Cristiano Giuffrida

ORCID

Publication Activity (10 Years)

Years Active: 2009-2024
Publications (10 Years): 97

Top Venues

USENIX Security Symposium

NDSS

IEEE Symposium on Security and Privacy

CoRR

Publications

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, Cristiano Giuffrida
InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2. USENIX Security Symposium (2024)
Victor Duta, Mitchel Aloserij, Cristiano Giuffrida
SafeFetch: Practical Double-Fetch Protection with Kernel-Fetch Caching. USENIX Security Symposium (2024)
Hany Ragab, Andrea Mambretti, Anil Kurmus, Cristiano Giuffrida
GhostRace: Exploiting and Mitigating Speculative Race Conditions. USENIX Security Symposium (2024)
Brian Johannesmeyer, Asia Slowinska, Herbert Bos, Cristiano Giuffrida
Practical Data-Only Attack Generation. USENIX Security Symposium (2024)
Raphael Isemann, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe, Klaus von Gleissenthall
Don't Look UB: Exposing Sanitizer-Eliding Compiler Optimizations. Proc. ACM Program. Lang. 7 (PLDI) (2023)
Floris Gorter, Enrico Barberis, Raphael Isemann, Erik van der Kouwe, Cristiano Giuffrida, Herbert Bos
FloatZone: Accelerating Memory Error Detection using the Floating Point Unit. USENIX Security Symposium (2023)
Andrea Di Dio, Koen Koning, Herbert Bos, Cristiano Giuffrida
Copy-on-Flip: Hardening ECC Memory Against Rowhammer Attacks. NDSS (2023)
Elia Geretto, Julius Hohnerlein, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe, Klaus von Gleissenthall
Triereme: Speeding up hybrid fuzzing through efficient query scheduling. ACSAC (2023)
Mathé Hertogh, Manuel Wiesinger, Sebastian Österlund, Marius Muench, Nadav Amit, Herbert Bos, Cristiano Giuffrida
Quarantine: Mitigating Transient Execution Attacks with Physical Domain Isolation. RAID (2023)
Jakob Koschel, Pietro Borrello, Daniele Cono D'Elia, Herbert Bos, Cristiano Giuffrida
Uncontained: Uncovering Container Confusion in the Linux Kernel. USENIX Security Symposium (2023)
Victor Duta, Fabian Freyer, Fabio Pagani, Marius Muench, Cristiano Giuffrida
Let Me Unwind That For You: Exceptions to Backward-Edge Protection. NDSS (2023)
Floris Gorter, Cristiano Giuffrida, Erik van der Kouwe
Enviral: Fuzzing the Environment for Evasive Malware Analysis. EuroSec@EUROSYS (2023)
Floris Gorter, Koen Koning, Herbert Bos, Cristiano Giuffrida
DangZero: Efficient Use-After-Free Detection via Direct Page Table Access. CCS (2022)
Andreas Costi, Brian Johannesmeyer, Erik Bosman, Cristiano Giuffrida, Herbert Bos
On the effectiveness of same-domain memory deduplication. EuroSec@EUROSYS (2022)
Elia Geretto, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe
Snappy: Efficient Fuzzing with Adaptive and Mutable Snapshots. ACSAC (2022)
Brian Johannesmeyer, Jakob Koschel, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Kasper: Scanning for Generalized Transient Execution Gadgets in the Linux Kernel. NDSS (2022)
Andrei Tatar, Daniël Trujillo, Cristiano Giuffrida, Herbert Bos
TLB;DR: Enhancing TLB-based Attacks with TLB Desynchronized Reverse Engineering. USENIX Security Symposium (2022)
Alyssa Milburn, Erik van der Kouwe, Cristiano Giuffrida
Mitigating Information Leakage Vulnerabilities with Type-based Data Isolation. IEEE Symposium on Security and Privacy (2022)
Andrei Bacs, Saidgani Musaev, Kaveh Razavi, Cristiano Giuffrida, Herbert Bos
DUPEFS: Leaking Data Over the Network With Filesystem Deduplication Side Channels. FAST (2022)
Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, Cristiano Giuffrida
Branch History Injection: On the Effectiveness of Hardware Mitigations Against Cross-Privilege Spectre-v2 Attacks. USENIX Security Symposium (2022)
