163 citations
Counting papers with at most 25 authors, so collaboration author lists do not stand in for the people here.
- Ruhr University BochumDE27 papers
- Helmholtz Center for Information SecurityDE7 papers
- Leibniz University HannoverDE5 papers
- TU Dortmund UniversityDE4 papers
- University of Illinois Urbana-ChampaignUS4 papers
- University of Maryland, College ParkUS4 papers
- University of OxfordGB4 papers
- University of PaduaIT4 papers
- University of WashingtonUS4 papers
- Arizona State UniversityUS3 papers
- Carnegie Mellon UniversityUS3 papers
- ETH ZurichCH3 papers
23 papers · 1 filter
dfence: Fine-Grained Speculation Barriers for Efficient and Effective Hardware-Software Protection in the Spectre Era (Extended Version)
Davide Davoli, Marton Bognar, Lesly-Ann Daniel +3
Speculative execution attacks such as Spectre-PHT and Spectre-STL remain a critical security concern in modern processors. While software-based mitigations like Speculative Load Ha…
Hardware Trojans from Invisible Inversions: On the Trojanizability of Standard Cell Libraries
Kolja Dorschel, René Walendy, Lukas Plätz +3
At S&P 2023, Puschner et al. made a valuable dataset for hardware Trojan detection research publicly available. It contains a complete set of Scanning Electron Microscope (SEM) ima…
SAMSEM -- A Generic and Scalable Approach for IC Metal Line Segmentation
Christian Gehrmann, Jonas Ricker, Simon Damm +5
In light of globalized hardware supply chains, the assurance of hardware components has gained significant interest, particularly in cryptographic applications and high-stakes scen…
Triosecuris: Formally Verified Protection Against Speculative Control-Flow Hijacking
Jonathan Baumann, Yonghyun Kim, Yan Farba +2
This paper introduces Triosecuris, a formally verified defense against Spectre BTB, RSB, and PHT that combines CET-style hardware-assisted control-flow integrity with compiler-inse…
Chasing Shadows: Pitfalls in LLM Security Research
Jonathan Evertz, Niklas Risse, Nicolai Neuer +12
Large language models (LLMs) are increasingly prevalent in security research. Their unique characteristics, however, introduce challenges that undermine established paradigms of re…
Protocol-Aware Firmware Rehosting for Effective Fuzzing of Embedded Network Stacks
Moritz Bley, Tobias Scharnowski, Simon Wörner +2
One of the biggest attack surfaces of embedded systems is their network interfaces, which enable communication with other devices. Unlike their general-purpose counterparts, embedd…
Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault Injection
Nils Bars, Lukas Bernhard, Moritz Schloegel +1
We use browsers daily to access all sorts of information. Because browsers routinely process scripts, media, and executable code from unknown sources, they form a critical security…
"That's another doom I haven't thought about": A User Study on AI Labels as a Safeguard Against Image-Based Misinformation
Sandra Höltervennhoff, Jonas Ricker, Maike M. Raphael +6
As generative AI is increasingly contributing to the spread of deceptively realistic misinformation, lawmakers have introduced regulations requiring the disclosure of AI-generated…
Patching FPGAs: The Security Implications of Bitstream Modifications
Endres Puschner, Maik Ender, Steffen Becker +1
Field Programmable Gate Arrays (FPGAs) are known for their reprogrammability that allows for post-manufacture circuitry changes. Nowadays, they are integral to a variety of systems…
Spatial-Domain Wireless Jamming with Reconfigurable Intelligent Surfaces
Philipp Mackensen, Paul Staat, Stefan Roth +3
Wireless communication infrastructure is a cornerstone of modern digital society, yet it remains vulnerable to the persistent threat of wireless jamming. Attackers can easily creat…
REVERSIM: An Open-Source Environment for the Controlled Study of Human Aspects in Hardware Reverse Engineering
Steffen Becker, René Walendy, Markus Weber +3
Hardware Reverse Engineering (HRE) is a technique for analyzing integrated circuits. Experts employ HRE for security-critical tasks, like detecting Trojans or intellectual property…
Augmented Reality's Potential for Identifying and Mitigating Home Privacy Leaks
Stefany Cruz, Logan Danek, Shinan Liu +6
Users face various privacy risks in smart homes, yet there are limited ways for them to learn about the details of such risks, such as the data practices of smart home devices and…
A World Full of Privacy and Security (Mis)conceptions? Findings of a Representative Survey in 12 Countries
Franziska Herbert, Steffen Becker, Leonie Schaewitz +5
Misconceptions about digital security and privacy topics in the general public frequently lead to insecure behavior. However, little is known about the prevalence and extent of suc…
Digital Security -- A Question of Perspective. A Large-Scale Telephone Survey with Four At-Risk User Groups
Franziska Herbert, Steffen Becker, Annalina Buckmann +6
This paper investigates the digital security experiences of four at-risk user groups in Germany, including older adults (70+), teenagers (14-17), people with migration backgrounds,…
DeepSec: Deciding Equivalence Properties for Security Protocols -- Improved theory and practice
Vincent Cheval, Steve Kremer, Itsaka Rakotonirina
Automated verification has become an essential part in the security evaluation of cryptographic protocols. In this context privacy-type properties are often modelled by indistingui…
How Not to Protect Your IP -- An Industry-Wide Break of IEEE 1735 Implementations
Julian Speith, Florian Schweins, Maik Ender +3
Modern hardware systems are composed of a variety of third-party Intellectual Property (IP) cores to implement their overall functionality. Since hardware design is a globalized pr…
An Exploratory Study of Hardware Reverse Engineering Technical and Cognitive Processes
Steffen Becker, Carina Wiesen, Nils Albartus +2
Understanding the internals of Integrated Circuits (ICs), referred to as Hardware Reverse Engineering (HRE), is of interest to both legitimate and malicious parties. HRE is a compl…
ARMORY: Fully Automated and Exhaustive Fault Simulation on ARM-M Binaries
Max Hoffmann, Falk Schellenberg, Christof Paar
Embedded systems are ubiquitous. However, physical access of users and likewise attackers makes them often threatened by fault attacks: a single fault during the computation of a c…
The Unpatchable Silicon: A Full Break of the Bitstream Encryption of Xilinx 7-Series FPGAs
Maik Ender, Amir Moradi, Christof Paar
The security of FPGAs is a crucial topic, as any vulnerability within the hardware can have severe consequences, if they are used in a secure design. Since FPGA designs are encoded…
SPFA: SFA on Multiple Persistent Faults
Susanne Engels, Falk Schellenberg, Christof Paar
For classical fault analysis, a transient fault is required to be injected during runtime, e.g., only at a specific round. Instead, Persistent Fault Analysis (PFA) introduces a pow…
Deciding Accuracy of Differential Privacy Schemes
Gilles Barthe, Rohit Chadha, Paul Krogmeier +2
Differential privacy is a mathematical framework for developing statistical computations with provable guarantees of privacy and accuracy. In contrast to the privacy component of d…
Keys from the Sky: A First Exploration of Physical-Layer Security Using Satellite Links
Pascal Zimmer, Roland Weinreich, Christian T. Zenger +2
In this paper, we investigate physical-layer security (PLS) methods for proximity-based group-key establishment and proof of location. Fields of application include secure car-to-c…
This PIN Can Be Easily Guessed: Analyzing the Security of Smartphone Unlock PINs
Philipp Markert, Daniel V. Bailey, Maximilian Golla +2
In this paper, we provide the first comprehensive study of user-chosen 4- and 6-digit PINs (n=1220) collected on smartphones with participants being explicitly primed for device un…