Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Yuqin Yan

dblp:373/3644 · DBLP profile ↗
← Back
2ranked-venue papers
1as first author
2since 2021 · last 2026
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 1 first-author · 2 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Hardware security and side channels · 79% Systems and software security · 17% Cryptographic primitives and cryptanalysis · 4%
Computer architecture, parallel and distributed computing, and storage systems
1 paper
Memory systems · 100%

Topics — the 9 heaviest of 9, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Hardware security and side channels
fault attacks
1.012026
GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer · SP 2026
Hardware security and side channels
GPU security
1.012026
GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer · SP 2026
Systems and software security › operating system security
privilege escalation
1.012026
GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer · SP 2026
Hardware security and side channels › fault attacks › fault injection attack
rowhammer attack
1.012026
GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer · SP 2026
Hardware security and side channels › side-channel attack
ciphertext side-channel
0.912025
Relocate-Vote: Using Sparsity Information to Exploit Ciphertext Side-Channels · USENIX Security Symposium 2025
Hardware security and side channels
side-channel attack
0.912025
Relocate-Vote: Using Sparsity Information to Exploit Ciphertext Side-Channels · USENIX Security Symposium 2025
Memory systems
DRAM
0.312026
GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer · SP 2026
Memory systems › DRAM
rowhammer
0.312026
GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer · SP 2026
Cryptographic primitives and cryptanalysis
homomorphic encryption
0.312025
Relocate-Vote: Using Sparsity Information to Exploit Ciphertext Side-Channels · USENIX Security Symposium 2025

Methods — techniques the papers use, named apart from their topics

rowhammer bit-flips · 2.0page table manipulation · 2.0sparsity exploitation · 0.9
YearPublicationVenuePosition
2026 GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer
abstract
NVIDIA GPUs with GDDR memories have been shown susceptible to Rowhammer-based bit-flips, similar to CPUs. However, Rowhammer exploits on GPUs have been limited to injecting untargeted bit-flips in victim data like weights of machine learning models, to degrade model accuracy, unlike CPU exploits shown capable of privilege escalation. In this paper, we demonstrate that GPU Rowhammer exploits can be as potent as CPU Rowhammer attacks. By exploiting the GPU page table management to identify when and where new page tables are allocated, we enable an unprivileged user CUDA kernel of one process to use RowHammer bit-flips to gain access to the GPU memory of other processes or co-tenants via targeted tampering of such page-tables resident on the GPU memory. Using this newly found primitive, we demonstrate the first GPU-side privilege escalation attacks, leaking secret data such as cryptographic keys from cuPQC libraries, and even tampering with the model's GPU assembly code to degrade models more stealthily than previous attacks. We further demonstrate that GPU-side privilege escalation can lead to CPU-side privilege escalation, defeating the protections provided by the IOMMU, enabling a malicious user-level program with GPU access to gain root shell and system-wide control, even in a non-multi-tenant setting.
Chris S. Lin, Yuqin Yan, Guozhen Ding, Joyce Qu, Joseph Zhu, David Lie, Gururaj Saileshwar
SP2
2025 Relocate-Vote: Using Sparsity Information to Exploit Ciphertext Side-Channels
Yuqin Yan, Wei Huang 0027, Ilya Grishchenko, Gururaj Saileshwar, Aastha Mehta, David Lie
USENIX Security Symposium1