About Me

I am a french Cybersecurity researcher.

I currently am occupying a Assistant Professor (Maître de Conférences) position in the Sushi team in CentraleSupelec/IRISA, Rennes.

My research focuses on microarchitectural side channels. I am particularly interested in JavaScript-based timing attacks and providing more automatic approaches to microarchitectural security.

I was a PhD student between 2019 and 2022, under the supervision of Clémentine Maurice and Gildas Avoine, in the SPICY team (formely EMSEC) at IRISA in Rennes. The goal of my thesis was to detect and exploit side-channel vulnerabilities.

I graduated in cybersecurity engineering at IMT Atlantique (formerly Telecom Bretagne) in 2019.

I defended on November 28 2022, with Lilian Bossuet as jury president, Jan Reineke and Billy Bob Brumley as reviewers, and Veelasha Moonsamy, Walter Rudametkin, Clémentine Maurice and Gildas Avoine as jury members.

Publications

HOMARD: Hammering Off-chip Memory via Aggregate power Rail Disclosure

Eliott Quéré, Li-Chung Chiang, Carina Fiedler, Thomas Rokicki, Maria Méndez Real, Alessandro Palumbo, Lilian Bossuet, Rubén Salvador, Daniel Gruss
Accepted at the IEEE Symposium on Security and Privacy (S&P) 2027

clflush-based Attacks on Modern Cloud Servers

Guillaume Didier, Augustin Lucas, Jasper Quirke, Thomas Rokicki
Accepted at the 31st European Symposium on Research in Computer Security (ESORICS) 2026

Best Paper Award

SnoopyPower! Remote Power Attacks on Cache and Coherence Paths

Eliott Quéré, Maria Méndez Real, Alessandro Palumbo, Thomas Rokicki, Lilian Bossuet, Rubén Salvador
Accepted at the IEEE International Symposium on Hardware Oriented Security and Trust (HOST) 2026

WIP: A Second Look at Port Assignment on Intel CPUs

Yarin Oziel, Tomer Laor, Shlomi Levy, Clémentine Maurice, Thomas Rokicki, Gabriel Scalosub
Accepted at the 2nd Microarchitecture Security Conference (uASC) 2026

Knock-Knock: Black-Box, Platform-Agnostic DRAM Address-Mapping Reverse Engineering

Antoine Plin, Lorenzo Casalino, Thomas Rokicki, Rubén Salvador
Accepted at the 2nd Microarchitecture Security Conference (uASC) 2026

The Finger in the Power: How to Fingerprint PCs by Monitoring their Power Consumptions

Marina Botvinnik, Tomer Laor, Thomas Rokicki, Clémentine Maurice, Michael Schwarz
Accepted at the Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA) 2023

Best Paper Award · Runner-up

CPU Port Contention Without SMT

Thomas Rokicki, Clémentine Maurice, Michael Schwarz
Accepted at the European Symposium on Research in Computer Security (ESORICS) 2022

Port Contention Goes Portable: Port Contention Side Channels in Web Browsers

Thomas Rokicki, Clémentine Maurice, Marina Botvinnik, Yossi Oren
Accepted at the Asia Conference on Computer and Communications Security (AsiaCCS) 2022

SoK: In Search of Lost Time: A Review of JavaScript Timers in Browsers

Thomas Rokicki, Clémentine Maurice, Pierre Laperdrix
Accepted at the European Symposium on Security and Privacy (EuroS&P) 2021

Talks and presentations

2022

  • PhD Defense : Side channels in web browsers: application to security and privacy
    Rennes, France

2022

  • ESORICS 2022 : Port contention without SMT
    Copenhagen, Denmark

2022

  • AsiaCCS22 : Port contention in the browsers
    Nagasaki, Japan

2022

  • SOSYSEC seminar : Port contention in the browsers
    Cybersecurity seminar organized by the french General Direction of Armaments (DGA) and INRIA, more information here
    Rennes, France

2021

  • EuroS&P 2021: In Search of Lost Time: A Review of JavaScript Timers in Browsers
    Vienna, Austria Virtual event

2021

  • Pass The Salt 2021: In Search of Lost Time: A Review of JavaScript Timers in Browsers
    Free software and security conference, more information here
    Lille, France Virtual event

2021

  • SPIRALS seminar: In Search of Lost Time: A Review of JavaScript Timers in Browsers
    Team seminar of the SPIRALS team
    Lille, France Virtual event