Michael Schwarz

Publication Activity (10 Years)

Years Active: 2014-2024
Publications (10 Years): 86

Top Topics

Human Computation

Speculative Execution

Automated Discovery

Top Venues

USENIX Security Symposium

IEEE Symposium on Security and Privacy

Publications

Lorenz Hetterich, Markus Bauer, Michael Schwarz, Christian Rossow
Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8. AsiaCCS (2024)
Ruiyi Zhang, Lukas Gerlach, Daniel Weber, Lorenz Hetterich, Youheng Lü, Andreas Kogler, Michael Schwarz
CacheWarp: Software-based Fault Injection using Selective State Reset. USENIX Security Symposium (2024)
Daniel Weber, Fabian Thomas, Lukas Gerlach, Ruiyi Zhang, Michael Schwarz
Reviving Meltdown 3a. ESORICS (3) (2023)
Daniel Weber, Fabian Thomas, Lukas Gerlach, Ruiyi Zhang, Michael Schwarz
Indirect Meltdown: Building Novel Side-Channel Attacks from Transient-Execution Attacks. CoRR (2023)
Lukas Gerlach, Fabian Thomas, Robert Pietsch, Michael Schwarz
A Rowhammer Reproduction Study Using the Blacksmith Fuzzer. ESORICS (3) (2023)
Daniel Weber, Fabian Thomas, Lukas Gerlach, Ruiyi Zhang, Michael Schwarz
Indirect Meltdown: Building Novel Side-Channel Attacks from Transient-Execution Attacks. ESORICS (3) (2023)
Dhiman Chakraborty, Michael Schwarz, Sven Bugiel
TALUS: Reinforcing TEE Confidentiality with Cryptographic Coprocessors. FC (1) (2023)
Lukas Gerlach, Daniel Weber, Ruiyi Zhang, Michael Schwarz
A Security RISC: Microarchitectural Attacks on Hardware RISC-V CPUs. SP (2023)
Pietro Borrello, Catherine Easdon, Martin Schwarzl, Roland Czerny, Michael Schwarz
CustomProcessingUnit: Reverse Engineering and Customization of Intel Microcode. SP Workshops (2023)
Andreas Kogler, Jonas Juffinger, Lukas Giner, Lukas Gerlach, Martin Schwarzl, Michael Schwarz, Daniel Gruss, Stefan Mangard
Collide+Power: Leaking Inaccessible Data with Software-based Power Side Channels. USENIX Security Symposium (2023)
Till Schlüter, Amit Choudhari, Lorenz Hetterich, Leon Trampert, Hamed Nemati, Ahmad Ibrahim, Michael Schwarz, Christian Rossow, Nils Ole Tippenhauer
FetchBench: Systematic Identification and Characterization of Proprietary Prefetchers. CCS (2023)
Daniel Weber, Fabian Thomas, Lukas Gerlach, Ruiyi Zhang, Michael Schwarz
Reviving Meltdown 3a. CoRR (2023)
Martin Schwarzl, Pietro Borrello, Gururaj Saileshwar, Hanna Müller, Michael Schwarz, Daniel Gruss
Practical Timing Side-Channel Attacks on Memory Compression. SP (2023)
Ruiyi Zhang, Taehyun Kim, Daniel Weber, Michael Schwarz
(M)WAIT for It: Bridging the Gap between Microarchitectural and Architectural Side Channels. USENIX Security Symposium (2023)
Thomas Rokicki, Clémentine Maurice, Michael Schwarz
CPU Port Contention Without SMT. ESORICS (3) (2022)
Lukas Giner, Andreas Kogler, Claudio Canella, Michael Schwarz, Daniel Gruss
Repurposing Segmentation as a Practical LVI-NULL Mitigation in SGX. USENIX Security Symposium (2022)
Catherine Easdon, Michael Schwarz, Martin Schwarzl, Daniel Gruss
Rapid Prototyping for Microarchitectural Attacks. USENIX Security Symposium (2022)
