{"id":1145612,"date":"2025-07-23T11:21:10","date_gmt":"2025-07-23T18:21:10","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/research\/?post_type=msr-event&p=1145612"},"modified":"2025-08-18T10:28:17","modified_gmt":"2025-08-18T17:28:17","slug":"pre-usenix-security-mini-conference","status":"publish","type":"msr-event","link":"https:\/\/www.microsoft.com\/en-us\/research\/event\/pre-usenix-security-mini-conference\/","title":{"rendered":"Pre-USENIX Security Mini-Conference"},"content":{"rendered":"\n\n\n\n\n

This is an invite-only event, unless you are a Microsoft employee. You must have received an invitation email from the organizers to register and attend. This is not an official USENIX Security-affiliated event.<\/strong><\/p>\n\n\n\n

The event is over. Thank you for participating!<\/strong><\/p>\n\n\n\n

Date<\/strong>: August 11 – 12, 2025 
Time:<\/strong> 9:30 AM – 4:45 PM (Monday) \/ 5:15 PM (Tuesday)
Location: <\/strong>14820 NE 36th St, Redmond, WA, 98052 

Important:<\/strong> You will need to present a photo ID (not necessary gov’t issued) to check in to the Microsoft building. A university ID or any membership card with a photo will suffice.<\/div><\/p>\n\n\n\n
<\/div>\n\n\n\n

<\/p>\n\n\n\n

Schedule<\/h2>\n\n\n\n
\n
\n

Monday August 11<\/strong><\/p>\n\n\n\n

09:30 AM – 10:30 AM<\/td>Breakfast \/ Badge pick-up open<\/td><\/tr>
10:30 AM – 10:40 AM<\/td>Welcome<\/td><\/tr>
10:40 AM – 11:10 AM<\/td>Understanding How Users Prepare for and React to Smartphone Theft (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Divyanshu Bhardwaj (CISPA Helmholtz Center for Information Security<\/em>)<\/td><\/tr>
11:15 AM – 11:45 AM <\/td>When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Hanna Kim (KAIST<\/em>)<\/td><\/tr>
11:50 AM – 12:20 PM<\/td>A Formal Analysis of Apple\u2019s iMessage PQ3 Protocol (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Felix Linker (ETH Z\u00fcrich<\/em>)<\/td><\/tr>
12:20 PM – 02:00 PM<\/td>Lunch<\/td><\/tr>
02:00 PM – 03:00 PM<\/td>Keynote:<\/strong> Carmela Troncoso (MPI-SP and EPFL)

Abstract:<\/strong> In this talk we overview our collaboration with the International Committee of the Red Cross, in which we help them to digitalize their aid distribution process without increasing risks for the aid recipients. We will overview our requirements gathering process, and our solutions, highlighting the particularities of the ICRC needs and threat models which render straightforward solutions inapplicable to their scenarios.<\/em><\/td><\/tr>
03:00 PM – 03:10 PM<\/td>Break<\/td><\/tr>
03:10 PM – 03:40 PM<\/td>Email Spoofing with SMTP Smuggling: How the Shared Email Infrastructures Magnify this Vulnerability (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Gang Wang (University of Illinois Urbana-Champaign<\/em>)<\/td><\/tr>
03:45 PM – 04:15 PM<\/td>Characterizing and Detecting Propaganda-Spreading Accounts on Telegram (opens in new tab)<\/span><\/a>
Speaker: <\/strong>Rebekah Overdorf (Ruhr University Bochum<\/em>)<\/td><\/tr>
04:15 PM – 04:30 PM<\/td>Closing<\/td><\/tr><\/tbody><\/table><\/figure>\n<\/div>\n\n\n\n
\n

