Herbert Bos

ORCID

Publication Activity (10 Years)

Years Active: 1998-2024
Publications (10 Years): 96

Top Venues

USENIX Security Symposium

IEEE Symposium on Security and Privacy

ACSAC

NDSS

Publications

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, Cristiano Giuffrida
InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2. USENIX Security Symposium (2024)
Brian Johannesmeyer, Asia Slowinska, Herbert Bos, Cristiano Giuffrida
Practical Data-Only Attack Generation. USENIX Security Symposium (2024)
Raphael Isemann, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe, Klaus von Gleissenthall
Don't Look UB: Exposing Sanitizer-Eliding Compiler Optimizations. Proc. ACM Program. Lang. 7 (PLDI) (2023)
Floris Gorter, Enrico Barberis, Raphael Isemann, Erik van der Kouwe, Cristiano Giuffrida, Herbert Bos
FloatZone: Accelerating Memory Error Detection using the Floating Point Unit. USENIX Security Symposium (2023)
Andrea Di Dio, Koen Koning, Herbert Bos, Cristiano Giuffrida
Copy-on-Flip: Hardening ECC Memory Against Rowhammer Attacks. NDSS (2023)
Elia Geretto, Julius Hohnerlein, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe, Klaus von Gleissenthall
Triereme: Speeding up hybrid fuzzing through efficient query scheduling. ACSAC (2023)
Mathé Hertogh, Manuel Wiesinger, Sebastian Österlund, Marius Muench, Nadav Amit, Herbert Bos, Cristiano Giuffrida
Quarantine: Mitigating Transient Execution Attacks with Physical Domain Isolation. RAID (2023)
Jakob Koschel, Pietro Borrello, Daniele Cono D'Elia, Herbert Bos, Cristiano Giuffrida
Uncontained: Uncovering Container Confusion in the Linux Kernel. USENIX Security Symposium (2023)
Floris Gorter, Koen Koning, Herbert Bos, Cristiano Giuffrida
DangZero: Efficient Use-After-Free Detection via Direct Page Table Access. CCS (2022)
Andreas Costi, Brian Johannesmeyer, Erik Bosman, Cristiano Giuffrida, Herbert Bos
On the effectiveness of same-domain memory deduplication. EuroSec@EUROSYS (2022)
Elia Geretto, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe
Snappy: Efficient Fuzzing with Adaptive and Mutable Snapshots. ACSAC (2022)
Brian Johannesmeyer, Jakob Koschel, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Kasper: Scanning for Generalized Transient Execution Gadgets in the Linux Kernel. NDSS (2022)
Andrei Tatar, Daniël Trujillo, Cristiano Giuffrida, Herbert Bos
TLB;DR: Enhancing TLB-based Attacks with TLB Desynchronized Reverse Engineering. USENIX Security Symposium (2022)
Andrei Bacs, Saidgani Musaev, Kaveh Razavi, Cristiano Giuffrida, Herbert Bos
DUPEFS: Leaking Data Over the Network With Filesystem Deduplication Side Channels. FAST (2022)
Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, Cristiano Giuffrida
Branch History Injection: On the Effectiveness of Hardware Mitigations Against Cross-Privilege Spectre-v2 Attacks. USENIX Security Symposium (2022)
Koustubha Bhat, Erik van der Kouwe, Herbert Bos, Cristiano Giuffrida
FIRestarter: Practical Software Crash Recovery with Targeted Library-level Fault Injection. DSN (2021)
Finn de Ridder, Pietro Frigo, Emanuele Vannacci, Herbert Bos, Cristiano Giuffrida, Kaveh Razavi
SMASH: Synchronized Many-sided Rowhammer Attacks from JavaScript. USENIX Security Symposium (2021)
Hany Ragab, Alyssa Milburn, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
CrossTalk: Speculative Data Leaks Across Cores Are Real. IEEE Symposium on Security and Privacy (2021)
Hany Ragab, Enrico Barberis, Herbert Bos, Cristiano Giuffrida
Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks. USENIX Security Symposium (2021)
Victor Duta, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe
PIBE: practical kernel control-flow hardening with profile-guided indirect branch elimination. ASPLOS (2021)
Xianya Mi, Sanjay Rawat, Cristiano Giuffrida, Herbert Bos
LeanSym: Efficient Hybrid Fuzzing Through Conservative Constraint Debloating. RAID (2021)
Sebastian Österlund, Elia Geretto, Andrea Jemmett, Emre Güler, Philipp Görz, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
CollabFuzz: A Framework for Collaborative Fuzzing. EuroSec@EuroSys (2021)
Radhesh Krishnan Konoth, Björn Fischer, Wan J. Fokkink, Elias Athanasopoulos, Kaveh Razavi, Herbert Bos
SecurePay: Strengthening Two-Factor Authentication for Arbitrary Transactions. EuroS&P (2020)
Manolis Stamatogiannakis, Herbert Bos, Paul Groth
PANDAcap: a framework for streamlining collection of full-system traces. EuroSec@EuroSys (2020)
Pietro Frigo, Emanuele Vannacci, Hasan Hassan, Victor van der Veen, Onur Mutlu, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
TRRespass: Exploiting the Many Sides of Target Row Refresh. CoRR (2020)
Erik van der Kouwe, Gernot Heiser, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida
Benchmarking Flaws Undermine Security Research. IEEE Secur. Priv. 18 (3) (2020)
Pietro Frigo, Emanuele Vannacci, Hasan Hassan, Victor van der Veen, Onur Mutlu, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
TRRespass: Exploiting the Many Sides of Target Row Refresh. IEEE Symposium on Security and Privacy (2020)
Anil Altinay, Joseph Nash, Taddeus Kroes, Prabhu Rajasekaran, Dixin Zhou, Adrian Dabrowski, David Gens, Yeoul Na, Stijn Volckaert, Cristiano Giuffrida, Herbert Bos, Michael Franz
BinRec: dynamic binary lifting and recompilation. EuroSys (2020)
Sebastian Österlund, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
ParmeSan: Sanitizer-guided Greybox Fuzzing. USENIX Security Symposium (2020)
Jakob Koschel, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
TagBleed: Breaking KASLR on the Isolated Kernel Address Space using Tagged TLBs. EuroS&P (2020)
Enes Göktas, Kaveh Razavi, Georgios Portokalidis, Herbert Bos, Cristiano Giuffrida
Speculative Probing: Hacking Blind in the Spectre Era. CCS (2020)
Emre Güler, Philipp Görz, Elia Geretto, Andrea Jemmett, Sebastian Österlund, Herbert Bos, Cristiano Giuffrida, Thorsten Holz
Cupid : Automatic Fuzzer Selection for Collaborative Fuzzing. ACSAC (2020)
Ben Gras, Cristiano Giuffrida, Michael Kurth, Herbert Bos, Kaveh Razavi
ABSynthe: Automatic Blackbox Side-channel Synthesis on Commodity Microarchitectures. NDSS (2020)
Andre Pawlowski, Victor van der Veen, Dennis Andriesse, Erik van der Kouwe, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching. CoRR (2020)
Michael Kurth, Ben Gras, Dennis Andriesse, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
: Practical Cache Attacks from the Network. IEEE Symposium on Security and Privacy (2020)
Andre Pawlowski, Victor van der Veen, Dennis Andriesse, Erik van der Kouwe, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
VPS: excavating high-level C++ constructs from low-level binaries to protect dynamic dispatching. ACSAC (2019)
Koustubha Bhat, Erik van der Kouwe, Herbert Bos, Cristiano Giuffrida
ProbeGuard: Mitigating Probing Attacks Through Reactive Program Transformations. ASPLOS (2019)
Radhesh Krishnan Konoth, Rolf van Wegberg, Veelasha Moonsamy, Herbert Bos
Malicious cryptocurrency miners: Status and Outlook. CoRR (2019)
