Publications

• 2023

• CSI:Rowhammer Cryptographic Security and Integrity against Rowhammer

  Jonas Juffinger, Lukas Lamster, Andreas Kogler, Moritz Lipp, Maria Eichlseder, Daniel Gruss

  IEEE Security & Privacy (S&P'23), San Fransisco, USA

  Paper
• 2022

• ÆPIC Leak Architecturally Leaking Uninitialized Data from the Microarchitecture

  Pietro Borrello, Andreas Kogler, Martin Schwarzl, Moritz Lipp, Daniel Gruss, Michael Schwarz

  31st USENIX Security Symposium (USENIX'22), Boston, Massachusetts, USA

  Paper

  Github

• Half-Double Hammering From the Next Row Over

  Andreas Kogler, Jonas Juffinger, Salman Qazi, Yoongu Kim, Moritz Lipp, Nicolas Boichat, Eric Shiu, Mattias Nissler, Daniel Gruss

  31st USENIX Security Symposium (USENIX'22), Boston, Massachusetts, USA

  Paper

  Github

• AMD Prefetch Attacks through Power and Time

  Moritz Lipp, Daniel Gruss, Michael Schwarz

  31st USENIX Security Symposium (USENIX'22), Boston, Massachusetts, USA

  Paper

  Github

• Finding and Exploiting CPU Features using MSR Templating

  Andreas Kogler, Daniel Weber, Martin Haubenwallner, Moritz Lipp, Daniel Gruss, Michael Schwarz

  IEEE Security & Privacy (S&P'22), San Fransisco, USA

  Paper

• Remote Memory-Deduplication Attacks

  Martin Schwarzl, Erik Kraft, Moritz Lipp, Daniel Gruss

  Network and Distributed System Security Symposium (NDSS'22), San Diego, USA

  Paper
• 2021

• Exploiting Microarchitectural Optimizations from Software PhD thesis

  Moritz Lipp

  Graz University of Technology

  Paper

  Slides

• PLATYPUS Software-based Power Side-Channel Attacks on x86

  Moritz Lipp, Andreas Kogler, David Oswald, Michael Schwarz, Catherine Easdon, Claudio Canella, Daniel Gruss

  IEEE Security & Privacy (S&P'21), Virtual

  Website
• 2020

• Take A Way Exploring the Security Implications of AMD's Cache Way Predictors

  Moritz Lipp, Vedad Hadžić, Michael Schwarz, Arthur Perais, Clémentine Maurice, Daniel Gruss

  ACM ASIA Conference on Computer and Communications Security (AsiaCCS'20), Taipei, Taiwan

  Paper

• Medusa Microarchitectural Data Leakage via Automated Attack Synthesis

  Daniel Moghimi, Moritz Lipp, Berk Sunar, Michael Schwarz

  29th USENIX Security Symposium (USENIX'20), Boston, Massachusetts, USA

• Spectre Attacks Exploiting Speculative Execution

  Paul Kocher, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, Yuval Yarom

  Communications of the ACM (CACM'20)

  Paper

• Nethammer Inducing Rowhammer Faults through Network Requests

  Moritz Lipp, Michael Schwarz, Lukas Raab, Lukas Lamster, Misiker Tadesse Aga, Clémentine Maurice, Daniel Gruss

  SILM Workshop 2020 (SILM'20), Genova, Italy

  Paper

• Meltdown Reading Kernel Memory from User Space

  Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Anders Fogh, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, Mike Hamburg, Raoul Strackx

  Communications of the ACM (CACM'20)

  Paper

• LVI Hijacking Transient Execution through Microarchitectural Load Value Injection

  Jo Van Bulck, Daniel Moghimi, Michael Schwarz, Moritz Lipp, Marina Minkin, Daniel Genkin, Yuval Yarom, Berk Sunar, Daniel Gruss, Frank Piessens

  IEEE Security & Privacy (S&P'20), San Francisco, California, USA

  Paper

  Website

• ConTExT A Generic Approach for Mitigating Spectre

  Michael Schwarz, Moritz Lipp, Claudio Canella, Robert Schilling, Florian Kargl, Daniel Gruss

  Network and Distributed System Security Symposium (NDSS'20), San Diego, USA

  Paper
• 2019

• ZombieLoad Cross-Privilege-Boundary Data Sampling

  Michael Schwarz, Moritz Lipp, Daniel Moghimi, Jo Van Bulck, Julian Stecklina, Thomas Prescher, Daniel Gruss

  26th ACM Conference on Computer and Communications Security (CCS'19), London, United Kingdom

