@inproceedings{zhang2024cachewarp,
  title={StackWarp: Breaking AMD SEV-SNP Integrity via Deterministic Stack-Pointer Manipulation through the CPU’s Stack Engine},
  booktitle={USENIX Security},
  author={Ruiyi Zhang and Tristan Hornetz and Daniel Weber and Fabian Thomas and Michael Schwarz},
  year={2026}
}

@inproceedings{hetterich2026instrsem,
  title={InstrSem: Automatically and Generically Inferring Semantics of (Undocumented) CPU Instructions},
  booktitle={USENIX Security},
  author={Lorenz Hetterich and Fabian Thomas and Tristan Hornetz and Michael Schwarz},
  year={2026}
}

@inproceedings{zhang2026snpeek,
  title={SNPeek: Side-Channel Analysis for Privacy Applications on Confidential VMs},
  booktitle={NDSS},
  author={Ruiyi Zhang and Albert Cheu and Adria Gascon and Daniel Moghimi and Phillipp Schoppmann and Michael Schwarz and Octavian Suciu},
  year={2026}
}

@inproceedings{gerlach2026zerostore,
  title={Zero-Store Elimination and its Implications on the SIKE Cryptosystem},
  booktitle={uASC},
  author={Lukas Gerlach and Niklas Flentje and Michael Schwarz},
  year={2026}
}

@inproceedings{thomas2025exfilstate,
  title={ExfilState: Automated Discovery of Timer-Free Cache Side Channels on ARM CPUs},
  booktitle={CCS},
  author={Fabian Thomas and Michael Torres and Daniel Moghimi and Michael Schwarz},
  year={2025}
}

@inproceedings{thomas2025riscover,
  title={RISCover: Automatic Discovery of User-exploitable Architectural Security Vulnerabilities in Closed-Source RISC-V CPUs},
  booktitle={CCS},
  author={Fabian Thomas and Eric García Arribas and Lorenz Hetterich and Daniel Weber and Lukas Gerlach and Ruiyi Zhang and Michael Schwarz},
  year={2025}
}

@inproceedings{trampert2025styled,
  title={Styled to Steal: The Overlooked Attack Surface in Email Clients},
  booktitle={CCS},
  author={Leon Trampert and Daniel Weber and Christian Rossow and Michael Schwarz},
  year={2025}
}

@inproceedings{schloegel2025cve,
  title={Confusing Value with Enumeration: Studying the Use of CVEs in Academia},
  booktitle={USENIX Security},
  author={Moritz Schloegel and Daniel Klischies and Simon Koch and David Klein and Lukas Gerlach and Malte Wessels and Leon Trampert and Martin Johns and Mathy Vanhoef and Michael Schwarz and Thorsten Holz and Jo Van Bulck},
  year={2025}
}

@inproceedings{weber2025scase,
  title={SCASE: Automated Secret Recovery via Side-Channel-Assisted Symbolic Execution},
  booktitle={USENIX Security},
  author={Daniel Weber and Lukas Gerlach and Leon Trampert and Youheng Lue and Jo Van Bulck and Michael Schwarz},
  year={2025}
}

@inproceedings{zhang2025mapalloc,
  title={Taming the Linux Memory Allocator for Rapid Prototyping},
  booktitle={DIMVA},
  author={Ruiyi Zhang and Tristan Hornetz and Lukas Gerlach and Michael Schwarz},
  year={2025}
}

@inproceedings{rainer2025rapid,
  title={Rapid Reversing of Non-Linear CPU Cache Slice Functions: Unlocking Physical Address Leakage},
  booktitle={S\&P},
  author={Mikka Rainer and Lorenz Hetterich and Fabian Thomas and Tristan Hornetz and Leon Trampert and Lukas Gerlach and Michael Schwarz},
  year={2025}
}

@inproceedings{gerlach2025compiler,
  title={Do Compilers Break Constant-time Guarantees?},
  booktitle={FC},
  author={Lukas Gerlach and Robert Pietsch and Michael Schwarz},
  year={2025}
}

@inproceedings{hornetz2025lixom,
  title={Lixom: Protecting Encryption Keys with Execute-Only Memory},
  booktitle={FC},
  author={Tristan Hornetz and Lukas Gerlach and Michael Schwarz},
  year={2025}
}

@inproceedings{trampert2025peripheralinstinct,
  title={Peripheral Instinct: How External Devices Breach Browser Sandboxes},
  booktitle={WWW},
  author={Leon Trampert and Lorenz Hetterich and Lukas Gerlach and Mona Schappert and Christian Rossow and Michael Schwarz},
  year={2025}
}

@inproceedings{hetterich2025shadowload,
  title={ShadowLoad: Injecting State into Hardware Prefetchers},
  booktitle={ASPLOS},
  author={Lorenz Hetterich and Fabian Thomas and Lukas Gerlach and Ruiyi Zhang and Nils Bernsdorf and Eduard Ebert and Michael Schwarz},
  year={2025}
}

@inproceedings{trampert2025cascadingspysheets,
  title={Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting},
  booktitle={NDSS},
  author={Leon Trampert and Daniel Weber and Lukas Gerlach and Christian Rossow and Michael Schwarz},
  year={2025}
}

