Published in Annual Computer Security Applications Conference (ACSAC 2026), to appear, 2026
Recommended citation: Lorenz Schumm, Lukas Lamster, Erik Kraft, Marcel Medwed, and Stefan Mangard. (2026). "Implicit Control-Flow Integrity: Efficient Runtime Security for Embedded Devices." In Annual Computer Security Applications Conference (ACSAC 2026), to appear.
Published in European Symposium on Research in Computer Security (ESORICS 2025), 2025
Spurious wakeups of waiting instructions reveal flush-based cache side channels and allow mitigating them.
Recommended citation: Lukas Lamster, Fabian Rauscher, Martin Unterguggenberger, and Stefan Mangard. (2025). "WaitWatcher and WaitGuard: Detecting Flush-Based Cache Side-Channels Through Spurious Wakeups." In European Symposium on Research in Computer Security (ESORICS 2025).
Download Paper | Download Slides
Published in European Symposium on Research in Computer Security (ESORICS 2025), 2025
Recommended citation: Martin Unterguggenberger, Lukas Lamster, Mathias Oberhuber, Simon Scherer, and Stefan Mangard. (2025). "Code Encryption with Intel TME-MK for Control-Flow Enforcement." In European Symposium on Research in Computer Security (ESORICS 2025).
Download Paper
Published in International Conference on Availability, Reliability and Security (ARES 2025), 2025
Widening page table entries creates room for security metadata without changing the address-translation scheme.
Recommended citation: Lukas Lamster, Martin Unterguggenberger, Moritz Waser, David Schrammel, and Stefan Mangard. (2025). "FatPTE: Expanding Page Table Entries for Security." In International Conference on Availability, Reliability and Security (ARES 2025).
Download Paper | Download Slides
Published in International Conference on Availability, Reliability and Security (ARES 2025), 2025
Recommended citation: Moritz Waser, Lukas Lamster, David Schrammel, Martin Unterguggenberger, and Stefan Mangard. (2025). "CHERI UNCHAINED: Generic Instruction and Register Control for CHERI Capabilities." In International Conference on Availability, Reliability and Security (ARES 2025).
Download Paper
Published in IEEE International Symposium on Hardware Oriented Security and Trust (HOST 2025), 2025
Recommended citation: Martin Unterguggenberger, David Schrammel, Lukas Maar, Lukas Lamster, Vedad Hadžić, and Stefan Mangard. (2025). "Cryptographic Least Privilege Enforcement for Scalable Memory Isolation." In IEEE International Symposium on Hardware Oriented Security and Trust (HOST 2025).
Download Paper
Published in Network and Distributed System Security Symposium (NDSS 2025), 2025
TME-MK encryption keys are repurposed to isolate in-process sandboxes at low overhead.
Recommended citation: Martin Unterguggenberger, Lukas Lamster, David Schrammel, Martin Schwarzl, and Stefan Mangard. (2025). "TME-Box: Scalable In-Process Isolation through Intel TME-MK Memory Encryption." In Network and Distributed System Security Symposium (NDSS 2025).
Download Paper
Published in 33rd USENIX Security Symposium (USENIX Security 2024), 2024
Voodoo extends the MAGIC mode with memory tagging without additional storage overheads.
Recommended citation: Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard. (2024). "Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC." In 33rd USENIX Security Symposium (USENIX Security 2024).
Download Paper | Download Slides
Published in 33rd USENIX Security Symposium (USENIX Security 2024), 2024
Recommended citation: Lukas Maar, Florian Draschbacher, Lukas Lamster, and Stefan Mangard. (2024). "Defects-in-Depth: Analyzing the Integration of Effective Defenses against One-Day Exploits in Android Kernels." In 33rd USENIX Security Symposium (USENIX Security 2024).
Download Paper
Published in IEEE European Symposium on Security and Privacy (EuroS&P 2024), 2024
Recommended citation: David Schrammel, Martin Unterguggenberger, Lukas Lamster, Salmin Sultana, Karanvir Grewal, Michael LeMay, David M. Durham, and Stefan Mangard. (2024). "Memory Tagging using Cryptographic Integrity on Commodity x86 CPUs." In IEEE European Symposium on Security and Privacy (EuroS&P 2024).
Download Paper
Published in ACM SIGSAC Conference on Computer and Communications Security (CCS 2023), 2023
Recommended citation: Martin Unterguggenberger, David Schrammel, Lukas Lamster, Pascal Nasahl, and Stefan Mangard. (2023). "Cryptographically Enforced Memory Safety." In ACM SIGSAC Conference on Computer and Communications Security (CCS 2023).
Download Paper
Published in 32nd USENIX Security Symposium (USENIX Security 2023), 2023
Replacing linear codes with hashes allows us to implement tagged memory without additional fetches or a carve-out region.
Recommended citation: Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard. (2023). "HashTag: Hash-based Integrity Protection for Tagged Architectures." In 32nd USENIX Security Symposium (USENIX Security 2023).
Download Paper | Download Slides
Published in ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023), 2023
Recommended citation: David Schrammel, Moritz Waser, Lukas Lamster, Martin Unterguggenberger, and Stefan Mangard. (2023). "SPEAR-V: Secure and Practical Enclave Architecture for RISC-V." In ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023).
Download Paper
Published in ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023), 2023
Recommended citation: Martin Unterguggenberger, David Schrammel, Pascal Nasahl, Robert Schilling, Lukas Lamster, and Stefan Mangard. (2023). "Multi-Tag: A Hardware-Software Co-Design for Memory Safety Based on Multi-Granular Memory Tagging." In ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023).
Download Paper
Published in IEEE Symposium on Security and Privacy (S&P 2023), 2023
Protecting DRAM data integrity with MACs allows the detection of virtually all bit flips. An iterative correction procedure enables error recovery.
Recommended citation: Jonas Juffinger, Lukas Lamster, Andreas Kogler, Maria Eichlseder, Moritz Lipp, and Daniel Gruss. (2023). "CSI:Rowhammer – Cryptographic Security and Integrity against Rowhammer." In IEEE Symposium on Security and Privacy (S&P 2023).
Download Paper
Published in IEEE European Symposium on Security and Privacy Workshops (EuroS&PW 2020), 2020
Recommended citation: Moritz Lipp, Michael Schwarz, Lukas Raab, Lukas Lamster, Misiker Tadesse Aga, Clémentine Maurice, and Daniel Gruss. (2020). "Nethammer: Inducing Rowhammer Faults through Network Requests." In IEEE European Symposium on Security and Privacy Workshops (EuroS&PW 2020).
Download Paper