CV
Lukas Lamster
Summary
PhD student at the Institute of Information Security (ISEC), Graz University of Technology. Security researcher focusing on improving runtime security through novel hardware-based mechanisms, in particular the combination of memory integrity protection with tagged memory architectures.
Education
- PhD in Computer ScienceGraz University of Technology
- MSc in Information and Computer Engineering2021Graz University of Technology
- BSc in Information and Computer Engineering2019Graz University of Technology
Work Experience
- Doctoral Researcher2022-03-01 -Institute of Information Security (ISEC), Graz University of TechnologyExploring combinations of DRAM integrity protection and memory tagging; developing novel hardware-based runtime security mechanisms.
- Exploring combinations of DRAM integrity protection and memory tagging
- Developing novel hardware-based runtime security mechanisms
- Multiple contributions towards memory safety, efficient memory tagging, and DRAM integrity protection schemes
- Software Development Intern2026-03-01 - 2026-06-30CloudflareLisbon, Portugal
- Researching Rowhammer on large-scale computing infrastructure
- Researching side channels and timers in Worker and Container products
- Research Intern2019-07-01 - 2019-09-30Institute of Information Security (ISEC), Graz University of TechnologySummer internship
- Improving the reverse engineering of processor-specific DRAM mapping functions
- Software Engineer2018-01-01 - 2020-12-31AVLGraz, Austria
- Jira plugin development
- Developing compatibility layers for internal tooling
- Software Engineer2016-01-01 - 2017-12-31Melecs EWSSiegendorf, Austria
- Development of drivers for assembly line equipment
- Quality assurance tool development
Skills
Programming
- C
- C++
- C#
- Python
- x86-64 assembly
- RISC-V assembly
- SystemVerilog
Tools
- git
- gdb
- pwndbg
- Docker
- LLM-assisted development
- Ghidra
Projects
- Linux kernel development
- gem5 development
- qemu
- Spike RISC-V ISA Simulator
- OpenSBI
Publications
- Implicit Control-Flow Integrity: Efficient Runtime Security for Embedded Devices2026Annual Computer Security Applications Conference (ACSAC 2026), to appearLorenz Schumm, Lukas Lamster, Erik Kraft, Marcel Medwed, and Stefan Mangard
- Code Encryption with Intel TME-MK for Control-Flow Enforcement2025European Symposium on Research in Computer Security (ESORICS 2025)Martin Unterguggenberger, Lukas Lamster, Mathias Oberhuber, Simon Scherer, and Stefan Mangard
- WaitWatcher and WaitGuard: Detecting Flush-Based Cache Side-Channels Through Spurious Wakeups2025European Symposium on Research in Computer Security (ESORICS 2025)Lukas Lamster, Fabian Rauscher, Martin Unterguggenberger, and Stefan Mangard
- FatPTE: Expanding Page Table Entries for Security2025International Conference on Availability, Reliability and Security (ARES 2025)Lukas Lamster, Martin Unterguggenberger, Moritz Waser, David Schrammel, and Stefan Mangard
- CHERI UNCHAINED: Generic Instruction and Register Control for CHERI Capabilities2025International Conference on Availability, Reliability and Security (ARES 2025)Moritz Waser, Lukas Lamster, David Schrammel, Martin Unterguggenberger, and Stefan Mangard
- Cryptographic Least Privilege Enforcement for Scalable Memory Isolation2025IEEE International Symposium on Hardware Oriented Security and Trust (HOST 2025)Martin Unterguggenberger, David Schrammel, Lukas Maar, Lukas Lamster, Vedad Hadžić, and Stefan Mangard
- TME-Box: Scalable In-Process Isolation through Intel TME-MK Memory Encryption2025Network and Distributed System Security Symposium (NDSS 2025)Martin Unterguggenberger, Lukas Lamster, David Schrammel, Martin Schwarzl, and Stefan Mangard
