Designing for the Extremes of Risk 9:00am - 12:00pm

WSIW 2019: 5th Workshop on Security Information Workers 1:30pm - 5:30pm

WAY 2019: Who Are You?! Adventures in Authentication 2019 9:00am - 5:30pm

Contextual Integrity: From Theory to Practice 9:00am - 12:00pm

WIPS 2019: 4th Workshop on Inclusive Privacy and Security 1:30pm - 5:30pm

SOUPS 2019 Poster Session 6:00pm - 7:00pm

Badge Pickup 8:00am - 5:00pm

Continental Breakfast 8:00am - 9:00am

Opening Remarks and Awards 9:00am - 9:30am

Investigative Journalism in the Digital Age: Privacy, Security a... 9:30am - 10:30am

Cooperative Privacy and Security: Learning from...

Privacy and Security Threat Models and Mitigatio...

Evaluating Users’ Perceptions about a System’s P...

A Self-Report Measure of End-User Security Attit...

The Effect of Entertainment Media on Mental Mode...

A Typology of Perceived Triggers for End-User Se...

Replication: No One Can Hack My Mind Revisiting...

"Something isn't secure, but I'm not sure how th...

"I was told to buy a software or lose my compute...

Enhancing Privacy through an Interactive On-dema...

From Usability to Secure Computing and Back Agai...

Certified Phishing: Taking a Look at Public Key...

Lightning Talks 5:22pm - 5:45pm

Opening Remarks 9:00am - 9:10am

Design and Implementation of a Cyber Physical Te...

Implementation of Programmable *****S Testbed for A...

Triton: A Software-Reconfigurable Federated Avio...

CAERUS: Chronoscopic Assessment Engine for Recov...

Is Less Really More? Towards Better Metrics for...

A Data-Driven Reflection on 36 Years of Security...

Lessons from Using the I-Corps Methodology to Un...

Percentages, Probabilities and Professions of Pe...

The Impact of Secure Transport Protocols on Phis...

Evaluating the Long-term Effects of Parameters o...

Comparative Measurement of Cache Configurations’...

An Assessment of the Usability of Cybercrime Dat...

Automated Attack Discovery in Data Plane Systems

Applications and Challenges in Securing Time

IDAPro for IoT Malware analysis?

Lessons Learned from 10k Experiments to Compare...

A Multi-level Fidelity Microgrid Testbed Model f...

Proteus: A DLT-Agnostic Emulation and Analysis F...

The DComp Testbed 5:10pm - 5:30pm

Opening Remarks 9:20am - 9:30am

Recent Advances in Adversarial Machine Learning 9:30am - 10:30am

TreeHuggr: Discovering Where Tre... 11:00am - 11:30am

Verifiably Robust Machine Learni... 11:30am - 12:00pm

Automatically Learning How to Ev... 12:00pm - 12:30pm

Keynote Address: PETs, POTs, and Pitfalls: Rethinking the Protec... 2:00pm - 3:00pm

Panel: Privacy as a Top-level ML... 3:00pm - 3:30pm

Dns2Vec: Exploring Internet Doma... 4:00pm - 4:30pm

DNS Homographs Detection in the... 4:30pm - 5:00pm

Panel: Adversarial AI: Perspecti... 5:00pm - 5:30pm

Closing Remarks 5:30pm - 5:35pm

Opening Remarks and Awards 9:00am - 9:15am

Trends and Challenges in the Vulnerability Mitigation Landscape 9:15am - 10:15am

Taking a Look into Execute-Only... 10:45am - 11:15am

Cross-Router Covert Channels 11:15am - 11:45am

Two methods for exploiting specu... 11:45am - 12:15pm

How Sharp is SHARP? 12:15pm - 12:45pm

Behind CGC: A DARPA Cyber Grand Challenge White Team Retrospecti... 2:00pm - 3:00pm