Pietro Borrello, Andreas Kogler, Martin Schwarzl, Moritz Lipp, Daniel Gruss, Michael Schwarz
ÆPIC Leak: Architecturally Leaking Uninitialized Data from the Microarchitecture. USENIX Security Symposium (2022)
Andreas Kogler, Daniel Gruss, Michael Schwarz
Minefield: A Software-only Protection for SGX Enclaves against DVFS Attacks. USENIX Security Symposium (2022)
Moritz Lipp, Daniel Gruss, Michael Schwarz
AMD Prefetch Attacks through Power and Time. USENIX Security Symposium (2022)
Leon Trampert, Christian Rossow, Michael Schwarz
Browser-Based CPU Fingerprinting. ESORICS (3) (2022)
Claudio Canella, Sebastian Dorn, Daniel Gruss, Michael Schwarz
SFIP: Coarse-Grained Syscall-Flow-Integrity Protection in Modern Systems. CoRR (2022)
Andreas Kogler, Daniel Weber, Martin Haubenwallner, Moritz Lipp, Daniel Gruss, Michael Schwarz
Finding and Exploiting CPU Features using MSR Templating. IEEE Symposium on Security and Privacy (2022)
Martin Schwarzl, Pietro Borrello, Andreas Kogler, Kenton Varda, Thomas Schuster, Michael Schwarz, Daniel Gruss
Robust and Scalable Process Isolation Against Spectre in the Cloud. ESORICS (2) (2022)
Moritz Lipp, Andreas Kogler, David F. Oswald, Michael Schwarz, Catherine Easdon, Claudio Canella, Daniel Gruss
PLATYPUS: Software-based Power Side-Channel Attacks on x86. IEEE Symposium on Security and Privacy (2021)
Martin Schwarzl, Pietro Borrello, Andreas Kogler, Kenton Varda, Thomas Schuster, Daniel Gruss, Michael Schwarz
Dynamic Process Isolation. CoRR (2021)
Claudio Canella, Mario Werner, Daniel Gruss, Michael Schwarz
Automating Seccomp Filter Generation for Linux Applications. CCSW@CCS (2021)
Martin Schwarzl, Thomas Schuster, Michael Schwarz, Daniel Gruss
Speculative Dereferencing: Reviving Foreshadow. Financial Cryptography (1) (2021)
Martin Schwarzl, Claudio Canella, Daniel Gruss, Michael Schwarz
Specfuscator: Evaluating Branch Removal as a Spectre Mitigation. Financial Cryptography (1) (2021)
Daniel Weber, Ahmad Ibrahim, Hamed Nemati, Michael Schwarz, Christian Rossow
Osiris: Automated Discovery of Microarchitectural Side Channels. USENIX Security Symposium (2021)
Daniel Weber, Ahmad Ibrahim, Hamed Nemati, Michael Schwarz, Christian Rossow
Osiris: Automated Discovery of Microarchitectural Side Channels. CoRR (2021)
Claudio Canella, Andreas Kogler, Lukas Giner, Daniel Gruss, Michael Schwarz
Domain Page-Table Isolation. CoRR (2021)
Martin Schwarz, Pietro Borrello, Gururaj Saileshwar, Hanna Müller, Michael Schwarz, Daniel Gruss
Practical Timing Side Channel Attacks on Memory Compression. CoRR (2021)
Claudio Canella, Michael Schwarz, Martin Haubenwallner, Martin Schwarzl, Daniel Gruss
KASLR: Break It, Fix It, Repeat. AsiaCCS (2020)
Moritz Lipp, Michael Schwarz, Lukas Raab, Lukas Lamster, Misiker Tadesse Aga, Clémentine Maurice, Daniel Gruss
Nethammer: Inducing Rowhammer Faults through Network Requests. EuroS&P Workshops (2020)
Daniel Moghimi, Moritz Lipp, Berk Sunar, Michael Schwarz
Medusa: Microarchitectural Data Leakage via Automated Attack Synthesis. USENIX Security Symposium (2020)
