~/talks

Daniel Gruss

what they talk about

where they keep going back

all 6 in the filters

on a stage with

all 18 in the filters

who talks about the same things

titleconferencedate
Keynote – Every Threat Model is WrongRuhrSec 20252025-02-20
RuhrSec is the annual English speaking IT security conference with cutting-edge security talks by renowned experts. RuhrSec is organized by Hackmanit. 🔽 More…
Talk on
SQUIP or Why We Need to Study Processors Like NatureRuhrSec 20232023-05-11
Introduces SQUIP as a scheduler-queue contention side channel that forces pipeline stalls by flooding scheduler queues with dependent multiplies and slow…
Talk on
Remote Memory-Deduplication AttacksBlack Hat Asia 20222022-05-10
Remote memory‑deduplication is practical over the Internet without running attacker code: sending and overwriting pages via memcache d (tested on KVM on Ubuntu…
Talk on
Secure Cache Designs: State of the Art and ...RuhrSec Day 20222022-05-05
Overview of concrete results and prototypes assessing secure cache designs with numbers and attacks. Shows that Prime‑prune‑probe reduces profiling time by…
Talk on
Complexity Killed SecurityBlack Hat Asia 20202020-09-29
Shows concrete results: reverse‑engineered DRAM mappings via timing side‑channel and used rowhammer techniques to flip bits across rows; demonstrates that MSR…
Talk on
Page Cache Attacks: Microarchitectural Attacks on Flawless HardwareBlack Hat Asia 20202020-09-29
Operating-system page cache acts as a software cache and yields non-destructive probes via APIs like mincore and QueryWorkingSet, enabling timing side channels…
Talk on
Strong and Efficient Cache Side-Channel Protection...26th USENIX Security Symposium (USENIX Security '17)2017-08-16
Cloak uses Intel TSX to pin sensitive code and data into L1/L3 by preloading and executing every cache line (compiler-inserted return opcodes) and a C++…
Talk on
Rowhammer Attacks: A Walkthrough GuideRuhrSec 20172017-05-04
Walks through reproducible Rowhammer primitives, concrete tools and results: native double‑sided hammering and Rowhammer.js exploit JavaScript; DRAM…
Talk on
ARMageddon: Cache Attacks on Mobile DevicesUSENIX Security '162016-08-10
Implements Prime+Probe and Flush+Reload (and Evict+Reload, Flush+Flush) on unrooted ARM phones, using a tuned eviction loop to replace missing flush…
Talk on
DRAMA: Exploiting DRAM Addressing for Cross-CPU AttacksUSENIX Security '162016-08-10
Reverse engineers DRAM address maps with two methods: physical probing with an oscilloscope on chip‑select and bank pins and a fully automated timing-based…
Talk on
Using Undocumented CPU Behavior to See Into Kernel Mode and Break KASLR in the ProcessBlack Hat USA 20162016-08-03
An unprivileged prefetch instruction timing side channel reliably leaks where kernel pages are mapped and often reveals driver locations, breaking KASLR…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.