Lucas Davi

Publication Activity (10 Years)

Years Active: 2009-2024
Publications (10 Years): 56

Top Topics

Special Session

Remote Attestation

Embedded Systems

Top Venues

USENIX Security Symposium

Publications

Sébastien Andreina, Tobias Cloosters, Lucas Davi, Jens-Rene Giesen, Marco Gutfleisch, Ghassan Karame, Alena Naiakshina, Houda Naji
Defying the Odds: Solana's Unexpected Resilience in Spite of the Security Challenges Faced by Developers. CoRR (2024)
Felix Staudigl, Jan Philipp Thoma, Christian Niesler, Karl J. X. Sturm, Rebecca Pelke, Dominik Germek, Jan Moritz Joseph, Tim Güneysu, Lucas Davi, Rainer Leupers
NVM-Flip: Non-Volatile-Memory BitFlips on the System Level. SAT-CPS@CODASPY (2024)
Tobias Cloosters, Oussama Draissi, Johannes Willbold, Thorsten Holz, Lucas Davi
Memory Corruption at the Border of Trusted Execution. IEEE Secur. Priv. 22 (4) (2024)
Michael Rodler, David Paaßen, Wenting Li, Lukas Bernhard, Thorsten Holz, Ghassan Karame, Lucas Davi
EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation. CoRR (2023)
Sven Smolka, Jens-Rene Giesen, Pascal Winkler, Oussama Draissi, Lucas Davi, Ghassan Karame, Klaus Pohl
Fuzz on the Beach: Fuzzing Solana Smart Contracts. CoRR (2023)
Sebastian Surminski, Christian Niesler, Sebastian Linsner, Lucas Davi, Christian Reuter
SCAtt-man: Side-Channel-Based Remote Attestation for Embedded Devices that Users Understand. CODASPY (2023)
Michael Rodler, David Paaßen, Wenting Li, Lukas Bernhard, Thorsten Holz, Ghassan Karame, Lucas Davi
EF↯CF: High Performance Smart Contract Fuzzing for Exploit Generation. EuroS&P (2023)
Sven Smolka, Jens-Rene Giesen, Pascal Winkler, Oussama Draissi, Lucas Davi, Ghassan Karame, Klaus Pohl
Fuzz on the Beach: Fuzzing Solana Smart Contracts. CCS (2023)
Jan Philipp Thoma, Christian Niesler, Dominic A. Funke, Gregor Leander, Pierre Mayr, Nils Pohl, Lucas Davi, Tim Güneysu
ClepsydraCache - Preventing Cache Attacks with Time-Based Evictions. USENIX Security Symposium (2023)
Sebastian Surminski, Christian Niesler, Lucas Davi, Ahmad-Reza Sadeghi
DMA'n'Play: Practical Remote Attestation Based on Direct Memory Access. ACNS (2023)
Jens-Rene Giesen, Sébastien Andreina, Michael Rodler, Ghassan O. Karame, Lucas Davi
Tutorial: Analyzing, Exploiting, and Patching Smart Contracts in Ethereum. SecDev (2022)
Tobias Cloosters, Sebastian Surminski, Gerrit Sangel, Lucas Davi
Salsa: SGX Attestation for Live Streaming Applications. SecDev (2022)
Tobias Cloosters, Johannes Willbold, Thorsten Holz, Lucas Davi
SGXFuzz: Efficiently Synthesizing Nested Structures for SGX Enclave Fuzzing. USENIX Security Symposium (2022)
Tobias Cloosters, David Paaßen, Jianqiang Wang, Oussama Draissi, Patrick Jauernig, Emmanuel Stapf, Lucas Davi, Ahmad-Reza Sadeghi
RiscyROP: Automated Return-Oriented Programming Attacks on RISC-V and ARM64. RAID (2022)
Lukas Bernhard, Michael Rodler, Thorsten Holz, Lucas Davi
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64. CoRR (2022)
Lukas Bernhard, Michael Rodler, Thorsten Holz, Lucas Davi
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64. EuroS&P (2022)
Jens-Rene Giesen, Sébastien Andreina, Michael Rodler, Ghassan O. Karame, Lucas Davi
Practical Mitigation of Smart Contract Bugs. CoRR (2022)
David Paaßen, Sebastian Surminski, Michael Rodler, Lucas Davi
My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers. ESORICS (1) (2021)
Ilia Polian, Frank Altmann, Tolga Arul, Christian Boit, Ralf Brederlow, Lucas Davi, Rolf Drechsler, Nan Du, Thomas Eisenbarth, Tim Güneysu, Sascha Hermann, Matthias Hiller, Rainer Leupers, Farhad Merchant, Thomas Mussenbrock, Stefan Katzenbeisser, Akash Kumar, Wolfgang Kunz, Thomas Mikolajick, Vivek Pachauri, Jean-Pierre Seifert, Frank Sill Torres, Jens Trommer
