Dr.-Ing. Alexandra Weber

Office: S2|02 E322
Phone: +49 6151 16-25255
Fax: +49 6151 16-25251
Mail: weberatmais.informatik.tu-darmstadt.de
Profiles: Google Scholar, DBLP
ORCID iD:
 ORCID logo 0000-0003-4225-487X

TU Darmstadt

Department of Computer Science

Modeling and Analysis of Information Systems

Hochschulstraße 10

D-64289 Darmstadt

Germany
Ximeng Li

Short Bio

I am a postdoctoral researcher at MAIS. After studying Computer Science at TU Darmstadt and as an exchange student at IIT Madras in Chennai, I joined MAIS as a PhD candidate in the project Secure Refinement of Cryptographic Algorithms and completed my PhD in 2022.

Research Interests

  • formal methods
  • semantics
  • program analysis
  • software security
  • interactive theorem proving

Publications

These documents have been provided by the contributing authors as a means to ensure timely dissemination of scholarly and technical work on a noncommercial basis. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.

2022

  • Martin Edlund, Heiko Mantel, Alexandra Weber and Tim Weißmantel.
    Graphical User Interfaces for a Qualitative and a Quantitative Side-Channel Analysis Tool    .
    TU Darmstadt    , Technical Report, 2022.
    [ BibTeX entry | URL ]
  • Alexandra Weber.
    Semantics-Based Cache-Side-Channel Quantification in Cryptographic Implementations.
    PhD Thesis, TU Darmstadt, 2022.
    [ URL ]

2021

  • Heiko Mantel and Alexandra Weber.
    Towards Leakage Bounds for Side Channels based on Caches and Pipelined Executions.
    TU Darmstadt    , Technical Report, 2021.
    [ BibTeX entry | URL ]
  • Heiko Mantel, Tim Weißmantel, Marc Fischlin and Alexandra Weber.
    A Comparative Study of Cache Side Channels across AES Implementations and Modes of Operation    .
    TU Darmstadt    , Technical Report, 2021.
    [ BibTeX entry | URL ]
  • Alexandra Weber, Oleg Nikiforov, Alexander Sauer, Johannes Schickel, Gernot Alber, Heiko Mantel and Thomas Walther.
    Cache-Side-Channel Quantification and Mitigation for Quantum Cryptography    .
    In Proceedings of the 26th European Symposium on Research in Computer Security (ESORICS), pages 235-256, 2021.
    [ BibTeX entry | PDF ]

2020

  • Heiko Mantel, Lukas Scheidel, Thomas Schneider, Alexandra Weber, Christian Weinert and Tim Weißmantel.
    RiCaSi: Rigorous Cache Side Channel Mitigation via Selective Circuit Compilation    .
    In Proceedings of the 19th International Conference on Cryptology and Network Security (CANS), pages 505-525, 2020.
    [ BibTeX entry | PDF ]

2018

  • Heiko Mantel, Johannes Schickel, Alexandra Weber and Friedrich Weber.
    How Secure is Green IT? The Case of Software-Based Energy Side Channels    .
    In Proceedings of the 23rd European Symposium on Research in Computer Security (ESORICS), pages 218-239, 2018.
    [ BibTeX entry | PDF ]
  • Oleg Nikiforov, Alexander Sauer, Johannes Schickel, Alexandra Weber, Gernot Alber, Heiko Mantel and Thomas Walther.
    Side-Channel Analysis of Privacy Amplification in Postprocessing Software for a Quantum Key Distribution System.
    TU Darmstadt    , Technical Report TUD-CS-2018-0024, 2018.
    [ BibTeX entry | PDF ]
  • Florian Dewald, Heiko Mantel and Alexandra Weber.
    Poster: Side-Channel Finder for AVR    .
    Poster at the 20th International Conference on Cryptographic Hardware and Embedded Systems (CHES), 2018.
    [ BibTeX entry | PDF | Poster ]

