Milesan (CCS 2025 /publications/2025-03-02-milesan/)
Detecting Exploitable Microarchitectural Leakage via Differential Hardware-Software Taint Tracking.
Publications by Tags
ccs
𝜇CFI (CCS 2024 /publications/2024-02-02-ucfi/)
Formal Verification of Microarchitectural Control-flow Integrity.
cpu
Encarsia (USENIX Security 2025 /publications/2025-04-01-encarsia/)
Evaluating CPU Fuzzers via Automatic Bug Injection.
Milesan (CCS 2025 /publications/2025-03-02-milesan/)
Detecting Exploitable Microarchitectural Leakage via Differential Hardware-Software Taint Tracking.
Pathfinder (ICCAD 2025 /publications/2025-03-01-pathfinder/)
Constructing Cycle-accurate Taint Graphs for Analyzing Information Flow Traces
Awards: Best Paper Nominee
Cascade (USENIX Security 2024 /publications/2024-03-01-cascade/)
CPU Fuzzing via Intricate Program Generation.
𝜇CFI (CCS 2024 /publications/2024-02-02-ucfi/)
Formal Verification of Microarchitectural Control-flow Integrity.
HybriDIFT (ICCAD 2024 /publications/2024-02-01-hybridift/)
Scalable Memory-Aware Dynamic Information Flow Tracking for Hardware.
CellIFT (USENIX Security 2022 /publications/2022-03-01-cellift/)
Leveraging Cells for Scalable and Precise Dynamic Information Flow Tracking in RTL.
RemembERR (MICRO 2022 /publications/2022-02-01-rememberr/)
Leveraging Microprocessor Errata for Design Testing and Validation.
data-analysis
RemembERR (MICRO 2022 /publications/2022-02-01-rememberr/)
Leveraging Microprocessor Errata for Design Testing and Validation.
eda
Lost in Translation (USENIX Security 2025 /publications/2025-05-01-mirtl/)
Enabling Confused Deputy Attacks on EDA Software with TransFuzz.
formal-verification
𝜇CFI (CCS 2024 /publications/2024-02-02-ucfi/)
Formal Verification of Microarchitectural Control-flow Integrity.
fuzzing
Lost in Translation (USENIX Security 2025 /publications/2025-05-01-mirtl/)
Enabling Confused Deputy Attacks on EDA Software with TransFuzz.
Encarsia (USENIX Security 2025 /publications/2025-04-01-encarsia/)
Evaluating CPU Fuzzers via Automatic Bug Injection.
Milesan (CCS 2025 /publications/2025-03-02-milesan/)
Detecting Exploitable Microarchitectural Leakage via Differential Hardware-Software Taint Tracking.
Cascade (USENIX Security 2024 /publications/2024-03-01-cascade/)
CPU Fuzzing via Intricate Program Generation.
iccad
Pathfinder (ICCAD 2025 /publications/2025-03-01-pathfinder/)
Constructing Cycle-accurate Taint Graphs for Analyzing Information Flow Traces
Awards: Best Paper Nominee
HybriDIFT (ICCAD 2024 /publications/2024-02-01-hybridift/)
Scalable Memory-Aware Dynamic Information Flow Tracking for Hardware.
ieee-sp
Enter, Exit, Page Fault, Leak! (IEEE S&P 2026 /publications/2025-07-30-enterexit/)
Testing Isolation Boundaries for Microarchitectural Leaks.
REGA (IEEE S&P (Oakland) 2023 /publications/2023-01-01-rega/)
Scalable Rowhammer Mitigation with Refresh-Generating Activations.
ProTRR (IEEE S&P (Oakland) 2022 /publications/2022-01-01-protrr/)
Principled yet Optimal In-DRAM Target Row Refresh.
Awards: ETH Spark Award Nomination, CSAW Europe finalist
ift
Milesan (CCS 2025 /publications/2025-03-02-milesan/)
Detecting Exploitable Microarchitectural Leakage via Differential Hardware-Software Taint Tracking.
