Cristiano Giuffrida

Google Scholar ORCID: 0000-0002-8329-5929
69 publications in security and cryptology related venues
Year
Venue
Title
2025
conf/sp
Training Solo: On the Limitations of Domain Isolation Against Spectre-v2 Attacks.
Sander Wiebing Cristiano Giuffrida
2025
conf/sp
Half Spectre, Full Exploit: Hardening Rowhammer Attacks with Half-Spectre Gadgets.
Andrea Di Dio Mathé Hertogh Cristiano Giuffrida
2025
conf/eurosp
LibAFLGo: Evaluating and Advancing Directed Greybox Fuzzing.
Elia Geretto Andrea Jemmett Cristiano Giuffrida Herbert Bos
2025
conf/uss
RangeSanitizer: Detecting Memory Errors with Efficient Range Checks.
Floris Gorter Cristiano Giuffrida
2025
conf/uss
Phantom Trails: Practical Pre-Silicon Discovery of Transient Data Leaks.
Alvise de Faveri Tron Raphael Isemann Hany Ragab Cristiano Giuffrida Klaus von Gleissenthall Herbert Bos
2024
conf/uss
InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2.
Sander Wiebing Alvise de Faveri Tron Herbert Bos Cristiano Giuffrida
2024
conf/uss
Practical Data-Only Attack Generation.
Brian Johannesmeyer Asia Slowinska Herbert Bos Cristiano Giuffrida
2024
conf/uss
SafeFetch: Practical Double-Fetch Protection with Kernel-Fetch Caching.
Victor Duta Mitchel Aloserij Cristiano Giuffrida
2024
conf/uss
GhostRace: Exploiting and Mitigating Speculative Race Conditions.
Hany Ragab Andrea Mambretti Anil Kurmus Cristiano Giuffrida
2024
conf/sp
Leaky Address Masking: Exploiting Unmasked Spectre Gadgets with Noncanonical Address Translation.
Mathé Hertogh Sander Wiebing Cristiano Giuffrida
2024
conf/sp
Sticky Tags: Efficient and Deterministic Spatial Memory Error Mitigation using Persistent Memory Tags.
Floris Gorter Taddeus Kroes Herbert Bos Cristiano Giuffrida
2024
conf/ndss
Predictive Context-sensitive Fuzzing.
Pietro Borrello Andrea Fioraldi Daniele Cono D'Elia Davide Balzarotti Leonardo Querzoni Cristiano Giuffrida
2023
conf/uss
FloatZone: Accelerating Memory Error Detection using the Floating Point Unit.
Floris Gorter Enrico Barberis Raphael Isemann Erik van der Kouwe Cristiano Giuffrida Herbert Bos
2023
conf/uss
Uncontained: Uncovering Container Confusion in the Linux Kernel.
Jakob Koschel Pietro Borrello Daniele Cono D'Elia Herbert Bos Cristiano Giuffrida
2023
conf/ndss
Copy-on-Flip: Hardening ECC Memory Against Rowhammer Attacks.
Andrea Di Dio Koen Koning Herbert Bos Cristiano Giuffrida
2023
conf/ndss
Let Me Unwind That For You: Exceptions to Backward-Edge Protection.
Victor Duta Fabian Freyer Fabio Pagani Marius Muench Cristiano Giuffrida
2023
conf/acsac
Triereme: Speeding up hybrid fuzzing through efficient query scheduling.
Elia Geretto Julius Hohnerlein Cristiano Giuffrida Herbert Bos Erik van der Kouwe Klaus von Gleissenthall
2022
conf/ccs
DangZero: Efficient Use-After-Free Detection via Direct Page Table Access.
Floris Gorter Koen Koning Herbert Bos Cristiano Giuffrida
2022
conf/uss
Branch History Injection: On the Effectiveness of Hardware Mitigations Against Cross-Privilege Spectre-v2 Attacks.
Enrico Barberis Pietro Frigo Marius Muench Herbert Bos Cristiano Giuffrida
2022
conf/uss
TLB;DR: Enhancing TLB-based Attacks with TLB Desynchronized Reverse Engineering.
Andrei Tatar Daniël Trujillo Cristiano Giuffrida Herbert Bos
2022
conf/sp
Mitigating Information Leakage Vulnerabilities with Type-based Data Isolation.
Alyssa Milburn Erik van der Kouwe Cristiano Giuffrida
2022
conf/ndss
Kasper: Scanning for Generalized Transient Execution Gadgets in the Linux Kernel.
