Abstract: Computer systems, powered by software, play a vital role in the functioning of our society. As a result, software security is of utmost importance and is more relevant now than ever before. Although the implementation of various security measures has made it challenging for adversaries to exploit software vulnerabilities, they have evolved to find ways around them. In this presentation, I will share my vision for establishing trustworthy software and systems, showcasing examples from my work in the field. Additionally, I will address the new security challenges that arise from the intersection of software and microarchitectural vulnerabilities. To demonstrate this, I will introduce our research on a new exploitation technique called BlindSide. This technique shows how a single memory corruption vulnerability can be used to hack the Linux kernel without causing any crashes. Finally, I will conclude the talk by highlighting ongoing efforts and future research directions in the realm of systems and software security.

Short Bio: Georgios Portokalidis is an Associate Professor in the Computer Science Department at Stevens Institute of Technology. Prior to this, he was a postdoctoral researcher at Columbia University. He holds a PhD in Computer Science from VU Amsterdam, as well as an MS and BS in Computer Science from Leiden University and University of Crete respectively. His research focuses on enhancing systems and software security, including the discovery of new vulnerabilities and exploitation methods, binary analysis, and the optimization of security systems. Portokalidis has made substantial contributions to the field through his published papers in highly-regarded systems and security research venues. He has received support from prominent organizations such as DARPA, IARPA, and ONR, and was honored with the prestigious DARPA Young Faculty Award.