Slides Gallery

(Auto-generated on 2026-03-12 11:18:18 +0100 – click on preview image to open slide deck PDF).

2026

The Security Arms Race in Confidential Computing
Secrets Beneath the Silicon: How Microarchitectural Attacks Break CPU Isolation
RAM Raids: Low-Cost Attacks on Encrypted Memory for Confidential Computing
Opening and Welcome
bare-sgx: A Bare-Metal C Runtime for Intel SGX Development with Minimal Trust

2025

Fifty Dollars To Root The Cloud: Low-Cost Memory Interposer Attacks On Confidential Computing
Hack, Fix, Repeat: FOSS and the Future of Systems Security
The Dark Side of Privilege: Understanding and Mitigating Software-Based Side Channels on Trusted Execution Environments
Cracks in the Shield: Understanding and Mitigating Side-Channel Threats to Confidential Computing
Trust Under Siege: Exploiting and Mitigating Interface-Based Attacks on TEEs
Principled Symbolic Validation of Enclaves on Low-End Microcontrollers
<s>Secure</s> Trusted Software and Hacking
Dealing with Reviewer Feedback and Rebuttals?
Fortress or Facade: Strengthening the Future of Confidential Computing
TLBlur: The Art of Obscuring SGX Page Accesses Across Space and Time
Breaking and Securing Memory Isolation in Texas Instruments Microcontrollers
Trust for Our Time: Confidential Computing in Untrusted Environments

2024

Attacks and Defenses for Trusted Execution Environments
Attacks and Defenses for Trusted Execution Environments
Beyond the Surface: Validation Challenges and Opportunities for Confidential Computing
Certified Confidential Computing: Principled Symbolic Validation for Enclave Shielding Runtimes
Opening and Welcome
Reflections on Trusting Trusted Execution: The Story of Microarchitectural Attacks and Defenses
Opening Pandora's Box: Uncovering Pervasive Bugs in Intel SGX Runtimes with Truthful Symbolic Execution
Pandora: Principled Symbolic Validation of Intel SGX Enclave Runtimes
On the Interplay between Attacks and New Defenses: The Story of SGX-Step and Transferable Insights for Other Architectures

2023

SGX-Step: An Open-Source Framework for Precise Dissection and Practical Exploitation of Intel SGX Enclaves
AEX-Notify: Thwarting Precise Single-Stepping Attacks through Interrupt Awareness for Intel SGX Enclaves
Happy Birthday Sancus! – Lessons from 10 Years of Maintaining a Trusted Computing Research Prototype

2022

Privileged Side-Channel Attacks on Trusted Execution Environments
Towards ABI Unification for Intel SGX Enclave Shielding Runtimes
Deepen the Defenses: A Case for Microarchitectural Isolation
The Hitchhiker's Guide to Subverting Intel SGX Enclaves
A Case for Unified ABI Shielding in Intel SGX Runtimes
You're Gonna Need A Bigger Boat: Lessons from Capsizing SGX Enclave Programs

2021

Review & Perspective: Microarchitectural Side-Channel Attacks for Privileged Software Adversaries
Microarchitectural Side-Channel Attacks for Privileged Software Adversaries
Microarchitectural Side-Channel Attacks for Privileged Software Adversaries

2020

Ramming Enclave Gates: A Systematic Vulnerability Assessment of TEE Shielding Runtimes
Microarchitectural Inception
LVI: Hijacking Transient Execution through Microarchitectural Load Value Injection
Microarchitectural Side-Channel Attacks for Untrusted Operating Systems
Microarchitectural Side-Channel Attacks for Privileged Software Adversaries
The Tale Continues: Pitfalls and Best Practices for SGX Shielding Runtimes
LVI: Hijacking Transient Execution through Microarchitectural Load Value Injection
LVI: Hijacking Transient Execution with Load Value Injection
Privileged Side-Channel Attacks for Enclave Software Adversaries
Microarchitectural Side-Channel Attacks for Privileged Software Adversaries
A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes
Leaky Processors: Lessons from Spectre, Meltdown, and Foreshadow

2019

A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes
Microarchitectural Side-Channel Attacks for Privileged Adversaries
Leaky Processors: Lessons from Spectre, Meltdown, and Foreshadow
Cards Against Confusion
A Christmas Carol: The Spectres of the Past, Present, and Future

2018

Tutorial: Uncovering and Mitigating Side-Channel Leakage in Intel SGX Enclaves
Leaky Processors: Stealing Your Secrets With Foreshadow
Leaky Processors and the RISE of Hardware-Based Trusted Computing
Transient Execution Attacks: Lessons from Spectre, Meltdown, and Foreshadow
Nemesis: Studying Microarchitectural Timing Leaks in Rudimentary CPU Interrupt Logic
Foreshadow: Extracting the keys to the Intel SGX kingdom with transient out-of-order execution
Hardware-Based Trusted Computing Architectures From an Attack and Defense Perspective

2017

SGX-Step: A Practical Attack Framework for Precise Enclave Execution Control
Telling Your Secrets Without Page Faults: Stealthy Page Table-Based Attacks on Enclaved Execution
Telling Your Secrets Without Page Faults: Stealthy Page Table-Based Attacks on Enclaved Execution
Beyond Controlled-Channel Attacks: Information Leakage from Elementary CPU Behavior
Interrupt Latency Timing Attacks Against Enclave Programs
Secure Resource Sharing for Embedded Protected Module Architectures

2016

Towards Availability and Real-Time Guarantees for Protected Module Architectures

2015

Secure Resource Sharing for Embedded Protected Module Architectures