148 citations · 187 across the 14 of their papers we have counts for
14 papers
Opportunities and Challenges in Securely Reusing and Repurposing Mobile Devices
Adelin Roty, Jan Tobias Mühlberg, Jean-François Determe
An estimated 5.3 billion mobile phones became electronic waste in 2022. Many of these devices can be repurposed and used in different contexts to extend their lifetime and to reduc…
Systematic Assessment of Cache Timing Vulnerabilities on RISC-V Processors
Cédrick Austa, Jan Tobias Mühlberg, Jean-Michel Dricot
While interest in the open RISC-V instruction set architecture is growing, tools to assess the security of concrete processor implementations are lacking. There are dedicated tools…
Resistance Technologies: Moving Beyond Alternative Designs
Iness Ben Guirat, Jan Tobias Muehlberg
The discourse about sustainable technology has emerged from the acknowledgment of the environmental collapse we are facing. In this paper, we argue that addressing this crisis requ…
Exploring Privacy and Security as Drivers for Environmental Sustainability in Cloud-Based Office Solutions
Jason Kayembe, Iness Ben Guirat, Jan Tobias Mühlberg
In this paper, we explore the intersection of privacy, security, and environmental sustainability in cloud-based office solutions, focusing on quantifying user- and network-side en…
Do we still need canaries in the coal mine? Measuring shadow stack effectiveness in countering stack smashing
Hugo Depuydt, Merve Gülmez, Thomas Nyman +1
Stack canaries and shadow stacks are widely deployed mitigations to memory-safety vulnerabilities. While stack canaries are introduced by the compiler and rely on sentry values pla…
Mon CHÉRI: Mitigating Uninitialized Memory Access with Conditional Capabilities
Merve Gülmez, Håkan Englund, Jan Tobias Mühlberg +1
Up to 10% of memory-safety vulnerabilities in languages like C and C++ stem from uninitialized variables. This work addresses the prevalence and lack of adequate software mitigatio…
Friend or Foe Inside? Exploring In-Process Isolation to Maintain Memory Safety for Unsafe Rust
Merve Gülmez, Thomas Nyman, Christoph Baumann +1
Rust is a popular memory-safe systems programming language. In order to interact with hardware or call into non-Rust libraries, Rust provides \emph{unsafe} language features that s…
Upgrading the protection of children from manipulative and addictive strategies in online games: Legal and technical solutions beyond privacy regulation
Tommaso Crepax, Jan Tobias Muehlberg
Despite the increasing awareness from academia, civil society and media to the issue of child manipulation online, the current EU regulatory system fails at providing sufficient le…
A Survey of Security and Privacy Issues in V2X Communication Systems
Takahito Yoshizawa, Dave Singelée, Jan Tobias Muehlberg +4
Vehicle-to-Everything (V2X) communication is receiving growing attention from industry and academia as multiple pilot projects explore its capabilities and feasibility. With about…
End-to-End Security for Distributed Event-Driven Enclave Applications on Heterogeneous TEEs
Gianluca Scopelliti, Sepideh Pouyanrad, Job Noorman +4
This paper presents an approach to provide strong assurance of the secure execution of distributed event-driven applications on shared infrastructures, while relying on a small Tru…
Sustaining Security and Safety in ICT: A Quest for Terminology, Objectives, and Limits
Jan Tobias Muehlberg
Security and safety are intertwined concepts in the world of computing. In recent years, the terms "sustainable security" and "sustainable safety" came into fashion and are being u…
Unlimited Lives: Secure In-Process Rollback with Isolated Domains
Merve Gülmez, Thomas Nyman, Christoph Baumann +1
The use of unsafe programming languages still remains one of the major root causes of software vulnerabilities. Although well-known defenses that detect and mitigate memory-safety…
Automated Fuzzing of Automotive Control Units
Timothy Werquin, Roos Hubrechtsen, Ashok Thangarajan +2
Modern vehicles are governed by a network of Electronic Control Units (ECUs), which are programmed to sense inputs from the driver and the environment, to process these inputs, and…
HyperForce: Hypervisor-enForced Execution of Security-Critical Code
Francesco Gadaleta, Nick Nikiforakis, Jan Tobias Muhlberg +1
The sustained popularity of the cloud and cloud-related services accelerate the evolution of virtualization-enabling technologies. Modern off-the-shelf computers are already equipp…