Tuesday August 12<\/strong><\/p>\n\n\n\n

09:30 AM – 10:30 AM<\/td>Breakfast \/ Badge pick-up open<\/td><\/tr>
10:30 AM – 11:00 AM<\/td>\u2018Hey mum, I dropped my phone down the toilet\u2019: Investigating Hi Mum and Dad SMS Scams in the United Kingdom (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Sharad Agarwal (University College London<\/em>)<\/td><\/tr>
11:05 AM – 11:35 AM<\/td>Encrypted Access Logging for Online Accounts: Device Attributions without Device Tracking (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Carolina Ortega P\u00e9rez (Cornell University<\/em>)<\/td><\/tr>
11:40 AM – 12:10 PM<\/td>zk-promises: Anonymous Moderation, Reputation, and Blocking from Anonymous Credentials with Callbacks (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Maurice Shih (University of Maryland<\/em>)<\/td><\/tr>
12:10 PM – 01:30 PM<\/td>Lunch<\/td><\/tr>
01:30 PM – 02:00 PM<\/td>Evaluating Privacy Policies under Modern Privacy Laws At Scale: An LLM-Based Automated Approach (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Qinge Xie (Georgia Tech<\/em>)<\/td><\/tr>
02:05 PM – 02:35 PM<\/td>A Framework for Abusability Analysis: The Case of Passkeys in Interpersonal Threat Models (opens in new tab)<\/span><\/a>
Speaker: <\/strong>Alaa Daffalla (Cornell University<\/em>)<\/td><\/tr>
02:35 PM – 03:00 PM<\/td>Coffee break<\/td><\/tr>
03:00 PM – 03:30 PM<\/td>Detecting Compromise of Passkey Storage on the Cloud (opens in new tab)<\/span><\/a>
Speaker: <\/strong>Mazharul Islam (University of Wisconsin\u2014Madison<\/em>)<\/td><\/tr>
03:35 PM – 04:05 PM<\/td>More is Less: Extra Features in Contactless Payments Break Security (opens in new tab)<\/span><\/a>
Speaker:<\/strong> Tom Chothia (University of Birmingham<\/em>) and George Pavlides (Surrey Centre for Cyber Security, University of Surrey<\/em>)<\/td><\/tr>
04:05 PM – 04:15 PM<\/td>Closing<\/td><\/tr><\/tbody><\/table><\/figure>\n<\/div>\n<\/div>\n\n\n\n

Location and commute<\/h2>\n\n\n\n
\n
\n

The event is organized at Microsoft Building 99<\/strong> (14820 NE 36th St, Redmond, WA, 98052 (opens in new tab)<\/span><\/a>) on the main Microsoft campus. The campus area is pleasant and totally walkable.<\/p>\n\n\n\n

Commuting from the USENIX Security conference hotel is easy by bus 545 (see schedule (opens in new tab)<\/span><\/a>). You will need to take the stop State Route 520 & NE 40th St<\/em> and walk 10-15 minutes (opens in new tab)<\/span><\/a>. Going back, the bus stop is on the other side of the freeway (map here (opens in new tab)<\/span><\/a>). Taking a cab\/Lyft\/Uber is reasonable as well, although note that these tend to be more expensive in the Seattle area than in many other cities.<\/p>\n\n\n\n

Staying on Monday and Tuesday in downtown Redmond is a good alternative. In this case, taking the Link Light Rail (line 2) to the Microsoft campus (Redmond Technology Station stop) is very convenient, followed by a 10-15 minute walk (opens in new tab)<\/span><\/a>.<\/p>\n\n\n\n

You can also choose to drive yourself to Microsoft Building 99 and park in the adjacent parking garage. There is ample free parking and you can park in any spot, but you will<\/strong> need to tell us upon checking in that you have parked a car, as it will need to be registered with the receptionist. Please be ready to provide basic information about the car (make, model, license plate #).<\/p>\n<\/div>\n<\/div>\n\n\n\n

Organizers<\/h2>\n\n\n\n
\n
\n
\"Melissa<\/figure>\n\n\n\n
<\/div>\n\n\n\n
Melissa Chase<\/a><\/h5>\n\n\n\n

Principal Researcher
Microsoft Research Redmond<\/p>\n<\/div>\n\n\n\n

\n
\"Kim<\/figure>\n\n\n\n
<\/div>\n\n\n\n
Kim Laine<\/a><\/h5>\n\n\n\n

Principal Researcher
Microsoft Research Redmond<\/p>\n<\/div>\n\n\n\n

<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
\n
Questions? Ask us<\/a><\/div>\n\n\n\n
About the Cryptography Group<\/a><\/div>\n<\/div>\n\n\n\n

