:10am PDT

On the Design of Security Games: From Frustrating to Engaging Learning Texas Ballroom 5-7 Teaching Data-Driven Security: A Course on Security Analytics Texas Ballroom 5-7

10:30am PDT

Break with Refreshments Texas Ballroom Foyer SoK: XML Parser Vulnerabilities Texas Ballroom 1 Implications of Adversarial Learning for Security and Privacy Texas Ballroom 2–3

11:00am PDT

Break with Refreshments Texas Ballroom Foyer Panel: Mentorship of Women in Computer Security Texas Ballroom 5-7

11:30am PDT

Abusing Public Third-Party Services for EDoS Attacks Texas Ballroom 1 Security and Privacy for Augmented Reality Texas Ballroom 2–3

12:00pm PDT

DDoSCoin: Cryptocurrency with a Malicious Proof-of-Work Texas Ballroom 1

12:15pm PDT

SATC Transition to Practice Perspective: Why and How? Texas Ballroom 5-7

12:30pm PDT

Lunch Zilker Ballroom 1 and Foyer

2:00pm PDT

Self-Efficacy in Cybersecurity Tasks and Its Relationship with Cybersecurity Competition and Work-Related Outcomes Texas Ballroom 5-7 A Rising Tide: Design Exploits in Industrial Control Systems Texas Ballroom 1 New Challenges in Usable Security Texas Ballroom 2–3

2:25pm PDT

Development of Peer Instruction Questions for Cybersecurity Education Texas Ballroom 5-7

2:30pm PDT

This Ain't Your Dose: Sensor Spoofing Attack on Medical Infusion Pump Texas Ballroom 1

2:50pm PDT

Finding the Balance Between Guidance and Independence in Cybersecurity Exercises Texas Ballroom 5-7

3:00pm PDT

Break with Refreshments Texas Ballroom Foyer Sampling Race: Bypassing Timing-Based Analog Active Sensor Spoofing Detection on Analog-Digital Systems Texas Ballroom 1

3:10pm PDT

Gamification for Teaching and Learning Computer Security in Higher Education Texas Ballroom 5-7

3:30pm PDT

Break with Refreshments Texas Ballroom Foyer Everything You Wanted to Know about Privacy Law (but Were Afraid to Ask) Texas Ballroom 2–3

4:00pm PDT

Teaching Computer Science With Cybersecurity Education Built-in Texas Ballroom 5-7 Truck Hacking: An Experimental Analysis of the SAE J1939 Standard Texas Ballroom 1

4:20pm PDT

A "Divergent"-Themed CTF and Urban Race for Introducing Security and Cryptography Texas Ballroom 5-7

4:30pm PDT

Wrap-Up Texas Ballroom 2–3 Controlling UAVs with Sensor Input Spoofing Attacks Texas Ballroom 1

4:40pm PDT

Mentoring Talent in IT Security–A Case Study Texas Ballroom 5-7

5:00pm PDT

The Use of Cyber-Defense Exercises in Undergraduate Computing Education Texas Ballroom 5-7 A Security Analysis of an In-Vehicle Infotainment and App Platform Texas Ballroom 1

5:10pm PDT

Scalable and Lightweight CTF Infrastructures Using Application Containers (Pre-recorded Presentation) Texas Ballroom 5-7

6:00pm PDT

Welcome Happy Hour Texas Ballroom Foyer

7:00pm PDT

Student Social and Networking Event Hill Country Ballroom

8:00pm PDT

Birds-of-a-Feather Sessions (BoFs) TBA

9:00pm PDT

Board Game Night Hill Country Ballroom

7:30am PDT

Continental Breakfast Zilker Ballroom Foyer

8:25am PDT

Daily Lightning Talks Zilker Ballroom 2–4

8:45am PDT

Opening Remarks and Awards Zilker Ballroom 2–4

9:00am PDT

Crashing Drones and Hijacked Cameras: CyberTrust Meets CyberPhysical Zilker Ballroom 2–4

10:30am PDT

Break with Refreshments Zilker Ballroom Foyer

11:00am PDT

Flip Feng Shui: Hammering a Needle in the Software Stack Zilker Ballroom 2 Verifying Constant-Time Implementations Zilker Ballroom 3 2016 Test of Time Award Panel Zilker Ballroom 4

11:30am PDT

One Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks and Privilege Escalation Zilker Ballroom 2 Secure, Precise, and Fast Floating-Point Operations on x86 Processors Zilker Ballroom 3

12:00pm PDT

PIkit: A New Kernel-Independent Processor-Interconnect Rootkit Zilker Ballroom 2 überSpark: Enforcing Verifiable Object Abstractions for Automated Compositional Security Analysis of a Hypervisor Zilker Ballroom 3

