~/talks

Kaveh Razavi

what they talk about

all 4 in the filters

where they keep going back

no series more than once — all 6 in the filters

on a stage with

all 21 in the filters

who talks about the same things

titleconferencedate
Encarsia: Evaluating CPU Fuzzers via Automatic Bug InjectionUSENIX Security '252025-08-13
Encarsia automatically injects realistic RTL bugs by rerouting wires and mutating multiplexor select logic in an intermediate representation, then formally…
Talk on
Branch Privilege Injection: Compromising Spectre v2 Hardware Mitigations by...USENIX Security '252025-08-13
Finds asynchronous branch predictor updates that create Branch Predictor Race Conditions allowing predictions to be inserted with the wrong privilege tag on…
Talk on
Lost in Translation: Enabling Confused Deputy Attacks on EDA Software...USENIX Security '252025-08-13
Claims a practical attack chain: a new fuzzer TRANSFUZZ differentially fuzzes RTL across multiple simulators and synthesizers to find translation bugs…
Talk on
McSee: Evaluating Advanced Rowhammer Attacks and Defenses via Automated...USENIX Security '252025-08-13
Builds an automated oscilloscope-based DDR bus decoder (McSee) that captures single-cycle DDR4 and multi-cycle DDR5 traffic and uses it to measure real…
Talk on
Posthammer: Pervasive Browser-based Rowhammer Attacks with Postponed...USENIX Security '252025-08-13
Posthammer implements a JavaScript Rowhammer that forces the memory controller to postpone refresh commands, uses lane eviction-set primitives to create fast…
Talk on
DUPEFS: Leaking Data Over the Network With Filesystem Deduplication Side ChannelsFAST '222022-02-22
Shows a practical remote channel against ZFS inline deduplication that leaks OAuth access tokens from an nginx access log by exploiting timing differences…
Talk on
Stratus: Clouds with Microarchitectural Resource ManagementHotCloud '202020-07-13
Stratus proposes treating microarchitectural isolation as a first-class resource with a declarative constraint API (e.g. isolate(llc,1.0,64)), models resources…
Talk on
Flip Feng Shui: Hammering a Needle in the Software StackUSENIX Security '162016-08-10
A new exploitation vector uses Rowhammer plus kernel same-page merging (KSM) to induce single-bit flips at arbitrary physical addresses by forcing the victim…
Talk on
Over the Edge: Silently Owning Windows 10's Secure BrowserBlack Hat USA 20162016-08-03
Windows 10’s default-on memory deduplication yields a measurable write slowdown that is turned into a one-bit local side channel to recover 64-bit ASLR…
Talk on
Silently Breaking ASLR In The CloudBlack Hat Europe 20152015-11-10
Demonstrates a practical side‑channel that uses memory deduplication (KSM/Page‑fusion) by measuring slow copy‑on‑write times to detect shared pages, then…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.