Sebastian Österlund, Koen Koning, Pierre Olivier, Antonio Barbalace, Herbert Bos, Cristiano Giuffrida
kMVX: Detecting Kernel Information Leaks with Multi-variant Execution. ASPLOS (2019)
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Giorgi Maisuradze, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
RIDL: Rogue In-Flight Data Load. IEEE Symposium on Security and Privacy (2019)
Erik van der Kouwe, Gernot Heiser, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida
SoK: Benchmarking Flaws in Systems Security. EuroS&P (2019)
Lucian Cojocar, Kaveh Razavi, Cristiano Giuffrida, Herbert Bos
Exploiting Correcting Codes: On the Effectiveness of ECC Memory Against Rowhammer Attacks. IEEE Symposium on Security and Privacy (2019)
Erik van der Kouwe, Taddeus Kroes, Chris Ouwehand, Herbert Bos, Cristiano Giuffrida
Type-After-Type: Practical and Complete Type-Safe Memory Reuse. ACSAC (2018)
Taddeus Kroes, Koen Koning, Erik van der Kouwe, Herbert Bos, Cristiano Giuffrida
Delta pointers: buffer overflow checks without the checks. EuroSys (2018)
Andrei Tatar, Radhesh Krishnan Konoth, Elias Athanasopoulos, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Throwhammer: Rowhammer Attacks over the Network and Defenses. USENIX Annual Technical Conference (2018)
Andrei Tatar, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Defeating Software Mitigations Against Rowhammer: A Surgical Precision Hammer. RAID (2018)
Ben Gras, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Translation Leak-aside Buffer: Defeating Cache Side-channel Protections with TLB Attacks. USENIX Security Symposium (2018)
Victor van der Veen, Martina Lindorfer, Yanick Fratantonio, Harikrishnan Padmanabha Pillai, Giovanni Vigna, Christopher Kruegel, Herbert Bos, Kaveh Razavi
GuardION: Practical Mitigation of DMA-Based Rowhammer Attacks on ARM. DIMVA (2018)
Stephan van Schaik, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Malicious Management Unit: Why Stopping Cache Attacks in Software is Harder Than You Think. USENIX Security Symposium (2018)
Nathan Schagen, Koen Koning, Herbert Bos, Cristiano Giuffrida
Towards Automated Vulnerability Scanning of Network Servers. EuroSec@EuroSys (2018)
Vivek Jain, Sanjay Rawat, Cristiano Giuffrida, Herbert Bos
TIFF: Using Input Type Inference To Improve Fuzzing. ACSAC (2018)
Erik van der Kouwe, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida, Gernot Heiser
Benchmarking Crimes: An Emerging Threat in Systems Security. CoRR (2018)
Franck de Goër, Sanjay Rawat, Dennis Andriesse, Herbert Bos, Roland Groz
Now You See Me: Real-time Dynamic Function Call Detection. ACSAC (2018)
Enes Göktas, Benjamin Kollenda, Philipp Koppe, Erik Bosman, Georgios Portokalidis, Thorsten Holz, Herbert Bos, Cristiano Giuffrida
Position-Independent Code Reuse: On the Effectiveness of ASLR in the Absence of Information Disclosure. EuroS&P (2018)
Radhesh Krishnan Konoth, Emanuele Vineti, Veelasha Moonsamy, Martina Lindorfer, Christopher Kruegel, Herbert Bos, Giovanni Vigna
MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense. CCS (2018)
Angelos Oikonomopoulos, Remco Vermeulen, Cristiano Giuffrida, Herbert Bos
On the Effectiveness of Code Normalization for Function Identification. PRDC (2018)
Radhesh Krishnan Konoth, Marco Oliverio, Andrei Tatar, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida, Kaveh Razavi
ZebRAM: Comprehensive and Compatible Software Protection Against Rowhammer Attacks. OSDI (2018)
Pietro Frigo, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Grand Pwning Unit: Accelerating Microarchitectural Attacks with the GPU. IEEE Symposium on Security and Privacy (2018)