2017

  • Nina Bindel, Johannes Buchmann, Juliane Krämer, Heiko Mantel, Johannes Schickel and Alexandra Weber.
    Bounding the cache-side-channel leakage of lattice-based signature schemes using program semantics    .
    In Proceedings of the 10th International Symposium on Foundations & Practice of Security (FPS), pages 225-241, 2017.
    [ BibTeX entry | PDF ]
  • Nina Bindel, Johannes Buchmann, Juliane Krämer, Heiko Mantel, Johannes Schickel and Alexandra Weber.
    Bounding the cache-side-channel leakage of lattice-based signature schemes using program semantics    .
    Cryptology ePrint Archive    , Technical Report, 2017. http://eprint.iacr.org/2017/951.
    [ BibTeX entry | PDF ]
  • Florian Dewald, Heiko Mantel and Alexandra Weber.
    AVR Processors as a Platform for Language-Based Security    .
    In Proceedings of the 22nd European Symposium on Research in Computer Security (ESORICS), pages 427-445, 2017.
    [ BibTeX entry | PDF ]
  • Ximeng Li, Heiko Mantel, Johannes Schickel, Markus Tasch, Iva Toteva and Alexandra Weber.
    SPASCA: Secure-Programming Assistant and Side-Channel Analyzer.
    TU Darmstadt    , Technical Report TUD-CS-2017-0303, 2017.
    [ BibTeX entry | PDF ]
  • Heiko Mantel, Johannes Schickel, Alexandra Weber and Friedrich Weber.
    Vulnerabilities Introduced by Features for Software-based Energy Measurement.
    TU Darmstadt, Technical Report, 2017.
    [ BibTeX entry | PDF ]
  • Heiko Mantel, Alexandra Weber and Boris Köpf.
    A Systematic Study of Cache Side Channels across AES Implementations    .
    In Proceedings of the 9th International Symposium on Engineering Secure Software and Systems (ESSoS), pages 213-230, 2017.
    [ BibTeX entry | PDF ]

2016

  • Steven Arzt, Alexandre Bartel, Richard Gay, Steffen Lortz, Enrico Lovat, Heiko Mantel, Martin Mohr, Benedikt Nordhoff, Matthias Perner, Siegfried Rasthofer, David Schneider, Gregor Snelting, Artem Starostin and Alexandra Weber.
    Software Security for Mobile Devices    .
    Poster at the 25th USENIX Security Symposium, 2016.
    [ BibTeX entry ]
  • Steffen Lortz, Heiko Mantel, David Schneider, Artem Starostin, Timo Bähr and Alexandra Weber.
    Certifying the Security of Android Applications with Cassandra    .
    Work-in-Progress Report at the 25th USENIX Security Symposium, 2016.
    [ BibTeX entry | Abstract ]

2015

  • Steven Arzt, Alexandre Bartel, Richard Gay, Steffen Lortz, Enrico Lovat, Heiko Mantel, Martin Mohr, Benedikt Nordhoff, Matthias Perner, Siegfried Rasthofer, David Schneider, Gregor Snelting, Artem Starostin and Alexandra Weber.
    Software Security for Mobile Devices    .
    Poster at the 36th IEEE Symposium on Security and Privacy (S&P), 2015.
    [ BibTeX entry | Abstract ]
  • Steffen Lortz, Heiko Mantel, David Schneider, Artem Starostin, Timo Bähr and Alexandra Weber.
    Certifying the Security of Android Applications with Cassandra.
    Short Talk at the 36th IEEE Symposium on Security and Privacy (S&P), 2015.
    [ BibTeX entry | Abstract ]

2014

  • Steffen Lortz, Heiko Mantel, Artem Starostin and Alexandra Weber.
    A Sound Information-Flow Analysis for Cassandra    .
    TU Darmstadt, Technical Report TUD-CS-2014-0064, 2014.
    [ BibTeX entry | PDF ]
  • Steffen Lortz, Heiko Mantel, Artem Starostin, Timo Bähr, David Schneider and Alexandra Weber.
    Cassandra: Towards a Certifying App Store for Android.
    In Proceedings of the 4th ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices (SPSM), pages 93-104. ACM, 2014.
    [ BibTeX entry | PDF ]
  • Alexandra Weber.
    Comparison of an Operational and an Axiomatic Model of Execution for Multi-threaded Programs    .
    Master Thesis, TU Darmstadt, 2014.
    [ BibTeX entry ]

