Practical Memory Deduplication Attacks in Sandboxed Javascript. - Daniel Gruss; David Bidner; Stefan Mangard (ESORICS (1), 2015)

Cache Template Attacks: Automating Attacks on Inclusive Last-Level Caches. - Daniel Gruss; Raphael Spreitzer; Stefan Mangard (USENIX Security Symposium, 2015)

Flush+Flush: A Stealthier Last-Level Cache Attack. - Daniel Gruss; Clémentine Maurice; Klaus Wagner 001 (CoRR, 2015)

ARMageddon: Last-Level Cache Attacks on Mobile Devices. - Moritz Lipp; Daniel Gruss; Raphael Spreitzer; Stefan Mangard (CoRR, 2015)

Reverse Engineering Intel DRAM Addressing and Exploitation. - Peter Pessl; Daniel Gruss; Clémentine Maurice; Stefan Mangard (CoRR, 2015)

Prefetch Side-Channel Attacks: Bypassing SMAP and Kernel ASLR. - Daniel Gruss; Clémentine Maurice; Anders Fogh; Moritz Lipp; Stefan Mangard (CCS, 2016)

Drammer: Deterministic Rowhammer Attacks on Mobile Platforms. - Victor van der Veen; Yanick Fratantonio; Martina Lindorfer; Daniel Gruss; Clémentine Maurice; Giovanni Vigna; Herbert Bos; Kaveh Razavi; Cristiano Giuffrida (CCS, 2016)

Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript. - Daniel Gruss; Clémentine Maurice; Stefan Mangard (DIMVA, 2016)

Flush+Flush: A Fast and Stealthy Cache Attack. - Daniel Gruss; Clémentine Maurice; Klaus Wagner 001; Stefan Mangard (DIMVA, 2016)

ARMageddon: Cache Attacks on Mobile Devices. - Moritz Lipp; Daniel Gruss; Raphael Spreitzer; Clémentine Maurice; Stefan Mangard (USENIX Security Symposium, 2016)

DRAMA: Exploiting DRAM Addressing for Cross-CPU Attacks. - Peter Pessl; Daniel Gruss; Clémentine Maurice; Michael Schwarz 001; Stefan Mangard (USENIX Security Symposium, 2016)

Malware Guard Extension: Using SGX to Conceal Cache Attacks. - Michael Schwarz 001; Samuel Weiser; Daniel Gruss; Clémentine Maurice; Stefan Mangard (DIMVA, 2017)

Practical Keystroke Timing Attacks in Sandboxed JavaScript. - Moritz Lipp; Daniel Gruss; Michael Schwarz 001; David Bidner; Clémentine Maurice; Stefan Mangard (ESORICS (2), 2017)

KASLR is Dead: Long Live KASLR. - Daniel Gruss; Moritz Lipp; Michael Schwarz 001; Richard Fellner; Clémentine Maurice; Stefan Mangard (ESSoS, 2017)

Fantastic Timers and Where to Find Them: High-Resolution Microarchitectural Attacks in JavaScript. - Michael Schwarz 001; Clémentine Maurice; Daniel Gruss; Stefan Mangard (Financial Cryptography, 2017)

Software-basierte Mikroarchitekturangriffe. - Daniel Gruss (Ausgezeichnete Informatikdissertationen, 2017)

Hello from the Other Side: SSH over Robust Cache Covert Channels in the Cloud. - Clémentine Maurice; Manuel Weber; Michael Schwarz 001; Lukas Giner; Daniel Gruss; Carlo Alberto Boano; Stefan Mangard; Kay Römer (NDSS, 2017)

Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory. - Daniel Gruss; Julian Lettner; Felix Schuster; Olga Ohrimenko; István Haller; Manuel Costa (USENIX Security Symposium, 2017)

Software-based Microarchitectural Attacks. - Daniel Gruss (CoRR, 2017)

KeyDrown: Eliminating Keystroke Timing Side-Channel Attacks. - Michael Schwarz 001; Moritz Lipp; Daniel Gruss; Samuel Weiser; Clémentine Maurice; Raphael Spreitzer; Stefan Mangard (CoRR, 2017)