12:30pm PDT

Lunch (on your own) TBA Networking Luncheon for Women in Advanced Computing (WiAC) Hill Country Ballroom

2:00pm PDT

Undermining Information Hiding (and What to Do about It) Zilker Ballroom 2 zxcvbn: Low-Budget Password Strength Estimation Zilker Ballroom 3 Making HTTPS the Default in the World's Largest Bureaucracy Zilker Ballroom 4

2:30pm PDT

Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks Zilker Ballroom 3 Poking Holes in Information Hiding Zilker Ballroom 2

3:00pm PDT

An Empirical Study of Textual Key-Fingerprint Representations Zilker Ballroom 3 What Cannot Be Read, Cannot Be Leveraged? Revisiting Assumptions of JIT-ROP Defenses Zilker Ballroom 2

3:30pm PDT

Break with Refreshments Zilker Ballroom Foyer

4:00pm PDT

Enhancing Bitcoin Security and Performance with Strong Consistency via Collective Signing Zilker Ballroom 3 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous Zilker Ballroom 2 When Governments Attack: Malware Targeting Activists, Lawyers, and Journalists Zilker Ballroom 4

4:30pm PDT

Faster Malicious 2-Party Secure Computation with Online/Offline Dual Execution Zilker Ballroom 3 Website-Targeted False Content Injection by Network Operators Zilker Ballroom 2

5:00pm PDT

Egalitarian Computing Zilker Ballroom 3 The Ever-Changing Labyrinth: A Large-Scale Analysis of Wildcard DNS Powered Blackhat SEO Zilker Ballroom 2

5:30pm PDT

A Comprehensive Measurement Study of Domain Generating Malware Zilker Ballroom 2 Post-quantum Key Exchange—A New Hope Zilker Ballroom 3

6:30pm PDT

USENIX Security '16 Reception Zilker Ballroom 1 USENIX Security '16 Symposium Reception Zilker Ballroom 1

8:00pm PDT

USENIX Security '16 Work-in-Progress Reports (WiPs) Zilker Ballroom 2 Birds-of-a-Feather Sessions (BoFs) TBA

7:30am PDT

Continental Breakfast Zilker Ballroom Foyer

8:30am PDT

Daily Lightning Talks Zilker Ballroom 2–4

9:00am PDT

Automatically Detecting Error Handling Bugs Using Error Specifications Zilker Ballroom 2 Defending against Malicious Peripherals with Cinch Zilker Ballroom 3 The Moral Character of Cryptographic Work Zilker Ballroom 4

9:30am PDT

APISan: Sanitizing API Usages through Semantic Cross-Checking Zilker Ballroom 2 Making USB Great Again with USBFILTER Zilker Ballroom 3

10:00am PDT

Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks Zilker Ballroom 3 On Omitting Commits and Committing Omissions: Preventing Git Metadata Tampering That (Re)introduces Software Vulnerabilities Zilker Ballroom 2

10:30am PDT

Break with Refreshments Zilker Ballroom Foyer

11:00am PDT

Request and Conquer: Exposing Cross-Origin Resource Size Zilker Ballroom 2 Virtual U: Defeating Face Liveness Detection by Building Virtual Models from Your Public Photos Zilker Ballroom 3 Privacy and Threat in Practice: Mobile Messaging by Low-Income New Yorkers Zilker Ballroom 4

11:30am PDT

Hidden Voice Commands Zilker Ballroom 3 Trusted Browsers for Uncertain Times Zilker Ballroom 2

12:00pm PDT

FlowFence: Practical Data Protection for Emerging IoT Application Frameworks Zilker Ballroom 3 Tracing Information Flows Between Ad Exchanges Using Retargeted Ads Zilker Ballroom 2

12:30pm PDT

Lunch (on your own) TBA

2:00pm PDT

ARMageddon: Cache Attacks on Mobile Devices Zilker Ballroom 2 Stealing Machine Learning Models via Prediction APIs Zilker Ballroom 3 The Unfalsifiability of Security Claims Zilker Ballroom 4

2:30pm PDT

DRAMA: Exploiting DRAM Addressing for Cross-CPU Attacks Zilker Ballroom 2 Oblivious Multi-Party Machine Learning on Trusted Processors Zilker Ballroom 3

3:00pm PDT

An In-Depth Analysis of Disassembly on Full-Scale x86/x64 Binaries Zilker Ballroom 2 Thoth: Comprehensive Policy Compliance in Data Retrieval Systems Zilker Ballroom 3