2012

  • Alexandra Weber.
    A Formal Model, a Noninterference Condition, and a Sound Type System for a Certifying Application Store.
    Bachelor Thesis, TU Darmstadt, 2012.
    [ BibTeX entry ]

Talks, Lectures and Posters

  • Guest Lecture "Quantifying Side-Channel Leakage"
    in the lecture "Static and Dynamic Program Analysis" (summer term 2021)
  • Talk "Program Analysis against Side Channels"
    at the Theory Group Research Seminar, Queen Mary University of London
    (host of research visit: Pasquale Malacaria)
  • Lecture "Approaches to Reliable Side-Channel Security"
    at the COINS summer school 2017 on Secure Implementation of Cryptographic Software
  • Guest Talk "Quantifying Side-Channel Leakage with Abstract Interpretation"
    in the lecture "Static and Dynamic Program Analysis" (winter term 2017/18)
  • Poster "Systematic Analysis of Side Channels" (joint poster with Johannes Schickel)
    at the Final Event 2017 of the DFG SPP Reliably Secure Software Systems
  • Posters "Secure Refinement of Cryptographic Algorithms" and "Transforming out Timing Leaks, More or Less"
    (joint posters with Johannes Schickel) at the CROSSING Conference 2017 - From Tweets to Quantum
  • Poster "Static Analysis of Side-Channel Leakage"
    at the Practitioner Event 2016 if the DFG SPP Reliably Secure Software Systems
  • Talk "Comparison of an Operational and an Axiomatic Model of Execution for Multi-threaded Programs"
    at the Annual Meeting 2015 of the GI group Formal Methods and Software Engineering for Safety and Security
  • Talk "Secure Refinement of Cryptographic Algorithms" (joint talk with Xucheng Yin)
    at the Annual Meeting 2015 of the DFG SPP Reliably Secure Software Systems
  • Poster "Static Analysis of Side-Channel Leakage" (joint poster with Xucheng Yin)
    at the CROSSING Conference 2015 - "Where Quantum Physics, Cryptography, System Security and Software Engineering meet" 
  • Tutorial "Quantitative Information Flow"
    at the 2015 Workshop on Differential Power Analysis and Quantitative Information Flow Security (DAISy)

Conference Presentations

  • Presentation of the article "Cache-Side-Channel Quantification and Mitigation for Quantum Cryptography"
    by Alexandra Weber, Oleg Nikiforov, Alexander Sauer, Johannes Schickel, Gernot Alber, Heiko Mantel, and Thomas Walther
    at the 26th European Symposium on Research in Computer Security (ESORICS 2021)
  • Presentation of the article "RiCaSi: Rigorous Cache Side Channel Mitigation via Selective Circuit Compilation"
    by Heiko Mantel, Lukas Scheidel, Thomas Schneider, Alexandra Weber, Christian Weinert and Tim Weißmantel
    at the 19th International Conference on Cryptology and Network Security (CANS 2020)
    (joint presentation with Christian Weinert)
  • Presentation of the poster "Side-Channel Finder for AVR"
    by Florian Dewald, Heiko Mantel, and Alexandra Weber
    at the 20th International Conference on Cryptographic Hardware and Embedded Systems (CHES 2018)
  • Presentation of the article "How Secure is Green IT? The Case of Software-Based Energy Side Channels"
    by Heiko Mantel, Johannes Schickel, Alexandra Weber, and Friedrich Weber
    at the 23rd European Symposium on Research in Computer Security (ESORICS 2018)
  • Presentation of the article "Bounding the cache-side-channel leakage of lattice-based signature schemes using program semantics"
    by Nina Bindel, Johannes Buchmann, Juliane Krämer, Heiko Mantel, Johannes Schickel, and Alexandra Weber
    at the 10th International Symposium on Foundations & Practice of Security (FPS 2017)
  • Presentation of the article "AVR Processors as a Platform for Language-Based Security"
    by Florian Dewald, Heiko Mantel, and Alexandra Weber
    at the 22nd European Symposium on Research in Computer Security (ESORICS 2017)
  • Presentation of the article "A Systematic Study of Cache Side Channels across AES Implementations"
    by Heiko Mantel, Alexandra Weber, and Boris Köpf
    at the 9th International Symposium on Engineering Secure Software and Systems (ESSoS 2017)

