Andrew Kwong

I am a computer science Ph.D. student advised by Daniel Genkin at the University of Michigan.

Contact: ankwong < < at > > umich < < dot > > edu

Google Scholar

Publications

• Checking Passwords on Leaky Computers: A Side-Channel Analysis of Chrome's Password Leak Detection Protocol
  Andrew Kwong, Walter Wang, Jason Kim, Jonathan Berger, Daniel Genkin, Eyal Ronen, Hovav Shacham, Riad Wahby, and Yuval Yarom
  Accepted with shepherd at USENIX Security Symposium (USENIX Security 2023)
  (Acceptance Rate: TBD)
• When Frodo Flips: End-to-End Key Recovery on FrodoKEM via Rowhammer
  Michael Fahr Jr.*, Hunter Kippen*, Andrew Kwong*, Thinh Dang, Jacob Lichtinger, Dana Dachman-Soled, Daniel Genkin, Alexander Nelson, Ray Perlner, Arkady Yerukhimovich, and Daniel Apon
  In ACM Conference on Computer and Communications Security (CCS), 2022
  (Acceptance Rate: 22.4%)
  Cryptology ePrint: [https://eprint.iacr.org/2022/952]
  ★ Best Paper Award Honorable Mention
  (* Students listed in alphabetical order)
• SpecHammer: Combining Spectre and Rowhammer for New Speculative Attacks
  Youssef Tobah, Andrew Kwong, Ingab Kang, Daniel Genkin, and Kang Shin
  In IEEE Symposium on Security and Privacy (IEEE S&P), 2022
  (Acceptance Rate: 14.6%)
• CacheOut: Leaking Data on Intel CPUs via Cache Evictions
  Stephan Van Schaik, Marina Minkin, Andrew Kwong, Daniel Genkin, and Yuval Yarom
  In IEEE Symposium on Security and Privacy (IEEE S&P), 2021
  (Acceptance Rate: 12.0%)
  Website: [https://cacheoutattack.com]
  Wired Article: [Intel Is Patching the Patch for the Patch for Its ‘Zombieload’ Flaw]
• RAMBleed: Reading Bits in Memory Without Accessing Them
  Andrew Kwong, Daniel Genkin, Daniel Gruss, and Yuval Yarom
  In IEEE Symposium on Security and Privacy (IEEE S&P), 2020
  (Acceptance Rate: 12.3%) [Preview Video] [Talk]
  Website: [https://rambleed.com]
  arsTECHNICA Article: [Researchers use Rowhammer bit flips to steal 2048-bit crypto key]
• Pseudorandom Black Swans: Cache Attacks on CTR_DRBG
  Shaanan Cohney, Andrew Kwong, Shahar Paz, Daniel Genkin, Nadia Heninger, Eyal Ronen, and Yuval Yarom
  In IEEE Symposium on Security and Privacy (IEEE S&P), 2020
  (Acceptance Rate: 12.3%) [Preview Video]
  Cryptology ePrint: [https://eprint.iacr.org/2019/996]
  Blog Post: [https://security.cohney.info/blackswans/]
• SGAxe: How SGX Fails in Practice
  Stephan Van Schaik, Andrew Kwong, Daniel Genkin, and Yuval Yarom (2020)
  Website: [https://sgaxe.com/]
• Hard Drive of Hearing: Disks that Eavesdrop with a Synthesized Microphone
  Andrew Kwong, Wenyuan Xu, and Kevin Fu
  In IEEE Symposium on Security and Privacy (IEEE S&P), 2019
  (Acceptance Rate: 12.4%) [Preview Video] [Talk Slides]
• Blue Note: How Intentional Acoustic Interference Damages Availability and Integrity in Hard Disk Drives and Operating Systems
  Connor Bolton, Sara Rampazzi, Chaohao Li, Andrew Kwong, Wenyuan Xu, and Kevin Fu
  In IEEE Symposium on Security and Privacy (IEEE S&P), 2018
  (Acceptance Rate: 11.5%)

Select Talks

• When Frodo Flips: End-to-End Key Recovery on FrodoKEM via Rowhammer
  In ACM Conference on Computer and Communications Security (CCS), 2022
  [Slides]
• RAMBleed: Reading Bits in Memory Without Accessing Them
  In IEEE Symposium on Security and Privacy (IEEE S&P), 2020
  [Video]
• CacheOut and SGAxe: How SGX Fails in Practice
  In Real World Cryptography Symposium 2021 (RWC), 2021
  [Slides]
• Hard Drive of Hearing: Disks that Eavesdrop with a Synthesized Microphone
  In IEEE Symposium on Security and Privacy (IEEE S&P), 2019
  [Video]

Posters

• Poster: Blue Note - How Intentional Acoustic Interference Damages Availability and Integrity in Hard Disk Drives and Operating Systems
  Connor Bolton, Sara Rampazzi, Chaohao Li, Andrew Kwong, Wenyuan Xu, and Kevin Fu
  In 39th IEEE Symposium on Security and Privacy (IEEE S&P), 2018
• Why Do You Trust Sensors? Analog Cybersecurity Attack Demos
  Andrew Kwong, Connor Bolton, Timothy Trippel, Wenyuan Xu, and Kevin Fu
  In IEEE International Symposium on Hardware Oriented Security and Trust (HOST), 2017