Publications

2026

1. NDSS

   HyperMirage: Direct State Manipulation in Hybrid Virtual CPU Fuzzing

   Manuel Andreas, Fabian Specht, and Marius Momeu

   In Network and Distributed System Security Symposium (NDSS), Feb 2026

   Bib HTML Code

   @inproceedings{andreas2026hypermirage,
     title = {HyperMirage: Direct State Manipulation in Hybrid Virtual CPU Fuzzing},
     author = {Andreas, Manuel and Specht, Fabian and Momeu, Marius},
     booktitle = {Network and Distributed System Security Symposium (NDSS)},
     year = {2026},
     month = feb,
   }

2. Thesis

   Retrofitting Operating System Security via Commodity Hardware Extensions

   Marius Momeu

   Technische Universität München, 2026

   Abs Bib PDF

   This thesis proposes hardening schemes that mitigate memory-safety errors in operating systems efficiently. We leverage recent hardware primitives for fine-grained memory isolation to design compartmentalization and heap hardening frameworks that thwart dangling pointers, type confusion, and arbitrary R/W, which are key exploitation capabilities. We evaluate our techniques on the Linux kernel. Lastly, we improve fuzzing for finding critical vulnerabilities in hypervisors.

   @phdthesis{dissertation,
     author = {Momeu, Marius},
     title = {Retrofitting Operating System Security via Commodity Hardware Extensions},
     school = {Technische Universität München},
     year = {2026},
     pages = {151},
   }

2025

1. S&P

   IUBIK: Isolating User Bytes in Commodity Operating System Kernels via Memory Tagging Extensions

   Marius Momeu, Alexander J. Gaidis, Jasper Heidt, and Vasileios P. Kemerlis

   In IEEE Symposium on Security and Privacy (S&P), May 2025

   Bib HTML Code

   @inproceedings{momeu2025iubik,
     title = {IUBIK: Isolating User Bytes in Commodity Operating System Kernels via Memory Tagging Extensions},
     author = {Momeu, Marius and Gaidis, Alexander J. and vd Heidt, Jasper and Kemerlis, Vasileios P.},
     booktitle = {IEEE Symposium on Security and Privacy (S&P)},
     pages = {867--885},
     year = {2025},
     month = may,
     organization = {IEEE},
   }

2024

1. CCS

   Safeslab: Mitigating Use-After-Free Vulnerabilities via Memory Protection Keys

   Marius Momeu, Simon Schnückel, Kai Angnis, Michalis Polychronakis, and Vasileios P. Kemerlis

   In ACM SIGSAC Conference on Computer and Communications Security (CCS), Oct 2024

   Bib HTML Code

   @inproceedings{momeu2024safeslab,
     title = {Safeslab: Mitigating Use-After-Free Vulnerabilities via Memory Protection Keys},
     author = {Momeu, Marius and Schn{\"u}ckel, Simon and Angnis, Kai and Polychronakis, Michalis and Kemerlis, Vasileios P.},
     booktitle = {ACM SIGSAC Conference on Computer and Communications Security (CCS)},
     pages = {1345--1359},
     year = {2024},
     month = oct,
   }

2. ASIACCS

   ISLAB: Immutable Memory Management Metadata for Commodity Operating System Kernels

   Marius Momeu, Fabian Kilger, Christopher Roemheld, Simon Schnückel, Sergej Proskurin, Michalis Polychronakis, and Vasileios P. Kemerlis

   In ACM Asia Conference on Computer and Communications Security (ASIACCS), Jul 2024

   Bib HTML Code

   @inproceedings{momeu2024islab,
     title = {ISLAB: Immutable Memory Management Metadata for Commodity Operating System Kernels},
     author = {Momeu, Marius and Kilger, Fabian and Roemheld, Christopher and Schn{\"u}ckel, Simon and Proskurin, Sergej and Polychronakis, Michalis and Kemerlis, Vasileios P.},
     booktitle = {ACM Asia Conference on Computer and Communications Security (ASIACCS)},
     pages = {1159--1172},
     year = {2024},
     month = jul,
   }

2022

1. IEEE Access

   HArMoNICS: High-Assurance Microgrid Network Infrastructure Case Study

   Gianluca Roascio, Gabriele Costa, Emmanuel Baccelli, Lukas Malina, Raimundas Matulevičius, Marius Momeu, Nerijus Morkevičius, Enrico Russo, Branka Stojanović, and Aimilia Tasidou

   IEEE Access, 2022

   Bib HTML

   @article{roascio2022harmonics,
     title = {HArMoNICS: High-Assurance Microgrid Network Infrastructure Case Study},
     author = {Roascio, Gianluca and Costa, Gabriele and Baccelli, Emmanuel and Malina, Lukas and Matulevi{\v{c}}ius, Raimundas and Momeu, Marius and Morkevi{\v{c}}ius, Nerijus and Russo, Enrico and Stojanovi{\'c}, Branka and Tasidou, Aimilia},
     journal = {IEEE Access},
     volume = {10},
     pages = {115372--115383},
     year = {2022},
     publisher = {IEEE},
   }

2020

1. S&P

   xMP: Selective Memory Protection for Kernel and User Space

   Sergej Proskurin, Marius Momeu, Seyedhamed Ghavamnia, Vasileios P. Kemerlis, and Michalis Polychronakis

   In IEEE Symposium on Security and Privacy (S&P), May 2020

   Bib HTML Code

   @inproceedings{proskurin2020xmp,
     title = {xMP: Selective Memory Protection for Kernel and User Space},
     author = {Proskurin, Sergej and Momeu, Marius and Ghavamnia, Seyedhamed and Kemerlis, Vasileios P. and Polychronakis, Michalis},
     booktitle = {IEEE Symposium on Security and Privacy (S&P)},
     pages = {563--577},
     year = {2020},
     month = may,
     organization = {IEEE},
   }

2018

1. ACSAC

   Hiding in the Shadows: Empowering ARM for Stealthy Virtual Machine Introspection

   Sergej Proskurin, Tamas Lengyel, Marius Momeu, Claudia Eckert, and Apostolis Zarras

   In ACM Annual Computer Security Applications Conference (ACSAC), Dec 2018

   Bib HTML Code

   @inproceedings{proskurin2018hiding,
     title = {Hiding in the Shadows: Empowering ARM for Stealthy Virtual Machine Introspection},
     author = {Proskurin, Sergej and Lengyel, Tamas and Momeu, Marius and Eckert, Claudia and Zarras, Apostolis},
     booktitle = {ACM Annual Computer Security Applications Conference (ACSAC)},
     pages = {407--417},
     year = {2018},
     month = dec,
   }