Lukas Lamster

Lukas Lamster

PhD student at the Institute of Information Security (ISEC). Hardware-based runtime security, memory tagging, and DRAM integrity protection.

Sitemap

A list of all the posts and pages found on the site. For you robots out there, there is an XML version available for digesting as well.

Pages

Posts

portfolio

publications

Nethammer: Inducing Rowhammer Faults through Network Requests

Published in IEEE European Symposium on Security and Privacy Workshops (EuroS&PW 2020), 2020

Recommended citation: Moritz Lipp, Michael Schwarz, Lukas Raab, Lukas Lamster, Misiker Tadesse Aga, Clémentine Maurice, and Daniel Gruss. (2020). "Nethammer: Inducing Rowhammer Faults through Network Requests." In IEEE European Symposium on Security and Privacy Workshops (EuroS&PW 2020).
Download Paper

CSI:Rowhammer – Cryptographic Security and Integrity against Rowhammer

Published in IEEE Symposium on Security and Privacy (S&P 2023), 2023

Protecting DRAM data integrity with MACs allows the detection of virtually all bit flips. An iterative correction procedure enables error recovery.

Recommended citation: Jonas Juffinger, Lukas Lamster, Andreas Kogler, Maria Eichlseder, Moritz Lipp, and Daniel Gruss. (2023). "CSI:Rowhammer – Cryptographic Security and Integrity against Rowhammer." In IEEE Symposium on Security and Privacy (S&P 2023).
Download Paper

Multi-Tag: A Hardware-Software Co-Design for Memory Safety Based on Multi-Granular Memory Tagging

Published in ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023), 2023

Recommended citation: Martin Unterguggenberger, David Schrammel, Pascal Nasahl, Robert Schilling, Lukas Lamster, and Stefan Mangard. (2023). "Multi-Tag: A Hardware-Software Co-Design for Memory Safety Based on Multi-Granular Memory Tagging." In ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023).
Download Paper

SPEAR-V: Secure and Practical Enclave Architecture for RISC-V

Published in ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023), 2023

Recommended citation: David Schrammel, Moritz Waser, Lukas Lamster, Martin Unterguggenberger, and Stefan Mangard. (2023). "SPEAR-V: Secure and Practical Enclave Architecture for RISC-V." In ACM ASIA Conference on Computer and Communications Security (AsiaCCS 2023).
Download Paper

HashTag: Hash-based Integrity Protection for Tagged Architectures

Published in 32nd USENIX Security Symposium (USENIX Security 2023), 2023

Replacing linear codes with hashes allows us to implement tagged memory without additional fetches or a carve-out region.

Recommended citation: Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard. (2023). "HashTag: Hash-based Integrity Protection for Tagged Architectures." In 32nd USENIX Security Symposium (USENIX Security 2023).
Download Paper | Download Slides

Cryptographically Enforced Memory Safety

Published in ACM SIGSAC Conference on Computer and Communications Security (CCS 2023), 2023

Recommended citation: Martin Unterguggenberger, David Schrammel, Lukas Lamster, Pascal Nasahl, and Stefan Mangard. (2023). "Cryptographically Enforced Memory Safety." In ACM SIGSAC Conference on Computer and Communications Security (CCS 2023).
Download Paper

Memory Tagging using Cryptographic Integrity on Commodity x86 CPUs

Published in IEEE European Symposium on Security and Privacy (EuroS&P 2024), 2024

Recommended citation: David Schrammel, Martin Unterguggenberger, Lukas Lamster, Salmin Sultana, Karanvir Grewal, Michael LeMay, David M. Durham, and Stefan Mangard. (2024). "Memory Tagging using Cryptographic Integrity on Commodity x86 CPUs." In IEEE European Symposium on Security and Privacy (EuroS&P 2024).
Download Paper

Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC

Published in 33rd USENIX Security Symposium (USENIX Security 2024), 2024

Voodoo extends the MAGIC mode with memory tagging without additional storage overheads.

Recommended citation: Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard. (2024). "Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC." In 33rd USENIX Security Symposium (USENIX Security 2024).
Download Paper | Download Slides

TME-Box: Scalable In-Process Isolation through Intel TME-MK Memory Encryption

Published in Network and Distributed System Security Symposium (NDSS 2025), 2025

TME-MK encryption keys are repurposed to isolate in-process sandboxes at low overhead.

