Dorami: Privilege Separating Security Monitor on RISC-V TEEs
Mark Kuhne, Stavros Volos, Shweta Shinde
34th USENIX Security Symposium | August 2025
Azure Research
Azure Research – Security and Privacy
Publications
Publications by Year
-
Smart Casual Verification of the Confidential Consortium Framework
Heidi Howard, Markus Kuppe, Eddy Ashton, Amaury Chamayou, Natacha Crooks
2025 Networked Systems Design and Implementation | April 2025
The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin, Reza Shokri, Shruti Tople
February 2025
-
Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
ACM Conference on Computer and Communications Security (CCS) | October 2024
Principled Microarchitectural Isolation on Cloud CPUs
Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
ACM Conference on Computer and Communications Security (CCS) | October 2024
CCS Distinguished Paper Award
Closed-Form Bounds for DP-SGD against Record-level Inference
Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
USENIX Security Symposium | August 2024
LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud
Andrew Jeffery, Julien Maffre, Heidi Howard, Richard Mortier
July 2024
BatchIt: Optimizing Message-Passing Allocators for Producer-Consumer Workloads: An Intellectual Abstract
Nathaniel Filardo, Matthew J. Parkinson
Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM’24) | June 2024
Reference Counting Deeply Immutable Data Structures with Cycles: an Intellectual Abstract
Matthew J. Parkinson, Sylvan Clebsch, Tobias Wrigstad
n Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM ’24) | June 2024
Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition
Edoardo Debenedetti, Javier Rando, Daniel Paleka, Fineas Silaghi, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Ahmed Salem, Rui Wen, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramer, Sahar Abdelnabi, Lea Schönherr
NeurIPS 2024 | June 2024
Concurrent Immediate Reference Counting
Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang
PACM PL | June 2024
Optimizing Distributed Protocols with Query Rewrites
David Chu, Rithvik Panchapakesan, Shadaj Laddad, Lucky Katahanas, Chris Liu, Kaushik Shivakumar, Natacha Crooks, Joe Hellerstein, Heidi Howard
ACM International Conference on Management of Data (SIGMOD’24) | June 2024
Invariant Aggregator for Defending against Federated Backdoor Attacks
Xiaoya Wang, Dimitrios Dimitriadis, Oluwasanmi Koyejo, Shruti Tople
International Conference on Artificial Intelligence and Statistics, AISTATS | May 2024
Editor(s): Sanjoy Dasgupta, Stephan Mandt, Yingzhen Li
Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
ASPLOS ’24 | April 2024
Bigger, not Badder: Safely Scaling BFT Protocols
David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard
Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
Scalable, Interpretable Distributed Protocol Verification by Inductive Proof Slicing
William Schultz, Eddy Ashton, Heidi Howard, Stavros Tripakis
April 2024
Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple
Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier
Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
-
On the Efficacy of Differentially Private Few-shot Image Classification
Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela
Transactions on Machine Learning Research | December 2023, Vol 2023
CHERIoT: Complete Memory Safety for Embedded Devices
Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia
2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653
When Concurrency Matters: Behaviour-Oriented Concurrency
Luke Cheeseman, Matthew J. Parkinson, Sylvan Clebsch, Marios Kogias, Sophia Drossopoulou, David Chisnall, Tobias Wrigstad, Paul Liétar
Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
Nominee for Best Paper Award
Reference Capabilities for Flexible Memory Management
Ellen Arvidsson, Elias Castegren, Sylvan Clebsch, Sophia Drossopoulou, Matthew J. Parkinson, James Noble, Tobias Wrigstad
Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
Usenix Security Symposium | August 2023
Confidential Computing within an AI Accelerator
Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
2023 USENIX Annual Technical Conference | July 2023
Bayesian Estimation of Differential Privacy
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
2023 International Conference on Machine Learning | July 2023
Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
Two-in-One: A Model Hijacking Attack Against Text Generation Models
Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem
USENIX Security Symposium | July 2023
UnGANable: Defending Against GAN-based Face Manipulation
Zheng Li, Ning Yu, Ahmed Salem, Michael Backes, Mario Fritz, Yang Zhang
USENIX Security Symposium | July 2023
Creating Trust by Abolishing Hierarchies
Charly Castes, Adrien Ghosn, Neelu S. Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion
June 2023
BeeGees: Stayin’ Alive in Chained BFT
Neil Giridharan, Florian Suri-Payer, Matthew Ding, Heidi Howard, Ittai Abraham, Natacha Crooks
Symposium on Principles of Distributed Computing (PODC) | June 2023
Wait-Free Weak Reference Counting
Matthew J. Parkinson, Sylvan Clebsch, Ben Simner
ACM SIGPLAN International Symposium on Memory Management | June 2023
Analyzing Leakage of Personally Identifiable Information in Language Models
Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
2023 IEEE Symposium on Security and Privacy | May 2023
Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
IEEE Symposium on Security and Privacy (S&P) | May 2023
SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
2023 IEEE Symposium on Security and Privacy | May 2023
CHERIoT: Rethinking security for low-cost embedded systems
Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
MSR-TR-2023-6 | February 2023
Published by Microsoft
Distribution Inference Risks: Identifying and Mitigating Sources of Leakage
Valentin Hartmann, Leo Meynent, Maxime Peyrard, Dimitrios Dimitriadis, Shruti Tople, Robert West
IEEE Conference on Secure and Trustworthy Machine Learning (SatML) | February 2023
ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER
Haobin Ni, Antoine Delignat-Lavaud, Cédric Fournet, Tahina Ramananandro, Nikhil Swamy
Certified Programs and Proofs | January 2023
Accepted for publication, to appear
-
Membership Inference Attacks and Generalization: A Causal Perspective
Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena
Computer and Communications Security (CCS) | November 2022
MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models
Yixi Xu, Sumit Mukherjee, Xiyang Liu, Shruti Tople, Rahul Dodhia, Juan M. Lavista Ferres
Transactions on Machine Learning Research (TMLR) | October 2022
It’s not easy to relax: liveness in chained BFT protocols
Ittai Abraham, Natacha Crooks, Neil Giridharan, Heidi Howard, Florian Suri-Payer
International Symposium on Distributed Computing (DISC) | October 2022
Brief Announcement
Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web
Avinash Sudhodanan, Andrew Paverd
31st USENIX Security Symposium | August 2022
IA-CCF: Individual Accountability for Permissioned Ledgers
Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
Revizor: Testing Black-box CPUs against Speculation Contracts
Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’22) | March 2022
IEEE MICRO Top Pick
-
Leakage of Dataset Properties in Multi-Party Machine Learning
Wanrong Zhang, Shruti Tople, Olga Ohrimenko
Usenix Security | August 2021
Domain Generalization using Causal Matching
Divyat Mahajan, Shruti Tople, Amit Sharma
International Conference on Machine Learning (ICML) | July 2021
Grey-box Extraction of Natural Language Models
Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
International Conference on Machine Learning | July 2021
Editor(s): Marina Meila and Tong Zhang
A Security Model and Fully Verified Implementation for the IETF QUIC Record Layer
Antoine Delignat-Lavaud, Cédric Fournet, Bryan Parno, Jonathan Protzenko, Tahina Ramananandro, Jay Bosamiya, Joseph Lallemand, Itsaka Rakotonirina, Yi Zhou
IEEE Symposium on Security and Privacy | May 2021
Hardware-Software Contracts for Secure Speculation
Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
IEEE Symposium on Security and Privacy | May 2021
Best Paper Award
Toward Confidential Cloud Computing
Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
January 2021
-
HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)
Marina Polubelova, Karthikeyan Bhargavan, Jonathan Protzenko, Benjamin Beurdouche, Aymeric Fromherz, Natalia Kulatova, Santiago Zanella-Béguelin
ACM Conference on Computer and Communications Security (CCS) | November 2020
Analyzing Information Leakage of Updates to Natural Language Models
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
ACM Conference on Computer and Communication Security (CCS) | November 2020
Visor: Privacy-Preserving Video Analytics as a Cloud Service
Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
29th USENIX Security Symposium | August 2020
CSAW 2020 Applied Research Competition Award (Runner-up)
Alleviating Privacy Attacks via Causal Learning
Shruti Tople, Amit Sharma, Aditya V. Nori
International Conference on Machine Learning (ICML) | July 2020
CacheQuery: learning replacement policies from hardware caches
Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
2020 Programming Language Design and Implementation | June 2020
Cornucopia: Temporal Safety for CHERI Heaps
Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Sam Ainsworth, Lucian Paul-Trifu, Brooks Davis, Hongyan Xia, Edward Tomasz Napierala, Alexander Richardson, John Baldwin, David Chisnall, Jessica Clarke, Khilan Gudka, Alexandre Joannou, A. Theodore Markettos, Alfredo Mazzinghi, Robert Norton, Michael Roe, Peter Sewell, Stacey Son, Timothy M. Jones, Simon Moore, Peter G. Neumann, Robert N. M. Watson
IEEE Symposium on Security and Privacy | May 2020
Spectector: Principled Detection of Speculative Information Flows
Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
IEEE Symposium on Security and Privacy | May 2020
-
Pointer Tagging for Memory Safety
Tony Chen, David Chisnall
MSR-TR-2019-17 | July 2019
Published by Microsoft
snmalloc: A message passing Allocator
David Chisnall, Sylvan Clebsch, Sophia Drossopoulou, Juliana Vicente Franco, Paul Lietar, Matthew J. Parkinson, Alex Shamis, Christoph M. Wintersteiger
ISSM | June 2019, pp. 122-135
Theory and Practice of Finding Eviction Sets
Pepe Vila, Boris Köpf, José F. Morales
IEEE Symposium on Security and Privacy | May 2019
CHERI Concentrate: Practical Compressed Capabilities
Jonathan Woodruff, Alexandre Joannou, Hongyan Xia, Anthony Fox, Robert Norton-Wright, Thomas Bauereiss, David Chisnall, Brooks Davis, Khilan Gudka, Nathaniel Filardo, A. Theodore Markettos, Michael Roe, Peter G. Neumann, Robert N. M. Watson, Simon W. Moore
IEEE Transactions on Computers | April 2019
CCF: A Framework for Building Confidential Verifiable Replicated Services
Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
MSR-TR-2019-16 | April 2019
Published by Microsoft
CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
Best paper award winner
-
Imperfect forward secrecy: how Diffie-Hellman fails in practice
David Adrian, Karthik Bhargavan, Zakir Durumeric, Pierrick Gaudry, Matthew Green, J. Alex Halderman, Nadia Heninger, Drew Springall, Emmanuel Thomé, Luke Valenta, Benjamin VanderSloot, Eric Wustrow, Santiago Zanella-Béguelin, Paul Zimmermann
Communications of The ACM | December 2018, Vol 62(1): pp. 106-114
Contamination Attacks and Mitigation in Multi-Party Machine Learning
Jamie Hayes, Olya Ohrimenko
Neural Information Processing Systems (NeurIPS) | December 2018
Graviton: Trusted Execution Environments on GPUs
Stavros Volos, Kapil Vaswani, Rordigo Bruno
13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
CheriRTOS: A Capability Model for Embedded Devices
Hongyan Xia, Jonathan Woodruff, Hadrien Barral, Lawrence Esswood, Alexandre Joannou, Robert Kovacsics, David Chisnall, Michael Roe, Brooks Davis, Edward Napierala, John Baldwin, Khilan Gudka, Peter G. Neumann, Alex Richardson, Simon W. Moore, Robert N. M. Watson
Proceedings of the 2018 IEEE 36th International Conference on Computer Design (ICCD) | October 2018
Structured Encryption and Leakage Suppression
Seny Kamara, Tarik Moataz, Olya Ohrimenko
CRYPTO | August 2018
EnclaveDB – A Secure Database using SGX
Christian Priebe, Kapil Vaswani, Manuel Costa
To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
-
Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
USENIX Security Symposium 2017 | August 2017
Loophole: Timing Attacks on Shared Event Loops in Chrome
Pepe Vila, Boris Köpf
USENIX Security Symposium | August 2017
Distinguished paper award
Rigorous Analysis of Software Countermeasures against Cache Attacks
Goran Doychev, Boris Köpf
ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
-
Oblivious Multi-Party Machine Learning on Trusted Processors
Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
The 25th USENIX Security Symposium 2016 | July 2016
A Design and Verification Methodology for Secure Isolated Regions
Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
Programming Languages Design and Implementation (PLDI) | June 2016
-
Moat: Verifying Confidentiality of Enclave Programs
Rohit Sinha, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani
The ACM Conference on Computer and Communications Security (CCS) | October 2015
Observing and Preventing Leakage in MapReduce
Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
MSR-TR-2015-70 | September 2015
Published by Microsoft
Secure Computation Interfaces
Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
MSR-TR-2015-67 | August 2015
Published by Microsoft
VC3: Trustworthy Data Analytics in the Cloud using SGX
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
36th IEEE Symposium on Security and Privacy | May 2015
Publications by Research Area
-
The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin, Reza Shokri, Shruti Tople
February 2025
Closed-Form Bounds for DP-SGD against Record-level Inference
Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
USENIX Security Symposium | August 2024
Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition
Edoardo Debenedetti, Javier Rando, Daniel Paleka, Fineas Silaghi, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Ahmed Salem, Rui Wen, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramer, Sahar Abdelnabi, Lea Schönherr
NeurIPS 2024 | June 2024
Invariant Aggregator for Defending against Federated Backdoor Attacks
Xiaoya Wang, Dimitrios Dimitriadis, Oluwasanmi Koyejo, Shruti Tople
International Conference on Artificial Intelligence and Statistics, AISTATS | May 2024
Editor(s): Sanjoy Dasgupta, Stephan Mandt, Yingzhen Li
On the Efficacy of Differentially Private Few-shot Image Classification
Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela
Transactions on Machine Learning Research | December 2023, Vol 2023
Two-in-One: A Model Hijacking Attack Against Text Generation Models
Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem
USENIX Security Symposium | July 2023
UnGANable: Defending Against GAN-based Face Manipulation
Zheng Li, Ning Yu, Ahmed Salem, Michael Backes, Mario Fritz, Yang Zhang
USENIX Security Symposium | July 2023
Bayesian Estimation of Differential Privacy
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
2023 International Conference on Machine Learning | July 2023
Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
Analyzing Leakage of Personally Identifiable Information in Language Models
Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
2023 IEEE Symposium on Security and Privacy | May 2023
SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
2023 IEEE Symposium on Security and Privacy | May 2023
Distribution Inference Risks: Identifying and Mitigating Sources of Leakage
Valentin Hartmann, Leo Meynent, Maxime Peyrard, Dimitrios Dimitriadis, Shruti Tople, Robert West
IEEE Conference on Secure and Trustworthy Machine Learning (SatML) | February 2023
Membership Inference Attacks and Generalization: A Causal Perspective
Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena
Computer and Communications Security (CCS) | November 2022
MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models
Yixi Xu, Sumit Mukherjee, Xiyang Liu, Shruti Tople, Rahul Dodhia, Juan M. Lavista Ferres
Transactions on Machine Learning Research (TMLR) | October 2022
Leakage of Dataset Properties in Multi-Party Machine Learning
Wanrong Zhang, Shruti Tople, Olga Ohrimenko
Usenix Security | August 2021
Domain Generalization using Causal Matching
Divyat Mahajan, Shruti Tople, Amit Sharma
International Conference on Machine Learning (ICML) | July 2021
Grey-box Extraction of Natural Language Models
Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
International Conference on Machine Learning | July 2021
Editor(s): Marina Meila and Tong Zhang
Analyzing Information Leakage of Updates to Natural Language Models
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
ACM Conference on Computer and Communication Security (CCS) | November 2020
Alleviating Privacy Attacks via Causal Learning
Shruti Tople, Amit Sharma, Aditya V. Nori
International Conference on Machine Learning (ICML) | July 2020
CacheQuery: learning replacement policies from hardware caches
Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
2020 Programming Language Design and Implementation | June 2020
Contamination Attacks and Mitigation in Multi-Party Machine Learning
Jamie Hayes, Olya Ohrimenko
Neural Information Processing Systems (NeurIPS) | December 2018
-
Dorami: Privilege Separating Security Monitor on RISC-V TEEs
Mark Kuhne, Stavros Volos, Shweta Shinde
34th USENIX Security Symposium | August 2025
The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin, Reza Shokri, Shruti Tople
February 2025
Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
Principled Microarchitectural Isolation on Cloud CPUs
Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
ACM Conference on Computer and Communications Security (CCS) | October 2024
CCS Distinguished Paper Award
Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
ACM Conference on Computer and Communications Security (CCS) | October 2024
Closed-Form Bounds for DP-SGD against Record-level Inference
Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
USENIX Security Symposium | August 2024
LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud
Andrew Jeffery, Julien Maffre, Heidi Howard, Richard Mortier
July 2024
Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition
Edoardo Debenedetti, Javier Rando, Daniel Paleka, Fineas Silaghi, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Ahmed Salem, Rui Wen, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramer, Sahar Abdelnabi, Lea Schönherr
NeurIPS 2024 | June 2024
Invariant Aggregator for Defending against Federated Backdoor Attacks
Xiaoya Wang, Dimitrios Dimitriadis, Oluwasanmi Koyejo, Shruti Tople
International Conference on Artificial Intelligence and Statistics, AISTATS | May 2024
Editor(s): Sanjoy Dasgupta, Stephan Mandt, Yingzhen Li
Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
ASPLOS ’24 | April 2024
Bigger, not Badder: Safely Scaling BFT Protocols
David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard
Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
