David Oswald

Research output

Research output per year 2014 2014 2016 2019 2020 2022 2023 2024 2024

• 26 Conference contribution
• 9 Article
• 2 Preprint
• 1 Conference article

Research output per year

Research output per year

Search results

• 2024

  Confidential Computing on Heterogeneous CPU-GPU Systems: Survey and Future Directions

  Wang, Q. & Oswald, D., 3 Sept 2024, arXiv, 35 p.

  Research output: Working paper/Preprint › Preprint

• Eva: Efficient IVC-Based Authentication of Lossy-Encoded Videos

  Zhang, C., Yang, X., Oswald, D., Ryan, M. & Jovanovic, P., 14 Sept 2024, Cryptology ePrint Archive, 61 p.

  Research output: Working paper/Preprint › Preprint

  File
  11 Downloads (Pure)

• FaultFinder: lightning-fast, multi-architectural fault injection simulation

  Murdock, K., Thompson, M. & Oswald, D., 6 Sept 2024, (Accepted/In press) ASHES '24: Proceedings of the 2024 Workshop on Attacks and Solutions in Hardware Security. Association for Computing Machinery (ACM)

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File
  81 Downloads (Pure)

• OOBKey: Key Exchange with Implantable Medical Devices Using Out-Of-Band Channels

  Zhang, M., Marin, E., Ryan, M., Kostakos, V., Murray, T., Tag, B. & Oswald, D., 4 Jun 2024, (Accepted/In press) 2024 21st Annual International Conference on Privacy, Security and Trust (PST). IEEE, (Annual International Conference on Privacy, Security and Trust).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File
  14 Downloads (Pure)

• Teaching Adversarial Thinking by Having Students Circumvent Exam Rules

  Bowden, M., Chothia, T., Clee, A., Collins, S., Henes, J. & Oswald, D., 4 Jun 2024, (Accepted/In press) The 4th Annual Advances in Cyber Security Education: CSE-Connect . (Springer Lecture Notes in Networks and Systems).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File
  8 Downloads (Pure)
• 2023

  BioLeak: Exploiting Cache Timing to Recover Fingerprint Minutiae Coordinates

  Pemberton, O. & Oswald, D., 26 Nov 2023, ASHES '23: Proceedings of the 2023 Workshop on Attacks and Solutions in Hardware Security. Association for Computing Machinery (ACM), p. 61–72 12 p. (CCS: Computer and Communications Security).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Biometrics 100%
  • Authentication 43%
  • Linux 26%
  • Hardening 23%
  • Mobile computing 21%
  34 Downloads (Pure)

• CHERI-TrEE: Flexible enclaves on capability machines

  Van Strydonck, T., Noorman, J., Jackson, J., Dias, L., Vanderstraeten, R., Oswald, D., Piessens, F. & Devriese, D., 3 Jul 2023, EuroS&P - 8th IEEE European Symposium on Security and Privacy. IEEE, p. 1143-1159 17 p. (IEEE European Symposium on Security and Privacy).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Reduced instruction set computing 100%
  • Computer hardware 46%
  • Data storage equipment 20%
  • Access control 10%
  • Embedded systems 10%
  804 Downloads (Pure)

• Pandora: Principled Symbolic Validation of Intel SGX Enclave Runtimes

  Alder, F., Daniel, L-A., Oswald, D., Piessens, F. & Van Bulck, J., 28 Oct 2023, (Accepted/In press) 2024 IEEE Symposium on Security and Privacy (SP). IEEE, (Proceedings of the IEEE Symposium on Security and Privacy ).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File
  288 Downloads (Pure)

• PMFault: Faulting and Bricking Server CPUs through Management Interfaces: Or: A Modern Example of Halt and Catch Fire

  Chen, Z. & Oswald, D., 6 Mar 2023, In: IACR Transactions on Cryptographic Hardware and Embedded Systems. 2023, 2, p. 1-23 23 p.