(Co-)Supervised Theses

  • Timothy Earley. An Executable Formalized Translation Between two Dependency Representations in Isabelle/HOL.
    Master's Thesis, TU Darmstadt, 2022.
  • David Kretzmer. A Tested and Mechanized Semantics for a Sub-language of Dalvik Bytecode.
    Master's Thesis, TU Darmstadt, 2021.
  • Fabian Bauer. A Transforming Type System for Fence-Insertion against the Spectre v1 Side-Channel Vulnerability.
    Bachelor's Thesis, TU Darmstadt, 2020.
  • Tim Weißmantel. Exploring Cache-Side-Channel Leakage of AES across CBC, CTR and GCM Mode.
    Master's Thesis, TU Darmstadt, 2020.
  • Florian Dewald. Exploring the Robustness of Dependency Graphs Based on Operational Semantics.
    Master's Thesis, TU Darmstadt, 2018.
  • Isabella Dix. A Type System and Implementation for Detecting the Lucky13 Vulnerability with SPASCA.
    Master's Thesis, TU Darmstadt, 2018.
  • Timothy Earley. Extending the Language Coverage for Side-Channel FinderAVR.
    Bachelor's Thesis, TU Darmstadt, 2018.
  • Manuel Cremer. Test Cases for Detecting the Lucky 13 Vulnerability with SPASCA.
    Bachelor's Thesis, TU Darmstadt, 2017.
  • Florian Dewald. Establishing Trust in a Timing-Sensitive Information-Flow Analysis for AVR Assembly Programs.
    Studienarbeit, TU Darmstadt, 2017.
  • Florian Dewald. Timing-Sensitive Information-Flow Analysis of AVR Assembly Programs.
    Bachelor's Thesis, TU Darmstadt, 2016.

(Co-)Supervised Student Assistants

  • Martin Edlund (12/19 - 02/21)
  • Robin Kruppe (04/16 - 09/16)
  • Benjamin Richter (12/17 - 07/18)
  • Henry Rust (05/18 - 07/18)
  • Iva Toteva (01/17 - 02/17)
  • Tim Weißmantel (09/18 - 09/20)

Services to the Scientific Community

  • Subreviewed for CSF - IEEE Computer Security Foundations Symposium (2018, 2021)
  • Subreviewed for ESORICS - European Symposium on Research in Computer Security (2016, 2017)
  • Subreviewed for ESSoS - International Symposium on Engineering Secure Software and Systems (2016)
  • Subreviewed for GI Sicherheit - Schutz und Zuverlässigkeit (2016)
  • Subreviewed for IFIP Sec - International Information Security and Privacy Conference (2015)
  • Reviewed for ISoLA - International Symposium on Leveraging Applications of Formal Methods, Verification and Validation (2022)
  • Subreviewed for LOPSTR - International Symposium on Logic-Based Program Synthesis and Transformation (2016)
  • Subreviewed for POST - International Conference on Principles of Security and Trust (2015, 2018, 2019)
  • Subreviewed for special issue of Journal of Computer Security (2018)
  • Reviewed for International Journal of Information Security
  • Reviewed for Special Issue of Fundamenta Informaticae Journal
 

Last modified on 13 January 2025.

A A A | Print | Imprint | Sitemap | Contact
zum Seitenanfang