CellIFT (USENIX Security 2022 /publications/2022-03-01-cellift/)
Leveraging Cells for Scalable and Precise Dynamic Information Flow Tracking in RTL.
information-flow-tracking
HybriDIFT (ICCAD 2024 /publications/2024-02-01-hybridift/)
Scalable Memory-Aware Dynamic Information Flow Tracking for Hardware.
isca
HiFi-DRAM (ISCA 2024 /publications/2024-11-01-hifidram/)
Enabling High-fidelity DRAM Research by Uncovering Sense Amplifiers with IC Imaging.
Awards: Best Paper Nominee
isolation
Enter, Exit, Page Fault, Leak! (IEEE S&P 2026 /publications/2025-07-30-enterexit/)
Testing Isolation Boundaries for Microarchitectural Leaks.
micro
RemembERR (MICRO 2022 /publications/2022-02-01-rememberr/)
Leveraging Microprocessor Errata for Design Testing and Validation.
microarchitectural-leaks
Enter, Exit, Page Fault, Leak! (IEEE S&P 2026 /publications/2025-07-30-enterexit/)
Testing Isolation Boundaries for Microarchitectural Leaks.
Milesan (CCS 2025 /publications/2025-03-02-milesan/)
Detecting Exploitable Microarchitectural Leakage via Differential Hardware-Software Taint Tracking.
networks
HB-MAC (IEEE Access 2020 /publications/2020-02-01-hbmac/)
Efficient Heartbeat-Based MAC Protocol for WBAN Employing Body Coupled Communication.
HB-Sync (ISCAS 2020 /publications/2020-01-01-hbsync/)
Modeling and Analysis of a Heartbeat-Based Synchronization Scheme for the Human Intranet.
rowhammer
McSee (USENIX Security 2025 /publications/2025-06-01-mcsee/)
Evaluating Advanced Rowhammer Attacks and Defenses via Automated DRAM Traffic Analysis.
HiFi-DRAM (ISCA 2024 /publications/2024-11-01-hifidram/)
Enabling High-fidelity DRAM Research by Uncovering Sense Amplifiers with IC Imaging.
Awards: Best Paper Nominee
ZenHammer (USENIX Security 2024 /publications/2024-10-01-zenhammer/)
Rowhammer Attacks on AMD Zen-based Platforms.
REGA (IEEE S&P (Oakland) 2023 /publications/2023-01-01-rega/)
Scalable Rowhammer Mitigation with Refresh-Generating Activations.
ProTRR (IEEE S&P (Oakland) 2022 /publications/2022-01-01-protrr/)
Principled yet Optimal In-DRAM Target Row Refresh.
Awards: ETH Spark Award Nomination, CSAW Europe finalist
speculative-execution
Enter, Exit, Page Fault, Leak! (IEEE S&P 2026 /publications/2025-07-30-enterexit/)
Testing Isolation Boundaries for Microarchitectural Leaks.
usenix-security
McSee (USENIX Security 2025 /publications/2025-06-01-mcsee/)
Evaluating Advanced Rowhammer Attacks and Defenses via Automated DRAM Traffic Analysis.
Lost in Translation (USENIX Security 2025 /publications/2025-05-01-mirtl/)
Enabling Confused Deputy Attacks on EDA Software with TransFuzz.
Encarsia (USENIX Security 2025 /publications/2025-04-01-encarsia/)
Evaluating CPU Fuzzers via Automatic Bug Injection.
ZenHammer (USENIX Security 2024 /publications/2024-10-01-zenhammer/)
Rowhammer Attacks on AMD Zen-based Platforms.
Cascade (USENIX Security 2024 /publications/2024-03-01-cascade/)
CPU Fuzzing via Intricate Program Generation.
CellIFT (USENIX Security 2022 /publications/2022-03-01-cellift/)
Leveraging Cells for Scalable and Precise Dynamic Information Flow Tracking in RTL.
wban
HB-MAC (IEEE Access 2020 /publications/2020-02-01-hbmac/)
Efficient Heartbeat-Based MAC Protocol for WBAN Employing Body Coupled Communication.
HB-Sync (ISCAS 2020 /publications/2020-01-01-hbsync/)
Modeling and Analysis of a Heartbeat-Based Synchronization Scheme for the Human Intranet.