Recommended citation: Martin Unterguggenberger, Lukas Lamster, David Schrammel, Martin Schwarzl, and Stefan Mangard. (2025). "TME-Box: Scalable In-Process Isolation through Intel TME-MK Memory Encryption." In Network and Distributed System Security Symposium (NDSS 2025).
Download Paper

Cryptographic Least Privilege Enforcement for Scalable Memory Isolation

Published in IEEE International Symposium on Hardware Oriented Security and Trust (HOST 2025), 2025

Recommended citation: Martin Unterguggenberger, David Schrammel, Lukas Maar, Lukas Lamster, Vedad Hadžić, and Stefan Mangard. (2025). "Cryptographic Least Privilege Enforcement for Scalable Memory Isolation." In IEEE International Symposium on Hardware Oriented Security and Trust (HOST 2025).
Download Paper

CHERI UNCHAINED: Generic Instruction and Register Control for CHERI Capabilities

Published in International Conference on Availability, Reliability and Security (ARES 2025), 2025

Recommended citation: Moritz Waser, Lukas Lamster, David Schrammel, Martin Unterguggenberger, and Stefan Mangard. (2025). "CHERI UNCHAINED: Generic Instruction and Register Control for CHERI Capabilities." In International Conference on Availability, Reliability and Security (ARES 2025).
Download Paper

FatPTE: Expanding Page Table Entries for Security

Published in International Conference on Availability, Reliability and Security (ARES 2025), 2025

Widening page table entries creates room for security metadata without changing the address-translation scheme.

Recommended citation: Lukas Lamster, Martin Unterguggenberger, Moritz Waser, David Schrammel, and Stefan Mangard. (2025). "FatPTE: Expanding Page Table Entries for Security." In International Conference on Availability, Reliability and Security (ARES 2025).
Download Paper | Download Slides

Code Encryption with Intel TME-MK for Control-Flow Enforcement

Published in European Symposium on Research in Computer Security (ESORICS 2025), 2025

Recommended citation: Martin Unterguggenberger, Lukas Lamster, Mathias Oberhuber, Simon Scherer, and Stefan Mangard. (2025). "Code Encryption with Intel TME-MK for Control-Flow Enforcement." In European Symposium on Research in Computer Security (ESORICS 2025).
Download Paper

WaitWatcher and WaitGuard: Detecting Flush-Based Cache Side-Channels Through Spurious Wakeups

Published in European Symposium on Research in Computer Security (ESORICS 2025), 2025

Spurious wakeups of waiting instructions reveal flush-based cache side channels and allow mitigating them.

Recommended citation: Lukas Lamster, Fabian Rauscher, Martin Unterguggenberger, and Stefan Mangard. (2025). "WaitWatcher and WaitGuard: Detecting Flush-Based Cache Side-Channels Through Spurious Wakeups." In European Symposium on Research in Computer Security (ESORICS 2025).
Download Paper | Download Slides

Implicit Control-Flow Integrity: Efficient Runtime Security for Embedded Devices

Published in Annual Computer Security Applications Conference (ACSAC 2026), to appear, 2026

Recommended citation: Lorenz Schumm, Lukas Lamster, Erik Kraft, Marcel Medwed, and Stefan Mangard. (2026). "Implicit Control-Flow Integrity: Efficient Runtime Security for Embedded Devices." In Annual Computer Security Applications Conference (ACSAC 2026), to appear.

talks

teaching

Computer Organization and Networks

Practicals, Graz University of Technology, Institute of Information Security, 2022

Teaching assistant since 2022. Introductory computer organization course for Bachelor’s students, teaching approx. 500 students per year. Course contents cover hardware design in SystemVerilog, designing and implementing state machines, integrating extensions into existing hardware designs, and RISC-V assembly.

Information Security

Practicals, Graz University of Technology, Institute of Information Security, 2022

Teaching assistant since 2022. Introductory information security course, teaching approx. 400 students per year. My focus is on the system security part, which consists of CTF-style binary exploitation tasks.

Secure System Architecture

Lecture and practicals, Graz University of Technology, Institute of Information Security, 2025

Lecturer and teaching assistant since 2025. Lectures, practical sessions, and grading for approx. 40 students per year. We cover topics ranging from memory tagging and pointer authentication to trusted computing and confidential virtual machines.