Automated Detection, Exploitation, and Elimination of Double-Fetch Bugs using Modern CPU Features. - Michael Schwarz 001; Daniel Gruss; Moritz Lipp; Clémentine Maurice; Thomas Schuster; Anders Fogh; Stefan Mangard (AsiaCCS, 2018)

Use-After-FreeMail: Generalizing the Use-After-Free Problem and Applying it to Email Services. - Daniel Gruss; Michael Schwarz 001; Matthias Wübbeling; Simon Guggi; Timo Malderle; Stefan More; Moritz Lipp (AsiaCCS, 2018)

ProcHarvester: Fully Automated Analysis of Procfs Side-Channel Leaks on Android. - Raphael Spreitzer; Felix Kirchengast; Daniel Gruss; Stefan Mangard (AsiaCCS, 2018)

JavaScript Zero: Real JavaScript and Zero Side-Channel Attacks. - Michael Schwarz 001; Moritz Lipp; Daniel Gruss (NDSS, 2018)

KeyDrown: Eliminating Software-Based Keystroke Timing Side-Channel Attacks. - Michael Schwarz 001; Moritz Lipp; Daniel Gruss; Samuel Weiser; Clémentine Maurice; Raphael Spreitzer; Stefan Mangard (NDSS, 2018)

Another Flip in the Wall of Rowhammer Defenses. - Daniel Gruss; Moritz Lipp; Michael Schwarz 001; Daniel Genkin; Jonas Juffinger; Sioli O'Connell; Wolfgang Schoechl; Yuval Yarom (IEEE Symposium on Security and Privacy, 2018)

Meltdown: Reading Kernel Memory from User Space. - Moritz Lipp; Michael Schwarz 001; Daniel Gruss; Thomas Prescher 002; Werner Haas 004; Anders Fogh; Jann Horn; Stefan Mangard; Paul Kocher; Daniel Genkin; Yuval Yarom; Mike Hamburg (USENIX Security Symposium, 2018)

NetSpectre: Read Arbitrary Memory over Network. - Michael Schwarz 001; Martin Schwarzl; Moritz Lipp; Daniel Gruss (CoRR, 2018)

Kernel Isolation: From an Academic Idea to an Efficient Patch for Every Computer. - Daniel Gruss; Dave Hansen; Brendan Gregg (login Usenix Mag., 2018)

Meltdown - Moritz Lipp; Michael Schwarz 001; Daniel Gruss; Thomas Prescher 002; Werner Haas 004; Stefan Mangard; Paul Kocher; Daniel Genkin; Yuval Yarom; Mike Hamburg (meltdownattack.com, 2018)

Spectre Attacks: Exploiting Speculative Execution. - Paul Kocher; Daniel Genkin; Daniel Gruss; Werner Haas 004; Mike Hamburg; Moritz Lipp; Stefan Mangard; Thomas Prescher 002; Michael Schwarz 001; Yuval Yarom (meltdownattack.com, 2018)

ZombieLoad: Cross-Privilege-Boundary Data Sampling. - Michael Schwarz 001; Moritz Lipp; Daniel Moghimi; Jo Van Bulck; Julian Stecklina; Thomas Prescher 002; Daniel Gruss (CCS, 2019)

Fallout: Leaking Data on Meltdown-resistant CPUs. - Claudio Canella; Daniel Genkin; Lukas Giner; Daniel Gruss; Moritz Lipp; Marina Minkin; Daniel Moghimi; Frank Piessens; Michael Schwarz 001; Berk Sunar; Jo Van Bulck; Yuval Yarom (CCS, 2019)

Page Cache Attacks. - Daniel Gruss; Erik Kraft; Trishita Tiwari; Michael Schwarz 001; Ari Trachtenberg; Jason Hennessey; Alex Ionescu; Anders Fogh (CCS, 2019)

Practical Enclave Malware with Intel SGX. - Michael Schwarz 001; Samuel Weiser; Daniel Gruss (DIMVA, 2019)