  Research output: Contribution to journal › Article › peer-review

  Open Access

  File

  • Interface Management 100%
  • Controller 72%
  • Attack 36%
  • Countermeasures 33%
  • Management Power 24%
  1559 Downloads (Pure)

• Reveal the invisible secret: chosen-ciphertext side-channel attacks on NTRU

  Xu, Z., Pemberton, O., Oswald, D. & Zheng, Z., 29 Jan 2023, International Conference on Smart Card Research and Advanced Applications: CARDIS 2022: Smart Card Research and Advanced Applications. Springer, p. 227–247 (Lecture Notes in Computer Science; vol. 13820).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Polynomials 100%
  • Attack 96%
  • Leakage 88%
  • Cryptography 34%
  • Standardization 26%
  130 Downloads (Pure)

• Symbolic Modelling of Remote Attestation Protocols for Device and App Integrity on Android

  Aldoseri, A., Chothia, T., Moreira-Sanchez, J. & Oswald, D., 10 Jul 2023, ASIA CCS '23: Proceedings of the 2023 ACM on Asia Conference on Computer and Communications Security. Liu, J., Xiang, Y., Nepal, S. & Tsudik, G. (eds.). Association for Computing Machinery (ACM), p. 218–231 14 p.

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Application programs 100%
  • Network protocols 75%
  • Computer hardware 25%
  • Ecosystems 23%
  • Cryptography 18%
  167 Downloads (Pure)
• 2022

  A tale of four gates: privilege escalation and permission bypasses on android through app components

  Aldoseri, A., Oswald, D. & Chiper, R., 22 Sept 2022, Computer Security – ESORICS 2022: 27th European Symposium on Research in Computer Security, Copenhagen, Denmark, September 26–30, 2022, Proceedings, Part II. Atluri, V., Di Pietro, R., Jensen, C. D. & Meng, W. (eds.). 1 ed. Springer, p. 233–251 19 p. (Lecture Notes in Computer Science; vol. 13555).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Application programs 100%
  • Malware 13%
  • Microphones 12%
  • Cameras 8%
  • Audio recordings 8%
  195 Downloads (Pure)

• Faulty point unit: ABI poisoning attacks on trusted execution environments

  Alder, F., Van Bulck, J., Spielman, J., Oswald, D. & Piessens, F., 8 Feb 2022, In: Digital Threats: Research and Practice. 3, 2, p. 1-26 26 p., 13.

  Research output: Contribution to journal › Article › peer-review

  Open Access

  File

  • Reduced instruction set computing 100%
  • Shielding 41%
  • Masks 37%
  • Machine learning 29%
  • Degradation 27%
  79 Downloads (Pure)

• FuzzyKey: comparing fuzzy cryptographic primitives on resource-constrained devices

  Zhang, M., Marin, E., Oswald, D. & Singelée, D., 9 Mar 2022, Smart Card Research and Advanced Applications - 20th International Conference, CARDIS 2021, Revised Selected Papers: 20th International Conference, CARDIS 2021, Lübeck, Germany, November 11–12, 2021, Revised Selected Papers. Grosso, V. & Pöppelmann, T. (eds.). Springer Verlag, p. 289-309 21 p. (Lecture Notes in Computer Science; vol. 13173).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Resources 100%
  • Energy Consumption 98%
  • Energy utilization 75%
  • Side channel attack 43%
  • Timing Attack 40%
  88 Downloads (Pure)

• insecure://: Vulnerability analysis of URI scheme handling in Android mobile browsers

  Aldoseri, A. & Oswald, D., 28 Apr 2022, Proceedings of MADWeb 2022: Workshop on Measurements, Attacks, and Defenses for the Web. The Internet Society, 10 p. (Proceedings of the Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb)).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Internet 100%
  • Chromium 51%
  • Static analysis 51%
  • Data privacy 50%
  • Dynamic analysis 44%
  92 Downloads (Pure)
• 2021

  Magnifying side-channel leakage of lattice-based cryptosystems with chosen ciphertexts: the case study of Kyber

  Xu, Z., Pemberton, O. M., Roy, S. S., Oswald, D., Yao, W. & Zheng, Z., 27 Oct 2021, (E-pub ahead of print) In: IEEE Transactions on Computers. 14 p., 9591340.

