Happy to share that both our @EuroSecWorkshop papers got accepted!
Congrats to Jonas and Anton for producing such great research so early in their PhD.
See you in Rotterdam! Also for @EuroSysConf and @ASPLOSConf after :)
📜: https://t.co/z1XiE4ddXh
📜: https://t.co/V9aXH4VqRV
Our paper with @HansWinderix, @LeslyAnnDaniel1, and Frank Piessens received the distinguished paper award at @acm_ccs!
If you are interested in mitigating control-flow leakage, read the paper https://t.co/NW8PnWAGYK and check out the repository https://t.co/KPFpqNLNNL
We show that many types of bounds checkers are affected (pointer/object-based, spatial/temporal), and that the attack is realistic in real-world code.
In essence, we find that bounds checking is simply not compatible with store-only instrumentation.
In our latest @wootsecurity paper, @StijnVolckaert and I demonstrate a fundamental weakness of store-only bounds checkers: invalidly-loaded pointers (through unchecked reads) give the attacker a near-arbitrary write primitive!
paper: https://t.co/lems5nHWUa
Glad to share our recent work on lazypoline, accepted at @DsnIeee'24! Thanks to Merve Gülmez, Alicia Andries, @StijnVolckaert, and @systemsgreek for the collaboration.
paper: https://t.co/CVdVenFBOs
code: https://t.co/v9YXis6kVn