Brian Johannesmeyer Jakob Koschel Kaveh Razavi Herbert Bos Cristiano Giuffrida
2022
conf/acsac
Snappy: Efficient Fuzzing with Adaptive and Mutable Snapshots.
Elia Geretto Cristiano Giuffrida Herbert Bos Erik van der Kouwe
2021
conf/ccs
Constantine: Automatic Side-Channel Resistance Using Efficient Control and Data Flow Linearization.
Pietro Borrello Daniele Cono D'Elia Leonardo Querzoni Cristiano Giuffrida
2021
conf/uss
SMASH: Synchronized Many-sided Rowhammer Attacks from JavaScript.
Finn de Ridder Pietro Frigo Emanuele Vannacci Herbert Bos Cristiano Giuffrida Kaveh Razavi
2021
conf/uss
Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks.
Hany Ragab Enrico Barberis Herbert Bos Cristiano Giuffrida
2021
conf/sp
CrossTalk: Speculative Data Leaks Across Cores Are Real.
Hany Ragab Alyssa Milburn Kaveh Razavi Herbert Bos Cristiano Giuffrida
2021
conf/dsn
FIRestarter: Practical Software Crash Recovery with Targeted Library-level Fault Injection.
Koustubha Bhat Erik van der Kouwe Herbert Bos Cristiano Giuffrida
2020
conf/ccs
Speculative Probing: Hacking Blind in the Spectre Era.
Enes Göktas Kaveh Razavi Georgios Portokalidis Herbert Bos Cristiano Giuffrida
2020
conf/uss
ParmeSan: Sanitizer-guided Greybox Fuzzing.
Sebastian Österlund Kaveh Razavi Herbert Bos Cristiano Giuffrida
2020
conf/sp
: Practical Cache Attacks from the Network.
Michael Kurth Ben Gras Dennis Andriesse Cristiano Giuffrida Herbert Bos Kaveh Razavi
2020
conf/sp
TRRespass: Exploiting the Many Sides of Target Row Refresh.
Pietro Frigo Emanuele Vannacci Hasan Hassan Victor van der Veen Onur Mutlu Cristiano Giuffrida Herbert Bos Kaveh Razavi
2020
conf/eurosp
TagBleed: Breaking KASLR on the Isolated Kernel Address Space using Tagged TLBs.
Jakob Koschel Cristiano Giuffrida Herbert Bos Kaveh Razavi
2020
conf/ndss
ABSynthe: Automatic Blackbox Side-channel Synthesis on Commodity Microarchitectures.
Ben Gras Cristiano Giuffrida Michael Kurth Herbert Bos Kaveh Razavi
2020
conf/acsac
Cupid : Automatic Fuzzer Selection for Collaborative Fuzzing.
Emre Güler Philipp Görz Elia Geretto Andrea Jemmett Sebastian Österlund Herbert Bos Cristiano Giuffrida Thorsten Holz
2019
conf/uss
Terminal Brain Damage: Exposing the Graceless Degradation in Deep Neural Networks Under Hardware Fault Attacks.
Sanghyun Hong Pietro Frigo Yigitcan Kaya Cristiano Giuffrida Tudor Dumitras
2019
conf/sp
Exploiting Correcting Codes: On the Effectiveness of ECC Memory Against Rowhammer Attacks.
Lucian Cojocar Kaveh Razavi Cristiano Giuffrida Herbert Bos
2019
conf/sp
RIDL: Rogue In-Flight Data Load.
Stephan van Schaik Alyssa Milburn Sebastian Österlund Pietro Frigo Giorgi Maisuradze Kaveh Razavi Herbert Bos Cristiano Giuffrida
2019
conf/eurosp
SoK: Benchmarking Flaws in Systems Security.
Erik van der Kouwe Gernot Heiser Dennis Andriesse Herbert Bos Cristiano Giuffrida
2019
conf/acsac
VPS: excavating high-level C++ constructs from low-level binaries to protect dynamic dispatching.
Andre Pawlowski Victor van der Veen Dennis Andriesse Erik van der Kouwe Thorsten Holz Cristiano Giuffrida Herbert Bos
2018
conf/uss
Translation Leak-aside Buffer: Defeating Cache Side-channel Protections with TLB Attacks.
Ben Gras Kaveh Razavi Herbert Bos Cristiano Giuffrida
2018
conf/uss
Malicious Management Unit: Why Stopping Cache Attacks in Software is Harder Than You Think.
Stephan van Schaik Cristiano Giuffrida Herbert Bos Kaveh Razavi
2018
conf/sp
Grand Pwning Unit: Accelerating Microarchitectural Attacks with the GPU.