On the Efficacy of Differentially Private Few-shot Image Classification
Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela
Transactions on Machine Learning Research | December 2023, Vol 2023
CHERIoT: Complete Memory Safety for Embedded Devices
Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia
2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653
Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
Nominee for Best Paper Award
Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
Usenix Security Symposium | August 2023
Confidential Computing within an AI Accelerator
Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
2023 USENIX Annual Technical Conference | July 2023
Two-in-One: A Model Hijacking Attack Against Text Generation Models
Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem
USENIX Security Symposium | July 2023
UnGANable: Defending Against GAN-based Face Manipulation
Zheng Li, Ning Yu, Ahmed Salem, Michael Backes, Mario Fritz, Yang Zhang
USENIX Security Symposium | July 2023
Bayesian Estimation of Differential Privacy
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
2023 International Conference on Machine Learning | July 2023
Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
Creating Trust by Abolishing Hierarchies
Charly Castes, Adrien Ghosn, Neelu S. Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion
June 2023
BeeGees: Stayin’ Alive in Chained BFT
Neil Giridharan, Florian Suri-Payer, Matthew Ding, Heidi Howard, Ittai Abraham, Natacha Crooks
Symposium on Principles of Distributed Computing (PODC) | June 2023
Analyzing Leakage of Personally Identifiable Information in Language Models
Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
2023 IEEE Symposium on Security and Privacy | May 2023
SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
2023 IEEE Symposium on Security and Privacy | May 2023
Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
IEEE Symposium on Security and Privacy (S&P) | May 2023
CHERIoT: Rethinking security for low-cost embedded systems
Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
MSR-TR-2023-6 | February 2023
Published by Microsoft
Distribution Inference Risks: Identifying and Mitigating Sources of Leakage
Valentin Hartmann, Leo Meynent, Maxime Peyrard, Dimitrios Dimitriadis, Shruti Tople, Robert West
IEEE Conference on Secure and Trustworthy Machine Learning (SatML) | February 2023
ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER
Haobin Ni, Antoine Delignat-Lavaud, Cédric Fournet, Tahina Ramananandro, Nikhil Swamy
Certified Programs and Proofs | January 2023
Accepted for publication, to appear
Membership Inference Attacks and Generalization: A Causal Perspective
Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena
Computer and Communications Security (CCS) | November 2022
MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models
Yixi Xu, Sumit Mukherjee, Xiyang Liu, Shruti Tople, Rahul Dodhia, Juan M. Lavista Ferres
Transactions on Machine Learning Research (TMLR) | October 2022
It’s not easy to relax: liveness in chained BFT protocols
Ittai Abraham, Natacha Crooks, Neil Giridharan, Heidi Howard, Florian Suri-Payer
International Symposium on Distributed Computing (DISC) | October 2022
Brief Announcement
Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web
Avinash Sudhodanan, Andrew Paverd
31st USENIX Security Symposium | August 2022
IA-CCF: Individual Accountability for Permissioned Ledgers
Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
Revizor: Testing Black-box CPUs against Speculation Contracts
Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’22) | March 2022
IEEE MICRO Top Pick
Leakage of Dataset Properties in Multi-Party Machine Learning
Wanrong Zhang, Shruti Tople, Olga Ohrimenko
Usenix Security | August 2021
Grey-box Extraction of Natural Language Models
Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
International Conference on Machine Learning | July 2021
Editor(s): Marina Meila and Tong Zhang
Hardware-Software Contracts for Secure Speculation
Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
IEEE Symposium on Security and Privacy | May 2021
Best Paper Award
A Security Model and Fully Verified Implementation for the IETF QUIC Record Layer
Antoine Delignat-Lavaud, Cédric Fournet, Bryan Parno, Jonathan Protzenko, Tahina Ramananandro, Jay Bosamiya, Joseph Lallemand, Itsaka Rakotonirina, Yi Zhou
IEEE Symposium on Security and Privacy | May 2021
Toward Confidential Cloud Computing
Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
January 2021
HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)
Marina Polubelova, Karthikeyan Bhargavan, Jonathan Protzenko, Benjamin Beurdouche, Aymeric Fromherz, Natalia Kulatova, Santiago Zanella-Béguelin
ACM Conference on Computer and Communications Security (CCS) | November 2020
Analyzing Information Leakage of Updates to Natural Language Models
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
ACM Conference on Computer and Communication Security (CCS) | November 2020
Visor: Privacy-Preserving Video Analytics as a Cloud Service
Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
29th USENIX Security Symposium | August 2020
CSAW 2020 Applied Research Competition Award (Runner-up)
Alleviating Privacy Attacks via Causal Learning
Shruti Tople, Amit Sharma, Aditya V. Nori
International Conference on Machine Learning (ICML) | July 2020
CacheQuery: learning replacement policies from hardware caches
Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
2020 Programming Language Design and Implementation | June 2020
Cornucopia: Temporal Safety for CHERI Heaps
Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Sam Ainsworth, Lucian Paul-Trifu, Brooks Davis, Hongyan Xia, Edward Tomasz Napierala, Alexander Richardson, John Baldwin, David Chisnall, Jessica Clarke, Khilan Gudka, Alexandre Joannou, A. Theodore Markettos, Alfredo Mazzinghi, Robert Norton, Michael Roe, Peter Sewell, Stacey Son, Timothy M. Jones, Simon Moore, Peter G. Neumann, Robert N. M. Watson
IEEE Symposium on Security and Privacy | May 2020
Spectector: Principled Detection of Speculative Information Flows
Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
IEEE Symposium on Security and Privacy | May 2020
Pointer Tagging for Memory Safety
Tony Chen, David Chisnall
MSR-TR-2019-17 | July 2019
Published by Microsoft
snmalloc: A message passing Allocator