3:30pm PDT

Break with Refreshments Zilker Ballroom Foyer

4:00pm PDT

Dancing on the Lip of the Volcano: Chosen Ciphertext Attacks on Apple iMessage Zilker Ballroom 2 Investigating Commercial Pay-Per-Install and the Distribution of Unwanted Software Zilker Ballroom 3 Teaching Computer Security: Thoughts from the Field Zilker Ballroom 3

4:30pm PDT

Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services Zilker Ballroom 3 Predicting, Decrypting, and Abusing WPA2/802.11 Group Keys Zilker Ballroom 2

5:00pm PDT

DROWN: Breaking TLS Using SSLv2 Zilker Ballroom 2 UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware Zilker Ballroom 3

5:30pm PDT

All Your Queries Are Belong to Us: The Power of File-Injection Attacks on Searchable Encryption Zilker Ballroom 2 Towards Measuring and Mitigating Social Engineering Software Download Attacks Zilker Ballroom 3

6:30pm PDT

USENIX Security '16 Poster Session and Happy Hour Zilker Ballroom 1

8:00pm PDT

USENIX Security '16 Doctoral Colloquium Zilker Ballroom 2 Birds-of-a-Feather Sessions (BoFs) TBA

7:30am PDT

Continental Breakfast Zilker Ballroom Foyer

8:30am PDT

Daily Lightning Talks Zilker Ballroom 2–4

9:00am PDT

fTPM: A Software-Only Implementation of a TPM Chip Zilker Ballroom 3 Specification Mining for Intrusion Detection in Networked Control Systems Zilker Ballroom 2 Finding and Fixing Security Bugs in Flash Zilker Ballroom 4

9:30am PDT

Optimized Invariant Representation of Network Traffic for Detecting Unseen Malware Variants Zilker Ballroom 2 Sanctum: Minimal Hardware Extensions for Strong Software Isolation Zilker Ballroom 3

10:00am PDT

Ariadne: A Minimal Approach to State Continuity Zilker Ballroom 3 Authenticated Network Time Synchronization Zilker Ballroom 2

10:30am PDT

Break with Refreshments Zilker Ballroom Foyer

11:00am PDT

OblivP2P: An Oblivious Peer-to-Peer Content Sharing System Zilker Ballroom 3 The Million-Key Question—Investigating the Origins of RSA Public Keys Zilker Ballroom 2 Report from the Field: A CDN's Role in Repelling Attacks against Banking Industry Web Sites Zilker Ballroom 4

11:30am PDT

AuthLoop: End-to-End Cryptographic Authentication for Telephony over Voice Channels Zilker Ballroom 3 Fingerprinting Electronic Control Units for Vehicle Intrusion Detection Zilker Ballroom 2

12:00pm PDT

Lock It and Still Lose It —on the (In)Security of Automotive Remote Keyless Entry Systems Zilker Ballroom 2 You Are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors Zilker Ballroom 3

12:30pm PDT

Lunch (on your own) TBA

2:00pm PDT

Internet Jones and the Raiders of the Lost Trackers: An Archaeological Study of Web Tracking from 1996 to 2016 Zilker Ballroom 2 Mirror: Enabling Proofs of Data Replication and Retrievability in the Cloud Zilker Ballroom 3 AMD x86 Memory Encryption Technologies Zilker Ballroom 4

2:30pm PDT

Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification Zilker Ballroom 2 ZKBoo: Faster Zero-Knowledge for Boolean Circuits Zilker Ballroom 3

3:00pm PDT

The Cut-and-Choose Game and Its Application to Cryptographic Protocols Zilker Ballroom 3 You've Got Vulnerability: Exploring Effective Vulnerability Notifications Zilker Ballroom 2

3:30pm PDT

Break with Refreshments Zilker Ballroom Foyer

4:00pm PDT

Identifying and Characterizing Sybils in the Tor Network Zilker Ballroom 3 On Demystifying the Android Application Framework: Re-Visiting Android Permission Specification Analysis Zilker Ballroom 2 Security Competitions Zilker Ballroom 4

4:30pm PDT

k-fingerprinting: A Robust Scalable Website Fingerprinting Technique Zilker Ballroom 3 Practical DIFC Enforcement on Android Zilker Ballroom 2

5:00pm PDT

Protecting Privacy of BLE Device Users Zilker Ballroom 3 Screen after Previous Screens: Spatial-Temporal Recreation of Android App Displays from Memory Images Zilker Ballroom 2

5:30pm PDT

Harvesting Inconsistent Security Configurations in Custom Android ROMs via Differential Analysis Zilker Ballroom 2 Privacy in Epigenetics: Temporal Linkability of MicroRNA Expression Profiles Zilker Ballroom 3