Azure Research

Azure Research – Security and Privacy

Publications

View by:

- Rollbaccine : Herd Immunity against Storage Rollback Attacks in TEEs
  
  David C. Y. Chu, Aditya Balasubramanian, Dee Bao, Natacha Crooks, Heidi Howard, Lucky E. Katahanas, Soujanya Ponnapalli
  
  2026 International Conference on Management of Data | May 2026
  
  Preprint
- Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
  
  Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos
  
  2026 IEEE Symposium on Security and Privacy | May 2026
  
  Accepted at IEEE SP 2025, publication delayed due to embargo.
  
  Publication Project
- Optimizing Agent Planning for Security and Autonomy
  
  Aashish Kolluri, Rishi Sharma, Manuel Costa, Boris Köpf, Tobias Niessen, Mark Russinovich, Shruti Tople, Santiago Zanella-Béguelin
  
  ICLR 2026 | February 2026
  
  Publication Preprint Project
- Permissive Information-Flow Analysis for Large Language Models
  
  Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
  
  Transactions on Machine Learning Research (TMLR) | October 2025
  
  Publication Publication Project
- Dorami: Privilege Separating Security Monitor on RISC-V TEEs
  
  Mark Kuhne, Stavros Volos, Shweta Shinde
  
  34th USENIX Security Symposium | August 2025
  
  Preprint Author's Version
- Dynamic Region Ownership for Concurrency Safety
  
  Fridtjof Peer Stoldt, Brandt Bucher, Sylvan Clebsch, Matthew Johnson, Matthew J. Parkinson, Guido Van Rossum, Eric Snow, Tobias Wrigstad
  
  PACMPL | June 2025, Vol 9(PLDI)
  
  Preprint Publication Project
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project Project
- Smart Casual Verification of the Confidential Consortium Framework
  
  Heidi Howard, Markus Kuppe, Eddy Ashton, Amaury Chamayou, Natacha Crooks
  
  2025 Networked Systems Design and Implementation | April 2025
  
  Publication Preprint PDF Author's Version Project
- DORADD: Deterministic Parallel Execution in the Era of Microsecond-Scale Computing
  
  Zhengqing Liu, Musa Unal, Matthew J. Parkinson, Marios Kogias
  
  PPoPP ’25 | March 2025
  
  Publication Publication Project
- AMuLeT: Automated Design-Time Testing of Secure Speculation Countermeasures
  
  Bo Fu, Leo Tenenbaum, David Adler, Assaf Klein, Arpit Gogia, Alaa R. Alameldeen, Marco Guarnieri, M. Silberstein, Oleksii Oleksenko, Gururaj Saileshwar
  
  30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems | February 2025
  
  Publication DOI Publication Project
- The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
  
  Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin, Reza Shokri, Shruti Tople
  
  February 2025
  
  DOI Preprint Project
- Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
  
  Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
  
  Publication Preprint Project
- Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
  
  Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  Author's Version Publication Project
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Closed-Form Bounds for DP-SGD against Record-level Inference
  
  Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  USENIX Security Symposium | August 2024
  
  Publication Project
- LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud
  
  Andrew Jeffery, Julien Maffre, Heidi Howard, Richard Mortier
  
  July 2024
  
  Publication Project
- BatchIt: Optimizing Message-Passing Allocators for Producer-Consumer Workloads: An Intellectual Abstract
  
  Nathaniel Filardo, Matthew J. Parkinson
  
  Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM’24) | June 2024
  
  Publication Publication Project
- Reference Counting Deeply Immutable Data Structures with Cycles: an Intellectual Abstract
  
  Matthew J. Parkinson, Sylvan Clebsch, Tobias Wrigstad
  
  n Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM ’24) | June 2024
  
  Preprint Publication Project
- Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition
  
  Edoardo Debenedetti, Javier Rando, Daniel Paleka, Fineas Silaghi, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Ahmed Salem, Rui Wen, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramer, Sahar Abdelnabi, Lea Schönherr
  
  NeurIPS 2024 | June 2024
  
  Preprint Project
- Concurrent Immediate Reference Counting
  
  Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang
  
  PACM PL | June 2024
  
  Publication Publication Project
- Optimizing Distributed Protocols with Query Rewrites
  
