Andrew Kwong

I am a computer science Ph.D. student advised by Daniel Genkin at the University of Michigan.

Contact: ankwong < < at > > umich < < dot > > edu

Google Scholar

Publications

• When Frodo Flips: End-to-End Key Recovery on FrodoKEM via Rowhammer
  Michael Fahr Jr.*, Hunter Kippen*, Andrew Kwong*, Thinh Dang, Jacob Lichtinger, Dana Dachman-Soled, Daniel Genkin, Alexander Nelson, Ray Perlner, Arkady Yerukhimovich, and Daniel Apon
  In 29th ACM Conference on Computer and Communications Security (CCS 2022) (* Students listed in alphabetical order)
  (Acceptance Rate: 22.4%)
  Cryptology ePrint: [https://eprint.iacr.org/2022/952]
  ★ Best Paper Award Honorable Mention
• SpecHammer: Combining Spectre and Rowhammer for New Speculative Attacks
  Youssef Tobah, Andrew Kwong, Ingab Kang, Daniel Genkin, and Kang Shin
  In 43rd IEEE Symposium on Security and Privacy (Oakland 2022)
  (Acceptance Rate: 14.6%)
• CacheOut: Leaking Data on Intel CPUs via Cache Evictions
  Stephan Van Schaik, Marina Minkin, Andrew Kwong, Daniel Genkin, and Yuval Yarom
  In 42nd IEEE Symposium on Security and Privacy (Oakland 2021)
  (Acceptance Rate: 12.0%)
  Website: [https://cacheoutattack.com]
  Wired Article: [Intel Is Patching the Patch for the Patch for Its ‘Zombieload’ Flaw]
• RAMBleed: Reading Bits in Memory Without Accessing Them
  Andrew Kwong, Daniel Genkin, Daniel Gruss, and Yuval Yarom
  In 41st IEEE Symposium on Security and Privacy (Oakland 2020)
  (Acceptance Rate: 12.3%) [Preview Video] [Talk]
  Website: [https://rambleed.com]
  arsTECHNICA Article: [Researchers use Rowhammer bit flips to steal 2048-bit crypto key]
• Pseudorandom Black Swans: Cache Attacks on CTR_DRBG
  Shaanan Cohney, Andrew Kwong, Shahar Paz, Daniel Genkin, Nadia Heninger, Eyal Ronen, and Yuval Yarom
  In 41st IEEE Symposium on Security and Privacy (Oakland 2020)
  (Acceptance Rate: 12.3%) [Preview Video]
  Cryptology ePrint: [https://eprint.iacr.org/2019/996]
  Blog Post: [https://security.cohney.info/blackswans/]
• SGAxe: How SGX Fails in Practice
  Stephan Van Schaik, Andrew Kwong, Daniel Genkin, and Yuval Yarom (2020)
  Website: [https://sgaxe.com/]
• Hard Drive of Hearing: Disks that Eavesdrop with a Synthesized Microphone
  Andrew Kwong, Wenyuan Xu, and Kevin Fu
  In 40th IEEE Symposium on Security and Privacy (Oakland 2019)
  (Acceptance Rate: 12.4%) [Preview Video] [Talk Slides]
• Blue Note: How Intentional Acoustic Interference Damages Availability and Integrity in Hard Disk Drives and Operating Systems
  Connor Bolton, Sara Rampazzi, Chaohao Li, Andrew Kwong, Wenyuan Xu, and Kevin Fu
  In 39th IEEE Symposium on Security and Privacy (Oakland 2018)
  (Acceptance Rate: 11.5%)

Select Talks

• When Frodo Flips: End-to-End Key Recovery on FrodoKEM via Rowhammer
  In ACM Conference on Computer and Communications Security (CCS 2022)
• RAMBleed: Reading Bits in Memory Without Accessing Them
  In IEEE Symposium on Security and Privacy (Oakland 2020)
• CacheOut and SGAxe: How SGX Fails in Practice
  In Real World Cryptography Symposium 2021 (RWC 2021)
• Hard Drive of Hearing: Disks that Eavesdrop with a Synthesized Microphone
  In IEEE Symposium on Security and Privacy (Oakland 2019)

Posters

• Poster: Blue Note - How Intentional Acoustic Interference Damages Availability and Integrity in Hard Disk Drives and Operating Systems
  Connor Bolton, Sara Rampazzi, Chaohao Li, Andrew Kwong, Wenyuan Xu, and Kevin Fu
  In 39th IEEE Symposium on Security and Privacy (Oakland 2018)
• Why Do You Trust Sensors? Analog Cybersecurity Attack Demos
  Andrew Kwong, Connor Bolton, Timothy Trippel, Wenyuan Xu, and Kevin Fu
  In IEEE International Symposium on Hardware Oriented Security and Trust (HOST 2017)