USENIX Security '26
2026-08-12..2026-08-14
Baltimore, United States
as the organisers put it
USENIX Security brings together researchers, practitioners, system programmers, and others to share and explore the latest advances in the security and privacy of computer systems and networks.
| title | author | length |
|---|---|---|
| The Six Developers You'll Meet in Security: Why Secure by... | Enrique Larios Vargas | 27m |
Central claim: the "average developer" is fictional and security fails unless interventions target real behavioral barriers. Presents a six‑persona framework… | ||
| Broken Promises: Who's Accountable When VPNs Fail? | Roya Ensafi | 20m |
Systematic research over five years tests over a thousand users, nine VPN providers and hundreds of desktop and mobile apps and finds concrete failures: kill… | ||
| Youth Digital Immersion: Cyber Readiness Builds Mental... | Vivek Chaudhuri | 18m |
Systematic review of 52 studies plus a survey of 1,869 students across four countries and 430,000 youth participation records yields a Youth Mental Health Risk… | ||
| Verifiable Elections—Now Is the Time | Josh Benaloh | 20m |
Claims that elections become independently auditable using end-to-end verifiable systems that publish encrypted ballots to a public ledger, use homomorphic… | ||
| If They Can Touch It, They Own It: The Stories We Tell... | Michael Rushanan | 24m |
Two deidentified case studies show how familiar rationales produce real failures: one device yields a UART root shell and writable removable storage allowing… | ||
| Improving Safety with Privacy: An Exploration of Privacy... | Sai Deep Tetali | 25m |
Argues that encryption, confidential computing and hardware-backed attestation let cloud inference run safety checks without routine human access by publishing… | ||
| Detecting Security Posture Drift in AI-Driven Software... | Preeti Ravindra | 27m |
Prototype called trudge automatically derives threat models from code infrastructure and configs, computes threat model diffs across commits and releases, and… | ||
| Discussion with the 2026 USENIX Security Symposium Test of Time | Kevin Fu | 11m |
Panel traces the 2016 claim that cloud-hosted models can be stolen via prediction API queries, demonstrating practical model extraction attacks that recover… | ||
| From Alignment to Access Control: A Unified View of GenAI... | Nathalie Baracaldo | 20m |
Policy definitions vary across security engineering and AI research and that fragmentation breaks enforcement. The talk maps policies onto a concreteness vs… | ||
| Breaking the Lethal Trifecta: Secure Agentic Computing via... | David Tsao | 17m |
Claims a practical Causal Isolation Architecture that splits reading, judging, and speaking across isolated components and uses a rule-of-two release judge to… | ||
| How Can We Have Private Access to Intelligence? | Tanya Verma | 19m |
Argues that practical private AI comes from deploying secure hardware (Intel TDX/AMD SEV and NVIDIA confidential computing) plus verifiable supply chain checks… | ||
| Cryptography at Scale: Building a Practical Cryptographic... | Jayati Dev | 21m |
Claims a practical, scalable inventory called XIPHER that normalizes discoveries from code, network, and infrastructure and maps them to applications and… | ||
| What Is a PUF and Why Might You Need One? | Shannon Egan | 21m |
Explains that Physical Unclonable Functions extract a unique bitstring from manufacturing variation and that SRAM PUF startup state reliably biases bits at… | ||
| Red-Teaming for Scraping | Malya Jain | 27m |
A blueprint for a Scraping Red Team program that measures defense by cost-per-record not alerts, showing concrete results: a black‑box 7‑day engagement using… | ||
| Security Tools Don't Detect Attacks—Humans Do | Krupa Brahmkstri | 23m |
Claim: security tools produce observations not detections, and detection requires Inference-Driven Detection that chains alerts across identity, endpoint… | ||
| Supply Chain Attacks on Open Source: What's Happening, What... | Zach Steindler | 21m |
Explains how the Shy Halud campaign used phishing and poisoned GitHub Actions caches to add malware to hundreds of popular NPM packages within hours, then used… | ||
| Technology Is in Its Restrictive Era, And You Can Help Fix It! | Babette Ngene | 19m |
Governments push age verification in 40 countries while an Australian report finds 80% of under-15s still use age-restricted platforms, highlighting weak… | ||
| nothing matches | ||