  David Chu, Rithvik Panchapakesan, Shadaj Laddad, Lucky Katahanas, Chris Liu, Kaushik Shivakumar, Natacha Crooks, Joe Hellerstein, Heidi Howard
  
  ACM International Conference on Management of Data (SIGMOD’24) | June 2024
  
  Publication Author's Version Preprint DOI
- Invariant Aggregator for Defending against Federated Backdoor Attacks
  
  Xiaoya Wang, Dimitrios Dimitriadis, Oluwasanmi Koyejo, Shruti Tople
  
  International Conference on Artificial Intelligence and Statistics, AISTATS | May 2024
  
  Editor(s): Sanjoy Dasgupta, Stephan Mandt, Yingzhen Li
  
  Preprint Publication Project
- Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
  
  Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
  
  ASPLOS ’24 | April 2024
  
  PDF DOI Publication Project
- Bigger, not Badder: Safely Scaling BFT Protocols
  
  David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard
  
  Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
  
  Publication DOI
- Scalable, Interpretable Distributed Protocol Verification by Inductive Proof Slicing
  
  William Schultz, Eddy Ashton, Heidi Howard, Stavros Tripakis
  
  April 2024
  
  Publication
- Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple
  
  Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier
  
  Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
  
  Publication DOI
- On the Efficacy of Differentially Private Few-shot Image Classification
  
  Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela
  
  Transactions on Machine Learning Research | December 2023, Vol 2023
  
  DOI Preprint Preprint Publication Project
- CHERIoT: Complete Memory Safety for Embedded Devices
  
  Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653
  
  Publication DOI Publication Project
- When Concurrency Matters: Behaviour-Oriented Concurrency
  
  Luke Cheeseman, Matthew J. Parkinson, Sylvan Clebsch, Marios Kogias, Sophia Drossopoulou, David Chisnall, Tobias Wrigstad, Paul Liétar
  
  Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
  
  DOI Preprint Project
- Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
  
  Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
  
  Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
  
  Nominee for Best Paper Award
  
  Publication Preprint Author's Version Project
- Reference Capabilities for Flexible Memory Management
  
  Ellen Arvidsson, Elias Castegren, Sylvan Clebsch, Sophia Drossopoulou, Matthew J. Parkinson, James Noble, Tobias Wrigstad
  
  Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
  
  DOI Preprint Project
- Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
  
  Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
  
  Usenix Security Symposium | August 2023
  
  Publication Project
- Confidential Computing within an AI Accelerator
  
  Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
  
  2023 USENIX Annual Technical Conference | July 2023
  
  Author's Version Publication Project
- Bayesian Estimation of Differential Privacy
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
  
  2023 International Conference on Machine Learning | July 2023
  
  Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
  
  Publication Project
- Two-in-One: A Model Hijacking Attack Against Text Generation Models
  
  Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem
  
  USENIX Security Symposium | July 2023
  
  Publication
- UnGANable: Defending Against GAN-based Face Manipulation
  
  Zheng Li, Ning Yu, Ahmed Salem, Michael Backes, Mario Fritz, Yang Zhang
  
  USENIX Security Symposium | July 2023
  
  Publication
- Creating Trust by Abolishing Hierarchies
  
  Charly Castes, Adrien Ghosn, Neelu S. Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion
  
  June 2023
  
  DOI Publication Publication
- BeeGees: Stayin’ Alive in Chained BFT
  
  Neil Giridharan, Florian Suri-Payer, Matthew Ding, Heidi Howard, Ittai Abraham, Natacha Crooks
  
  Symposium on Principles of Distributed Computing (PODC) | June 2023
  
  Publication Preprint
- Wait-Free Weak Reference Counting
  
  Matthew J. Parkinson, Sylvan Clebsch, Ben Simner
  
  ACM SIGPLAN International Symposium on Memory Management | June 2023
  
  Publication DOI Project
- Analyzing Leakage of Personally Identifiable Information in Language Models
  
  Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
  
  Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
  
  IEEE Symposium on Security and Privacy (S&P) | May 2023
  
  Publication Project Project
- SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
  
  Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- CHERIoT: Rethinking security for low-cost embedded systems
  
  Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  MSR-TR-2023-6 | February 2023
  