Nano Security: From Nano-Electronics to Secure Systems. DATE (2021)
Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi
EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts. USENIX Security Symposium (2021)
David Paaßen, Sebastian Surminski, Michael Rodler, Lucas Davi
My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers. CoRR (2021)
Jan Philipp Thoma, Christian Niesler, Dominic A. Funke, Gregor Leander, Pierre Mayr, Nils Pohl, Lucas Davi, Tim Güneysu
ClepsydraCache - Preventing Cache Attacks with Time-Based Evictions. CoRR (2021)
Christian Niesler, Sebastian Surminski, Lucas Davi
HERA: Hotpatching of Embedded Real-time Applications. NDSS (2021)
Sebastian Surminski, Christian Niesler, Ferdinand Brasser, Lucas Davi, Ahmad-Reza Sadeghi
RealSWATT: Remote Software-based Attestation for Embedded Devices under Realtime Constraints. CCS (2021)
Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi
EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts. CoRR (2020)
Sridhar Adepu, Ferdinand Brasser, Luis Garcia, Michael Rodler, Lucas Davi, Ahmad-Reza Sadeghi, Saman A. Zonouz
Control Behavior Integrity for Distributed Cyber-Physical Systems. ICCPS (2020)
Tobias Cloosters, Michael Rodler, Lucas Davi
TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves. USENIX Security Symposium (2020)
Jannik Pewny, Philipp Koppe, Lucas Davi, Thorsten Holz
Breaking and Fixing Destructive Code Read Defenses. CoRR (2020)
Tobias Cloosters, Michael Rodler, Lucas Davi
TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves. CoRR (2020)
Ghada Dessouky, Shaza Zeitouni, Ahmad Ibrahim, Lucas Davi, Ahmad-Reza Sadeghi
CHASE: A Configurable Hardware-Assisted Security Extension for Real-Time Systems. ICCAD (2019)
Lucas Davi, Denis Hatebur, Maritta Heisel, Roman Wirtz
Combining Safety and Security in Autonomous Cars Using Blockchain Technologies. SAFECOMP Workshops (2019)
Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi
Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks. NDSS (2019)
Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi
Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks. CoRR (2018)
David Gens, Simon Schmitt, Lucas Davi, Ahmad-Reza Sadeghi
K-Miner: Uncovering Memory Corruption in Linux. NDSS (2018)
Andrea Biondo, Mauro Conti, Lucas Davi, Tommaso Frassetto, Ahmad-Reza Sadeghi
The Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGX. USENIX Security Symposium (2018)
Sridhar Adepu, Ferdinand Brasser, Luis Garcia, Michael Rodler, Lucas Davi, Ahmad-Reza Sadeghi, Saman A. Zonouz
Control Behavior Integrity for Distributed Cyber-Physical Systems. CoRR (2018)
Ferdinand Brasser, Lucas Davi, Abhijitt Dhavlle, Tommaso Frassetto, Sai Manoj Pudukotai Dinakarrao, Setareh Rafatirad, Ahmad-Reza Sadeghi, Avesta Sasan, Hossein Sayadi, Shaza Zeitouni, Houman Homayoun
Advances and throwbacks in hardware-assisted security: special session. CASES (2018)
Ferdinand Brasser, Lucas Davi, David Gens, Christopher Liebchen, Ahmad-Reza Sadeghi
CAn't Touch This: Software-only Mitigation against Rowhammer Attacks targeting Kernel Memory. USENIX Security Symposium (2017)
Lucas Davi, David Gens, Christopher Liebchen, Ahmad-Reza Sadeghi
PT-Rand: Practical Mitigation of Data-only Attacks against Page Tables. NDSS (2017)
Ghada Dessouky, Shaza Zeitouni, Thomas Nyman, Andrew Paverd, Lucas Davi, Patrick Koeberl, N. Asokan, Ahmad-Reza Sadeghi
LO-FAT: Low-Overhead Control Flow ATtestation in Hardware. CoRR (2017)
Dean Sullivan, Orlando Arias, David Gens, Lucas Davi, Ahmad-Reza Sadeghi, Yier Jin