Claudio Canella, Mario Werner, Daniel Gruss, Michael Schwarz
Automating Seccomp Filter Generation for Linux Applications. CoRR (2020)
Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, Mike Hamburg, Raoul Strackx
Meltdown: reading kernel memory from user space. Commun. ACM 63 (6) (2020)
Moritz Lipp, Vedad Hadzic, Michael Schwarz, Arthur Perais, Clémentine Maurice, Daniel Gruss
Take A Way: Exploring the Security Implications of AMD's Cache Way Predictors. AsiaCCS (2020)
Jo Van Bulck, Daniel Moghimi, Michael Schwarz, Moritz Lipp, Marina Minkin, Daniel Genkin, Yuval Yarom, Berk Sunar, Daniel Gruss, Frank Piessens
LVI: Hijacking Transient Execution through Microarchitectural Load Value Injection. IEEE Symposium on Security and Privacy (2020)
Paul Kocher, Jann Horn, Anders Fogh, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, Yuval Yarom
Spectre attacks: exploiting speculative execution. Commun. ACM 63 (7) (2020)
Michael Schwarz, Samuel Weiser, Daniel Gruss, Clémentine Maurice, Stefan Mangard
Malware Guard Extension: abusing Intel SGX to conceal cache attacks. Cybersecur. 3 (1) (2020)
Michael Schwarz, Moritz Lipp, Claudio Canella, Robert Schilling, Florian Kargl, Daniel Gruss
ConTExT: A Generic Approach for Mitigating Spectre. NDSS (2020)
Martin Schwarzl, Thomas Schuster, Michael Schwarz, Daniel Gruss
Speculative Dereferencing of Registers: Reviving Foreshadow. CoRR (2020)
Michael Schwarz, Daniel Gruss
How Trusted Execution Environments Fuel Research on Microarchitectural Attacks. IEEE Secur. Priv. 18 (5) (2020)
David Schrammel, Samuel Weiser, Stefan Steinegger, Martin Schwarzl, Michael Schwarz, Stefan Mangard, Daniel Gruss
Donky: Domain Keys - Efficient In-Process Isolation for RISC-V and x86. USENIX Security Symposium (2020)
Paul Kocher, Jann Horn, Anders Fogh, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, Yuval Yarom
Spectre Attacks: Exploiting Speculative Execution. IEEE Symposium on Security and Privacy (2019)
Claudio Canella, Daniel Genkin, Lukas Giner, Daniel Gruss, Moritz Lipp, Marina Minkin, Daniel Moghimi, Frank Piessens, Michael Schwarz, Berk Sunar, Jo Van Bulck, Yuval Yarom
Fallout: Leaking Data on Meltdown-resistant CPUs. CCS (2019)
Michael Schwarz, Florian Lackner, Daniel Gruss
JavaScript Template Attacks: Automatically Inferring Host Information for Targeted Exploits. NDSS (2019)
Daniel Gruss, Erik Kraft, Trishita Tiwari, Michael Schwarz, Ari Trachtenberg, Jason Hennessey, Alex Ionescu, Anders Fogh
Page Cache Attacks. CoRR (2019)
Daniel Gruss, Erik Kraft, Trishita Tiwari, Michael Schwarz, Ari Trachtenberg, Jason Hennessey, Alex Ionescu, Anders Fogh
Page Cache Attacks. CCS (2019)
Mario Werner, Thomas Unterluggauer, Lukas Giner, Michael Schwarz, Daniel Gruss, Stefan Mangard
ScatterCache: Thwarting Cache Attacks via Cache Set Randomization. USENIX Security Symposium (2019)
Michael Schwarz, Samuel Weiser, Daniel Gruss
Practical Enclave Malware with Intel SGX. CoRR (2019)