NetSpectre: Read Arbitrary Memory over Network. - Michael Schwarz 001; Martin Schwarzl; Moritz Lipp; Jon Masters; Daniel Gruss (ESORICS (1), 2019)

Wait a second: playing Hanabi without giving hints. - Markus Eger; Daniel Gruss (FDG, 2019)

JavaScript Template Attacks: Automatically Inferring Host Information for Targeted Exploits. - Michael Schwarz 001; Florian Lackner; Daniel Gruss (NDSS, 2019)

SGXJail: Defeating Enclave Malware via Confinement. - Samuel Weiser; Luca Mayr; Michael Schwarz 001; Daniel Gruss (RAID, 2019)

A Systematic Evaluation of Transient Execution Attacks and Defenses. - Claudio Canella; Jo Van Bulck; Michael Schwarz 001; Moritz Lipp; Benjamin von Berg; Philipp Ortner; Frank Piessens; Dmitry Evtyushkin; Daniel Gruss (USENIX Security Symposium, 2019)

ScatterCache: Thwarting Cache Attacks via Cache Set Randomization. - Mario Werner; Thomas Unterluggauer; Lukas Giner; Michael Schwarz 001; Daniel Gruss; Stefan Mangard (USENIX Security Symposium, 2019)

Store-to-Leak Forwarding: Leaking Data on Meltdown-resistant CPUs. - Michael Schwarz 001; Claudio Canella; Lukas Giner; Daniel Gruss (CoRR, 2019)

ConTExT: Leakage-Free Transient Execution. - Michael Schwarz 001; Robert Schilling; Florian Kargl; Moritz Lipp; Claudio Canella; Daniel Gruss (CoRR, 2019)

Fallout: Reading Kernel Writes From User Space. - Marina Minkin; Daniel Moghimi; Moritz Lipp; Michael Schwarz 001; Jo Van Bulck; Daniel Genkin; Daniel Gruss; Frank Piessens; Berk Sunar; Yuval Yarom (CoRR, 2019)

KASLR: Break It, Fix It, Repeat. - Claudio Canella; Michael Schwarz 001; Martin Haubenwallner; Martin Schwarzl; Daniel Gruss (AsiaCCS, 2020)

Take A Way: Exploring the Security Implications of AMD's Cache Way Predictors. - Moritz Lipp; Vedad Hadzic; Michael Schwarz 001; Arthur Perais; Clémentine Maurice; Daniel Gruss (AsiaCCS, 2020)

Nethammer: Inducing Rowhammer Faults through Network Requests. - Moritz Lipp; Michael Schwarz 001; Lukas Raab; Lukas Lamster; Misiker Tadesse Aga; Clémentine Maurice; Daniel Gruss (EuroS&P Workshops, 2020)

Evolution of Defenses against Transient-Execution Attacks. - Claudio Canella; Sai Manoj Pudukotai Dinakarrao; Daniel Gruss; Khaled N. Khasawneh (ACM Great Lakes Symposium on VLSI, 2020)

The Evolution of Transient-Execution Attacks. - Claudio Canella; Khaled N. Khasawneh; Daniel Gruss (ACM Great Lakes Symposium on VLSI, 2020)

ConTExT: A Generic Approach for Mitigating Spectre. - Michael Schwarz 001; Moritz Lipp; Claudio Canella; Robert Schilling; Florian Kargl; Daniel Gruss (NDSS, 2020)

LVI: Hijacking Transient Execution through Microarchitectural Load Value Injection. - Jo Van Bulck; Daniel Moghimi; Michael Schwarz 001; Moritz Lipp; Marina Minkin; Daniel Genkin; Yuval Yarom; Berk Sunar; Daniel Gruss; Frank Piessens (SP, 2020)

RAMBleed: Reading Bits in Memory Without Accessing Them. - Andrew Kwong; Daniel Genkin; Daniel Gruss; Yuval Yarom (SP, 2020)