Microsoft\u2019s Event Code of Conduct<\/h3>\n\n\n\n

Microsoft\u2019s mission is to empower every person and every organization on the planet to achieve more. This includes virtual events Microsoft hosts and participates in, where we seek to create a respectful, friendly, and inclusive experience for all participants. As such, we do not tolerate harassing or disrespectful behavior, messages, images, or interactions by any event participant, in any form, at any aspect of the program including business and social activities, regardless of location. We do not tolerate any behavior that is degrading to any gender, race, sexual orientation or disability, or any behavior that would violate Microsoft\u2019s Anti-Harassment and Anti-Discrimination Policy, Equal Employment Opportunity Policy, or Standards of Business Conduct<\/a>. In short, the entire experience must meet our culture standards. We encourage everyone to assist in creating a welcoming and safe environment. Please report (opens in new tab)<\/span><\/a> any concerns, harassing behavior, or suspicious or disruptive activity. Microsoft reserves the right to ask attendees to leave at any time at its sole discretion.<\/p>\n\n\n\n

\n
Report a concern<\/a><\/div>\n<\/div>\n\n\n","protected":false},"excerpt":{"rendered":"

This is an invite-only event, unless you are a Microsoft employee. You must have received an invitation email from the organizers to register and attend. This is not an official USENIX Security-affiliated event. The event is over. Thank you for participating! Date: August 11 – 12, 2025 Time: 9:30 AM – 4:45 PM (Monday) \/ 5:15 PM (Tuesday)Location: […]<\/p>\n","protected":false},"featured_media":621129,"template":"","meta":{"msr-url-field":"","msr-podcast-episode":"","msrModifiedDate":"","msrModifiedDateEnabled":false,"ep_exclude_from_search":false,"_classifai_error":"","msr_startdate":"2025-08-11","msr_enddate":"2025-08-12","msr_location":"Redmond, WA","msr_expirationdate":"","msr_event_recording_link":"","msr_event_link":"","msr_event_link_redirect":false,"msr_event_time":"","msr_hide_region":false,"msr_private_event":false,"msr_hide_image_in_river":null,"footnotes":""},"research-area":[13558],"msr-region":[],"msr-event-type":[197944],"msr-video-type":[],"msr-locale":[268875],"msr-program-audience":[],"msr-post-option":[269148,269142],"msr-impact-theme":[],"class_list":["post-1145612","msr-event","type-msr-event","status-publish","has-post-thumbnail","hentry","msr-research-area-security-privacy-cryptography","msr-event-type-hosted-by-microsoft","msr-locale-en_us","msr-post-option-approved-for-river","msr-post-option-include-in-river"],"msr_about":"\n\n\n\n\n

This is an invite-only event, unless you are a Microsoft employee. You must have received an invitation email from the organizers to register and attend. This is not an official USENIX Security-affiliated event.<\/strong><\/p>\n\n\n\n

The event is over. Thank you for participating!<\/strong><\/p>\n\n\n\n

Date<\/strong>: August 11 - 12, 2025 
Time:<\/strong> 9:30 AM - 4:45 PM (Monday) \/ 5:15 PM (Tuesday)
Location: <\/strong>14820 NE 36th St, Redmond, WA, 98052 

Important:<\/strong> You will need to present a photo ID (not necessary gov't issued) to check in to the Microsoft building. A university ID or any membership card with a photo will suffice.<\/div><\/p>\n\n\n\n
<\/div>\n\n\n\n

<\/p>\n\n\n\n

Schedule<\/h2>\n\n\n\n
\n
\n

Monday August 11<\/strong><\/p>\n\n\n\n

09:30 AM - 10:30 AM<\/td>Breakfast \/ Badge pick-up open<\/td><\/tr>
10:30 AM - 10:40 AM<\/td>Welcome<\/td><\/tr>
10:40 AM - 11:10 AM<\/td>Understanding How Users Prepare for and React to Smartphone Theft<\/a>
Speaker:<\/strong> Divyanshu Bhardwaj (CISPA Helmholtz Center for Information Security<\/em>)<\/td><\/tr>
11:15 AM - 11:45 AM <\/td>When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs<\/a>
Speaker:<\/strong> Hanna Kim (KAIST<\/em>)<\/td><\/tr>
11:50 AM - 12:20 PM<\/td>A Formal Analysis of Apple\u2019s iMessage PQ3 Protocol<\/a>
Speaker:<\/strong> Felix Linker (ETH Z\u00fcrich<\/em>)<\/td><\/tr>
12:20 PM - 02:00 PM<\/td>Lunch<\/td><\/tr>
02:00 PM - 03:00 PM<\/td>Keynote:<\/strong> Carmela Troncoso (MPI-SP and EPFL)