Taddeus Kroes, Koen Koning, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe
Fast and Generic Metadata Management with Mid-Fat Pointers. EUROSEC (2017)
Alyssa Milburn, Herbert Bos, Cristiano Giuffrida
Safelnit: Comprehensive and Practical Mitigation of Uninitialized Read Vulnerabilities. NDSS (2017)
Lucian Cojocar, Kaveh Razavi, Herbert Bos
Off-the-shelf Embedded Devices as Platforms for Security Research. EUROSEC (2017)
Victor van der Veen, Dennis Andriesse, Manolis Stamatogiannakis, Xi Chen, Herbert Bos, Cristiano Giuffrida
The Dynamics of Innocent Flesh on the Bone: Code Reuse Ten Years Later. CCS (2017)
Xi Chen, Herbert Bos, Cristiano Giuffrida
CodeArmor: Virtualizing the Code Space to Counter Disclosure Attacks. EuroS&P (2017)
Koen Koning, Xi Chen, Herbert Bos, Cristiano Giuffrida, Elias Athanasopoulos
No Need to Hide: Protecting Safe Regions on Commodity Hardware. EuroSys (2017)
Sanjay Rawat, Vivek Jain, Ashish Kumar, Lucian Cojocar, Cristiano Giuffrida, Herbert Bos
VUzzer: Application-aware Evolutionary Fuzzing. NDSS (2017)
Benjamin Kollenda, Enes Göktas, Tim Blazytko, Philipp Koppe, Robert Gawlik, Radhesh Krishnan Konoth, Cristiano Giuffrida, Herbert Bos, Thorsten Holz
Towards Automated Discovery of Crash-Resistant Primitives in Binary Executables. DSN (2017)
Thomas Rupprecht, Xi Chen, David H. White, Jan H. Boockmann, Gerald Lüttgen, Herbert Bos
DSIbin: identifying dynamic data structures in C/C++ binaries. ASE (2017)
Andre Pawlowski, Moritz Contag, Victor van der Veen, Chris Ouwehand, Thorsten Holz, Herbert Bos, Elias Athanasopoulos, Cristiano Giuffrida
MARX: Uncovering Class Hierarchies in C++ Programs. NDSS (2017)
Marco Oliverio, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Secure Page Fusion with VUsion: https: //www.vusec.net/projects/VUsion. SOSP (2017)
Manolis Stamatogiannakis, Elias Athanasopoulos, Herbert Bos, Paul Groth
: Practical Provenance Analysis of Unstructured Processes. ACM Trans. Internet Techn. 17 (4) (2017)
Lucian Cojocar, Taddeus Kroes, Herbert Bos
JTR: A Binary Solution for Switch-Case Recovery. ESSoS (2017)
Ben Gras, Kaveh Razavi, Erik Bosman, Herbert Bos, Cristiano Giuffrida
ASLR on the Line: Practical Cache Attacks on the MMU. NDSS (2017)
Dennis Andriesse, Asia Slowinska, Herbert Bos
Compiler-Agnostic Function Detection in Binaries. EuroS&P (2017)
Stephan van Schaik, Kaveh Razavi, Ben Gras, Herbert Bos, Cristiano Giuffrida
RevAnC: A Framework for Reverse Engineering Hardware Page Table Caches. EUROSEC (2017)
István Haller, Yuseok Jeon, Hui Peng, Mathias Payer, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe
TypeSan: Practical Type Confusion Detection. CCS (2016)
Thomas Rupprecht, Xi Chen, David H. White, Jan Tobias Mühlberg, Herbert Bos, Gerald Lüttgen
POSTER: Identifying Dynamic Data Structures in Malware. CCS (2016)
Manolis Stamatogiannakis, Hasanat Kazmi, Hashim Sharif, Remco Vermeulen, Ashish Gehani, Herbert Bos, Paul Groth
Trade-Offs in Automatic Provenance Capture. IPAW (2016)
Dennis Andriesse, Xi Chen, Victor van der Veen, Asia Slowinska, Herbert Bos
An In-Depth Analysis of Disassembly on Full-Scale x86/x64 Binaries. USENIX Security Symposium (2016)
Tomás Hrubý, Cristiano Giuffrida, Lionel Sambuc, Herbert Bos, Andrew S. Tanenbaum
A NEaT Design for Reliable and Scalable Network Stacks. CoNEXT (2016)
Radhesh Krishnan Konoth, Victor van der Veen, Herbert Bos
How Anywhere Computing Just Killed Your Phone-Based Two-Factor Authentication. Financial Cryptography (2016)