Defeating Cisco Trust Anchor: A... 3:30pm - 4:00pm

RISC-V: #AlphanumericShellcoding 4:00pm - 4:30pm

Vacuums in the Cloud: Analyzing... 4:30pm - 5:00pm

Unicorefuzz: On the Viability of... 5:00pm - 5:30pm

Continental Breakfast 7:45am - 8:45am

Continental Breakfast 8:00am - 9:00am

Continental Breakfast 8:00am - 9:00am

Continental Breakfast 8:00am - 9:00am

Continental Breakfast 8:20am - 9:20am

Break with Refreshments 10:15am - 10:45am

Break with Refreshments 10:25am - 10:55am

Break with Refreshments 10:30am - 11:00am

Break with Refreshments 10:30am - 11:00am

Break with Refreshments 10:30am - 11:00am

Break with Refreshments 3:00pm - 3:30pm

Break with Refreshments 3:30pm - 4:00pm

Break with Refreshments 3:30pm - 4:00pm

Break with Refreshments 3:45pm - 4:15pm

Break with Refreshments 4:00pm - 4:30pm

Badge Pickup 7:30am - 5:00pm

Opening Remarks 8:45am - 9:00am

The Privacy Engineering Mindset: From Design to...

Our Friend from Privacy: Building and Harnessing...

Addressing Privacy Risks of Targeted Advertising

User-centric Privacy: Designing Effective Privac...

Mandating the Forbidden: Balanci... 11:00am - 11:30am

Privacy as a Service: Building a... 11:30am - 12:00pm

Secure Messaging? More Like Secu... 12:00pm - 12:30pm

Now You See It, Now You Don't: U... 2:00pm - 2:30pm

Machine Learning at Scale with D... 2:30pm - 3:00pm

Differentially Private Data Rele... 3:00pm - 3:30pm

Making Ethical Decisions for the... 4:00pm - 4:30pm

Privacy Engineering in the Autom... 4:30pm - 5:00pm

Privacy in Unusual Contexts: A C... 5:00pm - 5:30pm

Short Break 2:45pm - 2:55pm

Monday Luncheon 12:30pm - 2:00pm

Luncheon for SOUPS Attendees 12:30pm - 1:45pm

Monday Luncheon 12:10pm - 1:30pm

Monday Luncheon 12:30pm - 2:00pm

Monday Luncheon 12:45pm - 2:00pm

Monday Happy Hour 5:45pm - 6:45pm

USENIX Women in Advanced Computing (WiAC) BoF 7:00pm - 8:00pm

Students and ***** Professionals Meetup 8:00pm - 9:00pm

Board Game Night 9:00pm - 11:00pm

"We Can't Live Without Them!" App Developers' Ad...

Usability Smells: An Analysis of Developers’ Str...

System Administrators Prefer Command Line Interf...

Keepers of the Machines: Examining How System Ad...

Communicating Device Confidence Level and Upcomi...

Exploring Intentional Behaviour Modifications fo...

Why people (don’t) use password managers effecti...

Of Two Minds about Two-Factor: Understanding Eve...

A Usability Study of Five Two-Factor Authenticat...

Personal Information Leakage by Abusing the GDPR...

SOUPS 2019 Tuesday Afternoon Sessions 2:15pm - 5:45pm

An Empirical Analysis of Data Deletion and Opt-O...

The Fog of Warnings: How Non-essential Notificat...

Lightning Talks 3:22pm - 3:45pm

“There is nothing that I need to keep secret”: S...

"I don't own the data": End User Perceptions of...

More than Smart Speakers: Security and Privacy P...

