论文

IEEE ICCAD防御形式化验证

Inconstant: Refining Assumptions in Automated Formal Constant-Time CPU Verification

Flavien Solt and Chris Fletcher

IEEE/ACM ISCA攻击模糊测试与验证

HartBreaker: Deterministic Fuzzing of Multi-Hart RISC-V CPUs with Non-Deterministic Programs

Quentin Bordier, Tobias Kovats, Flavien Solt, and Kaveh Razavi

IEEE EuroS&P防御形式化验证信息流追踪

VerIFI: Formal Verification of Microarchitectural Information-Flow Integrity

Katharina Ceesay-Seitz, Flavien Solt, Mengyuan Yin, and Kaveh Razavi

IEEE Symposium on Security & Privacy攻击模糊测试与验证

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, B. Köpf, and Stavros Volos

杰出论文奖

IEEE ICCAD工具与分析信息流追踪

Pathfinder: Constructing Cycle-accurate Taint Graphs for Analyzing Information Flow Traces

Katharina Ceesay-Seitz, Flavien Solt, Alexander Klukas, and Kaveh Razavi

ACM CCS攻击信息流追踪

MileSan: Detecting Exploitable Microarchitectural Leakage via Differential Hardware–Software Taint Tracking

T. Kovats, Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi

USENIX Security工具与分析DRAM 与 Rowhammer

McSee: Evaluating Advanced Rowhammer Attacks and Defenses via Automated DRAM Traffic Analysis

Patrick Jattke, Michele Marazzi, Flavien Solt, Max Wipfli, Stefan Gloor, and Kaveh Razavi

USENIX Security工具与分析模糊测试与验证

Encarsia: Evaluating CPU Fuzzers via Automatic Bug Injection

Matej Bölcskei, Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi

杰出制品奖

USENIX Security攻击模糊测试与验证

Lost in Translation: Enabling Confused Deputy Attacks on EDA Software with TransFuzz

Flavien Solt and Kaveh Razavi

ACM CCS防御形式化验证信息流追踪

μCFI: Formal Verification of Microarchitectural Control-flow Integrity

Katharina Ceesay-Seitz, Flavien Solt, and Kaveh Razavi

IEEE/ACM ISCA工具与分析DRAM 与 Rowhammer

HiFi-DRAM: Enabling High-Fidelity DRAM Research by Uncovering Sense Amplifiers with IC Imaging

Michele Marazzi, Tristan Sachsenweger, Flavien Solt, Peng Zeng, Kubo Takashi, Maksym Yarema, et al.

USENIX Security攻击DRAM 与 Rowhammer

ZenHammer: Rowhammer Attacks on AMD Zen-based Platforms

Patrick Jattke, M. Wipfli, Flavien Solt, Michele Marazzi, Matej Bölcskei, and Kaveh Razavi

IEEE ICCAD工具与分析信息流追踪

HybriDIFT: Scalable Memory-Aware Dynamic Information Flow Tracking for Hardware

Flavien Solt and Kaveh Razavi

USENIX Security攻击模糊测试与验证

Cascade: CPU Fuzzing via Intricate Program Generation

Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi

IEEE Symposium on Security & Privacy防御DRAM 与 Rowhammer

Rega: Scalable Rowhammer Mitigation with Refresh-Generating Activations

Michele Marazzi, Flavien Solt, Patrick Jattke, Kubo Takashi, and Kaveh Razavi

IEEE/ACM MICRO工具与分析模糊测试与验证

RemembERR: Leveraging Microprocessor Errata for Design Testing and Validation

Flavien Solt, Patrick Jattke, and Kaveh Razavi

IEEE Symposium on Security & Privacy防御DRAM 与 Rowhammer

ProTRR: Principled Yet Optimal In-DRAM Target Row Refresh

Michele Marazzi, Patrick Jattke, Flavien Solt, and Kaveh Razavi

USENIX Security工具与分析信息流追踪

CellIFT: Leveraging Cells for Scalable and Precise Dynamic Information Flow Tracking in RTL

Flavien Solt, Ben Gras, and Kaveh Razavi