Conference: March 5-7, 2018

Workshops: March 8-9, 2018

Speaker:
Moritz Lipp
Researcher in Information Security at Graz University of Technology

Moritz Lipp is a researcher in information security at Graz University of Technology. He is pursuing his PhD with a strong focus on microarchitectural side-channel attacks on personal computers and mobile devices at the Institute of Applied Information Processing and Communications. His research has been published at top academic conferences and presented on different venues around the world.

Find Moritz Lipp at

@mlqxyz
mlq

Talk : How Performance Optimizations Shatter Security Boundaries

Track : Modern CS in the Real World
Location : St James, 4th flr.
Day of week : Monday
Duration : 4:10pm - 5:00pm

With the customers demand of high-performance computing, CPU manufacturers deploy more and more sophisticated optimizations in their processors to increase the performance as much as possible. However, these performance optimizations often come with the downside of enabling side-channel attacks to infer sensitive information. With the beginning of this year, two critical vulnerabilities exploiting hardware optimizations in modern processors were disclosed to the public: Meltdown and Spectre. These vulnerabilities, affecting processors of all big manufacturers, allow programs to steal sensitive data processed on personal computers, mobile phones and in the cloud.

In this talk, we explain how the Meltdown and Spectre vulnerabilities exploit hardware optimizations to read otherwise inaccessible data processed on the computer. We explain the necessary background to understand the underlying issue and the uncomfortable security consequences they bring. We share the story of our research group and explain why it is no coincidence that four independent teams of researchers discovered the same vulnerabilities in roughly the same time frame. Furthermore, we discuss countermeasures to protect against these attacks and show how that Meltdown can be prevented entirely in software.

Other talks from track Modern CS in the Real World

Java at Speed
CTO and co-founder @AzulSystems
Gil Tene
Formal Methods at Amazon Web Services
Software Development Engineer @AWS Security
Michael Tautschnig
Consensus: Why Can't We All Just Agree?
Distributed Systems PhD Candidate @CambridgeComputerLab
Heidi Howard
CRDTs and the Quest for Distributed Consistency
Software Engineer, Author, & Samza and Avro Committer
Martin Kleppmann

Tracks

This Year's Schedule

Learn trends from innovator and early adopter companies that you can bring home to your team

Sign up to be informed when registration for QCon London 2019 (Mar 4-8) opens!

Sign Up