Wow, this is massive! What started out as a Master's thesis @KIT_Karlsruhe @kastel ended up with a distinguished paper award at #NDSS2025 🥳🎉

🗞️ https://intellisec.de/pubs/2025-ndss.pdf
💻 https://github.com/two-heart/dumpling-artifact-evaluation

Congrats @95p and @ju256 💪🥟, and thank you @gannimo and Flavio (https://bsky.app/profile/tregua.bsky.social) the collaboration!

🚨 Deadline Extended 🚨

By popular demand, the #MADWeb submission deadline is now January 14, 2025 (AoE)! 🗓️

You still have 1 week to send your papers and join us in San Diego!

📜 Submit here: https://madweb25.hotcrp.com
🔗 Details: https://madweb.work

Spread the word!

#websec #cfp #ndss #NDSS2025

MADWeb 2025

Less than one week to nominate yourself for the #MADWeb 2025 PC! Deadline Nov. 1 ⏰ Consider applying even if you don't have extensive reviewing experience: we have a mentorship program for junior PC members this year!

https://forms.gle/DHAkS6f2rGWSsKwm7

https://madweb.work/

#web #security #websec #conference #NDSS2025 #workshop

MADWeb 2025 PC Nomination

The web connects billions of devices, running a plethora of clients, and serves billions of users every day. To cope with such a widespread adoption, the web constantly changes. This is evident by some browsers that have a release cycle of just six weeks. Unfortunately, these rapid changes are not always designed with a security mindset, resulting in new attack vectors not observed before. The MADWeb workshop aims to attract researchers who work on the intersection of browser evolution and web security. Our goal is to create and sustain a specialized venue for discussing any aspects of web security and privacy, such as the rapid changes to browsers from a security perspective, the security implications of current web technologies, how we can protect users now, and make browsers in the future more secure without hindering the evolution of the web. Since MADWeb merged with the SecWeb workshop in 2025, we welcome ideas on extending the web with novel security mechanisms, better access interfaces (browsers), and disciplined programming abstractions to support secure web application development natively. Moreover, we invite contributions that propose provocative thoughts on re-envisioning (part of) the current web platform with security built-in by design. We welcome work in progress and encourage junior researchers to explore new ideas before publication at a major security conference. We select papers based on their technical contributions and their potential to spark interesting discussions at MADWeb. You can use this form to nominate someone (e.g., yourself) for MADWeb 2025 PC.

Google Docs
Announcing #CounterSEVeillance, a novel attack on AMD SEV-SNP inferring control-flow information and operand properties from performance-counter data with single-instruction resolution.
We present 4 case studies with attacks on RSA, TOTP verification and HQC.
Thanks to @hweissi, @supersingular and @lavados for the amazing collaboration!
You can read the full paper (to appear at #NDSS2025) here: https://stefangast.eu/papers/counterseveillance.pdf