Pietro Frigo Cristiano Giuffrida Herbert Bos Kaveh Razavi
2018
conf/eurosp
Position-Independent Code Reuse: On the Effectiveness of ASLR in the Absence of Information Disclosure.
Enes Göktas Benjamin Kollenda Philipp Koppe Erik Bosman Georgios Portokalidis Thorsten Holz Herbert Bos Cristiano Giuffrida
2018
conf/acsac
TIFF: Using Input Type Inference To Improve Fuzzing.
Vivek Jain Sanjay Rawat Cristiano Giuffrida Herbert Bos
2018
conf/acsac
Type-After-Type: Practical and Complete Type-Safe Memory Reuse.
Erik van der Kouwe Taddeus Kroes Chris Ouwehand Herbert Bos Cristiano Giuffrida
2017
conf/ccs
The Dynamics of Innocent Flesh on the Bone: Code Reuse Ten Years Later.
Victor van der Veen Dennis Andriesse Manolis Stamatogiannakis Xi Chen Herbert Bos Cristiano Giuffrida
2017
conf/eurosp
CodeArmor: Virtualizing the Code Space to Counter Disclosure Attacks.
Xi Chen Herbert Bos Cristiano Giuffrida
2017
conf/ndss
Safelnit: Comprehensive and Practical Mitigation of Uninitialized Read Vulnerabilities.
Alyssa Milburn Herbert Bos Cristiano Giuffrida
2017
conf/ndss
MARX: Uncovering Class Hierarchies in C++ Programs.
Andre Pawlowski Moritz Contag Victor van der Veen Chris Ouwehand Thorsten Holz Herbert Bos Elias Athanasopoulos Cristiano Giuffrida
2017
conf/ndss
ASLR on the Line: Practical Cache Attacks on the MMU.
Ben Gras Kaveh Razavi Erik Bosman Herbert Bos Cristiano Giuffrida
2017
conf/ndss
VUzzer: Application-aware Evolutionary Fuzzing.
Sanjay Rawat Vivek Jain Ashish Kumar Lucian Cojocar Cristiano Giuffrida Herbert Bos
2017
conf/dsn
Towards Automated Discovery of Crash-Resistant Primitives in Binary Executables.
Benjamin Kollenda Enes Göktas Tim Blazytko Philipp Koppe Robert Gawlik Radhesh Krishnan Konoth Cristiano Giuffrida Herbert Bos Thorsten Holz
2016
conf/ccs
Drammer: Deterministic Rowhammer Attacks on Mobile Platforms.
Victor van der Veen Yanick Fratantonio Martina Lindorfer Daniel Gruss Clémentine Maurice Giovanni Vigna Herbert Bos Kaveh Razavi Cristiano Giuffrida
2016
conf/ccs
TypeSan: Practical Type Confusion Detection.
István Haller Yuseok Jeon Hui Peng Mathias Payer Cristiano Giuffrida Herbert Bos Erik van der Kouwe
2016
conf/uss
Flip Feng Shui: Hammering a Needle in the Software Stack.
Kaveh Razavi Ben Gras Erik Bosman Bart Preneel Cristiano Giuffrida Herbert Bos
2016
conf/uss
Undermining Information Hiding (and What to Do about It).
Enes Göktas Robert Gawlik Benjamin Kollenda Elias Athanasopoulos Georgios Portokalidis Cristiano Giuffrida Herbert Bos
2016
conf/uss
Poking Holes in Information Hiding.
Angelos Oikonomopoulos Elias Athanasopoulos Herbert Bos Cristiano Giuffrida
2016
conf/sp
Dedup Est Machina: Memory Deduplication as an Advanced Exploitation Vector.
Erik Bosman Kaveh Razavi Herbert Bos Cristiano Giuffrida
2016
conf/sp
A Tough Call: Mitigating Advanced Code-Reuse Attacks at the Binary Level.
Victor van der Veen Enes Göktas Moritz Contag Andre Pawlowski Xi Chen Sanjay Rawat Herbert Bos Thorsten Holz Elias Athanasopoulos Cristiano Giuffrida
2016
conf/dsn
Secure and Efficient Multi-Variant Execution Using Hardware-Assisted Process Virtualization.
Koen Koning Herbert Bos Cristiano Giuffrida
2016
conf/dsn
OSIRIS: Efficient and Consistent Recovery of Compartmentalized Operating Systems.
