Publications

2026
IEEE S&P
TREVEX: A Black-Box Detection Framework For Data-Flow Transient Execution Vulnerabilities
Daniel Weber, Fabian Thomas, Leon Trampert, Ruiyi Zhang, Michael Schwarz
CVE: CVE-2025-54505
Media: Phoronix, igor's lab
PDF Cite Code Blog
2026
IEEE S&P
TDXRay: Microarchitectural Side-Channel Analysis of Intel TDX for Real-World Workloads
Tristan Hornetz, Hosein Yavarzadeh, Albert Cheu, Adria Gascon, Lukas Gerlach, Daniel Moghimi, Phillipp Schoppmann, Michael Schwarz, Ruiyi Zhang
PDF Cite Code Website
2026
NDSS
SNPeek: Side-Channel Analysis for Privacy Applications on Confidential VMs
Ruiyi Zhang, Albert Cheu, Adria Gascon, Daniel Moghimi, Phillipp Schoppmann, Michael Schwarz, Ocatavian Suciu
Media: AMD Security
PDF Cite Code Video
2025
DIMVA
Taming the Linux Memory Allocator for Rapid Prototyping
Ruiyi Zhang, Tristan Hornetz, Lukas Gerlach, Michael Schwarz
PDF Cite Code Slides
2025
ASPLOS
ShadowLoad: Injecting State into Hardware Prefetchers
Lorenz Hetterich, Fabian Thomas, Lukas Gerlach, Ruiyi Zhang, Nils Bernsdorf, Eduard Ebert, Michael Schwarz
Media: AMD Security
PDF Cite Code
2023
ESORICS
Reviving Meltdown 3a
Daniel Weber, Fabian Thomas, Lukas Gerlach, Ruiyi Zhang, Michael Schwarz
PDF Cite Code
2023
ESORICS
Indirect Meltdown: Building Novel Side-Channel Attacks from Transient Execution Attacks
Daniel Weber, Fabian Thomas, Lukas Gerlach, Ruiyi Zhang, Michael Schwarz
PDF Cite Code
2023
IEEE S&P
A Security RISC: Microarchitectural Attacks on Hardware RISC-V CPUs
Lukas Gerlach, Daniel Weber, Ruiyi Zhang, Michael Schwarz
PDF Cite Code Video
2022
USENIX Security
(M)WAIT for It: Bridging the Gap between Microarchitectural and Architectural Side Channels
Ruiyi Zhang, Taehyun Kim, Daniel Weber, Michael Schwarz
PDF Cite Code Slides Video
2021
USENIX Security
EOSAFE: Security Analysis of EOSIO Smart Contracts
Ningyu He, Ruiyi Zhang, Haoyu Wang, Lei Wu, Xiapu Luo, Yao Guo, Ting Yu, Xuxian Jiang
PDF Cite Slides Video