Lightning Talks 5:22pm - 5:45pm

SOUPS Town Hall Meeting 7:00pm - 8:00pm

Greetings 9:00am - 9:10am

Misinformation, Russian Propaganda and Elections 9:10am - 10:00am

Measuring I2P Censorship at a Gl... 10:30am - 11:00am

An Efficient Method to Determine... 11:00am - 11:30am

On the Importance of Encrypted-S... 11:30am - 12:00pm

Artifice: A Deniable Steganograp... 1:30pm - 2:00pm

SPINE: Surveillance Protection i... 2:00pm - 2:30pm

Improving Meek With Adversarial... 2:30pm - 3:00pm

Invited Talk: Content Moderation Remedies 3:30pm - 4:20pm

Entanglements and Exploits: Soci... 4:20pm - 4:50pm

Short Talks 5:00pm - 5:30pm

Opening Remarks 9:00am - 9:30am

Session 1 9:30am - 10:00am

Session 1 Discussion 10:30am - 11:00am

Session 2 11:00am - 11:40am

Sessions 2 Discussion 11:40am - 12:30pm

Session 3 2:00pm - 2:40pm

Session 3 Discussion 2:40pm - 3:30pm

Session 4 4:00pm - 4:30pm

Session 4 Discussion 4:30pm - 5:00pm

Awards and Closing Remarks 5:00pm - 5:30pm

Computer Security for Victims of Intimate Partner Violence 9:00am - 10:00am

A better zip bomb 10:30am - 11:00am

D-TIME: Distributed Threadless I... 11:00am - 11:30am

Breaking Turtles All the Way Dow... 11:30am - 12:00pm

Alternative (ab)uses for HTTP Al... 12:00pm - 12:30pm

Rode0day: A Year of Bug-Finding Evaluations

Shooting Cryptographic Fish in a Barrel 2:00pm - 3:00pm

Who Spent My EOS? On the (In)Sec... 3:00pm - 3:30pm

Distributed Password Hash Comput... 3:30pm - 4:00pm

MIN()imum Failure: EMFI Attacks... 4:30pm - 5:00pm

Automatic Wireless Protocol Reve... 5:00pm - 5:30pm

Continental Breakfast 7:55am - 8:55am

Continental Breakfast 8:00am - 9:00am

Continental Breakfast 8:00am - 9:00am

Continental Breakfast 8:00am - 9:00am

Continental Breakfast 8:00am - 9:00am

Break with Refreshments 10:00am - 10:30am

Break with Refreshments 10:00am - 10:30am

Break with Refreshments 10:00am - 10:30am

Break with Refreshments 10:30am - 11:00am

Break with Refreshments 10:30am - 11:00am

Break with Refreshments 3:00pm - 3:30pm

Break with Refreshments 3:30pm - 4:00pm

Break with Refreshments 3:45pm - 4:15pm

Break with Refreshments 4:00pm - 4:30pm

Badge Pickup 8:00am - 7:00pm

Opening Remarks 8:55am - 9:00am

Panel on Privacy Engineering Career Paths 9:00am - 10:15am

Explore NIST's Privacy Engineering Collaboration...

How to Run an Engineering-Focuse... 11:00am - 11:30am

Privacy, Triage, and Risk 11:30am - 12:00pm

Building and Scaling a Data Stew... 12:00pm - 12:30pm

Closing Remarks 12:30pm - 12:40pm

Meet-up: Utopia for the Age of Big Data with Trustworthy Computi... 7:00pm - 8:00pm

Short Break 4:50pm - 5:00pm

Tuesday Luncheon 12:40pm - 2:15pm

Luncheon for SOUPS Attendees 1:00pm - 2:15pm

Tuesday Luncheon 12:00pm - 1:30pm

Tuesday Luncheon 12:30pm - 2:00pm

Tuesday Luncheon 12:45pm - 2:00pm

Tuesday Happy Hour 6:00pm - 7:00pm

Opening Remarks and Awards 8:45am - 9:00am

Tackling the Trust and Safety Crisis 9:00am - 10:00am

A Study of the Feasibility of Co-located App Att...

The CrossPath Attack: Disrupting the SDN Control...

A Billion Open Interfaces for Eve and Mallory: M...

Hiding in Plain Signal: Physical Signal Overshad...

UWB-ED: Distance Enlargement Attack Detection in...

PAC it up: Towards Pointer Integrity using ARM P...

Origin-sensitive Control Flow Integrity

HardFails: Insights into Software-Exploitable Ha...

uXOM: Efficient eXecute-Only Memory on ARM Corte...

A Systematic Evaluation of Transient Execution A...

Wireless Attacks on Aircraft Instrument Landing...

Please Pay Inside: Evaluating Bluetooth-based De...

CANvas: Fast and Inexpensive Automotive Network...

