2026
-
Efficient Linkage-Based Compartmentalization on CHERI ACM Conference on Computer and Communications Security (CCS), 2026
-
DDRop: Active Memory Interposer Attacks on Confidential VMs by Dropping DDR5 Writes ACM Conference on Computer and Communications Security (CCS), 2026
-
User Privacy Attacks through Self-Modifying Code Conflicts ACM Transactions on Architecture and Code Optimization (TACO), 2026
-
TDXRay: Microarchitectural Side-Channel Analysis of Intel TDX for Real-World Workloads IEEE Symposium on Security and Privacy, 2026
-
Security Assessment of Intel TDX with support for Live Migration Google Techical Report, 2026
-
ARM MTE Performance in Practice Usenix Security Symposium, 2026
-
SNPeek: Side-Channel Analysis for Privacy Applications on Confidential VMs Network and Distributed System Security (NDSS), 2026
-
Phoenix: Rowhammer Attacks on DDR5 with Self-Correcting Synchronization IEEE Symposium on Security and Privacy, 2026
2025
-
DroidCCT: Cryptographic Compliance Test via Trillion-Scale Measurement Annual Computer Security Applications Conference (ACSAC), 2025
-
ExfilState: Automated Discovery of Timer-Free Cache Side Channels on ARM CPUs ACM Conference on Computer and Communications Security (CCS), 2025
-
SMaCk: Efficient Instruction Cache Attacks via Self-Modifying Code Conflicts ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), 2025
2024
-
Generalized Power Attacks Against Crypto Hardware Using Long-Range Deep Learning IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024
-
Pathfinder: High-Resolution Control-Flow Attacks Exploiting the Conditional Branch Predictor ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), 2024
2023
-
Downfall: Exploiting Speculative Data Gathering USENIX Security Symposium, 2023
-
NVLeak: Off-Chip Side-Channel Attacks via Non-Volatile Memory Systems USENIX Security Symposium, 2023
-
Going Beyond the Limits of SFI: Flexible and Secure Hardware-Assisted In-Process Isolation with HFI Proceedings of the 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 3, 2023
2022
-
A Turning Point for Verified Spectre Sandboxing arXiv preprint arXiv:2208.01548, 2022
-
SoK: Practical Foundations for Software Spectre Defenses IEEE Symposium on Security and Privacy, 2022
-
EVAX: Towards a Practical, Pro-Active \& Adaptive Architecture for High Performance \& Security IEEE/ACM International Symposium on Microarchitecture (MICRO), 2022
2021
-
Swivel: Hardening WebAssembly Against Spectre USENIX Security Symposium, 2021
2020
-
Revisiting Isolated and Trusted Execution via Microarchitectural Cryptanalysis PhD Dissertation, 2020
-
Data Sampling on MDS-resistant 10th Generation Intel Core (Ice Lake) arXiv preprint arXiv:2007.07428, 2020
-
LVI: Hijacking Transient Execution Through Microarchitectural Load Value Injection IEEE Symposium on Security and Privacy, 2020
-
CopyCat: Controlled Instruction-Level Attacks on Enclaves USENIX Security Symposium, 2020
-
Medusa: Microarchitectural Data Leakage via Automated Attack Synthesis USENIX Security Symposium, 2020
-
TPM-FAIL: TPM Meets Timing and Lattice Attacks USENIX Security Symposium, 2020
-
JackHammer: Efficient Rowhammer on Heterogeneous FPGA-CPU Platforms IACR Transactions on Cryptographic Hardware and Embedded Systems, 2020
2019
-
ZombieLoad: Cross-Privilege-Boundary Data Sampling ACM Conference on Computer and Communications Security (CCS), 2019
-
Fallout: Leaking Data on Meltdown-Resistant CPUs ACM Conference on Computer and Communications Security (CCS), 2019
-
SPOILER: Speculative Load Hazards Boost Rowhammer and Cache Attacks USENIX Security Symposium, 2019
-
MemJam: A False Dependency Attack Against Constant-Time Crypto Implementations International Journal of Parallel Programming, 2019
-
Fortuneteller: Predicting Microarchitectural Attacks via Unsupervised Deep Learning arXiv preprint arXiv:1907.03651, 2019
2018
-
Microwalk: A Framework for Finding Side Channels in Binaries Annual Computer Security Applications Conference (ACSAC), 2018
-
CacheQuote: Efficiently Recovering Long-Term Secrets of SGX EPID via Cache Attacks IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018
2017
-
Side-Channel Attacks on Intel SGX: How SGX Amplifies the Power of Cache Attacks Masters Theses, 2017
-
CacheZoom: How SGX Amplifies the Power of Cache Attacks International Conference on Cryptographic Hardware and Embedded Systems, 2017