Lucas Davi

97 papers A* 38A 13B 1C 1Misc 1Journal 26Unranked 14
YearRankTypeTitle / Venue / Authors
2026 A* conf
Bento: Fine-Grained Memory Isolation for COTS WebAssembly Binaries.
WWW
Oussama Draissi, Lucas Davi
2026 — conf
Fuzzing Cross-Chain Vulnerabilities with BridgeFuzz.
EuroSec
Pascal Winkler, Christian Scholz, Jens-Rene Giesen, Noah Kappert, Lucas Davi
2026 J jnl
SseRex: Practical Symbolic Execution of Solana Smart Contracts.
CoRR
Tobias Cloosters, Pascal Winkler, Jens-Rene Giesen, Ghassan Karame, Lucas Davi
2026 J jnl
Towards Remote Attestation of Microarchitectural Attacks: The Case of Rowhammer.
CoRR
Martin Herrmann, Oussama Draissi, Christian Niesler, Ahmad-Reza Sadeghi, Lucas Davi
2026 J jnl
Walma: Learning to See Memory Corruption in WebAssembly.
CoRR
Oussama Draissi, Mark Günzel, Ahmad-Reza Sadeghi, Lucas Davi
2025 J jnl
Building trust in remote attestation through transparency - a qualitative user study on observable attestation.
Behav. Inf. Technol.
Sebastian Linsner, Kilian Demuth, Sebastian Surminski, Lucas Davi, Christian Reuter
2025 — conf
HCC: A Language-Independent Hardening Contract Compiler for Smart Contracts.
ACNS (1)
Jens-Rene Giesen, Sébastien Andreina, Michael Rodler, Ghassan Karame, Lucas Davi
2025 A* conf
Kintsugi: Secure Hotpatching for Code-Shadowing Real-Time Embedded Systems.
USENIX Security Symposium
Philipp Mackensen, Christian Niesler, Roberto Blanco, Lucas Davi, Veelasha Moonsamy
2025 A* conf
Poster: Code HarvETHter: Corpus-Driven Decompilation of Ethereum Smart Contracts.
CCS
Jens-Rene Giesen, Christian Scholz, Lucas Davi
2025 A* conf
Space RADSIM: Binary-Agnostic Fault Injection to Evaluate Cosmic Radiation Impact on Exploit Mitigation Techniques in Space.
SP
Johannes Willbold, Tobias Cloosters, Simon Wörner, Felix Buchmann, Moritz Schloegel, Lucas Davi, Thorsten Holz
2025 A conf
Targeted Fuzzing for Unsafe Rust Code: Leveraging Selective Instrumentation.
EASE
David Paaßen, Jens-Rene Giesen, Lucas Davi
2025 J jnl
Targeted Fuzzing for Unsafe Rust Code: Leveraging Selective Instrumentation.
CoRR
David Paaßen, Jens-Rene Giesen, Lucas Davi
2025 J jnl
Wemby's Web: Hunting for Memory Corruption in WebAssembly.
Proc. ACM Softw. Eng.
Oussama Draissi, Tobias Cloosters, David Klein, Michael Rodler, Marius Musch, Martin Johns, Lucas Davi
2024 A* conf
Defying the Odds: Solana's Unexpected Resilience in Spite of the Security Challenges Faced by Developers.
CCS
Sébastien Andreina, Tobias Cloosters, Lucas Davi, Jens-Rene Giesen, Marco Gutfleisch, Ghassan Karame, Alena Naiakshina, Houda Naji
2024 J jnl
Defying the Odds: Solana's Unexpected Resilience in Spite of the Security Challenges Faced by Developers.
CoRR
Sébastien Andreina, Tobias Cloosters, Lucas Davi, Jens-Rene Giesen, Marco Gutfleisch, Ghassan Karame, Alena Naiakshina, Houda Naji
2024 J jnl
Memory Corruption at the Border of Trusted Execution.
IEEE Secur. Priv.
Tobias Cloosters, Oussama Draissi, Johannes Willbold, Thorsten Holz, Lucas Davi
2024 — conf
NVM-Flip: Non-Volatile-Memory BitFlips on the System Level.
SAT-CPS@CODASPY
Felix Staudigl, Jan Philipp Thoma, Christian Niesler, Karl J. X. Sturm, Rebecca Pelke, Dominik Germek, Jan Moritz Joseph, Tim Güneysu, Lucas Davi, Rainer Leupers
2023 A* conf
ClepsydraCache - Preventing Cache Attacks with Time-Based Evictions.