  Research output: Contribution to journal › Article › peer-review

  Open Access

  File

  • Quantum cryptography 100%
  • Cryptography 57%
  • Side channel attack 43%
  • Standardization 33%
  • Recovery 23%
  319 Downloads (Pure)

• PLATYPUS: software-based power side-channel attacks on x86

  Lipp, M., Kogler, A., Oswald, D., Schwarz, M., Easdon, C., Canella, C. & Gruss, D., 26 Aug 2021, 2021 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society Press, p. 355-371 17 p. (Proceedings of the IEEE Symposium on Security and Privacy).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Side channel attack 100%
  • Electric power utilization 60%
  • Linux 28%
  • Flow control 26%
  • Program processors 23%
  635 Downloads (Pure)
• 2020

  Faulty Point Unit: ABI Poisoning Attacks on Intel SGX

  Alder, F., Van Bulck, J., Oswald, D. & Piessens, F., 7 Dec 2020, ACSAC '20: Annual Computer Security Applications Conference 2020. Association for Computing Machinery (ACM), p. 415-427 3427270

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Enclaves 100%
  • Floating 84%
  • Attack 56%
  • Machine Learning 19%
  • Confidentiality 18%
  167 Downloads (Pure)

• Fill your Boots: Enhanced Embedded Bootloader Exploits via Fault Injection and Binary Analysis

  Van Den Herrewegen, J., Oswald, D., Garcia, F. & Temeiza, Q., 3 Dec 2020, In: IACR Transactions on Cryptographic Hardware and Embedded Systems. 2021, 1

  Research output: Contribution to journal › Article › peer-review

  Open Access

  File

  • Microcontrollers 100%
  • Dynamic analysis 26%
  • Electric potential 22%
  • Flash memory 17%
  • Clocks 12%
  486 Downloads (Pure)

• Plundervolt: software-based fault injection attacks against Intel SGX

  Murdock, K., Oswald, D., Garcia, F., Van Bulck, J., Gruss, D. & Piessens, F., 30 Jul 2020, 2020 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society Press, p. 1466-1482 17 p. 9152636. (IEEE Symposium on Security and Privacy).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Voltage scaling 100%
  • Electric potential 82%
  • Dynamic frequency scaling 60%
  • Trusted computing 54%
  • Data storage equipment 48%
  28 Citations (Scopus)

  1179 Downloads (Pure)

• Plundervolt: How a Little Bit of Undervolting Can Create a Lot of Trouble

  Murdock, K., Oswald, D., Garcia, F., Van Bulck, J., Gruss, D. & Piessens, F., 1 Sept 2020, In: IEEE Security & Privacy Magazine. 18, 5, p. 28-37 9104908.

  Research output: Contribution to journal › Article › peer-review

  Open Access

  File

  • Cryptography 100%
  • software 83%
  • Data storage equipment 73%
  1 Citation (Scopus)

  440 Downloads (Pure)

• VoltPillager: Hardware-based fault injection attacks against Intel SGX Enclaves using the SVID voltage scaling interface

  Chen, Z., Vasilakis, G., Murdock, K., Dean, E., Oswald, D. & Garcia, F., 12 Sept 2020, Proceedings of 30th Usenix Security Symposium (USENIX Security 21). USENIX , 18 p.