Pietro Borrello, Daniele Cono D'Elia, Leonardo Querzoni, Cristiano Giuffrida
Constantine: Automatic Side-Channel Resistance Using Efficient Control and Data Flow Linearization. CCS (2021)
Pietro Borrello, Daniele Cono D'Elia, Leonardo Querzoni, Cristiano Giuffrida
Constantine: Automatic Side-Channel Resistance Using Efficient Control and Data Flow Linearization. CoRR (2021)
Koustubha Bhat, Erik van der Kouwe, Herbert Bos, Cristiano Giuffrida
FIRestarter: Practical Software Crash Recovery with Targeted Library-level Fault Injection. DSN (2021)
Finn de Ridder, Pietro Frigo, Emanuele Vannacci, Herbert Bos, Cristiano Giuffrida, Kaveh Razavi
SMASH: Synchronized Many-sided Rowhammer Attacks from JavaScript. USENIX Security Symposium (2021)
Hany Ragab, Alyssa Milburn, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
CrossTalk: Speculative Data Leaks Across Cores Are Real. IEEE Symposium on Security and Privacy (2021)
Hany Ragab, Enrico Barberis, Herbert Bos, Cristiano Giuffrida
Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks. USENIX Security Symposium (2021)
Victor Duta, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe
PIBE: practical kernel control-flow hardening with profile-guided indirect branch elimination. ASPLOS (2021)
Xianya Mi, Sanjay Rawat, Cristiano Giuffrida, Herbert Bos
LeanSym: Efficient Hybrid Fuzzing Through Conservative Constraint Debloating. RAID (2021)
Giuseppe Antonio Di Luna, Davide Italiano, Luca Massarelli, Sebastian Österlund, Cristiano Giuffrida, Leonardo Querzoni
Who's debugging the debuggers? exposing debug information bugs in optimized binaries. ASPLOS (2021)
Sebastian Österlund, Elia Geretto, Andrea Jemmett, Emre Güler, Philipp Görz, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
CollabFuzz: A Framework for Collaborative Fuzzing. EuroSec@EuroSys (2021)
Pietro Frigo, Emanuele Vannacci, Hasan Hassan, Victor van der Veen, Onur Mutlu, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
TRRespass: Exploiting the Many Sides of Target Row Refresh. CoRR (2020)
Erik van der Kouwe, Gernot Heiser, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida
Benchmarking Flaws Undermine Security Research. IEEE Secur. Priv. 18 (3) (2020)
Pietro Frigo, Emanuele Vannacci, Hasan Hassan, Victor van der Veen, Onur Mutlu, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
TRRespass: Exploiting the Many Sides of Target Row Refresh. IEEE Symposium on Security and Privacy (2020)
Anil Altinay, Joseph Nash, Taddeus Kroes, Prabhu Rajasekaran, Dixin Zhou, Adrian Dabrowski, David Gens, Yeoul Na, Stijn Volckaert, Cristiano Giuffrida, Herbert Bos, Michael Franz
BinRec: dynamic binary lifting and recompilation. EuroSys (2020)
Sebastian Österlund, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
ParmeSan: Sanitizer-guided Greybox Fuzzing. USENIX Security Symposium (2020)
Jakob Koschel, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
TagBleed: Breaking KASLR on the Isolated Kernel Address Space using Tagged TLBs. EuroS&P (2020)
Enes Göktas, Kaveh Razavi, Georgios Portokalidis, Herbert Bos, Cristiano Giuffrida
Speculative Probing: Hacking Blind in the Spectre Era. CCS (2020)
Emre Güler, Philipp Görz, Elia Geretto, Andrea Jemmett, Sebastian Österlund, Herbert Bos, Cristiano Giuffrida, Thorsten Holz
Cupid : Automatic Fuzzer Selection for Collaborative Fuzzing. ACSAC (2020)
Giuseppe Antonio Di Luna, Davide Italiano, Luca Massarelli, Sebastian Österlund, Cristiano Giuffrida, Leonardo Querzoni
Who is Debugging the Debuggers? Exposing Debug Information Bugs in Optimized Binaries. CoRR (2020)
