Hi there

and welcome to my personal website.

On these pages you find my blog where I (very) occasionally write about things that matter to me. There is also a list of publications and more information about what I do further down this page. To get in touch with me please refer to the contact page.


Security Advisory

  • CVE-2015-2877 / Cross-VM Address-Space Layout INtrospection (CAIN)
    Advisory (txt)


Publications

  • CAIN: Silently Breaking ASLR in the Cloud
    Antonio Barresi, Kaveh Razavi, Mathias Payer, Thomas R. Gross
    In WOOT'15: 9th USENIX Workshop on Offensive Technologies, Washington D.C., 2015
    Paper (pdf) Slides (pdf)
  • Control-Flow Bending: On the Effectiveness of Control-Flow Integrity
    Nicholas Carlini, Antonio Barresi, Mathias Payer, David Wagner, Thomas R. Gross
    In SEC'15: 24th USENIX Security Symposium, Washington D.C., 2015
    Paper (pdf)
  • Fine-Grained Control-Flow Integrity through Binary Hardening
    Mathias Payer, Antonio Barresi, Thomas R. Gross
    In DIMVA'15: 12th Conference on Detection of Intrusions, Malware & Vulnerability Assessment, Milan, 2015
    Paper (pdf)
  • Lockdown: Dynamic Control-Flow Integrity
    Mathias Payer, Antonio Barresi, Thomas R. Gross
    Technical Report, ETH Zurich, 2014
    Report (pdf) ETH e-collection (www) arXiv (www)
  • trustBT - Ensuring a Secure Execution Environment in User Space using the fastBT Framework
    Antonio Barresi, Master Thesis, ETH Zurich, 2009
    Thesis (pdf)


Talks

  • Silently Breaking ASLR In The Cloud
    Antonio Barresi & Kaveh Razavi @ Black Hat Europe, Amsterdam, November 2015
    Slides (pdf) White paper (pdf)
  • Client-side attacks: Attacking the weakest link
    Antonio Barresi @ SIGS Special Event, Zurich, July 2015
    Slides (pdf)
  • On Compilers, Memory Errors and Control-Flow Integrity
    Antonio Barresi, Guest Talk @ Advanced Compiler Design, ETH Zurich, SS 2015
    Slides (pdf)
  • Control-Flow Integrity Tutorial
    Antonio Barresi @ Software Engineering & Management, Dresden, March 2015
  • Aktuelle und zukünftige Sicherheitsmechanismen
    zur Abwehr moderner Angriffe auf Softwareschwachstellen

    Antonio Barresi @ Information Security Society Switzerland, Zurich, October 2014
  • Fighting the War in Memory: Software Vulnerabilities and Defenses Today
    Antonio Barresi @ Various, 2014 & 2015
    Slides (pdf)
  • Android Security - An Introduction
    Antonio Barresi & Peter Somogyvari @ Hacktivity, Budapest, 2012


About

I am a swiss guy living in Zurich. My main interests are Software Engineering and IT Security. I hold a Master of Science in Computer Science from ETH Zurich the Swiss Federal Institute of Technology.