Hi there
and welcome to my personal website.On these pages you find my blog where I (very) occasionally write about things that matter to me. There is also a list of publications and more information about what I do further down this page. To get in touch with me please refer to the contact page.
Security Advisory
- CVE-2015-2877 / Cross-VM Address-Space Layout INtrospection (CAIN)
Advisory (txt)
Publications
- CAIN: Silently Breaking ASLR in the Cloud
Antonio Barresi, Kaveh Razavi, Mathias Payer, Thomas R. Gross
In WOOT'15: 9th USENIX Workshop on Offensive Technologies, Washington D.C., 2015
Paper (pdf) Slides (pdf) - Control-Flow Bending: On the Effectiveness of Control-Flow Integrity
Nicholas Carlini, Antonio Barresi, Mathias Payer, David Wagner, Thomas R. Gross
In SEC'15: 24th USENIX Security Symposium, Washington D.C., 2015
Paper (pdf) - Fine-Grained Control-Flow Integrity through Binary Hardening
Mathias Payer, Antonio Barresi, Thomas R. Gross
In DIMVA'15: 12th Conference on Detection of Intrusions, Malware & Vulnerability Assessment, Milan, 2015
Paper (pdf) - Lockdown: Dynamic Control-Flow Integrity
Mathias Payer, Antonio Barresi, Thomas R. Gross
Technical Report, ETH Zurich, 2014
Report (pdf) ETH e-collection (www) arXiv (www) - trustBT - Ensuring a Secure Execution Environment in User Space using the fastBT Framework
Antonio Barresi, Master Thesis, ETH Zurich, 2009
Thesis (pdf)
Talks
- Silently Breaking ASLR In The Cloud
Antonio Barresi & Kaveh Razavi @ Black Hat Europe, Amsterdam, November 2015
Slides (pdf) White paper (pdf) - Client-side attacks: Attacking the weakest link
Antonio Barresi @ SIGS Special Event, Zurich, July 2015
Slides (pdf) - On Compilers, Memory Errors and Control-Flow Integrity
Antonio Barresi, Guest Talk @ Advanced Compiler Design, ETH Zurich, SS 2015
Slides (pdf) - Control-Flow Integrity Tutorial
Antonio Barresi @ Software Engineering & Management, Dresden, March 2015 - Aktuelle und zukünftige Sicherheitsmechanismen
zur Abwehr moderner Angriffe auf Softwareschwachstellen
Antonio Barresi @ Information Security Society Switzerland, Zurich, October 2014 - Fighting the War in Memory: Software Vulnerabilities and Defenses Today
Antonio Barresi @ Various, 2014 & 2015
Slides (pdf) - Android Security - An Introduction
Antonio Barresi & Peter Somogyvari @ Hacktivity, Budapest, 2012
About
I am a swiss guy living in Zurich. My main interests are Software Engineering and IT Security. I hold a Master of Science in Computer Science from ETH Zurich the Swiss Federal Institute of Technology.