USENIX Security Symposium
Jan Philipp Thoma, Christian Niesler, Dominic A. Funke, Gregor Leander, Pierre Mayr, Nils Pohl, Lucas Davi, Tim Güneysu
2023 B conf
DMA'n'Play: Practical Remote Attestation Based on Direct Memory Access.
ACNS
Sebastian Surminski, Christian Niesler, Lucas Davi, Ahmad-Reza Sadeghi
2023 J jnl
EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation.
CoRR
Michael Rodler, David Paaßen, Wenting Li, Lukas Bernhard, Thorsten Holz, Ghassan Karame, Lucas Davi
2023 A conf
EF↯CF: High Performance Smart Contract Fuzzing for Exploit Generation.
EuroS&P
Michael Rodler, David Paaßen, Wenting Li, Lukas Bernhard, Thorsten Holz, Ghassan Karame, Lucas Davi
2023 A* conf
Fuzz on the Beach: Fuzzing Solana Smart Contracts.
CCS
Sven Smolka, Jens-Rene Giesen, Pascal Winkler, Oussama Draissi, Lucas Davi, Ghassan Karame, Klaus Pohl
2023 J jnl
Fuzz on the Beach: Fuzzing Solana Smart Contracts.
CoRR
Sven Smolka, Jens-Rene Giesen, Pascal Winkler, Oussama Draissi, Lucas Davi, Ghassan Karame, Klaus Pohl
2023 — conf
SCAtt-man: Side-Channel-Based Remote Attestation for Embedded Devices that Users Understand.
CODASPY
Sebastian Surminski, Christian Niesler, Sebastian Linsner, Lucas Davi, Christian Reuter
2022 J jnl
Practical Mitigation of Smart Contract Bugs.
CoRR
Jens-Rene Giesen, Sébastien Andreina, Michael Rodler, Ghassan O. Karame, Lucas Davi
2022 A conf
RiscyROP: Automated Return-Oriented Programming Attacks on RISC-V and ARM64.
RAID
Tobias Cloosters, David Paaßen, Jianqiang Wang, Oussama Draissi, Patrick Jauernig, Emmanuel Stapf, Lucas Davi, Ahmad-Reza Sadeghi
2022 A* conf
SGXFuzz: Efficiently Synthesizing Nested Structures for SGX Enclave Fuzzing.
USENIX Security Symposium
Tobias Cloosters, Johannes Willbold, Thorsten Holz, Lucas Davi
2022 — conf
Salsa: SGX Attestation for Live Streaming Applications.
SecDev
Tobias Cloosters, Sebastian Surminski, Gerrit Sangel, Lucas Davi
2022 — conf
Tutorial: Analyzing, Exploiting, and Patching Smart Contracts in Ethereum.
SecDev
Jens-Rene Giesen, Sébastien Andreina, Michael Rodler, Ghassan O. Karame, Lucas Davi
2022 A conf
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64.
EuroS&P
Lukas Bernhard, Michael Rodler, Thorsten Holz, Lucas Davi
2022 J jnl
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64.
CoRR
Lukas Bernhard, Michael Rodler, Thorsten Holz, Lucas Davi
2021 J jnl
ClepsydraCache - Preventing Cache Attacks with Time-Based Evictions.
CoRR
Jan Philipp Thoma, Christian Niesler, Dominic A. Funke, Gregor Leander, Pierre Mayr, Nils Pohl, Lucas Davi, Tim Güneysu
2021 A* conf
EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts.
USENIX Security Symposium
Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi
2021 A* conf
HERA: Hotpatching of Embedded Real-time Applications.
NDSS
Christian Niesler, Sebastian Surminski, Lucas Davi
2021 — conf
My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers.
ESORICS (1)
David Paaßen, Sebastian Surminski, Michael Rodler, Lucas Davi
2021 J jnl
My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers.
CoRR
David Paaßen, Sebastian Surminski, Michael Rodler, Lucas Davi
2021 A conf
Nano Security: From Nano-Electronics to Secure Systems.
DATE
Ilia Polian, Frank Altmann, Tolga Arul, Christian Boit, Ralf Brederlow, Lucas Davi, Rolf Drechsler, Nan Du, Thomas Eisenbarth, Tim Güneysu, Sascha Hermann, Matthias Hiller, Rainer Leupers, Farhad Merchant, Thomas Mussenbrock, Stefan Katzenbeisser, Akash Kumar, Wolfgang Kunz, Thomas Mikolajick, Vivek Pachauri, Jean-Pierre Seifert, Frank Sill Torres, Jens Trommer
2021 A* conf
RealSWATT: Remote Software-based Attestation for Embedded Devices under Realtime Constraints.