Plundervolt: Software-based Fault Injection Attacks against Intel SGX. - Kit Murdock; David F. Oswald; Flavio D. Garcia; Jo Van Bulck; Daniel Gruss; Frank Piessens (SP, 2020)

Donky: Domain Keys - Efficient In-Process Isolation for RISC-V and x86. - David Schrammel; Samuel Weiser; Stefan Steinegger; Martin Schwarzl; Michael Schwarz 001; Stefan Mangard; Daniel Gruss (USENIX Security Symposium, 2020)

Spectre attacks: exploiting speculative execution. - Paul Kocher; Jann Horn; Anders Fogh; Daniel Genkin; Daniel Gruss; Werner Haas 004; Mike Hamburg; Moritz Lipp; Stefan Mangard; Thomas Prescher 002; Michael Schwarz 001; Yuval Yarom (Commun. ACM, 2020)

Meltdown: reading kernel memory from user space. - Moritz Lipp; Michael Schwarz 001; Daniel Gruss; Thomas Prescher 002; Werner Haas 004; Jann Horn; Stefan Mangard; Paul Kocher; Daniel Genkin; Yuval Yarom; Mike Hamburg; Raoul Strackx (Commun. ACM, 2020)

Speculative Dereferencing of Registers: Reviving Foreshadow. - Martin Schwarzl; Thomas Schuster; Michael Schwarz 001; Daniel Gruss (CoRR, 2020)

Malware Guard Extension: abusing Intel SGX to conceal cache attacks. - Michael Schwarz 001; Samuel Weiser; Daniel Gruss; Clémentine Maurice; Stefan Mangard (Cybersecur., 2020)

Plundervolt: How a Little Bit of Undervolting Can Create a Lot of Trouble. - Kit Murdock; David F. Oswald; Flavio D. Garcia; Jo Van Bulck; Frank Piessens; Daniel Gruss (IEEE Secur. Priv., 2020)

How Trusted Execution Environments Fuel Research on Microarchitectural Attacks. - Michael Schwarz 001; Daniel Gruss (IEEE Secur. Priv., 2020)

Automating Seccomp Filter Generation for Linux Applications. - Claudio Canella; Mario Werner; Daniel Gruss; Michael Schwarz 001 (CCSW, 2021)

Specfuscator: Evaluating Branch Removal as a Spectre Mitigation. - Martin Schwarzl; Claudio Canella; Daniel Gruss; Michael Schwarz 001 (Financial Cryptography (1), 2021)

Speculative Dereferencing: Reviving Foreshadow. - Martin Schwarzl; Thomas Schuster; Michael Schwarz 001; Daniel Gruss (Financial Cryptography (1), 2021)

PLATYPUS: Software-based Power Side-Channel Attacks on x86. - Moritz Lipp; Andreas Kogler; David F. Oswald; Michael Schwarz 001; Catherine Easdon; Claudio Canella; Daniel Gruss (SP, 2021)

Systematic Analysis of Randomization-based Protected Cache Architectures. - Antoon Purnal; Lukas Giner; Daniel Gruss; Ingrid Verbauwhede (SP, 2021)

Dynamic Process Isolation. - Martin Schwarzl; Pietro Borrello; Andreas Kogler; Kenton Varda; Thomas Schuster; Daniel Gruss; Michael Schwarz 001 (CoRR, 2021)

Domain Page-Table Isolation. - Claudio Canella; Andreas Kogler; Lukas Giner; Daniel Gruss; Michael Schwarz 001 (CoRR, 2021)

Robust and Scalable Process Isolation Against Spectre in the Cloud. - Martin Schwarzl; Pietro Borrello; Andreas Kogler; Kenton Varda; Thomas Schuster; Michael Schwarz 001; Daniel Gruss (ESORICS (2), 2022)

Systematic Analysis of Programming Languages and Their Execution Environments for Spectre Attacks. - Amir Naseredini; Stefan Gast; Martin Schwarzl; Pedro Miguel Sousa Bernardo; Amel Smajic; Claudio Canella; Martin Berger 001; Daniel Gruss (ICISSP, 2022)

