3.5k citations
Counting papers with at most 25 authors, so collaboration author lists do not stand in for the people here.
- University Hospital Schleswig-HolsteinDE21 papers
- Universität HamburgDE14 papers
- Ludwig-Maximilians-Universität MünchenDE11 papers
- University of OxfordGB10 papers
- Hamburg University of TechnologyDE9 papers
- University Medical Center Hamburg-EppendorfDE9 papers
- Worcester Polytechnic InstituteUS9 papers
- Christian-Albrechts-Universität zu KielDE8 papers
- Heidelberg UniversityDE8 papers
- University of KaiserslauternDE8 papers
- Fraunhofer Institute for Digital MedicineDE7 papers
- Institute of Applied Mathematics and MechanicsUA7 papers
23 papers · 1 filter
SPARC: Automated Root-Cause Analysis of Pre-Silicon Power Side-Channel Leakage in the Processor Design Flow
Andrija Nešković, Christian Ewert, Mladen Berekovic +1
Power-Side-Channel Leakage (PSCL) originates from architectural and micro-architectural artifacts in a processor and poses a severe threat to the confidentiality of cryptographic s…
DRAMatic Speedup: Accelerating HE Operations on a Processing-in-Memory System
Niklas Klinger, Jonas Sander, Peterson Yuhala +2
Homomorphic encryption (HE) is a promising technology for confidential cloud computing, as it allows computations on encrypted data. However, HE is computationally expensive and of…
Trace Gadgets: Minimizing Code Context for Machine Learning-Based Vulnerability Prediction
Felix Mächtle, Nils Loose, Tim Schulz +4
As the number of web applications and API endpoints exposed to the Internet continues to grow, so does the number of exploitable vulnerabilities. Manually identifying such vulnerab…
Zebrafix: Mitigating Memory-Centric Side-Channel Leakage via Interleaving
Anna Pätschke, Jan Wichelmann, Thomas Eisenbarth
Constant-time code has become the de-facto standard for secure cryptographic implementations. However, some memory-based leakage classes such as ciphertext side-channels and silent…
Reconfigurable Edge Hardware for Intelligent IDS: Systematic Approach
Wadid Foudhaili, Anouar Nechi, Celine Thermann +4
Intrusion detection systems (IDS) are crucial security measures nowadays to enforce network security. Their task is to detect anomalies in network communication and identify, if no…
Okapi: Efficiently Safeguarding Speculative Data Accesses in Sandboxed Environments
Philipp Schmitz, Tobias Jauch, Alex Wezel +6
This paper introduces Okapi, a new hardware/software cross-layer architecture designed to mitigate Transient Execution Side Channel attacks, including Spectre variants, in modern c…
Microarchitectural Security of AWS Firecracker VMM for Serverless Cloud Platforms
Zane Weissman, Thore Tiemann, Thomas Eisenbarth +1
Firecracker is a virtual machine manager (VMM) built by Amazon Web Services (AWS) for serverless cloud platforms, services that run code for end users on a per-task basis, automati…
PrivAgE: A Toolchain for Privacy-Preserving Distributed Aggregation on Edge-Devices
Johannes Liebenow, Timothy Imort, Yannick Fuchs +4
Valuable insights, such as frequently visited environments in the wake of the COVID-19 pandemic, can oftentimes only be gained by analyzing sensitive data spread across edge-device…
MAMBO-V: Dynamic Side-Channel Leakage Analysis on RISC-V
Jan Wichelmann, Christopher Peredy, Florian Sieck +2
RISC-V is an emerging technology, with applications ranging from embedded devices to high-performance servers. Therefore, more and more security-critical workloads will be conducte…
Microwalk-CI: Practical Side-Channel Analysis for JavaScript Applications
Jan Wichelmann, Florian Sieck, Anna Pätschke +1
Secret-dependent timing behavior in cryptographic implementations has resulted in exploitable vulnerabilities, undermining their security. Over the years, numerous tools to automat…
IOTLB-SC: An Accelerator-Independent Leakage Source in Modern Cloud Systems