Ben Gras, Cristiano Giuffrida, Michael Kurth, Herbert Bos, Kaveh Razavi
ABSynthe: Automatic Blackbox Side-channel Synthesis on Commodity Microarchitectures. NDSS (2020)
Andre Pawlowski, Victor van der Veen, Dennis Andriesse, Erik van der Kouwe, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching. CoRR (2020)
Michael Kurth, Ben Gras, Dennis Andriesse, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
: Practical Cache Attacks from the Network. IEEE Symposium on Security and Privacy (2020)
Andre Pawlowski, Victor van der Veen, Dennis Andriesse, Erik van der Kouwe, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
VPS: excavating high-level C++ constructs from low-level binaries to protect dynamic dispatching. ACSAC (2019)
Koustubha Bhat, Erik van der Kouwe, Herbert Bos, Cristiano Giuffrida
ProbeGuard: Mitigating Probing Attacks Through Reactive Program Transformations. ASPLOS (2019)
Sanghyun Hong, Pietro Frigo, Yigitcan Kaya, Cristiano Giuffrida, Tudor Dumitras
Terminal Brain Damage: Exposing the Graceless Degradation in Deep Neural Networks Under Hardware Fault Attacks. USENIX Security Symposium (2019)
Cristiano Giuffrida, Giovanni Abramo, Ciriaco Andrea D'Angelo
Are all citations worth the same? Valuing citations by the value of the citing items. J. Informetrics 13 (2) (2019)
Sebastian Österlund, Koen Koning, Pierre Olivier, Antonio Barbalace, Herbert Bos, Cristiano Giuffrida
kMVX: Detecting Kernel Information Leaks with Multi-variant Execution. ASPLOS (2019)
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Giorgi Maisuradze, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
RIDL: Rogue In-Flight Data Load. IEEE Symposium on Security and Privacy (2019)
Erik van der Kouwe, Gernot Heiser, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida
SoK: Benchmarking Flaws in Systems Security. EuroS&P (2019)
Lucian Cojocar, Kaveh Razavi, Cristiano Giuffrida, Herbert Bos
Exploiting Correcting Codes: On the Effectiveness of ECC Memory Against Rowhammer Attacks. IEEE Symposium on Security and Privacy (2019)
Sanghyun Hong, Pietro Frigo, Yigitcan Kaya, Cristiano Giuffrida, Tudor Dumitras
Terminal Brain Damage: Exposing the Graceless Degradation in Deep Neural Networks Under Hardware Fault Attacks. CoRR (2019)
Cristiano Giuffrida, Giovanni Abramo, Ciriaco Andrea D'Angelo
Do all citations value the same? Valuing citations by the value of the citing items. CoRR (2018)
Ciriaco Andrea D'Angelo, Cristiano Giuffrida, Giovanni Abramo
A heuristic approach to author name disambiguation in bibliometrics databases for large-scale research assessments. CoRR (2018)
Erik van der Kouwe, Taddeus Kroes, Chris Ouwehand, Herbert Bos, Cristiano Giuffrida
Type-After-Type: Practical and Complete Type-Safe Memory Reuse. ACSAC (2018)
Taddeus Kroes, Koen Koning, Erik van der Kouwe, Herbert Bos, Cristiano Giuffrida
Delta pointers: buffer overflow checks without the checks. EuroSys (2018)
Andrei Tatar, Radhesh Krishnan Konoth, Elias Athanasopoulos, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Throwhammer: Rowhammer Attacks over the Network and Defenses. USENIX Annual Technical Conference (2018)
Andrei Tatar, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Defeating Software Mitigations Against Rowhammer: A Surgical Precision Hammer. RAID (2018)
Ben Gras, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Translation Leak-aside Buffer: Defeating Cache Side-channel Protections with TLB Attacks. USENIX Security Symposium (2018)
Stephan van Schaik, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Malicious Management Unit: Why Stopping Cache Attacks in Software is Harder Than You Think. USENIX Security Symposium (2018)