David Chisnall, Sylvan Clebsch, Sophia Drossopoulou, Juliana Vicente Franco, Paul Lietar, Matthew J. Parkinson, Alex Shamis, Christoph M. Wintersteiger
ISSM | June 2019, pp. 122-135
Theory and Practice of Finding Eviction Sets
Pepe Vila, Boris Köpf, José F. Morales
IEEE Symposium on Security and Privacy | May 2019
CHERI Concentrate: Practical Compressed Capabilities
Jonathan Woodruff, Alexandre Joannou, Hongyan Xia, Anthony Fox, Robert Norton-Wright, Thomas Bauereiss, David Chisnall, Brooks Davis, Khilan Gudka, Nathaniel Filardo, A. Theodore Markettos, Michael Roe, Peter G. Neumann, Robert N. M. Watson, Simon W. Moore
IEEE Transactions on Computers | April 2019
CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
Best paper award winner
CCF: A Framework for Building Confidential Verifiable Replicated Services
Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
MSR-TR-2019-16 | April 2019
Published by Microsoft
Imperfect forward secrecy: how Diffie-Hellman fails in practice
David Adrian, Karthik Bhargavan, Zakir Durumeric, Pierrick Gaudry, Matthew Green, J. Alex Halderman, Nadia Heninger, Drew Springall, Emmanuel Thomé, Luke Valenta, Benjamin VanderSloot, Eric Wustrow, Santiago Zanella-Béguelin, Paul Zimmermann
Communications of The ACM | December 2018, Vol 62(1): pp. 106-114
Contamination Attacks and Mitigation in Multi-Party Machine Learning
Jamie Hayes, Olya Ohrimenko
Neural Information Processing Systems (NeurIPS) | December 2018
Graviton: Trusted Execution Environments on GPUs
Stavros Volos, Kapil Vaswani, Rordigo Bruno
13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
Structured Encryption and Leakage Suppression
Seny Kamara, Tarik Moataz, Olya Ohrimenko
CRYPTO | August 2018
EnclaveDB – A Secure Database using SGX
Christian Priebe, Kapil Vaswani, Manuel Costa
To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
USENIX Security Symposium 2017 | August 2017
Loophole: Timing Attacks on Shared Event Loops in Chrome
Pepe Vila, Boris Köpf
USENIX Security Symposium | August 2017
Distinguished paper award
Rigorous Analysis of Software Countermeasures against Cache Attacks
Goran Doychev, Boris Köpf
ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
Oblivious Multi-Party Machine Learning on Trusted Processors
Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
The 25th USENIX Security Symposium 2016 | July 2016
A Design and Verification Methodology for Secure Isolated Regions
Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
Programming Languages Design and Implementation (PLDI) | June 2016
Moat: Verifying Confidentiality of Enclave Programs
Rohit Sinha, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani
The ACM Conference on Computer and Communications Security (CCS) | October 2015
Observing and Preventing Leakage in MapReduce
Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
MSR-TR-2015-70 | September 2015
Published by Microsoft
Secure Computation Interfaces
Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
MSR-TR-2015-67 | August 2015
Published by Microsoft
VC3: Trustworthy Data Analytics in the Cloud using SGX
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
36th IEEE Symposium on Security and Privacy | May 2015
-
Dorami: Privilege Separating Security Monitor on RISC-V TEEs
Mark Kuhne, Stavros Volos, Shweta Shinde
34th USENIX Security Symposium | August 2025
Smart Casual Verification of the Confidential Consortium Framework
Heidi Howard, Markus Kuppe, Eddy Ashton, Amaury Chamayou, Natacha Crooks
2025 Networked Systems Design and Implementation | April 2025
Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
Principled Microarchitectural Isolation on Cloud CPUs
Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
ACM Conference on Computer and Communications Security (CCS) | October 2024
CCS Distinguished Paper Award
LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud
Andrew Jeffery, Julien Maffre, Heidi Howard, Richard Mortier
July 2024
Concurrent Immediate Reference Counting
Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang
PACM PL | June 2024
Optimizing Distributed Protocols with Query Rewrites
David Chu, Rithvik Panchapakesan, Shadaj Laddad, Lucky Katahanas, Chris Liu, Kaushik Shivakumar, Natacha Crooks, Joe Hellerstein, Heidi Howard
ACM International Conference on Management of Data (SIGMOD’24) | June 2024
Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
ASPLOS ’24 | April 2024
Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple
Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier
Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
Bigger, not Badder: Safely Scaling BFT Protocols
David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard
Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
Nominee for Best Paper Award
Confidential Computing within an AI Accelerator
Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
2023 USENIX Annual Technical Conference | July 2023
Creating Trust by Abolishing Hierarchies
Charly Castes, Adrien Ghosn, Neelu S. Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion
June 2023
BeeGees: Stayin’ Alive in Chained BFT
Neil Giridharan, Florian Suri-Payer, Matthew Ding, Heidi Howard, Ittai Abraham, Natacha Crooks
Symposium on Principles of Distributed Computing (PODC) | June 2023
CHERIoT: Rethinking security for low-cost embedded systems
Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
MSR-TR-2023-6 | February 2023
Published by Microsoft
It’s not easy to relax: liveness in chained BFT protocols
Ittai Abraham, Natacha Crooks, Neil Giridharan, Heidi Howard, Florian Suri-Payer
International Symposium on Distributed Computing (DISC) | October 2022
Brief Announcement
Visor: Privacy-Preserving Video Analytics as a Cloud Service
Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
29th USENIX Security Symposium | August 2020
CSAW 2020 Applied Research Competition Award (Runner-up)
CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
Best paper award winner
CCF: A Framework for Building Confidential Verifiable Replicated Services
Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
MSR-TR-2019-16 | April 2019
Published by Microsoft
Graviton: Trusted Execution Environments on GPUs
Stavros Volos, Kapil Vaswani, Rordigo Bruno
13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
CheriRTOS: A Capability Model for Embedded Devices
Hongyan Xia, Jonathan Woodruff, Hadrien Barral, Lawrence Esswood, Alexandre Joannou, Robert Kovacsics, David Chisnall, Michael Roe, Brooks Davis, Edward Napierala, John Baldwin, Khilan Gudka, Peter G. Neumann, Alex Richardson, Simon W. Moore, Robert N. M. Watson