Remote Memory-Deduplication Attacks. - Martin Schwarzl; Erik Kraft; Moritz Lipp; Daniel Gruss (NDSS, 2022)

Finding and Exploiting CPU Features using MSR Templating. - Andreas Kogler; Daniel Weber 007; Martin Haubenwallner; Moritz Lipp; Daniel Gruss; Michael Schwarz 001 (SP, 2022)

ÆPIC Leak: Architecturally Leaking Uninitialized Data from the Microarchitecture. - Pietro Borrello; Andreas Kogler; Martin Schwarzl; Moritz Lipp; Daniel Gruss; Michael Schwarz 001 (USENIX Security Symposium, 2022)

Rapid Prototyping for Microarchitectural Attacks. - Catherine Easdon; Michael Schwarz 001; Martin Schwarzl; Daniel Gruss (USENIX Security Symposium, 2022)

Repurposing Segmentation as a Practical LVI-NULL Mitigation in SGX. - Lukas Giner; Andreas Kogler; Claudio Canella; Michael Schwarz 001; Daniel Gruss (USENIX Security Symposium, 2022)

Minefield: A Software-only Protection for SGX Enclaves against DVFS Attacks. - Andreas Kogler; Daniel Gruss; Michael Schwarz 001 (USENIX Security Symposium, 2022)

Half-Double: Hammering From the Next Row Over. - Andreas Kogler; Jonas Juffinger; Salman Qazi; Yoongu Kim; Moritz Lipp; Nicolas Boichat; Eric Shiu; Mattias Nissler; Daniel Gruss (USENIX Security Symposium, 2022)

AMD Prefetch Attacks through Power and Time. - Moritz Lipp; Daniel Gruss; Michael Schwarz 001 (USENIX Security Symposium, 2022)

SFIP: Coarse-Grained Syscall-Flow-Integrity Protection in Modern Systems. - Claudio Canella; Sebastian Dorn; Daniel Gruss; Michael Schwarz 001 (CoRR, 2022)

Layered Binary Templating: Efficient Detection of Compiler- and Linker-introduced Leakage. - Martin Schwarzl; Erik Kraft; Daniel Gruss (CoRR, 2022)

Layered Binary Templating. - Martin Schwarzl; Erik Kraft; Daniel Gruss (ACNS (1), 2023)

DOPE: DOmain Protection Enforcement with PKS. - Lukas Maar; Martin Schwarzl; Fabian Rauscher; Daniel Gruss; Stefan Mangard (ACSAC, 2023)

PT-Guard: Integrity-Protected Page Tables to Defend Against Breakthrough Rowhammer Attacks. - Anish Saxena; Gururaj Saileshwar; Jonas Juffinger; Andreas Kogler; Daniel Gruss; Moinuddin K. Qureshi (DSN, 2023)

SQUIP: Exploiting the Scheduler Queue Contention Side Channel. - Stefan Gast; Jonas Juffinger; Martin Schwarzl; Gururaj Saileshwar; Andreas Kogler; Simone Franza; Markus Köstl; Daniel Gruss (SP, 2023)

Scatter and Split Securely: Defeating Cache Contention and Occupancy Attacks. - Lukas Giner; Stefan Steinegger; Antoon Purnal; Maria Eichlseder; Thomas Unterluggauer; Stefan Mangard; Daniel Gruss (SP, 2023)

CSI:Rowhammer - Cryptographic Security and Integrity against Rowhammer. - Jonas Juffinger; Lukas Lamster; Andreas Kogler; Maria Eichlseder; Moritz Lipp; Daniel Gruss (SP, 2023)

Practical Timing Side-Channel Attacks on Memory Compression. - Martin Schwarzl; Pietro Borrello; Gururaj Saileshwar; Hanna Müller; Michael Schwarz 001; Daniel Gruss (SP, 2023)

Collide+Power: Leaking Inaccessible Data with Software-based Power Side Channels. - Andreas Kogler; Jonas Juffinger; Lukas Giner; Lukas Gerlach 001; Martin Schwarzl; Michael Schwarz 001; Daniel Gruss; Stefan Mangard (USENIX Security Symposium, 2023)

