Undermining User Privacy on Mobile Devices Using AI. - Berk Gülmezoglu; Andreas Zankl; M. Caner Tol; Saad Islam; Thomas Eisenbarth 001; Berk Sunar (AsiaCCS, 2019)

Gimme That Model!: A Trusted ML Model Trading Protocol. - Laia Amorós; Syed Mahbub Hafiz; Keewoo Lee; M. Caner Tol (CoRR, 2020)

FastSpec: Scalable Generation and Detection of Spectre Gadgets Using Neural Embeddings. - M. Caner Tol; Berk Gülmezoglu; Koray Yurtseven; Berk Sunar (EuroS&P, 2021)

An Optimization Perspective on Realizing Backdoor Injection Attacks on Deep Neural Networks in Hardware. - M. Caner Tol; Saad Islam; Berk Sunar; Ziming Zhang (CoRR, 2021)

Jolt: Recovering TLS Signing Keys via Rowhammer Faults. - Koksal Mus; Yarkin Doröz; M. Caner Tol; Kristi Rahman; Berk Sunar (IACR Cryptol. ePrint Arch., 2022)

Don't Knock! Rowhammer at the Backdoor of DNN Models. - M. Caner Tol; Saad Islam; Andrew J. Adiletta; Berk Sunar; Ziming Zhang (DSN, 2023)

ZeroLeak: Using LLMs for Scalable and Cost Effective Side-Channel Patching. - M. Caner Tol; Berk Sunar (CoRR, 2023)

Mayhem: Targeted Corruption of Register and Stack Variables. - Andrew J. Adiletta; M. Caner Tol; Yarkin Doröz; Berk Sunar (AsiaCCS, 2024)

ZeroLeak: Automated Side-Channel Patching in Source Code Using LLMs. - M. Caner Tol; Berk Sunar (ESORICS (1), 2024)

LeapFrog: The Rowhammer Instruction Skip Attack. - Andrew J. Adiletta; Caner Tol; Berk Sunar (CoRR, 2024)

FAULT+PROBE: A Generic Rowhammer-based Bit Recovery Attack. - Kemal Derya; M. Caner Tol; Berk Sunar (CoRR, 2024)

LeapFrog: The Rowhammer Instruction Skip Attack. - Andrew J. Adiletta; M. Caner Tol; Kemal Derya; Berk Sunar; Saad Islam (EuroS&P, 2025)

μRL: Discovering Transient Execution Vulnerabilities Using Reinforcement Learning. - M. Caner Tol; Kemal Derya; Berk Sunar (CoRR, 2025)