Losing the Car Keys: Wireless PHY-Layer Insecuri...

RVFuzzer: Finding Input Validation Bugs in Robot...

Computer Security and Privacy in the Interaction...

Clinical Computer Security for Victims of Intima...

Evaluating the Contextual Integrity of Privacy R...

Secure Multi-User Content Sharing for Augmented...

Understanding and Improving Security and Privacy...

The Secret Sharer: Evaluating and Testing Uninte...

Improving Robustness of ML Classifiers against R...

ALOHA: Auxiliary Loss Optimization for Hypothesi...

Why Do Adversarial Attacks Transfer? Explaining...

Stack Overflow Considered Helpful! Deep Learning...

Seeing is Not Believing: Camouflage Attacks on I...

CT-GAN: Malicious Tampering of 3D Medical Imager...

Misleading Authorship Attribution of Source Code...

Terminal Brain Damage: Exposing the Graceless De...

CSI NN: Reverse Engineering of Neural Network Ar...

Embracing the "Hack." A Better Strategy for Team-Defe... 10:30am - 11:20am

Evaluating Mobile Messengers for Implementation Vulne... 11:20am - 12:10pm

Security Research and Public Policy 1:40pm - 2:30pm

From Privacy by Design to Data Protection by Design:... 2:30pm - 3:20pm

Privacy by Default on the Web 3:50pm - 4:40pm

The Spies Hacking our Phones are Going Dark, and We'r... 4:40pm - 5:30pm

USENIX Security '19 Lightning Talks 7:30pm - 8:30pm

Continental Breakfast 7:45am - 8:45am

Break with Refreshments 10:00am - 10:30am

Break with Refreshments 3:20pm - 3:50pm

Badge Pickup 7:30am - 5:00pm

Lunch (on your own) 12:10pm - 1:40pm

USENIX Security '19 Symposium Reception 6:00pm - 7:30pm

simTPM: User-centric TPM for Mobile Devices

The Betrayal At Cloud City: An Empirical Analysi...

EnTrust: Regulating Sensor Access by Cooperating...

PolicyLint: Investigating Internal Privacy Polic...

50 Ways to Leak Your Data: An Exploration of App...

HideMyApp: Hiding the Presence of Sensitive Apps...

TESSERACT: Eliminating Experimental Bias in Malw...

Devils in the Guidance: Predicting Logic Vulnera...

Understanding iOS-based Crowdturfing Through Hid...

Leaky Images: Targeted Privacy Attacks in the We...

All Your Clicks Belong to Me: Investigating Clic...

What Are You Searching For? A Remote Keylogging...

Iframes/Popups Are Dangerous in Mobile WebView:...

Small World with High Risks: A Study of Security...

KEPLER: Facilitating Control-flow Hijacking Prim...

PeX: A Permission Check Analysis Framework for L...

ERIM: Secure, Efficient In-process Isolation wit...

SafeHidden: An Efficient and Secure Information...

Exploiting Unprotected I/O Operations in AMD’s S...

SPOILER: Speculative Load Hazards Boost Rowhamme...

Robust Website Fingerprinting Through the Cache...

Identifying Cache-Based Side Channels through Se...

ScatterCache: Thwarting Cache Attacks via Cache...

Pythia: Remote Oracles for the Masses

BITE: Bitcoin Lightweight Client Privacy using T...

FastKitten: Practical Smart Contracts on Bitcoin

StrongChain: Transparent and Collaborative Proof...

Tracing Transactions Across Cryptocurrency Ledge...

“Johnny, you are fired!” – Spoofing OpenPGP and...

Scalable Scanning and Automatic Classification o...

The KNOB is Broken: Exploiting Low Entropy in th...

From IP ID to Device ID and KASLR Bypass

When the Signal is in the Noise: Exploiting Diff...

Detecting and Characterizing Lateral Phishing at...

High Precision Detection of Business Email Compr...

Cognitive Triaging of Phishing Attacks

Users Really Do Answer Telephone Scams

Platforms in Everything: Analyzing Ground-Truth...