Side-Channel Attacks on Optane Persistent Memory. - Sihang Liu 001; Suraaj Kanniwadi; Martin Schwarzl; Andreas Kogler; Daniel Gruss; Samira Manabi Khan (USENIX Security Symposium, 2023)

Programmable System Call Security with eBPF. - Jinghao Jia; YiFei Zhu; Dan Williams 001; Andrea Arcangeli; Claudio Canella; Hubertus Franke; Tobin Feldman-Fitzthum; Dimitrios Skarlatos 002; Daniel Gruss; Tianyin Xu (CoRR, 2023)

Generic and Automated Drive-by GPU Cache Attacks from the Browser. - Lukas Giner; Roland Czerny; Christoph Gruber; Fabian Rauscher; Andreas Kogler; Daniel De Almeida Braga; Daniel Gruss (AsiaCCS, 2024)

SUIT: Secure Undervolting with Instruction Traps. - Jonas Juffinger; Stepan Kalinin; Daniel Gruss; Frank Mueller 001 (ASPLOS (2), 2024)

Cross-Core Interrupt Detection: Exploiting User and Virtualized IPIs. - Fabian Rauscher; Daniel Gruss (CCS, 2024)

Presshammer: Rowhammer and Rowpress Without Physical Address Information. - Jonas Juffinger; Sudheendra Raghav Neela; Martin Heckel; Lukas Schwarz; Florian Adamsky; Daniel Gruss (DIMVA, 2024)

Remote Scheduler Contention Attacks. - Stefan Gast; Jonas Juffinger; Lukas Maar; Christoph Royer; Andreas Kogler; Daniel Gruss (FC (1), 2024)

IdleLeak: Exploiting Idle State Side Effects for Information Leakage. - Fabian Rauscher; Andreas Kogler; Jonas Juffinger; Daniel Gruss (NDSS, 2024)

SnailLoad: Exploiting Remote Network Latency Measurements without JavaScript. - Stefan Gast; Roland Czerny; Jonas Juffinger; Fabian Rauscher; Simone Franza; Daniel Gruss (USENIX Security Symposium, 2024)

Fast and Efficient Secure L1 Caches for SMT. - Lukas Giner; Roland Czerny; Simon Lammer; Aaron Giner; Paul Gollob; Jonas Juffinger; Daniel Gruss (ARES (2), 2025)

Not So Secure TSC. - Jonas Juffinger; Sudheendra Raghav Neela; Daniel Gruss (ACNS (2), 2025)

Cohere+Reload: Re-enabling High-Resolution Cache Attacks on AMD SEV-SNP. - Lukas Giner; Sudheendra Raghav Neela; Daniel Gruss (DIMVA (1), 2025)

The HMB Timing Side Channel: Exploiting the SSD's Host Memory Buffer. - Jonas Juffinger; Hannes Weissteiner; Thomas Steinbauer; Daniel Gruss (DIMVA (1), 2025)

Real-World Study of the Security of Educational Test Systems. - Stefan Gast; Sebastian Daniel Felix; Alexander Steinmaurer; Jonas Juffinger; Daniel Gruss (EuroS&P (Workshops), 2025)

CounterSEVeillance: Performance-Counter Attacks on AMD SEV-SNP. - Stefan Gast; Hannes Weissteiner; Robin Leander Schröder; Daniel Gruss (NDSS, 2025)

Secret Spilling Drive: Leaking User Behavior through SSD Contention. - Jonas Juffinger; Fabian Rauscher; Giuseppe La Manna; Daniel Gruss (NDSS, 2025)

KernelSnitch: Side Channel-Attacks on Kernel Data Structures. - Lukas Maar; Jonas Juffinger; Thomas Steinbauer; Daniel Gruss; Stefan Mangard (NDSS, 2025)

A Systematic Evaluation of Novel and Existing Cache Side Channels. - Fabian Rauscher; Carina Fiedler; Andreas Kogler; Daniel Gruss (NDSS, 2025)