ZISC Seminars

Sketching the Boundaries: Rethinking Intelligent Analysis of System Provenance

October 19, 2026Lenka MarekovaZISC Seminars

Abstract: Response and prevention of cyber incidence requires analysis of information from multiple sources. Endpoint monitoring solutions continuously record system-level activities as audit logs, providing deep visibility into security incidents. Yet before designing increasingly sophisticated solutions, it is essential to understand what system provenance can reveal, how its information can be abstracted, and where intelligent

Forging 1024-bit RSA signatures in nearly SNFS time

October 8, 2026Lenka MarekovaZISC Seminars

Abstract: The security of RSA is generally understood to be based on the complexity of factoring, and key size parameters are extrapolated from the general number field sieve (GNFS). However, this may not accurately represent RSA security in practical scenarios. An under-appreciated 2007 algorithm of Joux, Naccache, and Thomé allows an attacker to forge RSA

Behavioural Stealth in Autonomous Red Teaming

September 24, 2026Harshad SathayeZISC Seminars

Abstract: Autonomous systems can complete individual security tasks while producing behaviour that is poorly suited to a red teaming exercise. This becomes particularly apparent when several agents are operating concurrently, as local decisions can accumulate to form a pattern of activity that is inconsistent with the environment or the intended adversary. Therefore, behavioural stealth raises

Why you can’t trust your system software, and how you might.

June 25, 2026Harshad SathayeZISC Seminars

Abstract: A modern computer system, be a scale-up server or a phone, is a complex mixture of heterogeneous cores, firmware images, management processors, etc. The “de facto” operating system of such a machine, therefore, is itself a large ad-hoc collection of components (of which Linux or MacOS is only one) that have no explicit correctness

Reconciling Trusted Computing Services and Real-Time Embedded Systems

May 28, 2026Harshad SathayeZISC Seminars

Abstract: Trusted computing mechanisms such as trusted execution environments, and derived services such as remote attestation, and proofs of execution are increasingly important for securing embedded systems. However, many of these mechanisms rely on atomic execution and interrupt suppression to preserve integrity guarantees, directly conflicting with the timing and availability requirements of real-time embedded systems

The Confidential Computing Frontier: A New Paradigm for Compute and AI

April 24, 2026Harshad SathayeZISC Seminars

Abstract: Confidential Virtual Machines (CVMs) are the cornerstone of the modern push for Private AI and the future “default” for protecting data in use, however, the transition from architectural specification to secure deployment is fraught with challenges. While SEV-SNP and TDX offer a new paradigm for data-in-use protection, their security properties are not static. As

The DNS as National Critical Infrastructure in an Era of Geopolitical Tensions

March 24, 2026Harshad SathayeZISC Seminars

Abstract: The current geopolitical situation is characterized by growing dependence on digital infrastructures and increasing international tensions. For Switzerland, the Domain Name System (DNS) represents a crucial component in ensuring digital sovereignty and the protection of national interests. As a neutral state, Switzerland is particularly committed to maintaining its digital infrastructure in an independent, resilient,

Optimistic MEV in Ethereum Layer 2s: Why Blockspace Is Always in Demand

March 5, 2026Harshad SathayeZISC Seminars

Abstract: Abstract: Layer 2 rollups are rapidly absorbing DeFi activity, securing over $40 billion and accounting for nearly half of Ethereum’s DEX volume by Q1 2025, yet their MEV dynamics remain understudied. We address this gap by defining and quantifying optimistic MEV, a form of speculative, on-chain MEV whose detection and execution logic reside largely

Towards a New Generation of Cryptographic Software

February 27, 2026Harshad SathayeZISC Seminars

Abstract: Cryptographic software is currently facing two major challenges. First, upgrading our cryptographic infrastructure to post-quantum primitives is probably the largest and most demanding cryptographic migration effort ever. New software needs to be written, optimized for different platforms, extensively tested and audited, and eventually integrated into protocols and systems. Second, it becomes increasingly clear that

Did Security Notifications Reach the Owners of IoT Devices?

November 20, 2025Harshad SathayeZISC Seminars

Abstract: We have been working to discover IoT devices with security risks and to deliver security notifications to their owners. Our activities include discovering remote management devices used in critical infrastructure and notifying their operators; investigating IoT devices deployed within university networks and issuing notifications to administrators; and offering a security diagnostic service for consumer