  Published by Microsoft
  
  PDF Github Github Github Project
- Distribution Inference Risks: Identifying and Mitigating Sources of Leakage
  
  Valentin Hartmann, Leo Meynent, Maxime Peyrard, Dimitrios Dimitriadis, Shruti Tople, Robert West
  
  IEEE Conference on Secure and Trustworthy Machine Learning (SatML) | February 2023
  
  Publication Project Project
- ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER
  
  Haobin Ni, Antoine Delignat-Lavaud, Cédric Fournet, Tahina Ramananandro, Nikhil Swamy
  
  Certified Programs and Proofs | January 2023
  
  Publication Author's Version Project
- Membership Inference Attacks and Generalization: A Causal Perspective
  
  Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena
  
  Computer and Communications Security (CCS) | November 2022
  
  Publication Project
- MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models
  
  Yixi Xu, Sumit Mukherjee, Xiyang Liu, Shruti Tople, Rahul Dodhia, Juan M. Lavista Ferres
  
  Transactions on Machine Learning Research (TMLR) | October 2022
  
  Publication Project Project
- It’s not easy to relax: liveness in chained BFT protocols
  
  Ittai Abraham, Natacha Crooks, Neil Giridharan, Heidi Howard, Florian Suri-Payer
  
  International Symposium on Distributed Computing (DISC) | October 2022
  
  Brief Announcement
  
  Publication DOI
- Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web
  
  Avinash Sudhodanan, Andrew Paverd
  
  31st USENIX Security Symposium | August 2022
  
  Preprint
- IA-CCF: Individual Accountability for Permissioned Ledgers
  
  Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
  
  19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
  
  Publication Project
- Revizor: Testing Black-box CPUs against Speculation Contracts
  
  Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
  
  27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’22) | March 2022
  
  IEEE MICRO Top Pick
  
  Author's Version Video Video Github Project
- Leakage of Dataset Properties in Multi-Party Machine Learning
  
  Wanrong Zhang, Shruti Tople, Olga Ohrimenko
  
  Usenix Security | August 2021
  
  Publication Project
- Domain Generalization using Causal Matching
  
  Divyat Mahajan, Shruti Tople, Amit Sharma
  
  International Conference on Machine Learning (ICML) | July 2021
  
  Publication Github Project Project
- Grey-box Extraction of Natural Language Models
  
  Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
  
  International Conference on Machine Learning | July 2021
  
  Editor(s): Marina Meila and Tong Zhang
  
  PDF Project
- A Security Model and Fully Verified Implementation for the IETF QUIC Record Layer
  
  Antoine Delignat-Lavaud, Cédric Fournet, Bryan Parno, Jonathan Protzenko, Tahina Ramananandro, Jay Bosamiya, Joseph Lallemand, Itsaka Rakotonirina, Yi Zhou
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Publication Project
- Hardware-Software Contracts for Secure Speculation
  
  Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Best Paper Award
  
  Publication Project Project
- Toward Confidential Cloud Computing
  
  Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
  
  January 2021
  
  Publication
- HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)
  
  Marina Polubelova, Karthikeyan Bhargavan, Jonathan Protzenko, Benjamin Beurdouche, Aymeric Fromherz, Natalia Kulatova, Santiago Zanella-Béguelin
  
  ACM Conference on Computer and Communications Security (CCS) | November 2020
  
  Publication Access Project
- Analyzing Information Leakage of Updates to Natural Language Models
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
  
  ACM Conference on Computer and Communication Security (CCS) | November 2020
  
  Author's Version Project
- Visor: Privacy-Preserving Video Analytics as a Cloud Service
  
  Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
  
  29th USENIX Security Symposium | August 2020
  
  CSAW 2020 Applied Research Competition Award (Runner-up)
  
  Publication Project Project Project
- Alleviating Privacy Attacks via Causal Learning
  
  Shruti Tople, Amit Sharma, Aditya V. Nori
  
  International Conference on Machine Learning (ICML) | July 2020
  
  Publication Github Project Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Cornucopia: Temporal Safety for CHERI Heaps
  
  Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Sam Ainsworth, Lucian Paul-Trifu, Brooks Davis, Hongyan Xia, Edward Tomasz Napierala, Alexander Richardson, John Baldwin, David Chisnall, Jessica Clarke, Khilan Gudka, Alexandre Joannou, A. Theodore Markettos, Alfredo Mazzinghi, Robert Norton, Michael Roe, Peter Sewell, Stacey Son, Timothy M. Jones, Simon Moore, Peter G. Neumann, Robert N. M. Watson
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project
- Spectector: Principled Detection of Speculative Information Flows
  
  Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project Project
- Pointer Tagging for Memory Safety
  
  Tony Chen, David Chisnall
  
  MSR-TR-2019-17 | July 2019
  
  Published by Microsoft
  
  Publication Project
- snmalloc: A message passing Allocator
  
  David Chisnall, Sylvan Clebsch, Sophia Drossopoulou, Juliana Vicente Franco, Paul Lietar, Matthew J. Parkinson, Alex Shamis, Christoph M. Wintersteiger
  
  ISSM | June 2019, pp. 122-135
  
  Publication Project
- Theory and Practice of Finding Eviction Sets
  
  Pepe Vila, Boris Köpf, José F. Morales
  
  IEEE Symposium on Security and Privacy | May 2019
  
  Publication Project Project
- CHERI Concentrate: Practical Compressed Capabilities
  
  Jonathan Woodruff, Alexandre Joannou, Hongyan Xia, Anthony Fox, Robert Norton-Wright, Thomas Bauereiss, David Chisnall, Brooks Davis, Khilan Gudka, Nathaniel Filardo, A. Theodore Markettos, Michael Roe, Peter G. Neumann, Robert N. M. Watson, Simon W. Moore
  
  IEEE Transactions on Computers | April 2019
  
  Publication Publication Project
- CCF: A Framework for Building Confidential Verifiable Replicated Services
  
  Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
  
  MSR-TR-2019-16 | April 2019
  
  Published by Microsoft
  
  Publication Github Project
- CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
  
  Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
  
  Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
  
  Best paper award winner
  
  Publication Project
- Imperfect forward secrecy: how Diffie-Hellman fails in practice
  
  David Adrian, Karthik Bhargavan, Zakir Durumeric, Pierrick Gaudry, Matthew Green, J. Alex Halderman, Nadia Heninger, Drew Springall, Emmanuel Thomé, Luke Valenta, Benjamin VanderSloot, Eric Wustrow, Santiago Zanella-Béguelin, Paul Zimmermann
  
  Communications of The ACM | December 2018, Vol 62(1): pp. 106-114
  
  PDF DOI
- Contamination Attacks and Mitigation in Multi-Party Machine Learning
  
  Jamie Hayes, Olya Ohrimenko
  
  Neural Information Processing Systems (NeurIPS) | December 2018
  
  Publication Project
- Graviton: Trusted Execution Environments on GPUs
  
  Stavros Volos, Kapil Vaswani, Rordigo Bruno
  
  13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
  
  Author's Version Publication Project
- CheriRTOS: A Capability Model for Embedded Devices
  
  Hongyan Xia, Jonathan Woodruff, Hadrien Barral, Lawrence Esswood, Alexandre Joannou, Robert Kovacsics, David Chisnall, Michael Roe, Brooks Davis, Edward Napierala, John Baldwin, Khilan Gudka, Peter G. Neumann, Alex Richardson, Simon W. Moore, Robert N. M. Watson
  
  Proceedings of the 2018 IEEE 36th International Conference on Computer Design (ICCD) | October 2018
  
  Publication Project
- Structured Encryption and Leakage Suppression
  
  Seny Kamara, Tarik Moataz, Olya Ohrimenko
  
  CRYPTO | August 2018
  
  Publication
- EnclaveDB – A Secure Database using SGX
  
  Christian Priebe, Kapil Vaswani, Manuel Costa
  
  To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
  
  Publication
- Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
  
  Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
  
  USENIX Security Symposium 2017 | August 2017
  
  Publication Publication
- Loophole: Timing Attacks on Shared Event Loops in Chrome
  
  Pepe Vila, Boris Köpf
  
  USENIX Security Symposium | August 2017
  
  Distinguished paper award
  
  Publication Project
- Rigorous Analysis of Software Countermeasures against Cache Attacks
  
