USENIX Best Papers

Filter List View By:

FAST '24

What's the Story in EBS Glory: Evolutions and Lessons in Building Cloud Block Store
Weidong Zhang, Alibaba Group; Erci Xu, Alibaba Group; Qiuping Wang, Alibaba Group; Xiaolu Zhang, Alibaba Group; Yuesheng Gu, Alibaba Group; Zhenwei Lu, Alibaba Group; Tao Ouyang, Alibaba Group; Guanqun Dai, Alibaba Group; Wenwen Peng, Alibaba Group; Zhe Xu, Alibaba Group; Shuo Zhang, Alibaba Group; Dong Wu, Alibaba Group; Yilei Peng, Alibaba Group; Tianyun Wang, Alibaba Group; Haoran Zhang, Alibaba Group; Jiasheng Wang, Alibaba Group; Wenyuan Yan, Alibaba Group; Yuanyuan Dong, Alibaba Group; Wenhui Yao, Alibaba Group; Zhongjie Wu, Alibaba Group; Lingjun Zhu, Alibaba Group; Chao Shi, Alibaba Group; Yinhu Wang, Alibaba Group; Rong Liu, Alibaba Group; Junping Wu, Alibaba Group; Jiaji Zhu, Alibaba Group; Jiesheng Wu, Alibaba Group
We Ain't Afraid of No File Fragmentation: Causes and Prevention of Its Performance Impact on Modern Flash SSDs
Yuhun Jun, Sungkyunkwan University and Samsung Electronics Co., Ltd.; Shinhyun Park, Sungkyunkwan University; Jeong-Uk Kang, Samsung Electronics Co., Ltd.; Sang-Hoon Kim, Ajou University; Euiseong Seo, Sungkyunkwan University

USENIX Security '23

Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversations
Tadayoshi Kohno, University of Washington; Yasemin Acar, Paderborn University and George Washington University; Wulf Loh, Universität Tübingen
Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models
Shawn Shan, University of Chicago; Jenna Cryan, University of Chicago; Emily Wenger, University of Chicago; Haitao Zheng, University of Chicago; Rana Hanocka, University of Chicago; Ben Y. Zhao, University of Chicago
An Efficient Design of Intelligent Network Data Plane
Guangmeng Zhou, Tsinghua University; Zhuotao Liu, Tsinghua University and Zhongguancun Laboratory; Chuanpu Fu, Tsinghua University; Qi Li, Tsinghua University and Zhongguancun Laboratory; Ke Xu, Tsinghua University and Zhongguancun Laboratory
Don’t be Dense: Efficient Keyword PIR for Sparse Databases
Sarvar Patel, Google; Joon Young Seo, Google; Kevin Yeo, Google and Columbia University
TreeSync: Authenticated Group Management for Messaging Layer Security
Théophile Wallez, Inria Paris; Jonathan Protzenko, Microsoft Research; Benjamin Beurdouche, Mozilla; Karthikeyan Bhargavan, Inria Paris
Hash Gone Bad: Automated discovery of protocol attacks that exploit hash function weaknesses
Vincent Cheval, Inria Paris; Cas Cremers, CISPA Helmholtz Center for Information Security; Alexander Dax, CISPA Helmholtz Center for Information Security and Saarland University; Lucca Hirschi, Université de Lorraine, Inria, CNRS, France; Charlie Jacomme, Inria Paris; Steve Kremer, Université de Lorraine, LORIA, Inria Nancy Grand-Est
Bug Hunters’ Perspectives on the Challenges and Benefits of the Bug Bounty Ecosystem
Omer Akgul, University of Maryland; Taha Eghtesad, Pennsylvania State University; Amit Elazari, University of California, Berkeley; Omprakash Gnawali, University of Houston; Jens Grossklags, Technical University of Munich; Michelle L. Mazurek, University of Maryland; Daniel Votipka, Tufts University; Aron Laszka, Pennsylvania State University
Examining Power Dynamics and User Privacy in Smart Technology Use Among Jordanian Households
Wael Albayaydh, University of Oxford; Ivan Flechais, University of Oxford
Tight Auditing of Differentially Private Machine Learning
Milad Nasr, Google DeepMind; Jamie Hayes, Google DeepMind; Thomas Steinke, Google DeepMind; Borja Balle, DeepMind; Florian Tramèr, ETH Zurich; Matthew Jagielski, Google DeepMind; Nicholas Carlini, Google DeepMind; Andreas Terzis, Google DeepMind
Automated Analysis of Protocols that use Authenticated Encryption: How Subtle AEAD Differences can impact Protocol Security
Cas Cremers, CISPA Helmholtz Center for Information Security; Alexander Dax, CISPA Helmholtz Center for Information Security and Saarland University; Charlie Jacomme, Inria Paris; Mang Zhao, CISPA Helmholtz Center for Information Security and Saarland University
Account Security Interfaces: Important, Unintuitive, and Untrustworthy
Alaa Daffalla, Cornell University; Marina Bohuk, Cornell University; Nicola Dell, Jacobs Institute Cornell Tech; Rosanna Bellini, Cornell University; Thomas Ristenpart, Cornell Tech
A Two-Decade Retrospective Analysis of a University's Vulnerability to Attacks Exploiting Reused Passwords
Alexandra Nisenoff, University of Chicago and Carnegie Mellon University; Maximilian Golla, University of Chicago / Max Planck Institute for Security and Privacy; Miranda Wei, University of Chicago / University of Washington; Juliette Hainline, University of Chicago; Hayley Szymanek, University of Chicago; Annika Braun, University of Chicago; Annika Hildebrandt, University of Chicago; Blair Christensen, University of Chicago; David Langenberg, University of Chicago; Blase Ur, University of Chicago
Fuzztruction: Using Fault Injection-based Fuzzing to Leverage Implicit Domain Knowledge
Nils Bars, CISPA Helmholtz Center for Information Security; Moritz Schloegel, CISPA Helmholtz Center for Information Security; Tobias Scharnowski, CISPA Helmholtz Center for Information Security; Nico Schiller, Ruhr-Universität Bochum; Thorsten Holz, CISPA Helmholtz Center for Information Security
Remote Direct Memory Introspection
Hongyi Liu, Rice University; Jiarong Xing, Rice University; Yibo Huang, Rice University; Danyang Zhuo, Duke University; Srinivas Devadas, Massachusetts Institute of Technology; Ang Chen, Rice University
A Bug's Life: Analyzing the Lifecycle and Mitigation Process of Content Security Policy Bugs
Gertjan Franken, imec-DistriNet, KU Leuven; Tom Van Goethem, imec-DistriNet, KU Leuven; Lieven Desmet, imec-DistriNet, KU Leuven; Wouter Joosen, imec-DistriNet, KU Leuven
BotScreen: Trust Everybody, but Cut the Aimbots Yourself
Minyeop Choi, KAIST; Gihyuk Ko, Cyber Security Research Center at KAIST and Carnegie Mellon University; Sang Kil Cha, KAIST