@inproceedings{hornetz2025portprint,
  title={PortPrint: Identifying Inaccessible Code with Port Contention},
  booktitle={uASC},
  author={Tristan Hornetz and Michael Schwarz},
  year={2025}
}

@inproceedings{trampert2025hiddenplainsight,
  title={Hidden in Plain Sight: Scriptless Microarchitectural Attacks via TrueType Font Hinting},
  booktitle={uASC},
  author={Leon Trampert and Michael Schwarz},
  year={2025}
}

@inproceedings{weber2024irqguard,
  title={No Leakage Without State Change: Repurposing Configurable CPU Exceptions to Prevent Microarchitectural Attacks},
  booktitle={ACSAC},
  author={Daniel Weber and Leonard Niemann and Lukas Gerlach and Jan Reineke and Michael Schwarz},
  year={2024}
}

@inproceedings{zhang2024cachewarp,
  title={CacheWarp: Software-based Fault Injection using Selective State Reset},
  booktitle={USENIX Security},
  author={Ruiyi Zhang and Lukas Gerlach and Daniel Weber and Lorenz Hetterich and Youheng Lü and Andreas Kogler and Michael Schwarz},
  year={2024}
}

@inproceedings{bauer2024switchpoline,
  title={Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8},
  booktitle={ASIACCS},
  author={Markus Bauer and Lorenz Hetterich and Christian Rossow and Michael Schwarz},
  year={2024}
}

@inproceedings{gerlach2024hash,
  title={Efficient and Generic Microarchitectural Hash-Function Recovery},
  booktitle={S\&P},
  author={Lukas Gerlach and Simon Schwarz and Nicolas Faroß and Michael Schwarz},
  year={2024}
}

@inproceedings{schlueter2023fetchbench,
  title={FetchBench: Systematic Identification and Characterization of Proprietary Prefetchers},
  booktitle={CCS},
  author={Till Schlüter and Amit Choudhari and Lorenz Hetterich and Leon Trampert and Hamed Nemati and Ahmad Ibrahim and Michael Schwarz and Christian Rossow and Nils Ole Tippenhauer},
  year={2023}
}

@inproceedings{trampert2023honey,
  title={Honey, I Cached our Security Tokens - Re-usage of Security Tokens in the Wild},
  booktitle={RAID},
  author={Leon Trampert and Ben Stock and Sebastian Roth},
  year={2023}
}

@inproceedings{gerlach2023blacksmithrepro,
  title={A Rowhammer Reproduction Study Using the Blacksmith Fuzzer},
  booktitle={ESORICS},
  author={Lukas Gerlach and Fabian Thomas and Robert Pietsch and Michael Schwarz},
  year={2023}
}

@inproceedings{weber2023masc,
  title={Indirect Meltdown: Building Novel Side-Channel Attacks from Transient Execution Attacks},
  booktitle={ESORICS},
  author={Daniel Weber and Fabian Thomas and Lukas Gerlach and Ruiyi Zhang and Michael Schwarz},
  year={2023}
}

@inproceedings{weber2023meltdown3a,
  title={Reviving Meltdown 3a},
  booktitle={ESORICS},
  author={Daniel Weber and Fabian Thomas and Lukas Gerlach and Ruiyi Zhang and Michael Schwarz},
  year={2023}
}

@inproceedings{kogler2023collidepower,
  title={Collide+Power: Leaking Inaccessible Data with Software-based Power Side Channels},
  booktitle={USENIX Security},
  author={Andreas Kogler and Jonas Juffinger and Lukas Giner and Lukas Gerlach and Martin Schwarzl and Michael Schwarz and Daniel Gruss and Stefan Mangard},
  year={2023}
}

@inproceedings{zhang2023mwait,
  title={(M)WAIT for It: Bridging the Gap between Microarchitectural and Architectural Side Channels},
  booktitle={USENIX Security},
  author={Ruiyi Zhang and Taehyun Kim and Daniel Weber and Michael Schwarz},
  year={2023}
}

@inproceedings{thomas2023hammulator,
  title={Hammulator: Simulate Now - Exploit Later},
  booktitle={DRAMSec},
  author={Fabian Thomas and Lukas Gerlach and Michael Schwarz},
  year={2023}
}

@inproceedings{borrello2023cpu,
  title={CustomProcessingUnit: Reverse Engineering and Customization of Intel Microcode},
  booktitle={WOOT},
  author={Pietro Borrello and Catherine Easdon and Martin Schwarzl and Roland Czerny and Michael Schwarz},
  year={2023}
}

@inproceedings{gerlach2023riscv,
  title={A Security RISC: Microarchitectural Attacks on Hardware RISC-V CPUs},
  booktitle={S\&P},
  author={Lukas Gerlach and Daniel Weber and Ruiyi Zhang and Michael Schwarz},
  year={2023}
}

@inproceedings{schwarzl2023compression,
  title={Practical Timing Side-Channel Attacks on Memory Compression},
  booktitle={S\&P},
  author={Martin Schwarzl and Pietro Borrello and Gururaj Saileshwar and Hanna Müller and Michael Schwarz and Daniel Gruss},
  year={2023}
}

