Send email Copy Email Address
© Tobias Ebelshäuser

Email

Address

Stuhlsatzenhaus 5
66123 Saarbrücken (Germany)

Awards (selection)

2020: EuroSys Roger Needham PhD Award 

2019: NSA Best Scientific Cybersecurity Paper Competition Honorable Mention: Meltdown 

2019: Open Exploit Award: Meltdown and Spectre 

2019: S&P Distinguished Paper Award - Spectre 

2018: CSAW Best Paper Award - Meltdown 

2018: Pwnie Award for Best Privilege Escalation Bug - Meltdown 

2018: Pwnie Awardfor Most Innovative Research - Spectre 

Short Bio

Dr. Michael Schwarz is tenured faculty at CISPA with a focus on microarchitectural side-channel attacks and system security. He obtained his PhD with the title "Software-based Side-Channel Attacks and Defenses in Restricted Environments" in 2019 from Graz University of Technology (advised by Daniel Gruss). He holds two master's degrees, one in computer science and one in software engineering with a strong focus on security. Michael is a regular speaker at both academic and hacker conferences (7 times Black Hat, CCC, Blue Hat, etc.). He was part of one of the research teams that found the Meltdown, Spectre, Fallout, and LVI vulnerabilities, as well as the ZombieLoad vulnerability. He was also part of the KAISER patch, the basis for Meltdown countermeasures now deployed in every modern operating system under names such as KPTI or KVA Shadow.

CV: Last stations

Since 2020
Faculty at CISPA Helmholtz Center for Information Security
2019 - 2020
Postdoctoral Researcher at Graz University of Technology
2016 - 2019
PhD Student at Graz University of Technology
2012 - 2017
Study assistant for various undergraduate courses focussing on programming and operating systems

Publications by Michael Schwarz

Year 2024

Conference / Medium

Usenix Security Symposium (USENIX-Security)

Conference / Medium

ACM ASIA Conference on Computer and Communications Security (AsiaCCS)

Conference / Medium

DISC International Symposium on Distributed Computing (DISC)

Year 2023

Conference / Medium

European Symposium on Research in Computer Security (ESORICS)

Conference / Medium

European Symposium on Research in Computer Security (ESORICS)

Conference / Medium

European Symposium on Research in Computer Security (ESORICS)

Conference / Medium

Usenix Security Symposium (USENIX-Security)

Conference / Medium

ACM Conference on Computer and Communications Security (CCS)

Conference / Medium

IEEE Symposium on Security and Privacy (S&P)