Nathan Schagen, Koen Koning, Herbert Bos, Cristiano Giuffrida
Towards Automated Vulnerability Scanning of Network Servers. EuroSec@EuroSys (2018)
Vivek Jain, Sanjay Rawat, Cristiano Giuffrida, Herbert Bos
TIFF: Using Input Type Inference To Improve Fuzzing. ACSAC (2018)
Erik van der Kouwe, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida, Gernot Heiser
Benchmarking Crimes: An Emerging Threat in Systems Security. CoRR (2018)
Enes Göktas, Benjamin Kollenda, Philipp Koppe, Erik Bosman, Georgios Portokalidis, Thorsten Holz, Herbert Bos, Cristiano Giuffrida
Position-Independent Code Reuse: On the Effectiveness of ASLR in the Absence of Information Disclosure. EuroS&P (2018)
Angelos Oikonomopoulos, Remco Vermeulen, Cristiano Giuffrida, Herbert Bos
On the Effectiveness of Code Normalization for Function Identification. PRDC (2018)
Radhesh Krishnan Konoth, Marco Oliverio, Andrei Tatar, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida, Kaveh Razavi
ZebRAM: Comprehensive and Compatible Software Protection Against Rowhammer Attacks. OSDI (2018)
Pietro Frigo, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Grand Pwning Unit: Accelerating Microarchitectural Attacks with the GPU. IEEE Symposium on Security and Privacy (2018)
Taddeus Kroes, Koen Koning, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe
Fast and Generic Metadata Management with Mid-Fat Pointers. EUROSEC (2017)
Alyssa Milburn, Herbert Bos, Cristiano Giuffrida
Safelnit: Comprehensive and Practical Mitigation of Uninitialized Read Vulnerabilities. NDSS (2017)
Victor van der Veen, Dennis Andriesse, Manolis Stamatogiannakis, Xi Chen, Herbert Bos, Cristiano Giuffrida
The Dynamics of Innocent Flesh on the Bone: Code Reuse Ten Years Later. CCS (2017)
Xi Chen, Herbert Bos, Cristiano Giuffrida
CodeArmor: Virtualizing the Code Space to Counter Disclosure Attacks. EuroS&P (2017)
Sotiris Ioannidis, Cristiano Giuffrida, Ioannis Sourdis, Vassilis Prevelakis, Christos Strydis, John Thomson, Dmitry Pidan, Martin Böhner
Secure Hardware-Software Architectures for Robust Computing Systems - SHARCS. EPS (2017)
Koen Koning, Xi Chen, Herbert Bos, Cristiano Giuffrida, Elias Athanasopoulos
No Need to Hide: Protecting Safe Regions on Commodity Hardware. EuroSys (2017)
Sanjay Rawat, Vivek Jain, Ashish Kumar, Lucian Cojocar, Cristiano Giuffrida, Herbert Bos
VUzzer: Application-aware Evolutionary Fuzzing. NDSS (2017)
Benjamin Kollenda, Enes Göktas, Tim Blazytko, Philipp Koppe, Robert Gawlik, Radhesh Krishnan Konoth, Cristiano Giuffrida, Herbert Bos, Thorsten Holz
Towards Automated Discovery of Crash-Resistant Primitives in Binary Executables. DSN (2017)
Andre Pawlowski, Moritz Contag, Victor van der Veen, Chris Ouwehand, Thorsten Holz, Herbert Bos, Elias Athanasopoulos, Cristiano Giuffrida
MARX: Uncovering Class Hierarchies in C++ Programs. NDSS (2017)
Cristiano Giuffrida, Calin Iorgulescu, Giordano Tamburrelli, Andrew S. Tanenbaum
Automating Live Update for Generic Server Programs. IEEE Trans. Software Eng. 43 (3) (2017)
Marco Oliverio, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Secure Page Fusion with VUsion: https: //www.vusec.net/projects/VUsion. SOSP (2017)
Ben Gras, Kaveh Razavi, Erik Bosman, Herbert Bos, Cristiano Giuffrida
ASLR on the Line: Practical Cache Attacks on the MMU. NDSS (2017)
Erik van der Kouwe, Vinod Nigade, Cristiano Giuffrida
DangSan: Scalable Use-after-free Detection. EuroSys (2017)
Stephan van Schaik, Kaveh Razavi, Ben Gras, Herbert Bos, Cristiano Giuffrida
RevAnC: A Framework for Reverse Engineering Hardware Page Table Caches. EUROSEC (2017)