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Voltage scaling 100%
  • Interfaces (computer) 75%
  • Program processors 67%
  • Computer hardware 46%
  • Electric potential 41%
  461 Downloads (Pure)
• 2019

  A tale of two worlds: assessing the vulnerability of enclave shielding runtimes

  Van Bulck, J., Oswald, D., Marin, E., Aldoseri, A., Garcia, F. D. & Piessens, F., 6 Nov 2019, CCS '19 : Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. Association for Computing Machinery (ACM), p. 1741-1758

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Enclaves 100%
  • Vulnerability 68%
  • Microsoft 23%
  • Open Source 22%
  • Mitigation 21%
  17 Citations (Scopus)

  736 Downloads (Pure)

• Breaking all the things: a systematic survey of firmware extraction and modification techniques for IoT devices

  Vasile, S., Oswald, D. & Chothia, T., 7 Mar 2019, (E-pub ahead of print) CARDIS 2018: Smart Card Research and Advanced Applications. Springer, p. 171-185 15 p. (Lecture Notes in Computer Science).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Firmware 100%
  • Internet of things 69%
  • Computer hardware 48%
  • Interfaces (computer) 38%
  • Access control 38%
  5 Citations (Scopus)

  1018 Downloads (Pure)

• Dismantling DST80-based Immobiliser Systems

  Wouters, L., Van Den Herrewegen, J., Garcia, F. D., Oswald, D., Gierlichs, B. & Preneel, B., 15 Dec 2019, In: IACR Transactions on Cryptographic Hardware and Embedded Systems. 2020, 2, p. 99-127

  Research output: Contribution to journal › Article › peer-review

  Open Access

  • Transponders 100%
  • Firmware 66%
  • Side channel attack 33%
  • Microcontrollers 26%
  • Entropy 23%
• 2018

  Dismantling the AUT64 Automotive Cipher

  Hicks, C., Garcia, F. D. & Oswald, D., 8 May 2018, In: IACR Transactions on Cryptographic Hardware and Embedded Systems. 2018, 2, p. 46-69 24 p.

  Research output: Contribution to journal › Conference article › peer-review

  Open Access

  File

  • Cryptography 100%
  • Transponders 73%
  • Authentication 52%
  • Recovery 41%
  • Communication 30%
  215 Downloads (Pure)
• 2017

  Attacking embedded ECC implementations through cmov side channels

  Chmielewski, L., Nascimento, E., Oswald, D. & Schwabe, P., 20 Oct 2017, (E-pub ahead of print) Selected Areas in Cryptography – SAC 2016: 23rd International Conference, St. John's, NL, Canada, August 10-12, 2016, Revised Selected Papers. Avanzi, R. & Heys, H. (eds.). Institute of Electrical and Electronics Engineers (IEEE), p. 99-119 22 p. (Lecture Notes in Computer Science; vol. 10532).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Side channel attack 100%
  • Sodium chloride 86%
  • Microcontrollers 79%
  • Cryptography 67%
  13 Citations (Scopus)

  550 Downloads (Pure)

• Breaking (and Fixing) a Widely Used Continuous Glucose Monitoring System

  Reverberi, L. & Oswald, D., 14 Aug 2017, Proceedings of the 11th USENIX Workshop on Offensive Technologies (WOOT '17). USENIX Association, 10 p.

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  • Glucose 100%
  • Blood 54%
  • Monitoring 49%
  • Medical problems 32%
  • Biomedical equipment 31%
• 2016

  µProxy: a hardware relay for anonymous and secure internet access

  Oswald, D. & David, C., 12 Oct 2016, (Accepted/In press) Radio Frequency Identification and Security, 12th International Workshop, (RFIDSec2016), Hong Kong. Springer, 14 p.

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

• Lock it and still lose it: on the (in)security of automotive remote keyless entry systems

  Garcia, F., Oswald, D., Kasper, T. & Pavlides, P., 12 Aug 2016, Proceedings of the 25th USENIX Security Symposium . USENIX Association, p. 929-944

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Remote control 100%
  • Cloning 65%
  • Insurance 57%
  • Recovery 32%
  70 Citations (Scopus)

  556 Downloads (Pure)

• Side-Channel Attacks on Fingerprint Matching Algorithms

  Dürmuth, M., Oswald, D. & Pastewka, N., 5 Sept 2016, (Accepted/In press) Proceedings of 6th International Workshop on Trustworthy Embedded Devices (TrustED 2016). 11 p.