  Goran Doychev, Boris Köpf
  
  ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
  
  Publication
- Oblivious Multi-Party Machine Learning on Trusted Processors
  
  Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
  
  The 25th USENIX Security Symposium 2016 | July 2016
  
  Publication Project Project
- A Design and Verification Methodology for Secure Isolated Regions
  
  Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
  
  Programming Languages Design and Implementation (PLDI) | June 2016
  
  Publication
- Moat: Verifying Confidentiality of Enclave Programs
  
  Rohit Sinha, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani
  
  The ACM Conference on Computer and Communications Security (CCS) | October 2015
  
  Publication
- Observing and Preventing Leakage in MapReduce
  
  Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
  
  MSR-TR-2015-70 | September 2015
  
  Published by Microsoft
  
  Publication Project
- Secure Computation Interfaces
  
  Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
  
  MSR-TR-2015-67 | August 2015
  
  Published by Microsoft
  
  Publication
- VC3: Trustworthy Data Analytics in the Cloud using SGX
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  36th IEEE Symposium on Security and Privacy | May 2015
  
  Publication Project

- Optimizing Agent Planning for Security and Autonomy
  
  Aashish Kolluri, Rishi Sharma, Manuel Costa, Boris Köpf, Tobias Niessen, Mark Russinovich, Shruti Tople, Santiago Zanella-Béguelin
  
  ICLR 2026 | February 2026
  
  Publication Preprint Project
- Permissive Information-Flow Analysis for Large Language Models
  
  Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
  
  Transactions on Machine Learning Research (TMLR) | October 2025
  
  Publication Publication Project
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project Project
- The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
  
  Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin, Reza Shokri, Shruti Tople
  
  February 2025
  
  DOI Preprint Project
- Closed-Form Bounds for DP-SGD against Record-level Inference
  
  Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  USENIX Security Symposium | August 2024
  
  Publication Project
- Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition
  
  Edoardo Debenedetti, Javier Rando, Daniel Paleka, Fineas Silaghi, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Ahmed Salem, Rui Wen, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramer, Sahar Abdelnabi, Lea Schönherr
  
  NeurIPS 2024 | June 2024
  
  Preprint Project
- Invariant Aggregator for Defending against Federated Backdoor Attacks
  
  Xiaoya Wang, Dimitrios Dimitriadis, Oluwasanmi Koyejo, Shruti Tople
  
  International Conference on Artificial Intelligence and Statistics, AISTATS | May 2024
  
  Editor(s): Sanjoy Dasgupta, Stephan Mandt, Yingzhen Li
  
  Preprint Publication Project
- On the Efficacy of Differentially Private Few-shot Image Classification
  
  Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela
  
  Transactions on Machine Learning Research | December 2023, Vol 2023
  
  DOI Preprint Preprint Publication Project
- Two-in-One: A Model Hijacking Attack Against Text Generation Models
  
  Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem
  
  USENIX Security Symposium | July 2023
  
  Publication
- UnGANable: Defending Against GAN-based Face Manipulation
  
  Zheng Li, Ning Yu, Ahmed Salem, Michael Backes, Mario Fritz, Yang Zhang
  
  USENIX Security Symposium | July 2023
  
  Publication
- Bayesian Estimation of Differential Privacy
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
  
  2023 International Conference on Machine Learning | July 2023
  
  Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
  
  Publication Project
- Analyzing Leakage of Personally Identifiable Information in Language Models
  
  Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
  
  Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- Distribution Inference Risks: Identifying and Mitigating Sources of Leakage
  
  Valentin Hartmann, Leo Meynent, Maxime Peyrard, Dimitrios Dimitriadis, Shruti Tople, Robert West
  
  IEEE Conference on Secure and Trustworthy Machine Learning (SatML) | February 2023
  
  Publication Project Project
- Membership Inference Attacks and Generalization: A Causal Perspective
  
  Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena
  
  Computer and Communications Security (CCS) | November 2022
  
  Publication Project
- MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models
  
  Yixi Xu, Sumit Mukherjee, Xiyang Liu, Shruti Tople, Rahul Dodhia, Juan M. Lavista Ferres
  
  Transactions on Machine Learning Research (TMLR) | October 2022
  
  Publication Project Project
- Leakage of Dataset Properties in Multi-Party Machine Learning
  