  Paper

  Github

  Website

• Fallout Leaking Data on Meltdown-resistant CPUs

  Claudio Canella, Daniel Genkin, Lukas Giner, Daniel Gruss, Moritz Lipp, Marina Minkin, Daniel Moghimi, Frank Piessens, Michael Schwarz, Berk Sunar, Yuval Yarom

  26th ACM Conference on Computer and Communications Security (CCS'19), London, United Kingdom

  Paper

  Website

• NetSpectre Read Arbitrary Memory over Network

  Michael Schwarz, Martin Schwarzl, Moritz Lipp, Daniel Gruss

  24th European Symposium on Research in Computer Security (ESORICS'19), Luxembourg

  Paper

• A Systematic Evaluation of Transient Execution Attacks and Defenses

  Claudio Canella, Jo Van Bulck, Michael Schwarz, Moritz Lipp, Benjamin von Berg, Philipp Ortner, Frank Piessens, Dmitry Evtyushkin, Daniel Gruss

  28th USENIX Security Symposium (USENIX'19), Santa Clara, California, USA

• Spectre Attacks Exploiting Speculative Execution

  Paul Kocher, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, Yuval Yarom

  40th IEEE Symposium on Security and Privacy (IEEE S&P'19), San Francisco, California, USA

  Paper

  Website
• 2018

• Meltdown Reading Kernel Memory from User Space

  Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Anders Fogh, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, Mike Hamburg

  27th USENIX Security Symposium (USENIX'18), Baltimode, MD, USA

  Paper

  Slides

  Presentation

  Github

  Website

• Automated Detection, Exploitation, and Elimination of Double-Fetch Bugs using Modern CPU Features

  Michael Schwarz, Daniel Gruss, Moritz Lipp, Clémentine Maurice, Thomas Schuster, Anders Fogh, Stefan Mangard

  13th ACM ASIA Conference on Information, Computer and Communications Security (AsiaCCS'18), Songdo, Incheon, Korea

• Use-After-FreeMail Generalizing the Use-After-Free Problem and Applying it to Email Services

  Daniel Gruss, Michael Schwarz, Matthias Wübbeling, Simon Guggi, Timo Malderle, Stefan More, Moritz Lipp

  13th ACM ASIA Conference on Information, Computer and Communications Security (AsiaCCS'18), Songdo, Incheon, Korea

• Another Flip in the Wall of Rowhammer Defenses

  Daniel Gruss, Moritz Lipp, Michael Schwarz, Daniel Genkin, Jonas Juffinger, Sioli O'Connell, Wolfgang Schoechl, Yuval Yarom

  39th IEEE Symposium on Security and Privacy (IEEE S&P'18), San Fransisco, USA

  Paper

  Github

• JavaScript Zero Real JavaScript and Zero Side-Channel Attacks

  Michael Schwarz, Moritz Lipp, Daniel Gruss

  Network and Distributed System Security Symposium (NDSS'18), San Diego, USA

  Paper

  Github

• KeyDrown Eliminating Software-Based Keystroke Timing Side-Channel Attacks

  Michael Schwarz, Moritz Lipp, Daniel Gruss, Samuel Weiser, Clémentine Maurice, Raphael Spreitzer, Stefan Mangard

  Network and Distributed System Security Symposium (NDSS'18), San Diego, USA

  Paper

  Slides

  Github
• 2017

• KASLR is Dead: Long Live KASLR

  Daniel Gruss, Moritz Lipp, Michael Schwarz, Richard Fellner, Clémentine Maurice, Stefan Mangard

  International Symposium on Engineering Secure Software and Systems (ESSoS'17), Bonn, Germany

  Paper

  Slides

  Github

• Practical Keystroke Timing Attacks in Sandboxed JavaScript

  Moritz Lipp, Daniel Gruss, Michael Schwarz, David Bidner, Clémentine Maurice, Stefan Mangard

  22nd European Symposium on Research in Computer Security (ESORICS'17), Oslo, Norway

  Paper

  Slides

  Github
• 2016

• Cache Attacks And Rowhammer on ARM Master thesis

  Moritz Lipp

  Graz University of Technology

  Paper

• Prefetch Side-Channel Attacks Bypassing SMAP and Kernel ASLR

  Daniel Gruss, Anders Fogh, Clémentine Maurice, Moritz Lipp, Stefan Mangard

  23rd ACM Conference on Computer and Communications Security (CCS'16), Vienna, Austria

  Paper

  Slides

  Github

• ARMageddon Cache Attacks on Mobile Devices

  Moritz Lipp, Daniel Gruss, Raphael Spreitzer, Clémentine Maurice, Stefan Mangard

  25th USENIX Security Symposium (USENIX'16), Austin, Texas, USA

  Paper

  Slides

  Github