39 citations · 147 across the 24 of their papers we have counts for
28 papers · 1 filter
Chypothermia: Clock Freezing for Static Side-channel Attacks
Fatemeh Khojasteh Dana, Mehmet Ali Cetin, Xinrui Wang +3
Static side-channel attacks, which exploit halted-clock conditions to extract sensitive information, pose an increasing threat to chip security. To counter these attacks, various d…
"They don't care about this": A Systematic Study of TEE Build Reproducibility in the Wild
Annika Wilde, Marco Gutfleisch, Felix Reichmann +4
Trusted Execution Environments (TEEs) have become a cornerstone of modern cloud computing, providing strong confidentiality and integrity guarantees for both code and data. A criti…
Kraken: Higher-order EM Side-Channel Attacks on DNNs in Near and Far Field
Peter Horvath, Ilia Shumailov, Lukasz Chmielewski +2
The multi-million dollar investment required for modern machine learning (ML) has made large ML models a prime target for theft. In response, the field of model stealing has emerge…
Thunderhammer: Rowhammer Bitflips via PCIe and Thunderbolt (USB-C)
Robert Dumitru, Junpeng Wan, Daniel Genkin +4
In recent years, Rowhammer has attracted significant attention from academia and industry alike. This technique, first published in 2014, flips bits in memory by repeatedly accessi…
Slice+Slice Baby: Generating Last-Level Cache Eviction Sets in the Blink of an Eye
Bradley Morgan, Gal Horowitz, Sioli O'Connell +7
An essential step for mounting cache attacks is finding eviction sets, collections of memory locations that contend on cache space. On Intel processors, one of the main challenges…
Chypnosis: Undervolting-based Static Side-channel Attacks
Kyle Mitard, Saleh Khalaj Monfared, Fatemeh Khojasteh Dana +3
Static side-channel analysis attacks, which rely on a stopped clock to extract sensitive information, pose a growing threat to embedded systems' security. To protect against such a…
Testing side-channel security of cryptographic implementations against future microarchitectures
Gilles Barthe, Marcel Böhme, Sunjay Cauligi +7
How will future microarchitectures impact the security of existing cryptographic implementations? As we cannot keep reducing the size of transistors, chip vendors have started deve…
CNN architecture extraction on edge GPU
Peter Horvath, Lukasz Chmielewski, Leo Weissbart +2
Neural networks have become popular due to their versatility and state-of-the-art results in many applications, such as image classification, natural language processing, speech re…
Elephants Do Not Forget: Differential Privacy with State Continuity for Privacy Budget
Jiankai Jin, Chitchanok Chuengsatiansup, Toby Murray +3
Current implementations of differentially-private (DP) systems either lack support to track the global privacy budget consumed on a dataset, or fail to faithfully maintain the stat…
BarraCUDA: Edge GPUs do Leak DNN Weights
Peter Horvath, Lukasz Chmielewski, Leo Weissbart +2
Over the last decade, applications of neural networks (NNs) have spread to various aspects of our lives. A large number of companies base their businesses on building products that…
On Borrowed Time -- Preventing Static Side-Channel Analysis
Robert Dumitru, Thorben Moos, Andrew Wabnitz +1
In recent years a new class of side-channel attacks has emerged. Instead of targeting device emissions during dynamic computation, adversaries now frequently exploit the leakage or…
CryptOpt: Automatic Optimization of Straightline Code
Joel Kuepper, Andres Erbsen, Jason Gross +9
Manual engineering of high-performance implementations typically consumes many resources and requires in-depth knowledge of the hardware. Compilers try to address these problems; h…
Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and ARM SoCs
Hritvik Taneja, Jason Kim, Jie Jeff Xu +3
The drive to create thinner, lighter, and more energy efficient devices has resulted in modern SoCs being forced to balance a delicate tradeoff between power consumption, heat diss…
The Impostor Among US(B): Off-Path Injection Attacks on USB Communications
Robert Dumitru, Daniel Genkin, Andrew Wabnitz +1
USB is the most prevalent peripheral interface in modern computer systems and its inherent insecurities make it an appealing attack vector. A well-known limitation of USB is that t…
CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives (full version)
Joel Kuepper, Andres Erbsen, Jason Gross +9
Most software domains rely on compilers to translate high-level code to multiple different machine languages, with performance not too much worse than what developers would have th…
CacheFX: A Framework for Evaluating Cache Security
Daniel Genkin, William Kosasih, Fangfei Liu +3
Over the last two decades, the danger of sharing resources between programs has been repeatedly highlighted. Multiple side-channel attacks, which seek to exploit shared components…
Rosita++: Automatic Higher-Order Leakage Elimination from Cryptographic Code
Madura A. Shelton, Łukasz Chmielewski, Niels Samwel +3
Side-channel attacks are a major threat to the security of cryptographic implementations, particularly for small devices that are under the physical control of the adversary. While…
SoK: Design Tools for Side-Channel-Aware Implementations
Ileana Buhan, Lejla Batina, Yuval Yarom +1
Side-channel attacks that leak sensitive information through a computing device's interaction with its physical environment have proven to be a severe threat to devices' security,…
Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses
Anatoly Shusterman, Ayush Agarwal, Sioli O'Connell +3
The "eternal war in cache" has reached browsers, with multiple cache-based side-channel attacks and countermeasures being suggested. A common approach for countermeasures is to dis…
PThammer: Cross-User-Kernel-Boundary Rowhammer through Implicit Accesses
Zhi Zhang, Yueqiang Cheng, Dongxi Liu +3
Rowhammer is a hardware vulnerability in DRAM memory, where repeated access to memory can induce bit flips in neighboring memory locations. Being a hardware vulnerability, rowhamme…
CacheOut: Leaking Data on Intel CPUs via Cache Evictions
Stephan van Schaik, Marina Minkin, Andrew Kwong +2
Recent transient-execution attacks, such as RIDL, Fallout, and ZombieLoad, demonstrated that attackers can leak information while it transits through microarchitectural buffers. Na…
Rosita: Towards Automatic Elimination of Power-Analysis Leakage in Ciphers
Madura A Shelton, Niels Samwel, Lejla Batina +3
Since their introduction over two decades ago, side-channel attacks have presented a serious security threat. While many ciphers' implementations employ masking techniques to prote…
Fallout: Reading Kernel Writes From User Space
Marina Minkin, Daniel Moghimi, Moritz Lipp +7
Recently, out-of-order execution, an important performance optimization in modern high-end processors, has been revealed to pose a significant security threat, allowing information…
Robust Website Fingerprinting Through the Cache Occupancy Channel
Anatoly Shusterman, Lachlan Kang, Yarden Haskal +4
Website fingerprinting attacks, which use statistical analysis on network traffic to compromise user privacy, have been shown to be effective even if the traffic is sent over anony…