Invited Talk, University of Lübeck, Lübeck, Germany
Invited talk covering the dynamic frequency side-channel attack (DF-SCA) paradigm, its extension to fingerprinting modern sandbox environments, and systematic techniques for evading machine learning-based microarchitectural attack detectors. The talk also discussed ongoing work on LLM-assisted security evaluation frameworks.
Poster Presentation, CEAB, Iowa Cyber Hub, Iowa, USA
Poster presentation at the CEAB event organized by the Iowa Cyber Hub, demonstrating the practical implications of dynamic frequency side-channel attacks and highlighting the need for hardware-aware security practices.
Poster Presentation, Youth Cyber Summit, Iowa Cyber Hub, Iowa, USA
Poster presentation at the Youth Cyber Summit organized by the Iowa Cyber Hub, engaging high school and undergraduate students in understanding how hardware-level side-channel attacks work and why they matter for real-world security.
Invited Talk, CAE-R Symposium, St. Louis, MO, USA
Invited talk at the CAE-R Symposium presenting an overview of dynamic frequency-based side-channel attacks, from website fingerprinting and keystroke inference on Linux and Android to fingerprinting containers and sandboxed cloud workloads.
Invited Talk, 2024 IEEE 9th European Symposium on Security and Privacy (EuroS&P), Vienna, Austria
Conference presentation at IEEE EuroS&P 2024, presenting the paper “Dynamic Frequency-Based Fingerprinting Attacks against Modern Sandbox Environments.” The talk showed how CPU frequency reporting sensors readable from user space on Intel and AMD processors let an attacker fingerprint Docker containers and workloads running inside gVisor, AWS Firecracker, Gramine-SGX, and AMD SEV, and presented a noise-injection countermeasure.
Poster Presentation, CAE-R Symposium, St. Louis, MO, USA
Poster presentation at the CAE-R Symposium on dynamic frequency-based fingerprinting attacks against modern sandbox environments, including Docker containers, gVisor, AWS Firecracker, Gramine-SGX, and AMD SEV.
Invited Talk, 38th Annual Computer Security Applications Conference (ACSAC'22), Austin, TX, USA
Conference presentation at ACSAC 2022, presenting the paper “DF-SCA: Dynamic Frequency Side Channel Attacks are Practical.” The talk introduced the dynamic frequency side channel, demonstrated its practicality for keystroke inference and website fingerprinting across unprivileged settings, and discussed implications across Intel, AMD, and ARM platforms.
Invited Talk, NVIDIA, Remote
Invited talk at NVIDIA presenting “DF-SCA: Dynamic Frequency Side Channel Attacks are Practical,” which shows that CPU frequency values readable by unprivileged users enable website fingerprinting and keystroke inference.