242 citations · 333 across the 6 of their papers we have counts for
7 papers
Trusted Container Extensions for Container-based Confidential Computing
Ferdinand Brasser, Patrick Jauernig, Frederik Pustelnik +2
Cloud computing has emerged as a corner stone of today's computing landscape. More and more customers who outsource their infrastructure benefit from the manageability, scalability…
CURE: A Security Architecture with CUstomizable and Resilient Enclaves
Raad Bahmani, Ferdinand Brasser, Ghada Dessouky +4
Security architectures providing Trusted Execution Environments (TEEs) have been an appealing research subject for a wide range of computer systems, from low-end embedded devices t…
GrandDetAuto: Detecting Malicious Nodes in Large-Scale Autonomous Networks
Tigist Abera, Ferdinand Brasser, Lachlan J. Gunn +3
Autonomous collaborative networks of devices are rapidly emerging in numerous domains, such as self-driving cars, smart factories, critical infrastructure, and Internet of Things i…
Control Behavior Integrity for Distributed Cyber-Physical Systems
Sridhar Adepu, Ferdinand Brasser, Luis Garcia +4
Cyber-physical control systems, such as industrial control systems (ICS), are increasingly targeted by cyberattacks. Such attacks can potentially cause tremendous damage, affect cr…
DR.SGX: Hardening SGX Enclaves against Cache Attacks with Data Location Randomization
Ferdinand Brasser, Srdjan Capkun, Alexandra Dmitrienko +3
Recent research has demonstrated that Intel's SGX is vulnerable to software-based side-channel attacks. In a common attack, the adversary monitors CPU caches to infer secret-depend…
HardIDX: Practical and Secure Index with SGX
Benny Fuhry, Raad Bahmani, Ferdinand Brasser +3
Software-based approaches for search over encrypted data are still either challenged by lack of proper, low-leakage encryption or slow performance. Existing hardware-based approach…
Software Grand Exposure: SGX Cache Attacks Are Practical
Ferdinand Brasser, Urs Müller, Alexandra Dmitrienko +3
Side-channel information leakage is a known limitation of SGX. Researchers have demonstrated that secret-dependent information can be extracted from enclave execution through page-…