Talks and presentations

Hardware-Software Codesign for Mitigating Spectre

June 17, 2023

Talk and position paper, PLARCH 2023, Orlando, Florida

I presented our in-progress work on developing an efficient, general Spectre mitigation by engaging in hardware-software co-design. This presentation describes ongoing follow-up work to Serberus, our recently published Spectre mitigation that targets existing Intel hardware.

ROP with a 2nd Stack, or This Exploit is a Recursive Fibonacci Sequence Generator

August 07, 2019

Talk, BSidesLV 2019, Las Vegas, Nevada

ropc is a compiler from Turing-complete ROPC-IR to x86_64 shellcode. ROPC-IR is an assembly-like source language of my own invention. The most distinguishing feature of my compiler is that the shellcode program has access to a 2nd stack, called the shellcode stack. Once you have a shellcode stack, much becomes possible, such as subroutine calls within shellcode as well as library calls that don’t mangle the shellcode on the target stack.