@inproceedings{chakraborty2023talus,
  title={TALUS: Reinforcing TEE Confidentiality with Cryptographic Coprocessors},
  booktitle={FC},
  author={Dhiman Chakraborty and Michael Schwarz and Sven Bugiel},
  year={2023}
}

@inproceedings{karvandi2022hyperdbg,
  title={HyperDbg: Reinventing Hardware-Assisted Debugging},
  booktitle={CCS},
  author={Mohammad Sina Karvandi and MohammadHossein Gholamrezaei and Saleh Khalaj Monfared and Soroush Meghdadizanjani and Behrooz Abbassi and Ali Amini and Reza Mortazavi and Saeid Gorgin and Dara Rahmati and Michael Schwarz},
  year={2022}
}

@inproceedings{rokicki2022portcontention,
  title={CPU Port Contention Without SMT},
  booktitle={ESORICS},
  author={Thomas Rokicki and Clémentine Maurice and Michael Schwarz},
  year={2022}
}

@inproceedings{schwarzl2022dpi,
  title={Robust and Scalable Process Isolation against Spectre in the Cloud},
  booktitle={ESORICS},
  author={Martin Schwarzl and Pietro Borrello and Andreas Kogler and Kenton Varda and Thomas Schuster and Michael Schwarz and Daniel Gruss},
  year={2022}
}

@inproceedings{trampert2022uarchfp,
  title={Browser-based CPU Fingerprinting},
  booktitle={ESORICS},
  author={Leon Trampert and Christian Rossow and Michael Schwarz},
  year={2022}
}

@inproceedings{borrello2022aepicleak,
  title={ÆPIC Leak: Architecturally Leaking Uninitialized Data from the Microarchitecture},
  booktitle={USENIX Security},
  author={Pietro Borrello and Andreas Kogler and Martin Schwarzl and Moritz Lipp and Daniel Gruss and Michael Schwarz},
  year={2022}
}

@inproceedings{easdon2022rapid,
  title={Rapid Prototyping for Microarchitectural Attacks},
  booktitle={USENIX Security},
  author={Catherine Easdon and Michael Schwarz and Martin Schwarzl and Daniel Gruss},
  year={2022}
}

@inproceedings{giner2022lvi,
  title={Repurposing Segmentation as a Practical LVI-NULL Mitigation in SGX},
  booktitle={USENIX Security},
  author={Lukas Giner and Andreas Kogler and Claudio Canella and Michael Schwarz and Daniel Gruss},
  year={2022}
}

@inproceedings{kogler2022minefield,
  title={Minefield: A Software-only Protection for SGX Enclaves against DVFS Attacks},
  booktitle={USENIX Security},
  author={Andreas Kogler and Daniel Gruss and Michael Schwarz},
  year={2022}
}

@inproceedings{lipp2022amd,
  title={AMD Prefetch Attacks through Power and Time},
  booktitle={USENIX Security},
  author={Moritz Lipp and Daniel Gruss and Michael Schwarz},
  year={2022}
}

@inproceedings{hetterich2022applespectre,
  title={Branch Different - Spectre Attacks on Apple Silicon},
  booktitle={DIMVA},
  author={Lorenz Hetterich and Michael Schwarz},
  year={2022}
}

@inproceedings{kogler2022msrtemplate,
  title={Finding and Exploiting CPU Features using MSR Templating},
  booktitle={S\&P},
  author={Andreas Kogler and Daniel Weber and Martin Haubenwallner and Moritz Lipp and Daniel Gruss and Michael Schwarz},
  year={2022}
}

@inproceedings{canella2021chestnut,
  title={Automating Seccomp Filter Generation for Linux Applications},
  booktitle={CCSW},
  author={Claudio Canella and Mario Werner and Daniel Gruss and Michael Schwarz},
  year={2021}
}

@inproceedings{weber2021osiris,
  title={Osiris: Automated Discovery of Microarchitectural Side Channels},
  booktitle={USENIX Security},
  author={Daniel Weber and Ahmad Ibrahim and Hamed Nemati and Michael Schwarz and Christian Rossow},
  year={2021}
}

@inproceedings{lipp2021platypus,
  title={PLATYPUS: Software-based Power Side-Channel Attacks on x86},
  booktitle={S\&P},
  author={Moritz Lipp and Andreas Kogler and David Oswald and Michael Schwarz and Catherine Easdon and Claudio Canella and Daniel Gruss},
  year={2021}
}

@inproceedings{schwarzl2021specderef,
  title={Speculative Dereferencing of Registers: Reviving Foreshadow},
  booktitle={FC},
  author={Martin Schwarzl and Thomas Schuster and Michael Schwarz and Daniel Gruss},
  year={2021}
}

@inproceedings{schwarzl2021specfuscator,
  title={Specfuscator: Evaluating Branch Removal as a Spectre Mitigation},
  booktitle={FC},
  author={Martin Schwarzl and Claudio Canella and Daniel Gruss and Michael Schwarz},
  year={2021}
}