FOSAD International School on Foundations of Security Analysis and Design
Summer School Session · 2026

CPU Vulnerabilities

Lecture notes, practical exercises, and setup information for two one-hour hands-on sessions.

Instructor
Michael Schwarz
Format
Lecture and two practical labs
Topic
CPU security and architectural state
01

Course materials

Slides and notes

PDF Lecture slides - part 1CPU Vulnerabilities: Finding Bugs Where Software Ends Download ↓ PDF Lab 1 slidesFind your own side channel Download ↓ PDF Lecture slides - part 2CPU Vulnerabilities: Finding Bugs Where Software Ends Download ↓ PDF Lab 2 slidesLeaking data Download ↓
02

Preparation

Before the session

Please test your setup in advance.

You will need either a suitable local machine or working remote access to complete the exercises.

2.1

ARM machine for Lab 1

  1. Bring an ARM device running Linux or Android, or use the remote machine.
  2. For remote access, visit fosad-lab.cpu.wtf and redeem the access code you received on paper.
  3. Download the ZIP with login scripts for macOS, Windows, and Linux.
2.2

LoongArch tools for Lab 2

  1. Use Linux, macOS, or Windows.
  2. Install Python 3 before the session; the LoongLeak bundle uses it.
  3. Download and extract the bundle linked below.
03

Practical work

Hands-on sessions