Abstract:<\/strong> In this talk we overview our collaboration with the International Committee of the Red Cross, in which we help them to digitalize their aid distribution process without increasing risks for the aid recipients. We will overview our requirements gathering process, and our solutions, highlighting the particularities of the ICRC needs and threat models which render straightforward solutions inapplicable to their scenarios.<\/em><\/td><\/tr>
03:00 PM - 03:10 PM<\/td>Break<\/td><\/tr>
03:10 PM - 03:40 PM<\/td>Email Spoofing with SMTP Smuggling: How the Shared Email Infrastructures Magnify this Vulnerability<\/a>
Speaker:<\/strong> Gang Wang (University of Illinois Urbana-Champaign<\/em>)<\/td><\/tr>
03:45 PM - 04:15 PM<\/td>Characterizing and Detecting Propaganda-Spreading Accounts on Telegram<\/a>
Speaker: <\/strong>Rebekah Overdorf (Ruhr University Bochum<\/em>)<\/td><\/tr>
04:15 PM - 04:30 PM<\/td>Closing<\/td><\/tr><\/tbody><\/table><\/figure>\n<\/div>\n\n\n\n
\n

Tuesday August 12<\/strong><\/p>\n\n\n\n

09:30 AM - 10:30 AM<\/td>Breakfast \/ Badge pick-up open<\/td><\/tr>
10:30 AM - 11:00 AM<\/td>\u2018Hey mum, I dropped my phone down the toilet\u2019: Investigating Hi Mum and Dad SMS Scams in the United Kingdom<\/a>
Speaker:<\/strong> Sharad Agarwal (University College London<\/em>)<\/td><\/tr>
11:05 AM - 11:35 AM<\/td>Encrypted Access Logging for Online Accounts: Device Attributions without Device Tracking<\/a>
Speaker:<\/strong> Carolina Ortega P\u00e9rez (Cornell University<\/em>)<\/td><\/tr>
11:40 AM - 12:10 PM<\/td>zk-promises: Anonymous Moderation, Reputation, and Blocking from Anonymous Credentials with Callbacks<\/a>
Speaker:<\/strong> Maurice Shih (University of Maryland<\/em>)<\/td><\/tr>
12:10 PM - 01:30 PM<\/td>Lunch<\/td><\/tr>
01:30 PM - 02:00 PM<\/td>Evaluating Privacy Policies under Modern Privacy Laws At Scale: An LLM-Based Automated Approach<\/a>
Speaker:<\/strong> Qinge Xie (Georgia Tech<\/em>)<\/td><\/tr>
02:05 PM - 02:35 PM<\/td>A Framework for Abusability Analysis: The Case of Passkeys in Interpersonal Threat Models<\/a>
Speaker: <\/strong>Alaa Daffalla (Cornell University<\/em>)<\/td><\/tr>
02:35 PM - 03:00 PM<\/td>Coffee break<\/td><\/tr>
03:00 PM - 03:30 PM<\/td>Detecting Compromise of Passkey Storage on the Cloud<\/a>
Speaker: <\/strong>Mazharul Islam (University of Wisconsin\u2014Madison<\/em>)<\/td><\/tr>
03:35 PM - 04:05 PM<\/td>More is Less: Extra Features in Contactless Payments Break Security<\/a>
Speaker:<\/strong> Tom Chothia (University of Birmingham<\/em>) and George Pavlides (Surrey Centre for Cyber Security, University of Surrey<\/em>)<\/td><\/tr>
04:05 PM - 04:15 PM<\/td>Closing<\/td><\/tr><\/tbody><\/table><\/figure>\n<\/div>\n<\/div>\n\n\n\n

Location and commute<\/h2>\n\n\n\n
\n
\n

The event is organized at Microsoft Building 99<\/strong> (14820 NE 36th St, Redmond, WA, 98052<\/a>) on the main Microsoft campus. The campus area is pleasant and totally walkable.<\/p>\n\n\n\n

Commuting from the USENIX Security conference hotel is easy by bus 545 (see schedule<\/a>). You will need to take the stop State Route 520 & NE 40th St<\/em> and walk 10-15 minutes<\/a>. Going back, the bus stop is on the other side of the freeway (map here<\/a>). Taking a cab\/Lyft\/Uber is reasonable as well, although note that these tend to be more expensive in the Seattle area than in many other cities.<\/p>\n\n\n\n

Staying on Monday and Tuesday in downtown Redmond is a good alternative. In this case, taking the Link Light Rail (line 2) to the Microsoft campus (Redmond Technology Station stop) is very convenient, followed by a 10-15 minute walk<\/a>.<\/p>\n\n\n\n

