Research area: Security, privacy, and cryptography
August 11, 2025 August 12, 2025

Pre-USENIX Security Mini-Conference

位置: Redmond, WA

This is an invite-only event, unless you are a Microsoft employee. You must have received an invitation email from the organizers to register and attend. This is not an official USENIX Security-affiliated event.

The event is over. Thank you for participating!

Date: August 11 – 12, 2025 
Time: 9:30 AM – 4:45 PM (Monday) / 5:15 PM (Tuesday)
Location:
14820 NE 36th St, Redmond, WA, 98052 

Important: You will need to present a photo ID (not necessary gov’t issued) to check in to the Microsoft building. A university ID or any membership card with a photo will suffice.

Schedule

Monday August 11

09:30 AM – 10:30 AMBreakfast / Badge pick-up open
10:30 AM – 10:40 AMWelcome
10:40 AM – 11:10 AMUnderstanding How Users Prepare for and React to Smartphone Theft (opens in new tab)
Speaker: Divyanshu Bhardwaj (CISPA Helmholtz Center for Information Security)
11:15 AM – 11:45 AM When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs (opens in new tab)
Speaker: Hanna Kim (KAIST)
11:50 AM – 12:20 PMA Formal Analysis of Apple’s iMessage PQ3 Protocol (opens in new tab)
Speaker: Felix Linker (ETH Zürich)
12:20 PM – 02:00 PMLunch
02:00 PM – 03:00 PMKeynote: Carmela Troncoso (MPI-SP and EPFL)

Abstract: In this talk we overview our collaboration with the International Committee of the Red Cross, in which we help them to digitalize their aid distribution process without increasing risks for the aid recipients. We will overview our requirements gathering process, and our solutions, highlighting the particularities of the ICRC needs and threat models which render straightforward solutions inapplicable to their scenarios.
03:00 PM – 03:10 PMBreak
03:10 PM – 03:40 PMEmail Spoofing with SMTP Smuggling: How the Shared Email Infrastructures Magnify this Vulnerability (opens in new tab)
Speaker: Gang Wang (University of Illinois Urbana-Champaign)
03:45 PM – 04:15 PMCharacterizing and Detecting Propaganda-Spreading Accounts on Telegram (opens in new tab)
Speaker: Rebekah Overdorf (Ruhr University Bochum)
04:15 PM – 04:30 PMClosing

Tuesday August 12

09:30 AM – 10:30 AMBreakfast / Badge pick-up open
10:30 AM – 11:00 AM‘Hey mum, I dropped my phone down the toilet’: Investigating Hi Mum and Dad SMS Scams in the United Kingdom (opens in new tab)
Speaker: Sharad Agarwal (University College London)
11:05 AM – 11:35 AMEncrypted Access Logging for Online Accounts: Device Attributions without Device Tracking (opens in new tab)
Speaker: Carolina Ortega Pérez (Cornell University)
11:40 AM – 12:10 PMzk-promises: Anonymous Moderation, Reputation, and Blocking from Anonymous Credentials with Callbacks (opens in new tab)
Speaker: Maurice Shih (University of Maryland)
12:10 PM – 01:30 PMLunch
01:30 PM – 02:00 PMEvaluating Privacy Policies under Modern Privacy Laws At Scale: An LLM-Based Automated Approach (opens in new tab)
Speaker: Qinge Xie (Georgia Tech)
02:05 PM – 02:35 PMA Framework for Abusability Analysis: The Case of Passkeys in Interpersonal Threat Models (opens in new tab)
Speaker: Alaa Daffalla (Cornell University)
02:35 PM – 03:00 PMCoffee break
03:00 PM – 03:30 PMDetecting Compromise of Passkey Storage on the Cloud (opens in new tab)
Speaker: Mazharul Islam (University of Wisconsin—Madison)
03:35 PM – 04:05 PMMore is Less: Extra Features in Contactless Payments Break Security (opens in new tab)
Speaker: Tom Chothia (University of Birmingham) and George Pavlides (Surrey Centre for Cyber Security, University of Surrey)
04:05 PM – 04:15 PMClosing

Location and commute

The event is organized at Microsoft Building 99 (14820 NE 36th St, Redmond, WA, 98052 (opens in new tab)) on the main Microsoft campus. The campus area is pleasant and totally walkable.

Commuting from the USENIX Security conference hotel is easy by bus 545 (see schedule (opens in new tab)). You will need to take the stop State Route 520 & NE 40th St and walk 10-15 minutes (opens in new tab). Going back, the bus stop is on the other side of the freeway (map here (opens in new tab)). Taking a cab/Lyft/Uber is reasonable as well, although note that these tend to be more expensive in the Seattle area than in many other cities.

Staying on Monday and Tuesday in downtown Redmond is a good alternative. In this case, taking the Link Light Rail (line 2) to the Microsoft campus (Redmond Technology Station stop) is very convenient, followed by a 10-15 minute walk (opens in new tab).

You can also choose to drive yourself to Microsoft Building 99 and park in the adjacent parking garage. There is ample free parking and you can park in any spot, but you will need to tell us upon checking in that you have parked a car, as it will need to be registered with the receptionist. Please be ready to provide basic information about the car (make, model, license plate #).

Organizers

Melissa Chase
Melissa Chase

Principal Researcher
Microsoft Research Redmond

Kim Laine
Kim Laine

Principal Researcher
Microsoft Research Redmond

Microsoft’s Event Code of Conduct

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. This includes virtual events Microsoft hosts and participates in, where we seek to create a respectful, friendly, and inclusive experience for all participants. As such, we do not tolerate harassing or disrespectful behavior, messages, images, or interactions by any event participant, in any form, at any aspect of the program including business and social activities, regardless of location. We do not tolerate any behavior that is degrading to any gender, race, sexual orientation or disability, or any behavior that would violate Microsoft’s Anti-Harassment and Anti-Discrimination Policy, Equal Employment Opportunity Policy, or Standards of Business Conduct (opens in new tab). In short, the entire experience must meet our culture standards. We encourage everyone to assist in creating a welcoming and safe environment. Please report (opens in new tab) any concerns, harassing behavior, or suspicious or disruptive activity. Microsoft reserves the right to ask attendees to leave at any time at its sole discretion.