SOUPS 2023

SoK: I Have the (Developer) Power! Sample Size Estimation for Fisher's Exact, Chi-Squared, McNemar's, Wilcoxon Rank-Sum, Wilcoxon Signed-Rank and t-tests in Developer-Centered Usable Security
Anna-Marie Ortloff, University of Bonn; Christian Tiefenau, University of Bonn; Matthew Smith, University of Bonn, Fraunhofer FKIE

USENIX ATC '23

zpoline: a system call hook mechanism based on binary rewriting
Kenichi Yasukata, IIJ Research Laboratory; Hajime Tazaki, IIJ Research Laboratory; Pierre-Louis Aublin, IIJ Research Laboratory; Kenta Ishiguro, Hosei University
On-demand Container Loading in AWS Lambda
Marc Brooker, Amazon Web Services; Mike Danilov, Amazon Web Services; Chris Greenwood, Amazon Web Services; Phil Piwonka, Amazon Web Services
LLFree: Scalable and Optionally-Persistent Page-Frame Allocation
Lars Wrenger, Leibniz Universität Hannover; Florian Rommel, Leibniz Universität Hannover; Alexander Halbuer, Leibniz Universität Hannover; Christian Dietrich, Hamburg University of Technology; Daniel Lohmann, Leibniz Universität Hannover

OSDI '23

Triangulating Python Performance Issues with SCALENE
Emery D. Berger, University of Massachusetts Amherst; Sam Stern, University of Massachusetts Amherst; Juan Altmayer Pizzorno, University of Massachusetts Amherst
Ensō: A Streaming Interface for NIC-Application Communication
Hugo Sadok, Carnegie Mellon University; Nirav Atre, Carnegie Mellon University; Zhipeng Zhao, Microsoft; Daniel S. Berger, Microsoft Research and University of Washington; James C. Hoe, Carnegie Mellon University; Aurojit Panda, New York University; Justine Sherry, Carnegie Mellon University; Ren Wang, Intel

