Merve GÜLMEZ
I am a security researcher at Ericsson and PhD candidate at KU Leuven.
I am interested in memory-safety hardening and improving software resilience.
Always happy to pitch my ideas for master thesis students and PhD students. Contact me if you need help!
2024
We have been working on measuring the effectiveness of x86-64 shadow stacks. Our findings indicate that the stack layout can vary across different compilers, and the layout of stack canaries can impact on the effectiveness of the shadow stack. To learn more about our findings, check out our preprint -> Do we still need canaries in the coal mine? Measuring shadow stack effectiveness in countering stack smashing.
At Ericsson Research, we have assessed the suitability of CHERI for telecommunication systems that require high performance and fault tolerance. To learn more about our findings, check out our blog post
I have been working on CHERI for about a year. It has been a long and educational project for me. I worked on extending the qemu simulator, llvm compiler, Flute core, and CheriFreeRTOS. The preprint for “Mon CHÈRI ♡ Adapting Capability Hardware Enhanced RISC with Conditional Capabilities” is now available here.
I hosted Sacha Ruchlejmer from Phelma University as a master’s thesis student. He worked on adapting the secure and rewind discard project to the Arm Morello Board at Ericsson Research. He successfully defended his thesis and graduated from Phelma University; Congrats, Sacha 🎉 You can read his thesis -> Secure Rewind and Discard on Arm Morello.
Our paper, “System Call Interposition Without Compromise” has been accepted at DSN 2024! Here, you can check our library and artifact, lazypoline.
I had the privilege of speaking at FOSDEM 2024. You can find my talk is here
2023
Our research paper, Friend or Foe Inside? Exploring In-Process Isolation to Maintain Memory Safety for Unsafe Rust preprint is available, and it was accepted at IEEE Sec-Dev-2023 conference.
I will be presenting my work “Rewind & Discard: Improving Software Resilience using Isolated Domain” at IEEE DSN 2023. The technical report is available at here. The source code is available at here #softwareresillence
I will be presenting my work “Exploring the Environmental Benefits of In-Process Isolation for Software Resilience”, at IEEE DSN 2023 in June, 2023. The arxiv version is available at here
I am a publicity chair of SILM workshop. Please check the call of paper!
I joined PrivacyCamp, 2023. So nice experience!
2022
I stayed for one week at Graz University Summer School: SECURITY, PRIVACY & CORRECTNESS IN THE IOT, 2022, Graz University. Highly recommended!!
- I attended the Summer School on Security Testing and Verification at KU Leuven. I did a poster presentation there; please check out here * “Unlimited Lives: Secure In-Process Rollback with Isolated Domains” is out!
- I got the IEEE Comsoc Turkey Master Thesis Award; you can find my thesis here