Michael Schwarz
where else to find them
bluesky:misc0110.bsky.social
x:misc0110
what they talk about
all 6 in the filters
where they keep going back
- Black Hat Asia3 editions2018–2021
- VMCAI3 editions2024–2026
- SAS2 editions2021–2023
all 12 in the filters
on a stage with
all 36 in the filters
who talks about the same things
- Daniel Gruss14 talks
- Anders Fogh5 talks
- Daniel Weber5 talks
- Andreas Kogler4 talks
- Herbert Bos11 talks
- Yueqi Chen6 talks
| title | conference | date |
|---|---|---|
| Data Race Detection by Digest-Driven Abstract Interpretation | VMCAI 2026 | 2026-01-12 |
Presents a concrete, sound definition of data races in a thread‑modular local trace semantics and implements a digest-driven abstract interpretation in Goblint… | ||
| Confusing Value with Enumeration: Studying the Use of CVEs in Academia | USENIX Security '25 | 2025-08-13 |
Analysis of 1,803 CVEs claimed in 304 papers finds 34% unconfirmed or disputed, 274 reserved, 288 with no maintainer response, and 52 where maintainers say… | ||
| Taking out the Toxic Trash: Recovering Precision in Mixed Flow-Sensitive Static Analyses | PLDI 2025 | 2025-06-16 |
Proposes three concrete fixes — narrowing per origin, reluctant widening, and abstract garbage collection — that decouple global updates via an update rules… | ||
| Correctness Witnesses for Concurrent Programs: Bridging the Semantic Divide with Ghosts | VMCAI 2025 | 2025-01-20 |
Proposes a machine-readable ghost witness format that instruments programs with ghost variables and statements so a validator checks witness validity by… | ||
| C-2PO: A Weakly Relational Pointer Domain: “These Are Not the Memory Cells You Are(…) | NSAD 2024 | 2024-10-22 |
A new weakly relational pointer domain for C, C-2PO, tracks must-equalities and -disequalities between pointer expressions, models address arithmetic confined… | ||
| When to Stop Going Down the Rabbit Hole: Taming Context-Sensitivity on the Fly | SOAP 2024 | 2024-06-25 |
Provides a framework and three generic lifters implemented as decorators around Goblint and evaluated on SV-COMP recursive benchmarks. Limits contexts on the… | ||
| Correctness Witness Validation by Abstract Interpretation | VMCAI 2024 | 2024-01-15 |
Introduces a concrete unassume operator that injects witness invariants into an abstract interpreter to relax state information deliberately, implemented in… | ||
| A Security RISC? The State of Microarchitectural Attacks on RISC-V | Black Hat Europe 2023 | 2023-12-04 |
Analysis targets two commercial RISC‑V cores (Allwinner D1 / c906 and SiFive U74) and releases working proof‑of‑concepts on GitHub. Findings: split… | ||
| Octagons Revisited - Elegant Proofs and Simplified Algorithms | SAS 2023 | 2023-10-22 |
Provides simplified cubic time closure algorithms for Octagon abstract relations over rationals and integers that avoid introducing auxiliary negation… | ||
| CPU Fuzzing: Automatic Discovery of... | RuhrSec 2023 | 2023-05-11 |
Automated toolchain searches CPU behavior and reports concrete primitives and exploits: Osiris fuzzes three-instruction sequences to find timing side channels… | ||
| Improving Thread-Modular Abstract Interpretation | SPLASH 2022 | 2022-12-05 |
Presents a thread‑modular framework that formalizes analyses as side-effecting constraint systems with a new local trace semantics, proves soundness of… | ||
| Improving Thread-Modular Abstract Interpretation | SAS 2021 | 2021-10-17 |
Formalizes thread-modular non-relational value analyses with a new local trace semantics and a side-effecting constraint-system framework, casts Goblint’s… | ||
| Enter Sandbox | Black Hat Asia 2021 | 2021-05-04 |
Automatic seccomp generation named Chestnut combines a compiler plugin (Sourcealyzer), a binary analyzer (Binalyzer), and a runtime tracer (Finalizer) plus… | ||
| Store-to-Leak Forwarding: There and Back Again | Black Hat Asia 2020 | 2020-09-29 |
Demonstrates that correct store-to-load forwarding still leaks whether a virtual page is mapped and recently used, producing practical primitives called fetch… | ||
| ZombieLoad: Leaking Data on Intel CPUs | Black Hat Asia 2020 | 2020-09-29 |
The publication of Meltdown in January 2018 was the first instance of a hardware vulnerability which broke the security guarantees of modern CPUs. Meltdown… | ||
| Page Cache Attacks: Microarchitectural Attacks on Flawless Hardware | Black Hat Asia 2020 | 2020-09-29 |
Operating-system page cache acts as a software cache and yields non-destructive probes via APIs like mincore and QueryWorkingSet, enabling timing side channels… | ||
| TBD | Platform Markets 2019 | 2019-09-16 |
Platforms reduce frictions and turn stocks into tradable flows: public cloud commoditizes compute, rideshare commoditizes drivers' time becomes a spot… | ||
| Are Microarchitectural Attacks still possible on ... | RuhrSec 2019 | 2019-05-28 |
RuhrSec is the annual English speaking non-profit IT security conference with cutting-edge security talks by renowned experts. https://www.ruhrsec.de/
Talk… | ||
| When Good Turns Evil: Using Intel SGX to Stealthily Steal Bitcoins | Black Hat Asia 2018 | 2018-03-20 |
Demonstrates that malware inside Intel SGX can stealthily exfiltrate keys by running an attacker enclave that builds an SGX-resident key extractor and uses… | ||
| DRAMA: Exploiting DRAM Addressing for Cross-CPU Attacks | USENIX Security '16 | 2016-08-10 |
Reverse engineers DRAM address maps with two methods: physical probing with an oscilloscope on chip‑select and bank pins and a fully automated timing-based… | ||
| nothing matches | ||