NSDI '23

CausalSim: A Causal Framework for Unbiased Trace-Driven Simulation
Abdullah Alomar, MIT; Pouya Hamadanian, MIT; Arash Nasr-Esfahany, MIT; Anish Agarwal, MIT; Mohammad Alizadeh, MIT; Devavrat Shah, MIT
DOTE: Rethinking (Predictive) WAN Traffic Engineering
Yarin Perry, Hebrew University of Jerusalem; Felipe Vieira Frujeri, Microsoft Research; Chaim Hoch, Hebrew University of Jerusalem; Srikanth Kandula, Microsoft Research; Ishai Menache, Microsoft Research; Michael Schapira, Hebrew University of Jerusalem; Aviv Tamar, Technion
Building Flexible, Low-Cost Wireless Access Networks With Magma
Shaddi Hasan, Virginia Tech; Amar Padmanabhan, Databricks; Bruce Davie, Systems Approach; Jennifer Rexford, Princeton University; Ulas Kozat, Meta; Hunter Gatewood, Meta; Shruti Sanadhya, Meta; Nick Yurchenko, Meta; Tariq Al-Khasib, Meta; Oriol Batalla, Meta; Marie Bremner, Meta; Andrei Lee, Meta; Evgeniy Makeev, Meta; Scott Moeller, Meta; Alex Rodriguez, Meta; Pravin Shelar, Meta; Karthik Subraveti, Meta; Sudarshan Kandi, Meta; Alejandro Xoconostle, Meta; Praveen Kumar Ramakrishnan, Meta; Xiaochen Tian, Indepenent; Anoop Tomar, Meta
LeakyScatter: A Frequency-Agile Directional Backscatter Network Above 100 GHz
Atsutse Kludze, Princeton University; Yasaman Ghasempour, Princeton University

FAST '23

ROLEX: A Scalable RDMA-oriented Learned Key-Value Store for Disaggregated Memory Systems
Pengfei Li, Huazhong University of Science and Technology; Yu Hua, Huazhong University of Science and Technology; Pengfei Zuo, Huazhong University of Science and Technology; Zhangyu Chen, Huazhong University of Science and Technology; Jiajie Sheng, Huazhong University of Science and Technology
Perseus: A Fail-Slow Detection Framework for Cloud Storage Systems
Ruiming Lu, Shanghai Jiao Tong University; Erci Xu, Alibaba Inc. and Shanghai Jiao Tong University; Yiming Zhang, Xiamen University; Fengyi Zhu, Alibaba Inc.; Zhaosheng Zhu, Alibaba Inc.; Mengtian Wang, Alibaba Inc.; Zongpeng Zhu, Alibaba Inc.; Guangtao Xue, Shanghai Jiao Tong University; Jiwu Shu, Xiamen University; Minglu Li, Shanghai Jiao Tong University and Zhejiang Normal University; Jiesheng Wu, Alibaba Group

