SECTRS @ ETH Zurich @sectrs_ethz

Secure & Trustworthy Systems Group @CSatETH @ETH Zürich. Led by Shweta Shinde @shw3ta_shinde sectrs.ethz.ch Zurich Joined January 2021

Tweets

12
Followers

80
Following

0
Likes

16

Shweta Shinde @shw3ta_shinde

2 years ago

We provide an overview of this new family of attacks ahoi-attacks.github.io/blog/ahoi-over… Track CVE-2024-25742, CVE-2024-25743, CVE-2024-25744 for more updates on fixes and patches A fantastic effort by @sectrs_ethz team: @BenedictSchluet @SuprajaSridhara @andrinbertschi @Zauney

0 2 3 811 1

Our second attack #WeSee to appear @IEEESSP breaks AMD SEV-SNP by sending an interrupt specially introduced for SEV. Starting from a kernel read to arbitrary code injection, we gain a root shell. Details & Demo at ahoi-attacks.github.io/wesee/?1337

1 1 2 566 1

Shweta Shinde @shw3ta_shinde

2 years ago

Our first attack #Heckler to appear @USENIXSecurity breaks Intel TDX and AMD SEV-SNP by sending interrupts that trigger existing handlers to change the register state and variables in userspace. We break sshd, sudo, and other apps Details & Demo at ahoi-attacks.github.io/heckler/?1337

1 1 1 471 0

Shweta Shinde @shw3ta_shinde

2 years ago

Can a malicious cloud provider send bad notifications to break confidential VMs? Disclosing #AhoiAttacks that break confidential computing offered by AMD SEV-SNP and Intel TDX by abusing interrupt delivery. Check our @USENIXSecurity & @IEEESSP papers. ahoi-attacks.github.io/?1337

2 21 74 15K 14

Shweta Shinde @shw3ta_shinde

2 years ago

It's rewarding that our secure smartphone efforts are gaining recognition on a broader platform. Proud of the whole team: Friederike Groschupp, @Mark_Ku96, Moritz Schneider, @dn0sar, @SrdjanCapkun #cybersecurity #ETHZ #swisscybersecuritydays #scsd24

Ivan Puddu @dn0sar

2 years ago

0 2 6 2K 0

Download Image

1 2 25 2K 2

SECTRS @ ETH Zurich @sectrs_ethz

2 years ago

Shout out to the Acai team! Supraja Sridhara , @andrinbertschi, @Zauney, @BenedictSchluet, Fabio Aliberti

Shweta Shinde @shw3ta_shinde

2 years ago

Shout out to the Acai team! Supraja Sridhara , @andrinbertschi, @Zauney, @BenedictSchluet, Fabio Aliberti

1 1 19 3K 2

0 2 7 1K 0

SECTRS @ ETH Zurich @sectrs_ethz

3 years ago

Read about our group's recent work by @Mark_Ku96 and @shw3ta_shinde

Shweta Shinde @shw3ta_shinde

3 years ago

Read about our group's recent work by @Mark_Ku96 and @shw3ta_shinde

1 0 10 0 1

0 0 2 0 0

ETH CS Department @CSatETH

4 years ago

Thank you @shw3ta_shinde for yesterday's insightful inaugural lecture titled “Trust, but Verify: Building the Foundations for Secure Software”. Watch the recording here bit.ly/3E3WEVn @UCBerkeley @NUSingapore @ETH_en #trustedcomputing #systemsecurity #programanalysis

0 3 33 0 1

Download Image

ETH Zurich @ETH_en

4 years ago

An international research team whose members include an ETH Zurich professor has revealed a vulnerability in the #SecurityArchitecture of Intel #processors. Until July, Microsoft and Google products were also affected. @CSatETH @NUSingapore ethz.ch/en/news-and-ev…

4 7 31 0 0

Shweta Shinde @shw3ta_shinde

4 years ago

We have released the details of our upcoming @acm_ccs 2021 paper about a new software attack on SGX Our attack, SmashEx, exploits reentrancy bugs in enclave exception handling Check out our webpage for technical details: jasonyu1996.github.io/SmashEx @jhcui24 @corankyu @prateekatcs

1 5 35 0 1

Srdjan Čapkun @SrdjanCapkun

5 years ago

Too much control over smartphones is in hands of few companies. Gatekeeping limits developers, users, governments. A different phone architecture can hand control back to the users while still protecting existing ecosystems. With @shw3ta_shinde @dn0sar. arxiv.org/abs/2102.02743