István Haller, Yuseok Jeon, Hui Peng, Mathias Payer, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe
TypeSan: Practical Type Confusion Detection. CCS (2016)
Erik van der Kouwe, Cristiano Giuffrida, Andrew S. Tanenbaum
Finding fault with fault injection: an empirical exploration of distortion in fault injection experiments. Softw. Qual. J. 24 (1) (2016)
Pawel Sarbinowski, Vasileios P. Kemerlis, Cristiano Giuffrida, Elias Athanasopoulos
VTPin: practical VTable hijacking protection for binaries. ACSAC (2016)
Tomás Hrubý, Cristiano Giuffrida, Lionel Sambuc, Herbert Bos, Andrew S. Tanenbaum
A NEaT Design for Reliable and Scalable Network Stacks. CoNEXT (2016)
Kaveh Razavi, Ben Gras, Erik Bosman, Bart Preneel, Cristiano Giuffrida, Herbert Bos
Flip Feng Shui: Hammering a Needle in the Software Stack. USENIX Security Symposium (2016)
Angelos Oikonomopoulos, Elias Athanasopoulos, Herbert Bos, Cristiano Giuffrida
Poking Holes in Information Hiding. USENIX Security Symposium (2016)
Koustubha Bhat, Dirk Vogt, Erik van der Kouwe, Ben Gras, Lionel Sambuc, Andrew S. Tanenbaum, Herbert Bos, Cristiano Giuffrida
OSIRIS: Efficient and Consistent Recovery of Compartmentalized Operating Systems. DSN (2016)
Enes Göktas, Robert Gawlik, Benjamin Kollenda, Elias Athanasopoulos, Georgios Portokalidis, Cristiano Giuffrida, Herbert Bos
Undermining Information Hiding (and What to Do about It). USENIX Security Symposium (2016)
Armando Miraglia, Dirk Vogt, Herbert Bos, Andy Tanenbaum, Cristiano Giuffrida
Peeking into the Past: Efficient Checkpoint-Assisted Time-Traveling Debugging. ISSRE (2016)
Andrei Bacs, Cristiano Giuffrida, Bernhard Grill, Herbert Bos
Slick: an intrusion detection system for virtualized storage devices. SAC (2016)
Koen Koning, Herbert Bos, Cristiano Giuffrida
Secure and Efficient Multi-Variant Execution Using Hardware-Assisted Process Virtualization. DSN (2016)
István Haller, Erik van der Kouwe, Cristiano Giuffrida, Herbert Bos
METAlloc: efficient and comprehensive metadata management for software security hardening. EUROSEC (2016)
Angelos Oikonomopoulos, Cristiano Giuffrida, Sanjay Rawat, Herbert Bos
Binary Rejuvenation: Applications and Challenges. IEEE Secur. Priv. 14 (1) (2016)
Victor van der Veen, Enes Göktas, Moritz Contag, Andre Pawlowski, Xi Chen, Sanjay Rawat, Herbert Bos, Thorsten Holz, Elias Athanasopoulos, Cristiano Giuffrida
A Tough Call: Mitigating Advanced Code-Reuse Attacks at the Binary Level. IEEE Symposium on Security and Privacy (2016)
Victor van der Veen, Yanick Fratantonio, Martina Lindorfer, Daniel Gruss, Clémentine Maurice, Giovanni Vigna, Herbert Bos, Kaveh Razavi, Cristiano Giuffrida
Drammer: Deterministic Rowhammer Attacks on Mobile Platforms. CCS (2016)
Erik Bosman, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Dedup Est Machina: Memory Deduplication as an Advanced Exploitation Vector. IEEE Symposium on Security and Privacy (2016)
Valeriu Daniel Stanciu, Riccardo Spolaor, Mauro Conti, Cristiano Giuffrida
On the Effectiveness of Sensor-enhanced Keystroke Dynamics Against Statistical Attacks. CODASPY (2016)
Erik van der Kouwe, Cristiano Giuffrida, Razvan Ghituletez, Andrew S. Tanenbaum
A Methodology to Efficiently Compare Operating System Stability. HASE (2015)
Victor van der Veen, Dennis Andriesse, Enes Göktas, Ben Gras, Lionel Sambuc, Asia Slowinska, Herbert Bos, Cristiano Giuffrida
Practical Context-Sensitive CFI. CCS (2015)
Dirk Vogt, Cristiano Giuffrida, Herbert Bos, Andrew S. Tanenbaum
Lightweight Memory Checkpointing. DSN (2015)

Cristiano Giuffrida.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Cristiano Giuffrida