~/talks

Dave (Jing) Tian

what they talk about

all 5 in the filters

where they keep going back

no series more than once — all 6 in the filters

on a stage with

all 27 in the filters

who talks about the same things

nobody close enough yet

titleconferencedate
FuzzBT: Holistic-State-Guided Fuzzing for Bluetooth Host Stack in Kernels20th USENIX WOOT Conference on Offensive Technologies (WOOT '26)2026-08-10
FuzzBT builds a fuzzer that iterates over kernel Bluetooth configurations and extracts configuration-aware seeds via concolic/symbolic execution, instruments…
Talk on
HubBub: Contention-Based Side-Channel Attacks on USB HubsUSENIX Security '252025-08-13
USB hub contention leaks high-resolution timing: attackers saturate hub with 4KB SSD I/Os to force congestion, probe I/O intervals via a host process, VM…
Talk on
DnD: Decompiling Deep Neural Network Compiled BinaryBlack Hat Europe 20222022-12-05
DnD claims a recoverable high level ONNX model from CPU compiled DNN binaries by locating operator functions, doing loop analysis and symbolic execution…
Talk on
BLESA: Spoofing Attacks against Reconnections in Bluetooth Low EnergyWOOT '202020-08-11
Formal analysis finds two BLE reconnection design flaws that let an attacker impersonate a previously paired device and inject spoofed data. The authors build…
Talk on
ATtention Spanned: Comprehensive Vulnerability Analysis of AT Commands Within the Android EcosystemUSENIX Security '182018-08-15
Researchers extract 3,500 AT commands from over 2,000 Android firmware images across 11 vendors, build an automated USB tester that talks to phones over the…
Talk on
Making USB Great Again with USBFILTERUSENIX Security '162016-08-10
Kernel-layer USB firewall that mediates every USB packet by sitting between drivers and the host controller, tracing packets back to PIDs and enforcing…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.