Proceedings of the 2018 IEEE 36th International Conference on Computer Design (ICCD) | October 2018
-
Principled Microarchitectural Isolation on Cloud CPUs
Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
ACM Conference on Computer and Communications Security (CCS) | October 2024
CCS Distinguished Paper Award
Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
ASPLOS ’24 | April 2024
CHERIoT: Complete Memory Safety for Embedded Devices
Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia
2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653
Confidential Computing within an AI Accelerator
Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
2023 USENIX Annual Technical Conference | July 2023
CHERIoT: Rethinking security for low-cost embedded systems
Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
MSR-TR-2023-6 | February 2023
Published by Microsoft
Toward Confidential Cloud Computing
Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
January 2021
Pointer Tagging for Memory Safety
Tony Chen, David Chisnall
MSR-TR-2019-17 | July 2019
Published by Microsoft
CHERI Concentrate: Practical Compressed Capabilities
Jonathan Woodruff, Alexandre Joannou, Hongyan Xia, Anthony Fox, Robert Norton-Wright, Thomas Bauereiss, David Chisnall, Brooks Davis, Khilan Gudka, Nathaniel Filardo, A. Theodore Markettos, Michael Roe, Peter G. Neumann, Robert N. M. Watson, Simon W. Moore
IEEE Transactions on Computers | April 2019
CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
Best paper award winner
Graviton: Trusted Execution Environments on GPUs
Stavros Volos, Kapil Vaswani, Rordigo Bruno
13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
-
Smart Casual Verification of the Confidential Consortium Framework
Heidi Howard, Markus Kuppe, Eddy Ashton, Amaury Chamayou, Natacha Crooks
2025 Networked Systems Design and Implementation | April 2025
BatchIt: Optimizing Message-Passing Allocators for Producer-Consumer Workloads: An Intellectual Abstract
Nathaniel Filardo, Matthew J. Parkinson
Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM’24) | June 2024
Reference Counting Deeply Immutable Data Structures with Cycles: an Intellectual Abstract
Matthew J. Parkinson, Sylvan Clebsch, Tobias Wrigstad
n Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM ’24) | June 2024
Concurrent Immediate Reference Counting
Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang
PACM PL | June 2024
Optimizing Distributed Protocols with Query Rewrites
David Chu, Rithvik Panchapakesan, Shadaj Laddad, Lucky Katahanas, Chris Liu, Kaushik Shivakumar, Natacha Crooks, Joe Hellerstein, Heidi Howard
ACM International Conference on Management of Data (SIGMOD’24) | June 2024
Scalable, Interpretable Distributed Protocol Verification by Inductive Proof Slicing
William Schultz, Eddy Ashton, Heidi Howard, Stavros Tripakis
April 2024
When Concurrency Matters: Behaviour-Oriented Concurrency
Luke Cheeseman, Matthew J. Parkinson, Sylvan Clebsch, Marios Kogias, Sophia Drossopoulou, David Chisnall, Tobias Wrigstad, Paul Liétar
Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
Reference Capabilities for Flexible Memory Management
Ellen Arvidsson, Elias Castegren, Sylvan Clebsch, Sophia Drossopoulou, Matthew J. Parkinson, James Noble, Tobias Wrigstad
Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
Usenix Security Symposium | August 2023
Wait-Free Weak Reference Counting
Matthew J. Parkinson, Sylvan Clebsch, Ben Simner
ACM SIGPLAN International Symposium on Memory Management | June 2023
Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
IEEE Symposium on Security and Privacy (S&P) | May 2023
ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER
Haobin Ni, Antoine Delignat-Lavaud, Cédric Fournet, Tahina Ramananandro, Nikhil Swamy
Certified Programs and Proofs | January 2023
Accepted for publication, to appear
Revizor: Testing Black-box CPUs against Speculation Contracts
Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’22) | March 2022
IEEE MICRO Top Pick
Hardware-Software Contracts for Secure Speculation
Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
IEEE Symposium on Security and Privacy | May 2021
Best Paper Award
HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)
Marina Polubelova, Karthikeyan Bhargavan, Jonathan Protzenko, Benjamin Beurdouche, Aymeric Fromherz, Natalia Kulatova, Santiago Zanella-Béguelin
ACM Conference on Computer and Communications Security (CCS) | November 2020
CacheQuery: learning replacement policies from hardware caches
Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
2020 Programming Language Design and Implementation | June 2020
Rigorous Analysis of Software Countermeasures against Cache Attacks
Goran Doychev, Boris Köpf
ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
A Design and Verification Methodology for Secure Isolated Regions
Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
Programming Languages Design and Implementation (PLDI) | June 2016
Moat: Verifying Confidentiality of Enclave Programs
Rohit Sinha, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani
The ACM Conference on Computer and Communications Security (CCS) | October 2015
-
Domain Generalization using Causal Matching
Divyat Mahajan, Shruti Tople, Amit Sharma
International Conference on Machine Learning (ICML) | July 2021
-
Visor: Privacy-Preserving Video Analytics as a Cloud Service
Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
29th USENIX Security Symposium | August 2020
CSAW 2020 Applied Research Competition Award (Runner-up)
Publications by Type
-
The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin, Reza Shokri, Shruti Tople
February 2025
LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud
Andrew Jeffery, Julien Maffre, Heidi Howard, Richard Mortier
July 2024
Scalable, Interpretable Distributed Protocol Verification by Inductive Proof Slicing
William Schultz, Eddy Ashton, Heidi Howard, Stavros Tripakis
April 2024
-
Dorami: Privilege Separating Security Monitor on RISC-V TEEs
Mark Kuhne, Stavros Volos, Shweta Shinde
34th USENIX Security Symposium | August 2025
Smart Casual Verification of the Confidential Consortium Framework
Heidi Howard, Markus Kuppe, Eddy Ashton, Amaury Chamayou, Natacha Crooks
2025 Networked Systems Design and Implementation | April 2025
Principled Microarchitectural Isolation on Cloud CPUs
Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
ACM Conference on Computer and Communications Security (CCS) | October 2024
CCS Distinguished Paper Award
Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
ACM Conference on Computer and Communications Security (CCS) | October 2024
Closed-Form Bounds for DP-SGD against Record-level Inference
Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
USENIX Security Symposium | August 2024
BatchIt: Optimizing Message-Passing Allocators for Producer-Consumer Workloads: An Intellectual Abstract
Nathaniel Filardo, Matthew J. Parkinson
Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM’24) | June 2024
Reference Counting Deeply Immutable Data Structures with Cycles: an Intellectual Abstract
Matthew J. Parkinson, Sylvan Clebsch, Tobias Wrigstad
n Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM ’24) | June 2024
Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition
Edoardo Debenedetti, Javier Rando, Daniel Paleka, Fineas Silaghi, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Ahmed Salem, Rui Wen, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramer, Sahar Abdelnabi, Lea Schönherr
NeurIPS 2024 | June 2024
Optimizing Distributed Protocols with Query Rewrites
David Chu, Rithvik Panchapakesan, Shadaj Laddad, Lucky Katahanas, Chris Liu, Kaushik Shivakumar, Natacha Crooks, Joe Hellerstein, Heidi Howard
ACM International Conference on Management of Data (SIGMOD’24) | June 2024
Invariant Aggregator for Defending against Federated Backdoor Attacks
Xiaoya Wang, Dimitrios Dimitriadis, Oluwasanmi Koyejo, Shruti Tople
International Conference on Artificial Intelligence and Statistics, AISTATS | May 2024
Editor(s): Sanjoy Dasgupta, Stephan Mandt, Yingzhen Li
Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
ASPLOS ’24 | April 2024
Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple
Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier
Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
Bigger, not Badder: Safely Scaling BFT Protocols
David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard
Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
Usenix Security Symposium | August 2023
Confidential Computing within an AI Accelerator
Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
2023 USENIX Annual Technical Conference | July 2023
Two-in-One: A Model Hijacking Attack Against Text Generation Models
Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem
USENIX Security Symposium | July 2023
UnGANable: Defending Against GAN-based Face Manipulation
Zheng Li, Ning Yu, Ahmed Salem, Michael Backes, Mario Fritz, Yang Zhang
USENIX Security Symposium | July 2023
Bayesian Estimation of Differential Privacy
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
2023 International Conference on Machine Learning | July 2023
Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
Creating Trust by Abolishing Hierarchies
Charly Castes, Adrien Ghosn, Neelu S. Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion
June 2023
BeeGees: Stayin’ Alive in Chained BFT
Neil Giridharan, Florian Suri-Payer, Matthew Ding, Heidi Howard, Ittai Abraham, Natacha Crooks
Symposium on Principles of Distributed Computing (PODC) | June 2023
Wait-Free Weak Reference Counting
Matthew J. Parkinson, Sylvan Clebsch, Ben Simner
ACM SIGPLAN International Symposium on Memory Management | June 2023
Analyzing Leakage of Personally Identifiable Information in Language Models
Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
2023 IEEE Symposium on Security and Privacy | May 2023
SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
2023 IEEE Symposium on Security and Privacy | May 2023
Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
IEEE Symposium on Security and Privacy (S&P) | May 2023
Distribution Inference Risks: Identifying and Mitigating Sources of Leakage
Valentin Hartmann, Leo Meynent, Maxime Peyrard, Dimitrios Dimitriadis, Shruti Tople, Robert West
IEEE Conference on Secure and Trustworthy Machine Learning (SatML) | February 2023
ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER
Haobin Ni, Antoine Delignat-Lavaud, Cédric Fournet, Tahina Ramananandro, Nikhil Swamy
Certified Programs and Proofs | January 2023
Accepted for publication, to appear
Membership Inference Attacks and Generalization: A Causal Perspective
Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena
Computer and Communications Security (CCS) | November 2022
It’s not easy to relax: liveness in chained BFT protocols
Ittai Abraham, Natacha Crooks, Neil Giridharan, Heidi Howard, Florian Suri-Payer
International Symposium on Distributed Computing (DISC) | October 2022
Brief Announcement
Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web
Avinash Sudhodanan, Andrew Paverd
31st USENIX Security Symposium | August 2022
IA-CCF: Individual Accountability for Permissioned Ledgers
Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
Revizor: Testing Black-box CPUs against Speculation Contracts
Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’22) | March 2022
IEEE MICRO Top Pick
Leakage of Dataset Properties in Multi-Party Machine Learning
Wanrong Zhang, Shruti Tople, Olga Ohrimenko
Usenix Security | August 2021
Domain Generalization using Causal Matching
Divyat Mahajan, Shruti Tople, Amit Sharma
International Conference on Machine Learning (ICML) | July 2021
Grey-box Extraction of Natural Language Models
Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
International Conference on Machine Learning | July 2021
Editor(s): Marina Meila and Tong Zhang
Hardware-Software Contracts for Secure Speculation
Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
IEEE Symposium on Security and Privacy | May 2021
Best Paper Award
A Security Model and Fully Verified Implementation for the IETF QUIC Record Layer
Antoine Delignat-Lavaud, Cédric Fournet, Bryan Parno, Jonathan Protzenko, Tahina Ramananandro, Jay Bosamiya, Joseph Lallemand, Itsaka Rakotonirina, Yi Zhou
IEEE Symposium on Security and Privacy | May 2021
HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)
Marina Polubelova, Karthikeyan Bhargavan, Jonathan Protzenko, Benjamin Beurdouche, Aymeric Fromherz, Natalia Kulatova, Santiago Zanella-Béguelin
ACM Conference on Computer and Communications Security (CCS) | November 2020
Analyzing Information Leakage of Updates to Natural Language Models
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
ACM Conference on Computer and Communication Security (CCS) | November 2020