Execution Integrity with In-Place Encryption. CoRR (2017)
Ghada Dessouky, Shaza Zeitouni, Thomas Nyman, Andrew Paverd, Lucas Davi, Patrick Koeberl, N. Asokan, Ahmad-Reza Sadeghi
LO-FAT: Low-Overhead Control Flow ATtestation in Hardware. DAC (2017)
Robert Rudd, Richard Skowyra, David Bigelow, Veer Dedhia, Thomas Hobson, Stephen Crane, Christopher Liebchen, Per Larsen, Lucas Davi, Michael Franz, Ahmad-Reza Sadeghi, Hamed Okhravi
Address Oblivious Code Reuse: On the Effectiveness of Leakage Resilient Diversity. NDSS (2017)
Jannik Pewny, Philipp Koppe, Lucas Davi, Thorsten Holz
Breaking and Fixing Destructive Code Read Defenses. ACSAC (2017)
Thomas Nyman, Jan-Erik Ekberg, Lucas Davi, N. Asokan
CFI CaRE: Hardware-supported Call and Return Enforcement for Commercial Microcontrollers. CoRR (2017)
Thomas Nyman, Jan-Erik Ekberg, Lucas Davi, N. Asokan
CFI CaRE: Hardware-Supported Call and Return Enforcement for Commercial Microcontrollers. RAID (2017)
Kjell Braden, Lucas Davi, Christopher Liebchen, Ahmad-Reza Sadeghi, Stephen Crane, Michael Franz, Per Larsen
Leakage-Resilient Layout Randomization for Mobile Devices. NDSS (2016)
Tigist Abera, N. Asokan, Lucas Davi, Jan-Erik Ekberg, Thomas Nyman, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
C-FLAT: Control-FLow ATtestation for Embedded Systems Software. CoRR (2016)
Stephen McLaughlin, Charalambos Konstantinou, Xueyang Wang, Lucas Davi, Ahmad-Reza Sadeghi, Michail Maniatakos, Ramesh Karri
The Cybersecurity Landscape in Industrial Control Systems. Proc. IEEE 104 (5) (2016)
Tigist Abera, N. Asokan, Lucas Davi, Jan-Erik Ekberg, Thomas Nyman, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
C-FLAT: Control-Flow Attestation for Embedded Systems Software. CCS (2016)
Tigist Abera, N. Asokan, Lucas Davi, Farinaz Koushanfar, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
Invited - Things, trouble, trust: on building trust in IoT systems. DAC (2016)
Razvan Deaconescu, Luke Deshotels, Mihai Bucicoiu, William Enck, Lucas Davi, Ahmad-Reza Sadeghi
SandBlaster: Reversing the Apple Sandbox. CoRR (2016)
Luke Deshotels, Razvan Deaconescu, Mihai Chiroiu, Lucas Davi, William Enck, Ahmad-Reza Sadeghi
SandScout: Automatic Detection of Flaws in iOS Sandbox Profiles. CCS (2016)
Dean Sullivan, Orlando Arias, Lucas Davi, Per Larsen, Ahmad-Reza Sadeghi, Yier Jin
Strategy without tactics: policy-agnostic hardware-enhanced control-flow integrity. DAC (2016)
Ferdinand Brasser, Lucas Davi, David Gens, Christopher Liebchen, Ahmad-Reza Sadeghi
CAn't Touch This: Practical and Generic Software-only Defenses Against Rowhammer Attacks. CoRR (2016)
Julian Lettner, Benjamin Kollenda, Andrei Homescu, Per Larsen, Felix Schuster, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz, Michael Franz
Subversive-C: Abusing and Protecting Dynamic Message Dispatch. USENIX Annual Technical Conference (2016)
Stephen Crane, Christopher Liebchen, Andrei Homescu, Lucas Davi, Per Larsen, Ahmad-Reza Sadeghi, Stefan Brunthaler, Michael Franz
Readactor: Practical Code Randomization Resilient to Memory Disclosure. IEEE Symposium on Security and Privacy (2015)
Ahmad-Reza Sadeghi, Lucas Davi, Per Larsen
Securing Legacy Software against Real-World Code-Reuse Exploits: Utopia, Alchemy, or Possible Future? AsiaCCS (2015)
Mauro Conti, Stephen Crane, Lucas Davi, Michael Franz, Per Larsen, Marco Negro, Christopher Liebchen, Mohaned Qunaibit, Ahmad-Reza Sadeghi
Losing Control: On the Effectiveness of Control-Flow Integrity under Stack Attacks. CCS (2015)
Stephen J. Crane, Stijn Volckaert, Felix Schuster, Christopher Liebchen, Per Larsen, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz, Bjorn De Sutter, Michael Franz
