CV

Download the CV as PDF

Education

• PhD in Computer Science, Graz University of Technology, March 2022 – present (expected spring 2027)
  • Advisor: Prof. Stefan Mangard
• MSc in Information and Computer Engineering, Graz University of Technology, 2019 – 2021
  • Thesis: DRAM Integrity Protection with Efficient Low-Latency Cryptographic Primitives
  • Student Research Excellence Award, WKO Research Stipend
  • Graduated with distinction
• BSc in Information and Computer Engineering, Graz University of Technology, 2015 – 2019
  • Thesis: From Rowhammer to Nethammer – Utilizing Intel CAT to Remotely Induce Bit Flips
  • Student Research Excellence Award
  • Graduated with distinction

Research experience

• March 2022 – present: Doctoral Researcher
  • Institute of Information Security (ISEC), Graz University of Technology
  • Exploring combinations of DRAM integrity protection and memory tagging
  • Developing novel hardware-based runtime security mechanisms
  • Multiple contributions towards memory safety, efficient memory tagging, and DRAM integrity protection schemes
• Summer 2019: Research Intern
  • Institute of Information Security (ISEC), Graz University of Technology
  • Improving the reverse engineering of processor-specific DRAM mapping functions

Work experience

• March – June 2026: Software Development Intern, Cloudflare, Lisbon, Portugal
  • Researching Rowhammer on large-scale computing infrastructure
  • Researching side channels and timers in Worker and Container products
• 2018 – 2020: Software Engineer, AVL, Graz, Austria
  • Jira plugin development
  • Developing compatibility layers for internal tooling
• 2016 – 2017: Software Engineer, Melecs EWS, Siegendorf, Austria
  • Development of drivers for assembly line equipment
  • Quality assurance tool development

Awards

• 2025: Distinguished Artifact Reviewer Award, USENIX Security 2025
• 2021: WKO Research Stipend, Master’s Thesis (WKO)
• 2021: Student Research Excellence Award, Master’s Thesis (ISEC)
• 2019: Student Research Excellence Award, Bachelor’s Thesis (ISEC)

Skills

• Programming: C, C++, C#, Python, x86-64 assembly, RISC-V assembly, SystemVerilog
• Tools: git, gdb, pwndbg, Docker, LLM-assisted development, Ghidra
• Projects: Linux kernel development, gem5 development, qemu, Spike RISC-V ISA Simulator, OpenSBI
• Languages: German (native), English (fluent)

Publications

Implicit Control-Flow Integrity: Efficient Runtime Security for Embedded Devices

Lorenz Schumm, Lukas Lamster, Erik Kraft, Marcel Medwed, and Stefan Mangard. (2026). "Implicit Control-Flow Integrity: Efficient Runtime Security for Embedded Devices." In Annual Computer Security Applications Conference (ACSAC 2026), to appear.

WaitWatcher and WaitGuard: Detecting Flush-Based Cache Side-Channels Through Spurious Wakeups

Lukas Lamster, Fabian Rauscher, Martin Unterguggenberger, and Stefan Mangard. (2025). "WaitWatcher and WaitGuard: Detecting Flush-Based Cache Side-Channels Through Spurious Wakeups." In European Symposium on Research in Computer Security (ESORICS 2025).

Code Encryption with Intel TME-MK for Control-Flow Enforcement

Martin Unterguggenberger, Lukas Lamster, Mathias Oberhuber, Simon Scherer, and Stefan Mangard. (2025). "Code Encryption with Intel TME-MK for Control-Flow Enforcement." In European Symposium on Research in Computer Security (ESORICS 2025).

FatPTE: Expanding Page Table Entries for Security

Lukas Lamster, Martin Unterguggenberger, Moritz Waser, David Schrammel, and Stefan Mangard. (2025). "FatPTE: Expanding Page Table Entries for Security." In International Conference on Availability, Reliability and Security (ARES 2025).

CHERI UNCHAINED: Generic Instruction and Register Control for CHERI Capabilities

Moritz Waser, Lukas Lamster, David Schrammel, Martin Unterguggenberger, and Stefan Mangard. (2025). "CHERI UNCHAINED: Generic Instruction and Register Control for CHERI Capabilities." In International Conference on Availability, Reliability and Security (ARES 2025).

Cryptographic Least Privilege Enforcement for Scalable Memory Isolation

Martin Unterguggenberger, David Schrammel, Lukas Maar, Lukas Lamster, Vedad Hadžić, and Stefan Mangard. (2025). "Cryptographic Least Privilege Enforcement for Scalable Memory Isolation." In IEEE International Symposium on Hardware Oriented Security and Trust (HOST 2025).

TME-Box: Scalable In-Process Isolation through Intel TME-MK Memory Encryption

Martin Unterguggenberger, Lukas Lamster, David Schrammel, Martin Schwarzl, and Stefan Mangard. (2025). "TME-Box: Scalable In-Process Isolation through Intel TME-MK Memory Encryption." In Network and Distributed System Security Symposium (NDSS 2025).

Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC

Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard. (2024). "Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC." In 33rd USENIX Security Symposium (USENIX Security 2024).

Defects-in-Depth: Analyzing the Integration of Effective Defenses against One-Day Exploits in Android Kernels

Lukas Maar, Florian Draschbacher, Lukas Lamster, and Stefan Mangard. (2024). "Defects-in-Depth: Analyzing the Integration of Effective Defenses against One-Day Exploits in Android Kernels." In 33rd USENIX Security Symposium (USENIX Security 2024).

Memory Tagging using Cryptographic Integrity on Commodity x86 CPUs

David Schrammel, Martin Unterguggenberger, Lukas Lamster, Salmin Sultana, Karanvir Grewal, Michael LeMay, David M. Durham, and Stefan Mangard. (2024). "Memory Tagging using Cryptographic Integrity on Commodity x86 CPUs." In IEEE European Symposium on Security and Privacy (EuroS&P 2024).

Cryptographically Enforced Memory Safety

Martin Unterguggenberger, David Schrammel, Lukas Lamster, Pascal Nasahl, and Stefan Mangard. (2023). "Cryptographically Enforced Memory Safety." In ACM SIGSAC Conference on Computer and Communications Security (CCS 2023).

HashTag: Hash-based Integrity Protection for Tagged Architectures

Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard. (2023). "HashTag: Hash-based Integrity Protection for Tagged Architectures." In 32nd USENIX Security Symposium (USENIX Security 2023).

SPEAR-V: Secure and Practical Enclave Architecture for RISC-V

David Schrammel, Moritz Waser, Lukas Lamster, Martin Unterguggenberger, and Stefan Mangard. (2023). "SPEAR-V: Secure and Practical Enclave Architecture for RISC-V." In ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023).

Multi-Tag: A Hardware-Software Co-Design for Memory Safety Based on Multi-Granular Memory Tagging

Martin Unterguggenberger, David Schrammel, Pascal Nasahl, Robert Schilling, Lukas Lamster, and Stefan Mangard. (2023). "Multi-Tag: A Hardware-Software Co-Design for Memory Safety Based on Multi-Granular Memory Tagging." In ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023).

CSI:Rowhammer – Cryptographic Security and Integrity against Rowhammer

Jonas Juffinger, Lukas Lamster, Andreas Kogler, Maria Eichlseder, Moritz Lipp, and Daniel Gruss. (2023). "CSI:Rowhammer – Cryptographic Security and Integrity against Rowhammer." In IEEE Symposium on Security and Privacy (S&P 2023).

A Signature-Based Gröbner Basis Algorithm with Tail-Reduced Reductors (M5GB)

Manuel Hauke, Lukas Lamster, Reinhard Lüftenegger, and Christian Rechberger. (2022). "A Signature-Based Gröbner Basis Algorithm with Tail-Reduced Reductors (M5GB)." In arXiv preprint arXiv:2208.00844.

Nethammer: Inducing Rowhammer Faults through Network Requests

Moritz Lipp, Michael Schwarz, Lukas Raab, Lukas Lamster, Misiker Tadesse Aga, Clémentine Maurice, and Daniel Gruss. (2020). "Nethammer: Inducing Rowhammer Faults through Network Requests." In IEEE European Symposium on Security and Privacy Workshops (EuroS&PW 2020).

Talks

WaitWatcher & WaitGuard: Detecting Flush-Based Cache Side-Channels Through Spurious Wakeups

September 22, 2025

Conference talk at 30th European Symposium on Research in Computer Security (ESORICS 2025), Toulouse, France

FatPTE: Expanding Page Table Entries for Security

August 11, 2025

Conference talk at 20th International Conference on Availability, Reliability and Security (ARES 2025), Ghent, Belgium

Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC

August 14, 2024

Conference talk at 33rd USENIX Security Symposium (USENIX Security 2024), Philadelphia, PA, USA

HashTag: Hash-based Integrity Protection for Tagged Architectures

August 09, 2023

Conference talk at 32nd USENIX Security Symposium (USENIX Security 2023), Anaheim, CA, USA

Teaching

• 2025 – present: Secure System Architecture, Lecture and Practicals, Graz University of Technology
  • Lectures, practical sessions, and grading for approx. 40 students per year
  • Topics range from memory tagging and pointer authentication to trusted computing and confidential virtual machines
• 2022 – present: Information Security, Practicals, Graz University of Technology
  • Introductory information security course, approx. 400 students per year
  • Focus on the system security part, which consists of CTF-style binary exploitation tasks
• 2022 – present: Computer Organization and Networks, Practicals, Graz University of Technology
  • Introductory computer organization course for Bachelor’s students, approx. 500 students per year
  • Hardware design in SystemVerilog, state machines, integrating extensions into existing hardware designs, and RISC-V assembly