- Defects-in-Depth: Analyzing the Integration of Effective Defenses against One-Day Exploits in Android Kernels202433rd USENIX Security Symposium (USENIX Security 2024)Lukas Maar, Florian Draschbacher, Lukas Lamster, and Stefan Mangard
- Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC202433rd USENIX Security Symposium (USENIX Security 2024)Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard
- Memory Tagging using Cryptographic Integrity on Commodity x86 CPUs2024IEEE European Symposium on Security and Privacy (EuroS&P 2024)David Schrammel, Martin Unterguggenberger, Lukas Lamster, Salmin Sultana, Karanvir Grewal, Michael LeMay, David M. Durham, and Stefan Mangard
- Cryptographically Enforced Memory Safety2023ACM SIGSAC Conference on Computer and Communications Security (CCS 2023)Martin Unterguggenberger, David Schrammel, Lukas Lamster, Pascal Nasahl, and Stefan Mangard
- HashTag: Hash-based Integrity Protection for Tagged Architectures202332nd USENIX Security Symposium (USENIX Security 2023)Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard
- SPEAR-V: Secure and Practical Enclave Architecture for RISC-V2023ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023)David Schrammel, Moritz Waser, Lukas Lamster, Martin Unterguggenberger, and Stefan Mangard
- Multi-Tag: A Hardware-Software Co-Design for Memory Safety Based on Multi-Granular Memory Tagging2023ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023)Martin Unterguggenberger, David Schrammel, Pascal Nasahl, Robert Schilling, Lukas Lamster, and Stefan Mangard
- CSI:Rowhammer – Cryptographic Security and Integrity against Rowhammer2023IEEE Symposium on Security and Privacy (S&P 2023)Jonas Juffinger, Lukas Lamster, Andreas Kogler, Maria Eichlseder, Moritz Lipp, and Daniel Gruss
- A Signature-Based Gröbner Basis Algorithm with Tail-Reduced Reductors (M5GB)2022arXiv preprint arXiv:2208.00844Manuel Hauke, Lukas Lamster, Reinhard Lüftenegger, and Christian Rechberger
- Nethammer: Inducing Rowhammer Faults through Network Requests2020IEEE European Symposium on Security and Privacy Workshops (EuroS&PW 2020)Moritz Lipp, Michael Schwarz, Lukas Raab, Lukas Lamster, Misiker Tadesse Aga, Clémentine Maurice, and Daniel Gruss
Presentations
- WaitWatcher & WaitGuard: Detecting Flush-Based Cache Side-Channels Through Spurious Wakeups202530th European Symposium on Research in Computer Security (ESORICS 2025)Toulouse, FrancePaper presentation
- FatPTE: Expanding Page Table Entries for Security202520th International Conference on Availability, Reliability and Security (ARES 2025)Ghent, BelgiumPaper presentation
- Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC202433rd USENIX Security Symposium (USENIX Security 2024)Philadelphia, PA, USAPaper presentation
- HashTag: Hash-based Integrity Protection for Tagged Architectures202332nd USENIX Security Symposium (USENIX Security 2023)Anaheim, CA, USAPaper presentation
Teaching
- Secure System Architecture (Lecture and Practicals)2025Graz University of TechnologyRole: Lecturer and Teaching AssistantApprox. 40 students per year; memory tagging, pointer authentication, trusted computing, confidential virtual machines.
- Information Security (Practicals)2022Graz University of TechnologyRole: Teaching AssistantApprox. 400 students per year; system security part with CTF-style binary exploitation tasks.
- Computer Organization and Networks (Practicals)2022Graz University of TechnologyRole: Teaching AssistantApprox. 500 students per year; SystemVerilog hardware design, state machines, hardware extensions, RISC-V assembly.
Languages
- GermanNative speaker
- EnglishFluent
Interests
- Hardware-based runtime securitymemory tagging, DRAM integrity protection, memory safety, Rowhammer, side channels