It's a TRaP: Table Randomization and Protection against Function-Reuse Attacks. CCS (2015)
Lucas Davi, Matthias Hanreich, Debayan Paul, Ahmad-Reza Sadeghi, Patrick Koeberl, Dean Sullivan, Orlando Arias, Yier Jin
HAFIX: hardware-assisted flow integrity extension. DAC (2015)
Lucas Davi, Christopher Liebchen, Ahmad-Reza Sadeghi, Kevin Z. Snow, Fabian Monrose
Isomeron: Code Randomization Resilient to (Just-In-Time) Return-Oriented Programming. NDSS (2015)
Mihai Bucicoiu, Lucas Davi, Razvan Deaconescu, Ahmad-Reza Sadeghi
XiOS: Extended Application Sandboxing on iOS. AsiaCCS (2015)
Felix Schuster, Thomas Tendyck, Christopher Liebchen, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz
Counterfeit Object-oriented Programming: On the Difficulty of Preventing Code Reuse Attacks in C++ Applications. IEEE Symposium on Security and Privacy (2015)
Ahmad-Reza Sadeghi, Lucas Davi
Beasty Memories: The Quest for Practical Defense against Code Reuse Attacks. TrustED@CCS (2014)
Lucas Davi, Patrick Koeberl, Ahmad-Reza Sadeghi
Hardware-Assisted Fine-Grained Control-Flow Integrity: Towards Efficient Protection of Embedded Systems Against Software Exploitation. DAC (2014)
Lucas Davi, Ahmad-Reza Sadeghi, Daniel Lehmann, Fabian Monrose
Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow Integrity Protection. USENIX Security Symposium (2014)
Tim Werthmann, Ralf Hund, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz
PSiOS: bring your own privacy & security to iOS devices. AsiaCCS (2013)
Kevin Z. Snow, Fabian Monrose, Lucas Davi, Alexandra Dmitrienko, Christopher Liebchen, Ahmad-Reza Sadeghi
Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization. IEEE Symposium on Security and Privacy (2013)
Blaine Stancill, Kevin Z. Snow, Nathan Otterness, Fabian Monrose, Lucas Davi, Ahmad-Reza Sadeghi
Check My Profile: Leveraging Static Analysis for Fast and Accurate Detection of ROP Gadgets. RAID (2013)
Lucas Davi, Alexandra Dmitrienko, Manuel Egele, Thomas Fischer, Thorsten Holz, Ralf Hund, Stefan Nürnberger, Ahmad-Reza Sadeghi
MoCFI: A Framework to Mitigate Control-Flow Attacks on Smartphones. NDSS (2012)
Sven Bugiel, Lucas Davi, Alexandra Dmitrienko, Thomas Fischer, Ahmad-Reza Sadeghi, Bhargava Shastry
Towards Taming Privilege-Escalation Attacks on Android. NDSS (2012)
Lucas Davi, Alexandra Dmitrienko, Manuel Egele, Thomas Fischer, Thorsten Holz, Ralf Hund, Stefan Nürnberger, Ahmad-Reza Sadeghi
Poster: control-flow integrity for smartphones. CCS (2011)
Lucas Davi, Alexandra Dmitrienko, Christoph Kowalski, Marcel Winandy
Trusted virtual domains on OKL4: secure information sharing on smartphones. STC@CCS (2011)
Sven Bugiel, Lucas Davi, Alexandra Dmitrienko, Stephan Heuser, Ahmad-Reza Sadeghi, Bhargava Shastry
Practical and lightweight domain isolation on Android. SPSM@CCS (2011)
Sven Bugiel, Lucas Davi, Alexandra Dmitrienko, Thomas Fischer, Ahmad-Reza Sadeghi, Bhargava Shastry
Poster: the quest for security against privilege escalation attacks on android. CCS (2011)
Lucas Davi, Ahmad-Reza Sadeghi, Marcel Winandy
ROPdefender: a detection tool to defend against return-oriented programming attacks. AsiaCCS (2011)
Stephen Checkoway, Lucas Davi, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Hovav Shacham, Marcel Winandy
Return-oriented programming without returns. CCS (2010)
Lucas Davi, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Marcel Winandy
Privilege Escalation Attacks on Android. ISC (2010)
Lucas Davi, Ahmad-Reza Sadeghi, Marcel Winandy
Dynamic integrity measurement and attestation: towards defense against return-oriented programming attacks. STC (2009)