CCS
Sebastian Surminski, Christian Niesler, Ferdinand Brasser, Lucas Davi, Ahmad-Reza Sadeghi
2020 J jnl
Breaking and Fixing Destructive Code Read Defenses.
CoRR
Jannik Pewny, Philipp Koppe, Lucas Davi, Thorsten Holz
2020 — conf
Control Behavior Integrity for Distributed Cyber-Physical Systems.
ICCPS
Sridhar Adepu, Ferdinand Brasser, Luis Garcia, Michael Rodler, Lucas Davi, Ahmad-Reza Sadeghi, Saman A. Zonouz
2020 J jnl
EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts.
CoRR
Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi
2020 A* conf
TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves.
USENIX Security Symposium
Tobias Cloosters, Michael Rodler, Lucas Davi
2020 J jnl
TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves.
CoRR
Tobias Cloosters, Michael Rodler, Lucas Davi
2019 A conf
CHASE: A Configurable Hardware-Assisted Security Extension for Real-Time Systems.
ICCAD
Ghada Dessouky, Shaza Zeitouni, Ahmad Ibrahim, Lucas Davi, Ahmad-Reza Sadeghi
2019 — conf
Combining Safety and Security in Autonomous Cars Using Blockchain Technologies.
SAFECOMP Workshops
Lucas Davi, Denis Hatebur, Maritta Heisel, Roman Wirtz
2019 A* conf
Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks.
NDSS
Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi
2018 Misc conf
Advances and throwbacks in hardware-assisted security: special session.
CASES
Ferdinand Brasser, Lucas Davi, Abhijitt Dhavlle, Tommaso Frassetto, Sai Manoj Pudukotai Dinakarrao, Setareh Rafatirad, Ahmad-Reza Sadeghi, Avesta Sasan, Hossein Sayadi, Shaza Zeitouni, Houman Homayoun
2018 J jnl
Control Behavior Integrity for Distributed Cyber-Physical Systems.
CoRR
Sridhar Adepu, Ferdinand Brasser, Luis Garcia, Michael Rodler, Lucas Davi, Ahmad-Reza Sadeghi, Saman A. Zonouz
2018 — ch.
Hardware control flow integrity.
The Continuing Arms Race
Yier Jin, Dean Sullivan, Orlando Arias, Ahmad-Reza Sadeghi, Lucas Davi
2018 A* conf
K-Miner: Uncovering Memory Corruption in Linux.
NDSS
David Gens, Simon Schmitt, Lucas Davi, Ahmad-Reza Sadeghi
2018 J jnl
Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks.
CoRR
Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi
2018 A* conf
The Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGX.
USENIX Security Symposium
Andrea Biondo, Mauro Conti, Lucas Davi, Tommaso Frassetto, Ahmad-Reza Sadeghi
2017 A* conf
Address Oblivious Code Reuse: On the Effectiveness of Leakage Resilient Diversity.
NDSS
Robert Rudd, Richard Skowyra, David Bigelow, Veer Dedhia, Thomas Hobson, Stephen Crane, Christopher Liebchen, Per Larsen, Lucas Davi, Michael Franz, Ahmad-Reza Sadeghi, Hamed Okhravi
2017 A conf
Breaking and Fixing Destructive Code Read Defenses.
ACSAC
Jannik Pewny, Philipp Koppe, Lucas Davi, Thorsten Holz
2017 A* conf
CAn't Touch This: Software-only Mitigation against Rowhammer Attacks targeting Kernel Memory.
USENIX Security Symposium
Ferdinand Brasser, Lucas Davi, David Gens, Christopher Liebchen, Ahmad-Reza Sadeghi
2017 A conf
CFI CaRE: Hardware-Supported Call and Return Enforcement for Commercial Microcontrollers.
RAID
Thomas Nyman, Jan-Erik Ekberg, Lucas Davi, N. Asokan
2017 J jnl
CFI CaRE: Hardware-supported Call and Return Enforcement for Commercial Microcontrollers.
CoRR
Thomas Nyman, Jan-Erik Ekberg, Lucas Davi, N. Asokan
2017 J jnl
Execution Integrity with In-Place Encryption.
CoRR
Dean Sullivan, Orlando Arias, David Gens, Lucas Davi, Ahmad-Reza Sadeghi, Yier Jin
2017 A* conf
LO-FAT: Low-Overhead Control Flow ATtestation in Hardware.