Claudio Canella, Jo Van Bulck, Michael Schwarz, Moritz Lipp, Benjamin von Berg, Philipp Ortner, Frank Piessens, Dmitry Evtyushkin, Daniel Gruss
A Systematic Evaluation of Transient Execution Attacks and Defenses. USENIX Security Symposium (2019)
Marina Minkin, Daniel Moghimi, Moritz Lipp, Michael Schwarz, Jo Van Bulck, Daniel Genkin, Daniel Gruss, Frank Piessens, Berk Sunar, Yuval Yarom
Fallout: Reading Kernel Writes From User Space. CoRR (2019)
Michael Schwarz, Martin Schwarzl, Moritz Lipp, Jon Masters, Daniel Gruss
NetSpectre: Read Arbitrary Memory over Network. ESORICS (1) (2019)
Michael Schwarz, Samuel Weiser, Daniel Gruss
Practical Enclave Malware with Intel SGX. DIMVA (2019)
Michael Schwarz, Moritz Lipp, Daniel Moghimi, Jo Van Bulck, Julian Stecklina, Thomas Prescher, Daniel Gruss
ZombieLoad: Cross-Privilege-Boundary Data Sampling. CoRR (2019)
Samuel Weiser, Luca Mayr, Michael Schwarz, Daniel Gruss
SGXJail: Defeating Enclave Malware via Confinement. RAID (2019)
Michael Schwarz, Moritz Lipp, Daniel Moghimi, Jo Van Bulck, Julian Stecklina, Thomas Prescher, Daniel Gruss
ZombieLoad: Cross-Privilege-Boundary Data Sampling. CCS (2019)
Michael Schwarz, Claudio Canella, Lukas Giner, Daniel Gruss
Store-to-Leak Forwarding: Leaking Data on Meltdown-resistant CPUs. CoRR (2019)
Michael Schwarz, Robert Schilling, Florian Kargl, Moritz Lipp, Claudio Canella, Daniel Gruss
ConTExT: Leakage-Free Transient Execution. CoRR (2019)
Moritz Lipp, Misiker Tadesse Aga, Michael Schwarz, Daniel Gruss, Clémentine Maurice, Lukas Raab, Lukas Lamster
Nethammer: Inducing Rowhammer Faults through Network Requests. CoRR (2018)
Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, Mike Hamburg
Meltdown meltdownattack.com (2018)
Daniel Gruss, Michael Schwarz, Matthias Wübbeling, Simon Guggi, Timo Malderle, Stefan More, Moritz Lipp
Use-After-FreeMail: Generalizing the Use-After-Free Problem and Applying it to Email Services. AsiaCCS (2018)
Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Anders Fogh, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, Mike Hamburg
Meltdown: Reading Kernel Memory from User Space. USENIX Security Symposium (2018)
Michael Schwarz, Moritz Lipp, Daniel Gruss
JavaScript Zero: Real JavaScript and Zero Side-Channel Attacks. NDSS (2018)
Daniel Gruss, Moritz Lipp, Michael Schwarz, Daniel Genkin, Jonas Juffinger, Sioli O'Connell, Wolfgang Schoechl, Yuval Yarom
Another Flip in the Wall of Rowhammer Defenses. IEEE Symposium on Security and Privacy (2018)
Michael Schwarz, Moritz Lipp, Daniel Gruss, Samuel Weiser, Clémentine Maurice, Raphael Spreitzer, Stefan Mangard
KeyDrown: Eliminating Software-Based Keystroke Timing Side-Channel Attacks. NDSS (2018)
Paul Kocher, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, Yuval Yarom
Spectre Attacks: Exploiting Speculative Execution. CoRR (2018)
Michael Schwarz, Martin Schwarzl, Moritz Lipp, Daniel Gruss
NetSpectre: Read Arbitrary Memory over Network. CoRR (2018)
Paul Kocher, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, Yuval Yarom
Spectre Attacks: Exploiting Speculative Execution. meltdownattack.com (2018)