USENIX Security '22

Private Signaling
Varun Madathil, North Carolina State University; Alessandra Scafuro, North Carolina State University; István András Seres, Eötvös Loránd University; Omer Shlomovits, ZenGo X; Denis Varlakov, ZenGo X
Faster Yet Safer: Logging System Via Fixed-Key Blockcipher
Viet Tung Hoang, Florida State University; Cong Wu, Florida State University; Xin Yuan, Florida State University
Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks on Tor in the Real World
Giovanni Cherubin, Alan Turing Institute; Rob Jansen, U.S. Naval Research Laboratory; Carmela Troncoso, EPFL SPRING Lab
Dos and Don'ts of Machine Learning in Computer Security
Daniel Arp, Technische Universität Berlin; Erwin Quiring, Technische Universität Braunschweig; Feargus Pendlebury, King's College London and Royal Holloway, University of London and The Alan Turing Institute; Alexander Warnecke, Technische Universität Braunschweig; Fabio Pierazzi, King's College London; Christian Wressnegger, KASTEL Security Research Labs and Karlsruhe Institute of Technology; Lorenzo Cavallaro, University College London; Konrad Rieck, Technische Universität Braunschweig
OpenVPN is Open to VPN Fingerprinting
Diwen Xue, University of Michigan; Reethika Ramesh, University of Michigan; Arham Jain, University of Michigan; Michalis Kallitsis, Merit Network, Inc.; J. Alex Halderman, University of Michigan; Jedidiah R. Crandall, Arizona State University/Breakpointing Bad; Roya Ensafi, University of Michigan
FIXREVERTER: A Realistic Bug Injection Methodology for Benchmarking Fuzz Testing
Zenong Zhang, University of Texas at Dallas; Zach Patterson, University of Texas at Dallas; Michael Hicks, University of Maryland and Amazon; Shiyi Wei, University of Texas at Dallas
Attacks on Deidentification's Defenses
Aloni Cohen, University of Chicago
Augmenting Decompiler Output with Learned Variable Names and Types
Qibin Chen, Carnegie Mellon University; Jeremy Lacomis, Carnegie Mellon University; Edward J. Schwartz, Carnegie Mellon University Software Engineering Institute; Claire Le Goues, Carnegie Mellon University; Graham Neubig, Carnegie Mellon University; Bogdan Vasilescu, Carnegie Mellon University
The Antrim County 2020 Election Incident: An Independent Forensic Investigation
J. Alex Halderman, University of Michigan
Identity Confusion in WebView-based Mobile App-in-app Ecosystems
Lei Zhang, Fudan University; Zhibo Zhang, Fudan University; Ancong Liu, Fudan University; Yinzhi Cao, Johns Hopkins University; Xiaohan Zhang, Fudan University; Yanjun Chen, Fudan University; Yuan Zhang, Fudan University; Guangliang Yang, Fudan University; Min Yang, Fudan University
Provably-Safe Multilingual Software Sandboxing using WebAssembly
Jay Bosamiya, Carnegie Mellon University; Wen Shih Lim, Carnegie Mellon University; Bryan Parno, Carnegie Mellon University
An Audit of Facebook's Political Ad Policy Enforcement
Victor Le Pochat, imec-DistriNet, KU Leuven; Laura Edelson, New York University; Tom Van Goethem, imec-DistriNet, KU Leuven; Wouter Joosen, imec-DistriNet, KU Leuven; Damon McCoy, New York University; Tobias Lauinger, New York University

SOUPS 2022

Let’s Hash: Helping Developers with Password Security
Lisa Geierhaas, University of Bonn; Anna-Marie Ortloff, University of Bonn; Matthew Smith, University of Bonn, FKIE Fraunhofer; Alena Naiakshina, Ruhr University Bochum

USENIX ATC '22

Riker: Always-Correct and Fast Incremental Builds from Simple Specifications
Charlie Curtsinger, Grinnell College; Daniel W. Barowy, Williams College
Co-opting Linux Processes for High-Performance Network Simulation
Rob Jansen, U.S. Naval Research Laboratory; Jim Newsome, Tor Project; Ryan Wails, Georgetown University, U.S. Naval Research Laboratory

OSDI '22

XRP: In-Kernel Storage Functions with eBPF
Yuhong Zhong, Columbia University; Haoyu Li, Columbia University; Yu Jian Wu, Columbia University; Ioannis Zarkadas, Columbia University; Jeffrey Tao, Columbia University; Evan Mesterhazy, Columbia University; Michael Makris, Columbia University; Junfeng Yang, Columbia University; Amy Tai, Google; Ryan Stutsman, University of Utah; Asaf Cidon, Columbia University
MemLiner: Lining up Tracing and Application for a Far-Memory-Friendly Runtime
Chenxi Wang, UCLA; Haoran Ma, UCLA; Shi Liu, UCLA; Yifan Qiao, UCLA; Jonathan Eyolfson, UCLA; Christian Navasca, UCLA; Shan Lu, University of Chicago; Guoqing Harry Xu, UCLA

NSDI '22

Graham: Synchronizing Clocks by Leveraging Local Clock Properties
Ali Najafi, Meta; Michael Wei, VMware Research
Learning to Communicate Effectively Between Battery-free Devices
Kai Geissdoerfer, TU Dresden; Marco Zimmerling, TU Dresden
Packet Order Matters! Improving Application Performance by Deliberately Delaying Packets
Hamid Ghasemirahni, KTH Royal Institute of Technology; Tom Barbette, KTH Royal Institute of Technology; Georgios P. Katsikas, KTH Royal Institute of Technology; Alireza Farshin, KTH Royal Institute of Technology; Amir Roozbeh, KTH Royal Institute of Technology and Ericsson Research; Massimo Girondi, KTH Royal Institute of Technology; Marco Chiesa, KTH Royal Institute of Technology; Gerald Q. Maguire Jr., KTH Royal Institute of Technology; Dejan Kostić, KTH Royal Institute of Technology

Pages