Christof Fetzer

ControlFreak: Signature Chaining to Counter Control Flow Attacks

2015

Many modern embedded systems use networks to communicate. This increases the attack surface: the adversary does not need to have physical access to the system and can launch remote attacks. By exploiting software bugs, the …

SecureKeeper

2016

Cloud computing, while ubiquitous, still suffers from trust issues, especially for applications managing sensitive data. Third-party coordination services such as ZooKeeper and Consul are fundamental building blocks for cloud applications, but are exposed to potentially …

EndBox: Scalable Middlebox Functions Using Client-Side Trusted Execution

2018

Many organisations enhance the performance, security, and functionality of their managed networks by deploying middleboxes centrally as part of their core network. While this simplifies maintenance, it also increases cost because middlebox hardware must scale …

SpecFuzz: Bringing Spectre-type vulnerabilities to the surface

2019 · arXiv (Cornell University)

SpecFuzz is the first tool that enables dynamic testing for speculative execution vulnerabilities (e.g., Spectre). The key is a novel concept of speculation exposure: The program is instrumented to simulate speculative execution in software by …

Perun: Secure Multi-Stakeholder Machine Learning Framework with GPU Support

2021 · arXiv (Cornell University)

Confidential multi-stakeholder machine learning (ML) allows multiple parties to perform collaborative data analytics while not revealing their intellectual property, such as ML source code, model, or datasets. State-of-the-art solutions based on homomorphic encryption incur a …

TICAL: Trusted and Integrity-protected Compilation of AppLications

2024

During the past few years, we have witnessed various efforts to provide confidentiality and integrity for applications running in untrusted environments such as public clouds. In most of these approaches, hardware extensions such as Intel …