Koustubha Bhat Dirk Vogt Erik van der Kouwe Ben Gras Lionel Sambuc Andrew S. Tanenbaum Herbert Bos Cristiano Giuffrida
2016
conf/acsac
VTPin: practical VTable hijacking protection for binaries.
Pawel Sarbinowski Vasileios P. Kemerlis Cristiano Giuffrida Elias Athanasopoulos
2015
conf/ccs
Practical Context-Sensitive CFI.
Victor van der Veen Dennis Andriesse Enes Göktas Ben Gras Lionel Sambuc Asia Slowinska Herbert Bos Cristiano Giuffrida
2015
conf/ndss
StackArmor: Comprehensive Protection From Stack-based Memory Error Vulnerabilities for Binaries.
Xi Chen Asia Slowinska Dennis Andriesse Herbert Bos Cristiano Giuffrida
2015
conf/dsn
Lightweight Memory Checkpointing.
Dirk Vogt Cristiano Giuffrida Herbert Bos Andrew S. Tanenbaum
2013
conf/dsn
Practical automated vulnerability monitoring using program state invariants.
Cristiano Giuffrida Lorenzo Cavallaro Andrew S. Tanenbaum
2012
conf/ccs
Memoirs of a browser: a cross-browser detection model for privacy-breaching extensions.
Cristiano Giuffrida Stefano Ortolani Bruno Crispo
2012
conf/uss
Enhanced Operating System Security Through Efficient and Fine-grained Address Space Randomization.
Cristiano Giuffrida Anton Kuijsten Andrew S. Tanenbaum

Coauthors

Alvise de Faveri Tron (2)
Alyssa Milburn (4)
Andre Pawlowski (3)
Andrea Di Dio (2)
Andrea Fioraldi (1)
Andrea Jemmett (2)
Andrea Mambretti (1)
Andrei Tatar (1)
Andrew S. Tanenbaum (4)
Angelos Oikonomopoulos (1)
Anil Kurmus (1)
Anton Kuijsten (1)
Ashish Kumar (1)
Asia Slowinska (3)
Bart Preneel (1)
Ben Gras (7)
Benjamin Kollenda (3)
Brian Johannesmeyer (2)
Bruno Crispo (1)
Chris Ouwehand (2)
Clémentine Maurice (1)
Cristiano Giuffrida (69)
Daniel Gruss (1)
Daniël Trujillo (1)
Daniele Cono D'Elia (3)
Davide Balzarotti (1)
Dennis Andriesse (6)
Dirk Vogt (2)
Elia Geretto (4)
Elias Athanasopoulos (5)
Emanuele Vannacci (2)
Emre Güler (1)
Enes Göktas (6)
Enrico Barberis (3)
Erik Bosman (4)
Erik van der Kouwe (10)
Fabian Freyer (1)
Fabio Pagani (1)
Finn de Ridder (1)
Floris Gorter (4)
Georgios Portokalidis (3)
Gernot Heiser (1)
Giorgi Maisuradze (1)
Giovanni Vigna (1)
Hany Ragab (4)
Hasan Hassan (1)
Herbert Bos (54)
Hui Peng (1)
István Haller (1)
Jakob Koschel (3)
Julius Hohnerlein (1)
Kaveh Razavi (18)
Klaus von Gleissenthall (2)
Koen Koning (3)
Koustubha Bhat (2)
Leonardo Querzoni (2)
Lionel Sambuc (2)
Lorenzo Cavallaro (1)
Lucian Cojocar (2)
Manolis Stamatogiannakis (1)
Marius Muench (2)
Martina Lindorfer (1)
Mathé Hertogh (2)
Mathias Payer (1)
Michael Kurth (2)
Mitchel Aloserij (1)
Moritz Contag (2)
Onur Mutlu (1)
Pawel Sarbinowski (1)
Philipp Görz (1)
Philipp Koppe (2)
Pietro Borrello (3)
Pietro Frigo (6)
Radhesh Krishnan Konoth (1)
Raphael Isemann (2)
Robert Gawlik (2)
Sander Wiebing (3)
Sanghyun Hong (1)
Sanjay Rawat (3)
Sebastian Österlund (3)
Stefano Ortolani (1)
Stephan van Schaik (2)
Taddeus Kroes (2)
Thorsten Holz (6)
Tim Blazytko (1)
Tudor Dumitras (1)
Vasileios P. Kemerlis (1)
Victor Duta (2)
Victor van der Veen (7)
Vivek Jain (2)
Xi Chen (4)
Yanick Fratantonio (1)
Yigitcan Kaya (1)
Yuseok Jeon (1)
Filters
Select all Unselect all
Years:  to