Andrea Mambretti

According to our database, Andrea Mambretti authored at least 12 papers between 2016 and 2026.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2026

Cross-Cache Attacks for the Linux Kernel via PCP Massaging.

Claudio Migliorelli, Andrea Mambretti, Alessandro Sorniotti, Vittorio Zaccaria, Anil Kurmus

Proceedings of the 33rd Annual Network and Distributed System Security Symposium, 2026

2025

SoK: Automating Kernel Vulnerability Discovery and Exploit Generation.

Anil Kurmus, Andrea Mambretti, Alessandro Sorniotti, Vincent Lenders, Damian Pfammatter, Bernhard Tellenbach

Proceedings of the 19th USENIX WOOT Conference on Offensive Technologies, 2025

2024

GhostRace: Exploiting and Mitigating Speculative Race Conditions.

Hany Ragab, Andrea Mambretti, Anil Kurmus, Cristiano Giuffrida

Proceedings of the 33rd USENIX Security Symposium, 2024

2022

HotFuzz: Discovering Temporal and Spatial Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.

William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele

ACM Trans. Priv. Secur., 2022

2021

GhostBuster: understanding and overcoming the pitfalls of transient execution vulnerability checkers.

Andrea Mambretti, Pasquale Convertini, Alessandro Sorniotti, Alexandra Sandulescu, Engin Kirda, Anil Kurmus

Proceedings of the 28th IEEE International Conference on Software Analysis, 2021

Bypassing memory safety mechanisms through speculative control flow hijacks.

Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William Robertson, Engin Kirda, Anil Kurmus

Proceedings of the IEEE European Symposium on Security and Privacy, 2021

2020

HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.

William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele

Proceedings of the 27th Annual Network and Distributed System Security Symposium, 2020

2019

Two methods for exploiting speculative control flow hijacks.

Andrea Mambretti, Alexandra Sandulescu, Matthias Neugschwandtner, Alessandro Sorniotti, Anil Kurmus

Proceedings of the 13th USENIX Workshop on Offensive Technologies, 2019

Speculator: a tool to analyze speculative execution attacks and mitigations.

Andrea Mambretti, Matthias Neugschwandtner, Alessandro Sorniotti, Engin Kirda, William K. Robertson, Anil Kurmus

Proceedings of the 35th Annual Computer Security Applications Conference, 2019

2018

Educational game design: an empirical study of the effects of narrative.

Chaima Jemmali, Sara Bunian, Andrea Mambretti, Magy Seif El-Nasr

Proceedings of the 13th International Conference on the Foundations of Digital Games, 2018

2016

LAVA: Large-Scale Automated Vulnerability Addition.

Brendan Dolan-Gavitt, Patrick Hulin, Engin Kirda, Tim Leek, Andrea Mambretti, William K. Robertson, Frederick Ulrich, Ryan Whelan

Proceedings of the IEEE Symposium on Security and Privacy, 2016

Trellis: Privilege Separation for Multi-user Applications Made Easy.

Andrea Mambretti, Kaan Onarlioglu, Collin Mulliner, William Robertson, Engin Kirda, Federico Maggi, Stefano Zanero

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2016