5 citations · 5 across the 7 of their papers we have counts for
7 papers
FRESCO: Complete and Scalable Temporal Safety for CHERI Application Processors
Merve Gülmez, Nils Jordan, Jialun Zhang +4
CHERI provides hardware-enforced spatial memory safety. While prior work extends it with heap temporal safety, stack use-after-return remains unaddressed. Existing defenses fall sh…
PICASSO: Scaling CHERI Use-After-Free Protection to Millions of Allocations using Colored Capabilities
Merve Gülmez, Ruben Sturm, Hossam ElAtali +4
While the CHERI instruction-set architecture extensions for capabilities enable strong spatial memory safety, CHERI lacks built-in temporal safety, particularly for heap allocation…
BLACKOUT: Data-Oblivious Computation with Blinded Capabilities
Hossam ElAtali, Merve Gülmez, Thomas Nyman +1
Lack of memory-safety and exposure to side channels are two prominent, persistent challenges for the secure implementation of software. Memory-safe programming languages promise to…
BliMe Linter
Hossam ElAtali, Xiaohe Duan, Hans Liljestrand +2
Outsourced computation presents a risk to the confidentiality of clients' sensitive data since they have to trust that the service providers will not mishandle this data. Blinded M…
CacheSquash: Making caches speculation-aware
Hossam ElAtali, N. Asokan
Speculation is key to achieving high CPU performance, yet it enables risks like Spectre attacks which remain a significant challenge to mitigate without incurring substantial perfo…
Data-Oblivious ML Accelerators using Hardware Security Extensions
Hossam ElAtali, John Z. Jekel, Lachlan J. Gunn +1
Outsourced computation can put client data confidentiality at risk. Existing solutions are either inefficient or insufficiently secure: cryptographic techniques like fully-homomorp…
BliMe: Verifiably Secure Outsourced Computation with Hardware-Enforced Taint Tracking
Hossam ElAtali, Lachlan J. Gunn, Hans Liljestrand +1
Outsourced computing is widely used today. However, current approaches for protecting client data in outsourced computing fall short: use of cryptographic techniques like fully-hom…