Daniël Trujillo

dblp:331/2106 · DBLP profile ↗
← Back
4ranked-venue papers
2as first author
4since 2021 · last 2026
0009-0005-1485-2110ORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 3 · 2 first-author · 3 since 2021Systems, architecture and hardware · 1 · 1 since 2021
YearPublicationVenuePosition
2026 Defeating Transient Execution Attacks by Limiting Secret Reachability Through Register Hiding and ShadowCFI
Daniël Trujillo, Jagadish Kotra, Mengjia Yan 0001
SP1
2023 Phantom: Exploiting Decoder-detectable Mispredictions
abstract
Violating the Von Neumann sequential processing principle at the microarchitectural level is commonplace to reach high performing CPU hardware — violations are safe as long as software executes correctly at the architectural interface. Speculative execution attacks exploit these violations and queue up secret-dependent memory accesses allowed by long speculation windows due to the late detection of these violations in the pipeline. In this paper, we show that recent AMD and Intel CPUs speculate very early in their pipeline, even before they decode the current instruction. This mechanism enables new sources of speculation to be triggered from almost any instruction, enabling a new class of attacks that we refer to as Phantom. Unlike Spectre, Phantom speculation windows are short since the violations are detected early. Nonetheless, Phantom allows for transient fetch and transient decode on all recent x86-based microarchitectures, and transient execution on AMD Zen 1 and 2. We build a number of exploits using these new Phantom primitives and discuss why mitigating them is difficult in practice.
Johannes Wikner, Daniël Trujillo, Kaveh Razavi
MICRO2
2023 Inception: Exposing New Attack Surfaces with Training in Transient Execution
Daniël Trujillo, Johannes Wikner, Kaveh Razavi
USENIX Security Symposium1
2022 TLB;DR: Enhancing TLB-based Attacks with TLB Desynchronized Reverse Engineering
Andrei Tatar, Daniël Trujillo, Cristiano Giuffrida, Herbert Bos
USENIX Security Symposium2