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
  5 Citations (Scopus)

• Wireless Attacks on Automotive Remote Keyless Entry Systems

  Oswald, D., 28 Oct 2016, TrustED’16 - Proceedings of the 6th International Workshop on Trustworthy Embedded Devices. Association for Computing Machinery (ACM), p. 43-44 2 p.

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  File

  • Automobile electronic equipment 100%
  • Firmware 90%
  • Transponders 89%
  • Alarm systems 83%
  • Jamming 79%
  631 Downloads (Pure)
• 2015

  SCANDALee: A side-ChANnel-based DisAssembLer using local electromagnetic emanations

  Strobel, D., Bache, F., Oswald, D., Schellenberg, F. & Paar, C., 23 Apr 2015, 2015 Design, Automation and Test in Europe Conference & Exhibition (DATE), proceedings. Institute of Electrical and Electronics Engineers (IEEE), p. 139-144 6 p. 7092372

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  Open Access

  • Embedded systems 100%
  • Computer debugging 97%
  • Firmware 65%
  • Reverse engineering 61%
  • Discriminant analysis 57%
  28 Citations (Scopus)
• 2014

  Cryptographic algorithms on the GA144 asynchronous multi-core processor: implementation and side-channel analysis

  Schneider, T., von Maurich, I., Güneysu, T. & Oswald, D., Oct 2014, In: Journal of Signal Processing Systems. 77, 1-2, p. 151-167 17 p.

  Research output: Contribution to journal › Article › peer-review

  • Side-channel Analysis 100%
  • Multi-core Processor 93%
  • Cryptography 57%
  • Energy Consumption 40%
  • Attack 27%
  2 Citations (Scopus)

• Microcontrollers as (In)Security Devices for Pervasive Computing Applications

  Strobel, D., Oswald, D., Richter, B., Schellenberg, F. & Paar, C., 1 Aug 2014, In: Proceedings of the IEEE. 102, 8, p. 1157-1173 17 p.

  Research output: Contribution to journal › Article › peer-review

  Open Access

  • Ubiquitous computing 100%
  • Microcontrollers 89%
  • Embedded systems 16%
  • Internet of things 15%
  • Costs 6%
  17 Citations (Scopus)

• Physical security evaluation of the bitstream encryption mechanism of altera stratix II and stratix III FPGAs

  Swierczynski, P., Moradi, A., Oswald, D. & Paar, C., 1 Dec 2014, In: ACM Transactions on Reconfigurable Technology and Systems. 7, 4, 34.

  Research output: Contribution to journal › Article › peer-review

  • Cryptography 100%
  • Field programmable gate arrays (FPGA) 99%
  • Side channel attack 33%
  • Intellectual property 32%
  • Cloning 18%
  23 Citations (Scopus)

• Sweet dreams and nightmares: Security in the internet of things

  Kasper, T., Oswald, D. & Paar, C., 30 Jun 2014, Information Security Theory and Practice. Securing the Internet of Things: 8th IFIP WG 11.2 International Workshop, WISTP 2014, Heraklion, Crete, Greece, June 30 – July 2, 2014. Proceedings. Naccache, D. & Sauveron, D. (eds.). Springer, Vol. 8501 LNCS. p. 1-9 9 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 8501 LNCS).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  • Internet of Things 100%
  • Internet of things 46%
  • Attack 22%
  • Side-channel Analysis 20%
  • Radio Frequency Identification 19%
  5 Citations (Scopus)

• When reverse-engineering meets side-channel analysis - Digital lockpicking in practice

  Oswald, D., Strobel, D., Schellenberg, F., Kasper, T. & Paar, C., 14 Aug 2014, Selected Areas in Cryptography - SAC 2013: 20th International Conference, Burnaby, BC, Canada, August 14-16, 2013, Revised Selected Papers. Lange, T., Lauter, K. & Lisoněk, P. (eds.). Springer, Vol. 8282 LNCS. p. 571-588 18 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 8282 LNCS).

  Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

  • Side-channel Analysis 100%
  • Reverse Engineering 81%
  • Reverse engineering 60%
  • Attack 54%
  • Side channel attack 32%
  6 Citations (Scopus)