Lessons Learned from Evaluating the Robustness of Def... 9:00am - 9:50am

Creating, Weaponizing, and Detecting Deep Fakes 9:50am - 10:40am

Reading the Tea leaves: A Comparative Analysis o...

Towards the Detection of Inconsistencies in Publ...

Understanding and Securing Device Vulnerabilitie...

ATTACK2VEC: Leveraging Temporal Word Embeddings...

FIRM-AFL: High-Throughput Greybox Fuzzing of IoT...

Not Everything is Dark and Gloomy: Power Grid Pr...

Discovering and Understanding the Security Hazar...

Looking from the Mirror: Evaluating IoT Device S...

All Things Considered: An Analysis of IoT Device...

Baby Steps towards the Precipice: How the Web Became... 4:00pm - 4:50pm

Shining Light on Internet-based Crimes Against *****r... 4:50pm - 5:40pm

CATS Project Feedback Session on the Cybersecurity Curriculum Assessment (CCA) 8:30pm - 10:30pm

USENIX LGBTQ+ and Allies Happy Hour 7:30pm - 8:30pm

Students, Smarthome Security, Storytelling, and Diverse Stakehol... 7:30pm - 8:30pm

Continental Breakfast 8:00am - 9:00am

Break with Refreshments 10:40am - 11:10am

Break with Refreshments 3:30pm - 4:00pm

Badge Pickup 8:00am - 5:00pm

USENIX Security '19 Symposium Luncheon 12:30pm - 1:50pm

USENIX Security '19 Poster Session and Happy Hour 6:00pm - 7:30pm

Protecting Cloud Virtual Machines from Hyperviso...

WAVE: A Decentralized Authorization Framework wi...

in-toto: Providing farm-to-table guarantees for...

IODINE: Verifying Constant-Time Execution of Har...

VRASED: A Verified Hardware/Software Co-Design f...

Birthday, Name and Bifacial-security: Understand...

Protecting accounts from credential stuffing wit...

Probability Model Transforming Encoders Against...

Rendered Private: Making GLSL Execution Uniform...

Site Isolation: Process Separation for Web Sites...

Everyone is Different: Client-side Diversificati...

Less is More: Quantifying the Security Benefits...

The Web's Identity Crisis: Understanding the Eff...

Point Break: A Study of Bandwidth Denial-of-Serv...

No Right to Remain Silent: Isolating Malicious M...

On (The Lack Of) Location Privacy in Crowdsourci...

Utility-Optimized Local Differential Privacy Mec...

Evaluating Differentially Private Machine Learni...

Mobile Private Contact Discovery at Scale

EverParse: Verified Secure Zero-Copy Parsers for...

Blind Bernoulli Trials: A Noninteractive Protoco...

XONN: XNOR-based Oblivious Deep Neural Network I...

JEDI: Many-to-Many End-to-End Encryption and Key...

The Art of The Scam: Demystifying Honeypots in E...

The Anatomy of a Cryptocurrency Pump-and-Dump Sc...

Inadvertently Making Cyber Criminals Rich: A Com...

RAZOR: A Framework for Post-deployment Software...

Back to the Whiteboard: a Principled Approach fo...

Detecting Missing-Check Bugs via Semantic- and C...

DEEPVSA: Facilitating Value-set Analysis with De...

CONFIRM: Evaluating Compatibility and Relevance...

Fuzzification: Anti-Fuzzing Techniques

AntiFuzz: Impeding Fuzzing Audits of Binary Exec...

MOPT: Optimized Mutation Scheduling for Fuzzers

EnFuzz: Ensemble Fuzzing with Seed Synchronizati...

GRIMOIRE: Synthesizing Structure while Fuzzing

Security Educational Panel 9:00am - 10:40am

Lessons Learned About Building Secure Software: It's About the D... 11:10am - 12:10pm

Continental Breakfast 8:00am - 9:00am

Break with Refreshments 10:40am - 11:10am

Break with Refreshments 3:20pm - 3:50pm

Badge Pickup 8:00am - 12:00pm

Lunch (on your own) 12:10pm - 1:40pm