101 citations · 209 across the 15 of their papers we have counts for
18 papers
Towards Remote Attestation of Microarchitectural Attacks: The Case of Rowhammer
Martin Herrmann, Oussama Draissi, Christian Niesler +2
Microarchitectural vulnerabilities increasingly undermine the assumption that hardware can be treated as a reliable root of trust. Prevention mechanisms often lag behind evolving a…
Walma: Learning to See Memory Corruption in WebAssembly
Oussama Draissi, Mark Günzel, Ahmad-Reza Sadeghi +1
WebAssembly's (Wasm) monolithic linear memory turns a single memory-corruption bug into a bidirectional threat: a compromised module can attack its embedding host, and a malicious…
EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation
Michael Rodler, David Paaßen, Wenting Li +4
Smart contracts are increasingly being used to manage large numbers of high-value cryptocurrency accounts. There is a strong demand for automated, efficient, and comprehensive meth…
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64
Lukas Bernhard, Michael Rodler, Thorsten Holz +1
Memory safety in complex applications implemented in unsafe programming languages such as C/C++ is still an unresolved problem in practice. Many different types of defenses have be…
HCC: A Language-Independent Hardening Contract Compiler for Smart Contracts
Jens-Rene Giesen, Sebastien Andreina, Michael Rodler +2
Developing secure smart contracts remains a challenging task. Existing approaches are either impractical or leave the burden to developers for fixing bugs. In this paper, we propos…
My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers
David Paaßen, Sebastian Surminski, Michael Rodler +1
Fuzzing has become one of the most popular techniques to identify bugs in software. To improve the fuzzing process, a plethora of techniques have recently appeared in academic lite…