Selected Publications

In the past few years, I have been dedicating my efforts (No. of acceptence / No. of submissions) to publish papers on top-tier conferences in computer architecture (MICRO[0/2], ISCA[0/0], HPCA[1/1], and ASPLOS[1/4]) and security (CCS[0/3], IEEE S&P[0/1], Usenix Security[1/6], and NDSS[0/4]). I also contribute to other well-regarded conferences in hardware security (e.g., DAC[4/4], DATE[1/1], and CHES[1/1]). You can find the full publication list from my Google Scholar and the submission history from GitHub.

• _{[TIFS 2025] Fantastic Interrupts and Where to Find Them: Exploiting Non-movable Interrupts on x86 [paper]
  Xin Zhang, Qingni Shen, Zhi Zhang, Yansong Gao, Jiajun Zou, Yi Yang, Zhonghai Wu
  IEEE Transactions on Information Forensics and Security (CCF-A, IF=6.3)}
  

• _{[DAC 2025] LeakyDSP: Exploiting Digital Signal Processing Blocks to Sense Voltage Fluctuations in FPGAs [paper] [code]
  Xin Zhang, Jiajun Zou, Yi Yang, Qingni Shen, Zhi Zhang, Yansong Gao, Zhonghai Wu, Trevor E. Carlson
  Design Automation Conference (CCF-A / CORE-A)}
  

• _{[DAC 2025] AmpereBleed: Exploiting On-chip Current Sensors for Circuit-Free Attacks on ARM-FPGA SoCs
  Xin Zhang, Yi Yang, Jiajun Zou, Qingni Shen, Zhi Zhang, Yansong Gao, Zhonghai Wu, Trevor E. Carlson
  Design Automation Conference (CCF-A / CORE-A)}
  

• _{[DAC 2025] ZK-Hammer: Leaking Secrets from Zero-Knowledge Proofs via Rowhammer [paper]
  Junkai Liang, Xin Zhang, Daqi Hu, Qingni Shen, Yuejian Fang and Zhonghai Wu
  Design Automation Conference (CCF-A / CORE-A)}
  

• _{[CHES 2025] Practical Opcode-based Fault Attack on AES-NI [paper] [SAFE 2025 Best Paper Award]
  Xue Gong, Xin Zhang, Qianmei Wu, Fan Zhang, Junge Xu, Qingni Shen, Zhi Zhang
  IACR Transactions on Cryptographic Hardware and Embedded Systems (CCF-B / CORE-A)}
  

• _{[ASPLOS 2025] HyperHammer: Breaking Free from KVM-Enforced Isolation [paper]
  Wei Chen, Zhi Zhang, Xin Zhang, Qingni Shen, Yuval Yarom, Daniel Genkin, Chen Yan, Zhe Wang
  International Conference on Architectural Support for Programming Languages and Operating Systems (CCF-A / CORE-A*)}
  

• _{[SEC 2025] Achilles: A Formal Framework of Leaking Secrets from Signature Schemes via Rowhammer [paper] [code]
  Junkai Liang, Zhi Zhang, Xin Zhang (co-first author), Qingni Shen, Yansong Gao, Xingliang Yuan, Haiyang Xue, Pengfei Wu, Zhonghai Wu
  Usenix Security (CCF-A / CORE-A*)}
  

• _{[DAC 2024] ThermalScope: A Practical Interrupt Side Channel Attack Based On Thermal Event Interrupts [paper] [code]
  Xin Zhang, Zhi Zhang, Qingni Shen, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Zhonghai Wu
  Design Automation Conference (CCF-A / CORE-A)}
  

• _{[HPCA 2024] SegScope: Probing Fine-grained Interrupts via Architectural Footprints [paper] [code] [slides] [poster]
  Xin Zhang, Zhi Zhang, Qingni Shen, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Jiliang Zhang
  International Symposium on High-Performance Computer Architecture (CCF-A / CORE-A*)}