Thore Tiemann, Zane Weissman, Thomas Eisenbarth +1
Hardware peripherals such as GPUs and FPGAs are commonly available in server-grade computing to accelerate specific compute tasks, from database queries to machine learning. CSPs h…
Util::Lookup: Exploiting key decoding in cryptographic libraries
Florian Sieck, Sebastian Berndt, Jan Wichelmann +1
Implementations of cryptographic libraries have been scrutinized for secret-dependent execution behavior exploitable by microarchitectural side-channel attacks. To prevent unintend…
Learning Numeric Optimal Differentially Private Truncated Additive Mechanisms
David M. Sommer, Lukas Abfalterer, Sheila Zingg +1
Differentially private (DP) mechanisms face the challenge of providing accurate results while protecting their inputs: the privacy-utility trade-off. A simple but powerful techniqu…
undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation
Luca Wilke, Jan Wichelmann, Florian Sieck +1
The ongoing trend of moving data and computation to the cloud is met with concerns regarding privacy and protection of intellectual property. Cloud Service Providers (CSP) must be…
SEVurity: No Security Without Integrity -- Breaking Integrity-Free Memory Encryption with Minimal Assumptions
Luca Wilke, Jan Wichelmann, Mathias Morbitzer +1
One reason for not adopting cloud services is the required trust in the cloud provider: As they control the hypervisor, any data processed in the system is accessible to them. Full…
JackHammer: Efficient Rowhammer on Heterogeneous FPGA-CPU Platforms
Zane Weissman, Thore Tiemann, Daniel Moghimi +3
After years of development, FPGAs are finally making an appearance on multi-tenant cloud servers. These heterogeneous FPGA-CPU architectures break common assumptions about isolatio…
TPM-FAIL: TPM meets Timing and Lattice Attacks
Daniel Moghimi, Berk Sunar, Thomas Eisenbarth +1
Trusted Platform Module (TPM) serves as a hardware-based root of trust that protects cryptographic keys from privileged system and physical adversaries. In this work, we perform a…
Differential privacy with partial knowledge
Damien Desfontaines, Esfandiar Mohammadi, Elisabeth Krahmer +1
Differential privacy offers formal quantitative guarantees for algorithms over datasets, but it assumes attackers that know and can influence all but one record in the database. Th…
RELOAD+REFRESH: Abusing Cache Replacement Policies to Perform Stealthy Cache Attacks
Samira Briongos, Pedro Malagón, José M. Moya +1
Caches have become the prime method for unintended information extraction across logical isolation boundaries. Even Spectre and Meltdown rely on the cache side channel, as it provi…
SPOILER: Speculative Load Hazards Boost Rowhammer and Cache Attacks
Saad Islam, Ahmad Moghimi, Ida Bruhns +4
Modern microarchitectures incorporate optimization techniques such as speculative loads and store forwarding to improve the memory bottleneck. The processor executes the load specu…
MicroWalk: A Framework for Finding Side Channels in Binaries
Jan Wichelmann, Ahmad Moghimi, Thomas Eisenbarth +1
Microarchitectural side channels expose unprotected software to information leakage attacks where a software adversary is able to track runtime behavior of a benign process and ste…
DeepCloak: Adversarial Crafting As a Defensive Measure to Cloak Processes
Mehmet Sinan Inci, Thomas Eisenbarth, Berk Sunar
Over the past decade, side-channels have proven to be significant and practical threats to modern computing systems. Recent attacks have all exploited the underlying shared hardwar…
MemJam: A False Dependency Attack against Constant-Time Crypto Implementations
Ahmad Moghimi, Thomas Eisenbarth, Berk Sunar
Cache attacks exploit memory access patterns of cryptographic implementations. Constant-Time implementation techniques have become an indispensable tool in fighting cache timing at…