Kaveh Razavi, Ben Gras, Erik Bosman, Bart Preneel, Cristiano Giuffrida, Herbert Bos
Flip Feng Shui: Hammering a Needle in the Software Stack. USENIX Security Symposium (2016)
István Haller, Asia Slowinska, Herbert Bos
Scalable data structure detection and classification for C/C++ binaries. Empir. Softw. Eng. 21 (3) (2016)
Angelos Oikonomopoulos, Elias Athanasopoulos, Herbert Bos, Cristiano Giuffrida
Poking Holes in Information Hiding. USENIX Security Symposium (2016)
Koustubha Bhat, Dirk Vogt, Erik van der Kouwe, Ben Gras, Lionel Sambuc, Andrew S. Tanenbaum, Herbert Bos, Cristiano Giuffrida
OSIRIS: Efficient and Consistent Recovery of Compartmentalized Operating Systems. DSN (2016)
Marieke Huisman, Herbert Bos, Sjaak Brinkkemper, Arie van Deursen, Jan Friso Groote, Patricia Lago, Jaco van de Pol, Eelco Visser
Software that Meets Its Intent. ISoLA (2) (2016)
Enes Göktas, Robert Gawlik, Benjamin Kollenda, Elias Athanasopoulos, Georgios Portokalidis, Cristiano Giuffrida, Herbert Bos
Undermining Information Hiding (and What to Do about It). USENIX Security Symposium (2016)
Armando Miraglia, Dirk Vogt, Herbert Bos, Andy Tanenbaum, Cristiano Giuffrida
Peeking into the Past: Efficient Checkpoint-Assisted Time-Traveling Debugging. ISSRE (2016)
Andrei Bacs, Cristiano Giuffrida, Bernhard Grill, Herbert Bos
Slick: an intrusion detection system for virtualized storage devices. SAC (2016)
Koen Koning, Herbert Bos, Cristiano Giuffrida
Secure and Efficient Multi-Variant Execution Using Hardware-Assisted Process Virtualization. DSN (2016)
István Haller, Erik van der Kouwe, Cristiano Giuffrida, Herbert Bos
METAlloc: efficient and comprehensive metadata management for software security hardening. EUROSEC (2016)
Angelos Oikonomopoulos, Cristiano Giuffrida, Sanjay Rawat, Herbert Bos
Binary Rejuvenation: Applications and Challenges. IEEE Secur. Priv. 14 (1) (2016)
Xi Chen, Asia Slowinska, Herbert Bos
On the detection of custom memory allocators in C binaries. Empir. Softw. Eng. 21 (3) (2016)
Spandan Veggalam, Sanjay Rawat, István Haller, Herbert Bos
IFuzzer: An Evolutionary Interpreter Fuzzer Using Genetic Programming. ESORICS (1) (2016)
Victor van der Veen, Enes Göktas, Moritz Contag, Andre Pawlowski, Xi Chen, Sanjay Rawat, Herbert Bos, Thorsten Holz, Elias Athanasopoulos, Cristiano Giuffrida
A Tough Call: Mitigating Advanced Code-Reuse Attacks at the Binary Level. IEEE Symposium on Security and Privacy (2016)
Victor van der Veen, Yanick Fratantonio, Martina Lindorfer, Daniel Gruss, Clémentine Maurice, Giovanni Vigna, Herbert Bos, Kaveh Razavi, Cristiano Giuffrida
Drammer: Deterministic Rowhammer Attacks on Mobile Platforms. CCS (2016)
Erik Bosman, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Dedup Est Machina: Memory Deduplication as an Advanced Exploitation Vector. IEEE Symposium on Security and Privacy (2016)
Dennis Andriesse, Christian Rossow, Herbert Bos
Reliable Recon in Adversarial Peer-to-Peer Botnets. Internet Measurement Conference (2015)
Dennis Andriesse, Herbert Bos, Asia Slowinska
Parallax: Implicit Code Integrity Verification Using Return-Oriented Programming. DSN (2015)
Lucian Cojocar, Jonas Zaddach, Roel Verdult, Herbert Bos, Aurélien Francillon, Davide Balzarotti
PIE: Parser Identification in Embedded Systems. ACSAC (2015)
Manolis Stamatogiannakis, Paul Groth, Herbert Bos
Decoupling Provenance Capture and Analysis from Execution. TaPP (2015)

Herbert Bos.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Herbert Bos