You can also choose to drive yourself to Microsoft Building 99 and park in the adjacent parking garage. There is ample free parking and you can park in any spot, but you will<\/strong> need to tell us upon checking in that you have parked a car, as it will need to be registered with the receptionist. Please be ready to provide basic information about the car (make, model, license plate #).<\/p>\n<\/div>\n<\/div>\n\n\n\n

Organizers<\/h2>\n\n\n\n
\n
\n
\"Melissa<\/figure>\n\n\n\n
<\/div>\n\n\n\n
Melissa Chase<\/a><\/h5>\n\n\n\n

Principal Researcher
Microsoft Research Redmond<\/p>\n<\/div>\n\n\n\n

\n
\"Kim<\/figure>\n\n\n\n
<\/div>\n\n\n\n
Kim Laine<\/a><\/h5>\n\n\n\n

Principal Researcher
Microsoft Research Redmond<\/p>\n<\/div>\n\n\n\n

<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
\n
Questions? Ask us<\/a><\/div>\n\n\n\n
About the Cryptography Group<\/a><\/div>\n<\/div>\n\n\n\n

Microsoft\u2019s Event Code of Conduct<\/h3>\n\n\n\n

Microsoft\u2019s mission is to empower every person and every organization on the planet to achieve more. This includes virtual events Microsoft hosts and participates in, where we seek to create a respectful, friendly, and inclusive experience for all participants. As such, we do not tolerate harassing or disrespectful behavior, messages, images, or interactions by any event participant, in any form, at any aspect of the program including business and social activities, regardless of location. We do not tolerate any behavior that is degrading to any gender, race, sexual orientation or disability, or any behavior that would violate Microsoft\u2019s Anti-Harassment and Anti-Discrimination Policy, Equal Employment Opportunity Policy, or Standards of Business Conduct<\/a>. In short, the entire experience must meet our culture standards. We encourage everyone to assist in creating a welcoming and safe environment. Please report<\/a> any concerns, harassing behavior, or suspicious or disruptive activity. Microsoft reserves the right to ask attendees to leave at any time at its sole discretion.<\/p>\n\n\n\n

\n
Report a concern<\/a><\/div>\n<\/div>\n\n\n","tab-content":[],"msr_startdate":"2025-08-11","msr_enddate":"2025-08-12","msr_event_time":"","msr_location":"Redmond, WA","msr_event_link":"","msr_event_recording_link":"","msr_startdate_formatted":"August 11, 2025","msr_register_text":"Watch now","msr_cta_link":"","msr_cta_text":"","msr_cta_bi_name":"","featured_image_thumbnail":"\"Research","event_excerpt":"This is an invite-only event, unless you are a Microsoft employee. You must have received an invitation email from the organizers to register and attend. This is not an official USENIX Security-affiliated event. The event is over. Thank you for participating! Date: August 11 - 12, 2025 Time: 9:30 AM - 4:45 PM (Monday) \/ 5:15 PM (Tuesday)Location: 14820 NE 36th St, Redmond, WA, 98052 Important: You will need to present a photo ID (not necessary gov't issued) to…","msr_research_lab":[],"related-researchers":[{"type":"user_nicename","display_name":"Melissa Chase","user_id":32878,"people_section":"Organizers","alias":"melissac"},{"type":"user_nicename","display_name":"Kim Laine","user_id":32546,"people_section":"Organizers","alias":"kilai"}],"msr_impact_theme":[],"related-academic-programs":[],"related-groups":[1107918],"related-projects":[],"related-opportunities":[],"related-publications":[],"related-videos":[],"related-posts":[],"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-event\/1145612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-event"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/types\/msr-event"}],"version-history":[{"count":32,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-event\/1145612\/revisions"}],"predecessor-version":[{"id":1148104,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-event\/1145612\/revisions\/1148104"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/media\/621129"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/media?parent=1145612"}],"wp:term":[{"taxonomy":"msr-research-area","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/research-area?post=1145612"},{"taxonomy":"msr-region","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-region?post=1145612"},{"taxonomy":"msr-event-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-event-type?post=1145612"},{"taxonomy":"msr-video-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-video-type?post=1145612"},{"taxonomy":"msr-locale","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-locale?post=1145612"},{"taxonomy":"msr-program-audience","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-program-audience?post=1145612"},{"taxonomy":"msr-post-option","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-post-option?post=1145612"},{"taxonomy":"msr-impact-theme","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-impact-theme?post=1145612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}