104 citations · 325 across the 25 of their papers we have counts for
18 papers · 1 filter
Modulation to the Rescue: Identifying Sub-Circuitry in the Transistor Morass for Targeted Analysis
Xhani Marvin Saß, Thilo Krachenfels, Frederik Dermot Pustelnik +3
Physical attacks form one of the most severe threats against secure computing platforms. Their criticality arises from their corresponding threat model: By, e.g., passively measuri…
faulTPM: Exposing AMD fTPMs' Deepest Secrets
Hans Niklas Jacob, Christian Werling, Robert Buhren +1
Trusted Platform Modules constitute an integral building block of modern security features. Moreover, as Windows 11 made a TPM 2.0 mandatory, they are subject to an ever-increasing…
EM-Fault It Yourself: Building a Replicable EMFI Setup for Desktop and Server Hardware
Niclas Kühnapfel, Robert Buhren, Hans Niklas Jacob +3
EMFI has become a popular fault injection (FI) technique due to its ability to inject faults precisely considering timing and location. Recently, ARM, RISC-V, and even x86 processi…
VIA: Analyzing Device Interfaces of Protected Virtual Machines
Felicitas Hetzelt, Martin Radev, Robert Buhren +2
Both AMD and Intel have presented technologies for confidential computing in cloud environments. The proposed solutions - AMD SEV (-ES, -SNP) and Intel TDX - protect Virtual Machin…
Machine-Learning Side-Channel Attacks on the GALACTICS Constant-Time Implementation of BLISS
Soundes Marzougui, Nils Wisiol, Patrick Gersch +2
Due to the advancing development of quantum computers, practical attacks on conventional public-key cryptography may become feasible in the next few decades. To address this risk,…
One Glitch to Rule Them All: Fault Injection Attacks Against AMD's Secure Encrypted Virtualization
Robert Buhren, Hans Niklas Jacob, Thilo Krachenfels +1
AMD Secure Encrypted Virtualization (SEV) offers protection mechanisms for virtual machines in untrusted environments through memory and register encryption. To separate security-s…
The Forgotten Threat of Voltage Glitching: A Case Study on Nvidia Tegra X2 SoCs
Otto Bittner, Thilo Krachenfels, Andreas Galauner +1
Voltage fault injection (FI) is a well-known attack technique that can be used to force faulty behavior in processors during their operation. Glitching the supply voltage can cause…
Trojan Awakener: Detecting Dormant Malicious Hardware Using Laser Logic State Imaging (Extended Version)
Thilo Krachenfels, Jean-Pierre Seifert, Shahin Tajik
The threat of hardware Trojans (HTs) and their detection is a widely studied field. While the effort for inserting a Trojan into an application-specific integrated circuit (ASIC) c…
Automatic Extraction of Secrets from the Transistor Jungle using Laser-Assisted Side-Channel Attacks
Thilo Krachenfels, Tuba Kiyan, Shahin Tajik +1
The security of modern electronic devices relies on secret keys stored on secure hardware modules as the root-of-trust (RoT). Extracting those keys would break the security of the…
Real-World Snapshots vs. Theory: Questioning the t-Probing Security Model
Thilo Krachenfels, Fatemeh Ganji, Amir Moradi +2
Due to its sound theoretical basis and practical efficiency, masking has become the most prominent countermeasure to protect cryptographic implementations against physical side-cha…
Evaluation of Low-Cost Thermal Laser Stimulation for Data Extraction and Key Readout
Thilo Krachenfels, Heiko Lohrke, Jean-Pierre Seifert +3
Recent attacks using thermal laser stimulation (TLS) have shown that it is possible to extract cryptographic keys from the battery-backed memory on state-of-the-art field-programma…
Insecure Until Proven Updated: Analyzing AMD SEV's Remote Attestation
Robert Buhren, Christian Werling, Jean-Pierre Seifert
Customers of cloud services have to trust the cloud providers, as they control the building blocks that form the cloud. This includes the hypervisor enabling the sharing of a singl…
RNNIDS: Enhancing Network Intrusion Detection Systems through Deep Learning
Soroush M. Sohi, Jean-Pierre Seifert, Fatemeh Ganji
Security of information passing through the Internet is threatened by today's most advanced malware ranging from orchestrated botnets to simpler polymorphic worms. These threats, a…
Static Exploration of Taint-Style Vulnerabilities Found by Fuzzing
Bhargava Shastry, Federico Maggi, Fabian Yamaguchi +2
Taint-style vulnerabilities comprise a majority of fuzzer discovered program faults. These vulnerabilities usually manifest as memory access violations caused by tainted program in…
Leveraging Flawed Tutorials for Seeding Large-Scale Web Vulnerability Discovery
Tommi Unruh, Bhargava Shastry, Malte Skoruppa +4
The Web is replete with tutorial-style content on how to accomplish programming tasks. Unfortunately, even top-ranked tutorials suffer from severe security vulnerabilities, such as…
Fault Attacks on Encrypted General Purpose Compute Platforms
Robert Buhren, Shay Gueron, Jan Nordholz +2
Adversaries with physical access to a target platform can perform cold boot or DMA attacks to extract sensitive data from the RAM. In response, several main-memory encryption schem…
Towards Vulnerability Discovery Using Staged Program Analysis
Bhargava Shastry, Fabian Yamaguchi, Konrad Rieck +1
Eliminating vulnerabilities from low-level code is vital for securing software. Static analysis is a promising approach for discovering vulnerabilities since it can provide develop…
A First Look at Firefox OS Security
Daniel Defreez, Bhargava Shastry, Hao Chen +1
With Firefox OS, Mozilla is making a serious push for an HTML5-based mobile platform. In order to assuage security concerns over providing hardware access to web applications, Mozi…