Publications

IEEE ICCADCountermeasuresFormal verification

Inconstant: Refining Assumptions in Automated Formal Constant-Time CPU Verification

Flavien Solt and Chris Fletcher

IEEE/ACM ISCAOffenseFuzzing & validation

HartBreaker: Deterministic Fuzzing of Multi-Hart RISC-V CPUs with Non-Deterministic Programs

Quentin Bordier, Tobias Kovats, Flavien Solt, and Kaveh Razavi

IEEE EuroS&PCountermeasuresFormal verificationInformation-flow tracking

VerIFI: Formal Verification of Microarchitectural Information-Flow Integrity

Katharina Ceesay-Seitz, Flavien Solt, Mengyuan Yin, and Kaveh Razavi

IEEE Symposium on Security & PrivacyOffenseFuzzing & validation

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, B. Köpf, and Stavros Volos

Distinguished Paper Award

IEEE ICCADTools & analysisInformation-flow tracking

Pathfinder: Constructing Cycle-accurate Taint Graphs for Analyzing Information Flow Traces

Katharina Ceesay-Seitz, Flavien Solt, Alexander Klukas, and Kaveh Razavi

ACM CCSOffenseInformation-flow tracking

MileSan: Detecting Exploitable Microarchitectural Leakage via Differential Hardware–Software Taint Tracking

T. Kovats, Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi

USENIX SecurityTools & analysisDRAM & Rowhammer

McSee: Evaluating Advanced Rowhammer Attacks and Defenses via Automated DRAM Traffic Analysis

Patrick Jattke, Michele Marazzi, Flavien Solt, Max Wipfli, Stefan Gloor, and Kaveh Razavi

USENIX SecurityTools & analysisFuzzing & validation

Encarsia: Evaluating CPU Fuzzers via Automatic Bug Injection

Matej Bölcskei, Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi

Distinguished Artifact Award

USENIX SecurityOffenseFuzzing & validation

Lost in Translation: Enabling Confused Deputy Attacks on EDA Software with TransFuzz

Flavien Solt and Kaveh Razavi

ACM CCSCountermeasuresFormal verificationInformation-flow tracking

μCFI: Formal Verification of Microarchitectural Control-flow Integrity

Katharina Ceesay-Seitz, Flavien Solt, and Kaveh Razavi

IEEE/ACM ISCATools & analysisDRAM & Rowhammer

HiFi-DRAM: Enabling High-Fidelity DRAM Research by Uncovering Sense Amplifiers with IC Imaging

Michele Marazzi, Tristan Sachsenweger, Flavien Solt, Peng Zeng, Kubo Takashi, Maksym Yarema, et al.

USENIX SecurityOffenseDRAM & Rowhammer

ZenHammer: Rowhammer Attacks on AMD Zen-based Platforms

Patrick Jattke, M. Wipfli, Flavien Solt, Michele Marazzi, Matej Bölcskei, and Kaveh Razavi

IEEE ICCADTools & analysisInformation-flow tracking

HybriDIFT: Scalable Memory-Aware Dynamic Information Flow Tracking for Hardware

Flavien Solt and Kaveh Razavi

USENIX SecurityOffenseFuzzing & validation

Cascade: CPU Fuzzing via Intricate Program Generation

Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi

IEEE Symposium on Security & PrivacyCountermeasuresDRAM & Rowhammer

Rega: Scalable Rowhammer Mitigation with Refresh-Generating Activations

Michele Marazzi, Flavien Solt, Patrick Jattke, Kubo Takashi, and Kaveh Razavi

IEEE/ACM MICROTools & analysisFuzzing & validation

RemembERR: Leveraging Microprocessor Errata for Design Testing and Validation

Flavien Solt, Patrick Jattke, and Kaveh Razavi

IEEE Symposium on Security & PrivacyCountermeasuresDRAM & Rowhammer

ProTRR: Principled Yet Optimal In-DRAM Target Row Refresh

Michele Marazzi, Patrick Jattke, Flavien Solt, and Kaveh Razavi

USENIX SecurityTools & analysisInformation-flow tracking

CellIFT: Leveraging Cells for Scalable and Precise Dynamic Information Flow Tracking in RTL

Flavien Solt, Ben Gras, and Kaveh Razavi