DAC
Ghada Dessouky, Shaza Zeitouni, Thomas Nyman, Andrew Paverd, Lucas Davi, Patrick Koeberl, N. Asokan, Ahmad-Reza Sadeghi
2017 J jnl
LO-FAT: Low-Overhead Control Flow ATtestation in Hardware.
CoRR
Ghada Dessouky, Shaza Zeitouni, Thomas Nyman, Andrew Paverd, Lucas Davi, Patrick Koeberl, N. Asokan, Ahmad-Reza Sadeghi
2017 A* conf
PT-Rand: Practical Mitigation of Data-only Attacks against Page Tables.
NDSS
Lucas Davi, David Gens, Christopher Liebchen, Ahmad-Reza Sadeghi
2016 J jnl
C-FLAT: Control-FLow ATtestation for Embedded Systems Software.
CoRR
Tigist Abera, N. Asokan, Lucas Davi, Jan-Erik Ekberg, Thomas Nyman, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
2016 A* conf
C-FLAT: Control-Flow Attestation for Embedded Systems Software.
CCS
Tigist Abera, N. Asokan, Lucas Davi, Jan-Erik Ekberg, Thomas Nyman, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
2016 J jnl
CAn't Touch This: Practical and Generic Software-only Defenses Against Rowhammer Attacks.
CoRR
Ferdinand Brasser, Lucas Davi, David Gens, Christopher Liebchen, Ahmad-Reza Sadeghi
2016 A* conf
Invited - Things, trouble, trust: on building trust in IoT systems.
DAC
Tigist Abera, N. Asokan, Lucas Davi, Farinaz Koushanfar, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
2016 A* conf
Leakage-Resilient Layout Randomization for Mobile Devices.
NDSS
Kjell Braden, Lucas Davi, Christopher Liebchen, Ahmad-Reza Sadeghi, Stephen Crane, Michael Franz, Per Larsen
2016 J jnl
SandBlaster: Reversing the Apple Sandbox.
CoRR
Razvan Deaconescu, Luke Deshotels, Mihai Bucicoiu, William Enck, Lucas Davi, Ahmad-Reza Sadeghi
2016 A* conf
SandScout: Automatic Detection of Flaws in iOS Sandbox Profiles.
CCS
Luke Deshotels, Razvan Deaconescu, Mihai Chiroiu, Lucas Davi, William Enck, Ahmad-Reza Sadeghi
2016 A* conf
Strategy without tactics: policy-agnostic hardware-enhanced control-flow integrity.
DAC
Dean Sullivan, Orlando Arias, Lucas Davi, Per Larsen, Ahmad-Reza Sadeghi, Yier Jin
2016 — conf
Subversive-C: Abusing and Protecting Dynamic Message Dispatch.
USENIX ATC
Julian Lettner, Benjamin Kollenda, Andrei Homescu, Per Larsen, Felix Schuster, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz, Michael Franz
2016 J jnl
The Cybersecurity Landscape in Industrial Control Systems.
Proc. IEEE
Stephen McLaughlin, Charalambos Konstantinou, Xueyang Wang, Lucas Davi, Ahmad-Reza Sadeghi, Michail Maniatakos, Ramesh Karri
2015 — book
Automated Software Diversity
Per Larsen, Stefan Brunthaler, Lucas Davi, Ahmad-Reza Sadeghi, Michael Franz
2015 — book
Building Secure Defenses Against Code-Reuse Attacks
Lucas Davi, Ahmad-Reza Sadeghi
2015 A* conf
Counterfeit Object-oriented Programming: On the Difficulty of Preventing Code Reuse Attacks in C++ Applications.
IEEE Symposium on Security and Privacy
Felix Schuster, Thomas Tendyck, Christopher Liebchen, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz
2015 A* conf
HAFIX: hardware-assisted flow integrity extension.
DAC
Lucas Davi, Matthias Hanreich, Debayan Paul, Ahmad-Reza Sadeghi, Patrick Koeberl, Dean Sullivan, Orlando Arias, Yier Jin
2015 A* conf
Isomeron: Code Randomization Resilient to (Just-In-Time) Return-Oriented Programming.
NDSS
Lucas Davi, Christopher Liebchen, Ahmad-Reza Sadeghi, Kevin Z. Snow, Fabian Monrose
2015 A* conf
It's a TRaP: Table Randomization and Protection against Function-Reuse Attacks.
CCS
Stephen J. Crane, Stijn Volckaert, Felix Schuster, Christopher Liebchen, Per Larsen, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz, Bjorn De Sutter, Michael Franz
2015 A* conf
Losing Control: On the Effectiveness of Control-Flow Integrity under Stack Attacks.