Visor: Privacy-Preserving Video Analytics as a Cloud Service
Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
29th USENIX Security Symposium | August 2020
CSAW 2020 Applied Research Competition Award (Runner-up)
Alleviating Privacy Attacks via Causal Learning
Shruti Tople, Amit Sharma, Aditya V. Nori
International Conference on Machine Learning (ICML) | July 2020
CacheQuery: learning replacement policies from hardware caches
Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
2020 Programming Language Design and Implementation | June 2020
Cornucopia: Temporal Safety for CHERI Heaps
Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Sam Ainsworth, Lucian Paul-Trifu, Brooks Davis, Hongyan Xia, Edward Tomasz Napierala, Alexander Richardson, John Baldwin, David Chisnall, Jessica Clarke, Khilan Gudka, Alexandre Joannou, A. Theodore Markettos, Alfredo Mazzinghi, Robert Norton, Michael Roe, Peter Sewell, Stacey Son, Timothy M. Jones, Simon Moore, Peter G. Neumann, Robert N. M. Watson
IEEE Symposium on Security and Privacy | May 2020
Spectector: Principled Detection of Speculative Information Flows
Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
IEEE Symposium on Security and Privacy | May 2020
Theory and Practice of Finding Eviction Sets
Pepe Vila, Boris Köpf, José F. Morales
IEEE Symposium on Security and Privacy | May 2019
CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
Best paper award winner
Contamination Attacks and Mitigation in Multi-Party Machine Learning
Jamie Hayes, Olya Ohrimenko
Neural Information Processing Systems (NeurIPS) | December 2018
Graviton: Trusted Execution Environments on GPUs
Stavros Volos, Kapil Vaswani, Rordigo Bruno
13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
CheriRTOS: A Capability Model for Embedded Devices
Hongyan Xia, Jonathan Woodruff, Hadrien Barral, Lawrence Esswood, Alexandre Joannou, Robert Kovacsics, David Chisnall, Michael Roe, Brooks Davis, Edward Napierala, John Baldwin, Khilan Gudka, Peter G. Neumann, Alex Richardson, Simon W. Moore, Robert N. M. Watson
Proceedings of the 2018 IEEE 36th International Conference on Computer Design (ICCD) | October 2018
Structured Encryption and Leakage Suppression
Seny Kamara, Tarik Moataz, Olya Ohrimenko
CRYPTO | August 2018
EnclaveDB – A Secure Database using SGX
Christian Priebe, Kapil Vaswani, Manuel Costa
To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
USENIX Security Symposium 2017 | August 2017
Loophole: Timing Attacks on Shared Event Loops in Chrome
Pepe Vila, Boris Köpf
USENIX Security Symposium | August 2017
Distinguished paper award
Rigorous Analysis of Software Countermeasures against Cache Attacks
Goran Doychev, Boris Köpf
ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
Oblivious Multi-Party Machine Learning on Trusted Processors
Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
The 25th USENIX Security Symposium 2016 | July 2016
A Design and Verification Methodology for Secure Isolated Regions
Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
Programming Languages Design and Implementation (PLDI) | June 2016
Moat: Verifying Confidentiality of Enclave Programs
Rohit Sinha, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani
The ACM Conference on Computer and Communications Security (CCS) | October 2015
VC3: Trustworthy Data Analytics in the Cloud using SGX
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
36th IEEE Symposium on Security and Privacy | May 2015
-
Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
Concurrent Immediate Reference Counting
Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang
PACM PL | June 2024
On the Efficacy of Differentially Private Few-shot Image Classification
Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela
Transactions on Machine Learning Research | December 2023, Vol 2023
CHERIoT: Complete Memory Safety for Embedded Devices
Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia
2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653
When Concurrency Matters: Behaviour-Oriented Concurrency
Luke Cheeseman, Matthew J. Parkinson, Sylvan Clebsch, Marios Kogias, Sophia Drossopoulou, David Chisnall, Tobias Wrigstad, Paul Liétar
Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
Nominee for Best Paper Award
Reference Capabilities for Flexible Memory Management
Ellen Arvidsson, Elias Castegren, Sylvan Clebsch, Sophia Drossopoulou, Matthew J. Parkinson, James Noble, Tobias Wrigstad
Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models
Yixi Xu, Sumit Mukherjee, Xiyang Liu, Shruti Tople, Rahul Dodhia, Juan M. Lavista Ferres
Transactions on Machine Learning Research (TMLR) | October 2022
snmalloc: A message passing Allocator
David Chisnall, Sylvan Clebsch, Sophia Drossopoulou, Juliana Vicente Franco, Paul Lietar, Matthew J. Parkinson, Alex Shamis, Christoph M. Wintersteiger
ISSM | June 2019, pp. 122-135
CHERI Concentrate: Practical Compressed Capabilities
Jonathan Woodruff, Alexandre Joannou, Hongyan Xia, Anthony Fox, Robert Norton-Wright, Thomas Bauereiss, David Chisnall, Brooks Davis, Khilan Gudka, Nathaniel Filardo, A. Theodore Markettos, Michael Roe, Peter G. Neumann, Robert N. M. Watson, Simon W. Moore
IEEE Transactions on Computers | April 2019
Imperfect forward secrecy: how Diffie-Hellman fails in practice
David Adrian, Karthik Bhargavan, Zakir Durumeric, Pierrick Gaudry, Matthew Green, J. Alex Halderman, Nadia Heninger, Drew Springall, Emmanuel Thomé, Luke Valenta, Benjamin VanderSloot, Eric Wustrow, Santiago Zanella-Béguelin, Paul Zimmermann
Communications of The ACM | December 2018, Vol 62(1): pp. 106-114
-
CHERIoT: Rethinking security for low-cost embedded systems
Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
MSR-TR-2023-6 | February 2023
Published by Microsoft
Pointer Tagging for Memory Safety
Tony Chen, David Chisnall
MSR-TR-2019-17 | July 2019
Published by Microsoft
CCF: A Framework for Building Confidential Verifiable Replicated Services
Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
MSR-TR-2019-16 | April 2019
Published by Microsoft
Observing and Preventing Leakage in MapReduce
Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
MSR-TR-2015-70 | September 2015
Published by Microsoft
Secure Computation Interfaces
Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
MSR-TR-2015-67 | August 2015
Published by Microsoft
-
Toward Confidential Cloud Computing
Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
January 2021