Michael Schwarz, Daniel Gruss, Moritz Lipp, Clémentine Maurice, Thomas Schuster, Anders Fogh, Stefan Mangard
Automated Detection, Exploitation, and Elimination of Double-Fetch Bugs using Modern CPU Features. AsiaCCS (2018)
Claudio Canella, Jo Van Bulck, Michael Schwarz, Moritz Lipp, Benjamin von Berg, Philipp Ortner, Frank Piessens, Dmitry Evtyushkin, Daniel Gruss
A Systematic Evaluation of Transient Execution Attacks and Defenses. CoRR (2018)
Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, Mike Hamburg
Meltdown. CoRR (2018)
Michael Schwarz, Clémentine Maurice, Daniel Gruss, Stefan Mangard
Fantastic Timers and Where to Find Them: High-Resolution Microarchitectural Attacks in JavaScript. Financial Cryptography (2017)
Michael Schwarz, Samuel Weiser, Daniel Gruss, Clémentine Maurice, Stefan Mangard
Malware Guard Extension: Using SGX to Conceal Cache Attacks. DIMVA (2017)
Michael Schwarz, Daniel Gruss, Moritz Lipp, Clémentine Maurice, Thomas Schuster, Anders Fogh, Stefan Mangard
Automated Detection, Exploitation, and Elimination of Double-Fetch Bugs using Modern CPU Features. CoRR (2017)
Michael Schwarz, Moritz Lipp, Daniel Gruss, Samuel Weiser, Clémentine Maurice, Raphael Spreitzer, Stefan Mangard
KeyDrown: Eliminating Keystroke Timing Side-Channel Attacks. CoRR (2017)
Clémentine Maurice, Manuel Weber, Michael Schwarz, Lukas Giner, Daniel Gruss, Carlo Alberto Boano, Stefan Mangard, Kay Römer
Hello from the Other Side: SSH over Robust Cache Covert Channels in the Cloud. NDSS (2017)
Moritz Lipp, Daniel Gruss, Michael Schwarz, David Bidner, Clémentine Maurice, Stefan Mangard
Practical Keystroke Timing Attacks in Sandboxed JavaScript. ESORICS (2) (2017)
Thomas Ulz, Michael Schwarz, Alexander Felfernig, Sarah Haas, Amal Shehadeh, Stefan Reiterer, Martin Stettinger
Human computation for constraint-based recommenders. J. Intell. Inf. Syst. 49 (1) (2017)
Daniel Gruss, Moritz Lipp, Michael Schwarz, Daniel Genkin, Jonas Juffinger, Sioli O'Connell, Wolfgang Schoechl, Yuval Yarom
Another Flip in the Wall of Rowhammer Defenses. CoRR (2017)
Daniel Gruss, Moritz Lipp, Michael Schwarz, Richard Fellner, Clémentine Maurice, Stefan Mangard
KASLR is Dead: Long Live KASLR. ESSoS (2017)
Michael Schwarz, Samuel Weiser, Daniel Gruss, Clémentine Maurice, Stefan Mangard
Malware Guard Extension: Using SGX to Conceal Cache Attacks. CoRR (2017)
Peter Pessl, Daniel Gruss, Clémentine Maurice, Michael Schwarz, Stefan Mangard
DRAMA: Exploiting DRAM Addressing for Cross-CPU Attacks. USENIX Security Symposium (2016)
Alexander Felfernig, Michael Jeran, Martin Stettinger, Thomas Absenger, Thomas Gruber, Sarah Haas, Emanuel Kirchengast, Michael Schwarz, Lukas Skofitsch, Thomas Ulz
Human Computation Based Acquisition of Financial Service Advisory Practices. FINREC (2015)
Andreas Holzinger, Michael Schwarz, Bernhard Ofner, Fleur Jeanquartier, André Calero Valdez, Carsten Röcker, Martina Ziefle
Towards Interactive Visualization of Longitudinal Data to Support Knowledge Discovery on Multi-touch Tablet Computers. CD-ARES (2014)