CCS
Mauro Conti, Stephen Crane, Lucas Davi, Michael Franz, Per Larsen, Marco Negro, Christopher Liebchen, Mohaned Qunaibit, Ahmad-Reza Sadeghi
2015 A* conf
Readactor: Practical Code Randomization Resilient to Memory Disclosure.
IEEE Symposium on Security and Privacy
Stephen Crane, Christopher Liebchen, Andrei Homescu, Lucas Davi, Per Larsen, Ahmad-Reza Sadeghi, Stefan Brunthaler, Michael Franz
2015 A conf
Securing Legacy Software against Real-World Code-Reuse Exploits: Utopia, Alchemy, or Possible Future?
AsiaCCS
Ahmad-Reza Sadeghi, Lucas Davi, Per Larsen
2015 A conf
XiOS: Extended Application Sandboxing on iOS.
AsiaCCS
Mihai Bucicoiu, Lucas Davi, Razvan Deaconescu, Ahmad-Reza Sadeghi
2014 — conf
Beasty Memories: The Quest for Practical Defense against Code Reuse Attacks.
TrustED@CCS
Ahmad-Reza Sadeghi, Lucas Davi
2014 A* conf
Hardware-Assisted Fine-Grained Control-Flow Integrity: Towards Efficient Protection of Embedded Systems Against Software Exploitation.
DAC
Lucas Davi, Patrick Koeberl, Ahmad-Reza Sadeghi
2014 A* conf
Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow Integrity Protection.
USENIX Security Symposium
Lucas Davi, Ahmad-Reza Sadeghi, Daniel Lehmann, Fabian Monrose
2013 A conf
Check My Profile: Leveraging Static Analysis for Fast and Accurate Detection of ROP Gadgets.
RAID
Blaine Stancill, Kevin Z. Snow, Nathan Otterness, Fabian Monrose, Lucas Davi, Ahmad-Reza Sadeghi
2013 A* conf
Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization.
IEEE Symposium on Security and Privacy
Kevin Z. Snow, Fabian Monrose, Lucas Davi, Alexandra Dmitrienko, Christopher Liebchen, Ahmad-Reza Sadeghi
2013 A conf
PSiOS: bring your own privacy & security to iOS devices.
AsiaCCS
Tim Werthmann, Ralf Hund, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz
2012 A* conf
MoCFI: A Framework to Mitigate Control-Flow Attacks on Smartphones.
NDSS
Lucas Davi, Alexandra Dmitrienko, Manuel Egele, Thomas Fischer, Thorsten Holz, Ralf Hund, Stefan Nürnberger, Ahmad-Reza Sadeghi
2012 A* conf
Towards Taming Privilege-Escalation Attacks on Android.
NDSS
Sven Bugiel, Lucas Davi, Alexandra Dmitrienko, Thomas Fischer, Ahmad-Reza Sadeghi, Bhargava Shastry
2011 A* conf
Poster: control-flow integrity for smartphones.
CCS
Lucas Davi, Alexandra Dmitrienko, Manuel Egele, Thomas Fischer, Thorsten Holz, Ralf Hund, Stefan Nürnberger, Ahmad-Reza Sadeghi
2011 A* conf
Poster: the quest for security against privilege escalation attacks on android.
CCS
Sven Bugiel, Lucas Davi, Alexandra Dmitrienko, Thomas Fischer, Ahmad-Reza Sadeghi, Bhargava Shastry
2011 — conf
Practical and lightweight domain isolation on Android.
SPSM@CCS
Sven Bugiel, Lucas Davi, Alexandra Dmitrienko, Stephan Heuser, Ahmad-Reza Sadeghi, Bhargava Shastry
2011 A conf
ROPdefender: a detection tool to defend against return-oriented programming attacks.
AsiaCCS
Lucas Davi, Ahmad-Reza Sadeghi, Marcel Winandy
2011 — conf
Trusted virtual domains on OKL4: secure information sharing on smartphones.
STC@CCS
Lucas Davi, Alexandra Dmitrienko, Christoph Kowalski, Marcel Winandy
2010 C conf
Privilege Escalation Attacks on Android.
ISC
Lucas Davi, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Marcel Winandy
2010 A* conf
Return-oriented programming without returns.
CCS
Stephen Checkoway, Lucas Davi, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Hovav Shacham, Marcel Winandy
2009 — conf
Dynamic integrity measurement and attestation: towards defense against return-oriented programming attacks.
STC
Lucas Davi, Ahmad-Reza Sadeghi, Marcel Winandy