  Wanrong Zhang, Shruti Tople, Olga Ohrimenko
  
  Usenix Security | August 2021
  
  Publication Project
- Domain Generalization using Causal Matching
  
  Divyat Mahajan, Shruti Tople, Amit Sharma
  
  International Conference on Machine Learning (ICML) | July 2021
  
  Publication Github Project Project
- Grey-box Extraction of Natural Language Models
  
  Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
  
  International Conference on Machine Learning | July 2021
  
  Editor(s): Marina Meila and Tong Zhang
  
  PDF Project
- Analyzing Information Leakage of Updates to Natural Language Models
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
  
  ACM Conference on Computer and Communication Security (CCS) | November 2020
  
  Author's Version Project
- Alleviating Privacy Attacks via Causal Learning
  
  Shruti Tople, Amit Sharma, Aditya V. Nori
  
  International Conference on Machine Learning (ICML) | July 2020
  
  Publication Github Project Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Contamination Attacks and Mitigation in Multi-Party Machine Learning
  
  Jamie Hayes, Olya Ohrimenko
  
  Neural Information Processing Systems (NeurIPS) | December 2018
  
  Publication Project
- Rollbaccine : Herd Immunity against Storage Rollback Attacks in TEEs
  
  David C. Y. Chu, Aditya Balasubramanian, Dee Bao, Natacha Crooks, Heidi Howard, Lucky E. Katahanas, Soujanya Ponnapalli
  
  2026 International Conference on Management of Data | May 2026
  
  Preprint
- Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
  
  Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos
  
  2026 IEEE Symposium on Security and Privacy | May 2026
  
  Accepted at IEEE SP 2025, publication delayed due to embargo.
  
  Publication Project
- Permissive Information-Flow Analysis for Large Language Models
  
  Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
  
  Transactions on Machine Learning Research (TMLR) | October 2025
  
  Publication Publication Project
- Dorami: Privilege Separating Security Monitor on RISC-V TEEs
  
  Mark Kuhne, Stavros Volos, Shweta Shinde
  
  34th USENIX Security Symposium | August 2025
  
  Preprint Author's Version
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project Project
- AMuLeT: Automated Design-Time Testing of Secure Speculation Countermeasures
  
  Bo Fu, Leo Tenenbaum, David Adler, Assaf Klein, Arpit Gogia, Alaa R. Alameldeen, Marco Guarnieri, M. Silberstein, Oleksii Oleksenko, Gururaj Saileshwar
  
  30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems | February 2025
  
  Publication DOI Publication Project
- The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
  
  Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin, Reza Shokri, Shruti Tople
  
  February 2025
  
  DOI Preprint Project
- Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
  
  Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
  
  Publication Preprint Project
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
  
  Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  Author's Version Publication Project
- Closed-Form Bounds for DP-SGD against Record-level Inference
  
  Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  USENIX Security Symposium | August 2024
  
  Publication Project
- LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud
  
  Andrew Jeffery, Julien Maffre, Heidi Howard, Richard Mortier
  
  July 2024
  
  Publication Project
- Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition
  
  Edoardo Debenedetti, Javier Rando, Daniel Paleka, Fineas Silaghi, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Ahmed Salem, Rui Wen, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramer, Sahar Abdelnabi, Lea Schönherr
  
  NeurIPS 2024 | June 2024
  
  Preprint Project
- Invariant Aggregator for Defending against Federated Backdoor Attacks
  
  Xiaoya Wang, Dimitrios Dimitriadis, Oluwasanmi Koyejo, Shruti Tople
  
  International Conference on Artificial Intelligence and Statistics, AISTATS | May 2024
  
  Editor(s): Sanjoy Dasgupta, Stephan Mandt, Yingzhen Li
  
  Preprint Publication Project
- Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
  
  Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
  
  ASPLOS ’24 | April 2024
  
  PDF DOI Publication Project
- Bigger, not Badder: Safely Scaling BFT Protocols
  
  David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard
  
  Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
  
  Publication DOI
- On the Efficacy of Differentially Private Few-shot Image Classification
  
  Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela
  
  Transactions on Machine Learning Research | December 2023, Vol 2023
  
  DOI Preprint Preprint Publication Project
- CHERIoT: Complete Memory Safety for Embedded Devices
  
  Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653
  
  Publication DOI Publication Project
- Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
  
  Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
  
  Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
  
  Nominee for Best Paper Award
  
  Publication Preprint Author's Version Project
- Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
  
  Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
  
  Usenix Security Symposium | August 2023
  
  Publication Project
- Confidential Computing within an AI Accelerator
  
  Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
  
  2023 USENIX Annual Technical Conference | July 2023
  
  Author's Version Publication Project
- Two-in-One: A Model Hijacking Attack Against Text Generation Models
  
  Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem
  
  USENIX Security Symposium | July 2023
  
  Publication
- UnGANable: Defending Against GAN-based Face Manipulation
  
  Zheng Li, Ning Yu, Ahmed Salem, Michael Backes, Mario Fritz, Yang Zhang
  
  USENIX Security Symposium | July 2023
  
  Publication
- Bayesian Estimation of Differential Privacy
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
  
  2023 International Conference on Machine Learning | July 2023
  
  Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
  
  Publication Project
- Creating Trust by Abolishing Hierarchies
  
  Charly Castes, Adrien Ghosn, Neelu S. Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion
  
  June 2023
  
  DOI Publication Publication
- BeeGees: Stayin’ Alive in Chained BFT
  
  Neil Giridharan, Florian Suri-Payer, Matthew Ding, Heidi Howard, Ittai Abraham, Natacha Crooks
  
  Symposium on Principles of Distributed Computing (PODC) | June 2023
  
  Publication Preprint
- Analyzing Leakage of Personally Identifiable Information in Language Models
  
  Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
  
  Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
  
  Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
  
  IEEE Symposium on Security and Privacy (S&P) | May 2023
  
  Publication Project Project
- CHERIoT: Rethinking security for low-cost embedded systems
  
  Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  MSR-TR-2023-6 | February 2023
  
  Published by Microsoft
  
  PDF Github Github Github Project
- Distribution Inference Risks: Identifying and Mitigating Sources of Leakage
  
  Valentin Hartmann, Leo Meynent, Maxime Peyrard, Dimitrios Dimitriadis, Shruti Tople, Robert West
  
  IEEE Conference on Secure and Trustworthy Machine Learning (SatML) | February 2023
  
  Publication Project Project
- ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER
  
  Haobin Ni, Antoine Delignat-Lavaud, Cédric Fournet, Tahina Ramananandro, Nikhil Swamy
  
  Certified Programs and Proofs | January 2023
  
  Publication Author's Version Project
- Membership Inference Attacks and Generalization: A Causal Perspective
  
  Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena
  
  Computer and Communications Security (CCS) | November 2022
  
  Publication Project
- MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models
  
  Yixi Xu, Sumit Mukherjee, Xiyang Liu, Shruti Tople, Rahul Dodhia, Juan M. Lavista Ferres
  
  Transactions on Machine Learning Research (TMLR) | October 2022
  
  Publication Project Project
- It’s not easy to relax: liveness in chained BFT protocols
  
  Ittai Abraham, Natacha Crooks, Neil Giridharan, Heidi Howard, Florian Suri-Payer
  
  International Symposium on Distributed Computing (DISC) | October 2022
  
  Brief Announcement
  
  Publication DOI
- Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web
  
  Avinash Sudhodanan, Andrew Paverd
  
  31st USENIX Security Symposium | August 2022
  
  Preprint
- IA-CCF: Individual Accountability for Permissioned Ledgers
  
  Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
  
  19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
  
  Publication Project
- Revizor: Testing Black-box CPUs against Speculation Contracts
  
  Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
  
  27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’22) | March 2022
  
  IEEE MICRO Top Pick
  
  Author's Version Video Video Github Project
- Leakage of Dataset Properties in Multi-Party Machine Learning
  
  Wanrong Zhang, Shruti Tople, Olga Ohrimenko
  
  Usenix Security | August 2021
  
  Publication Project
- Grey-box Extraction of Natural Language Models
  
  Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
  
  International Conference on Machine Learning | July 2021
  
  Editor(s): Marina Meila and Tong Zhang
  
  PDF Project
- Hardware-Software Contracts for Secure Speculation
  
  Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Best Paper Award
  
  Publication Project Project
- A Security Model and Fully Verified Implementation for the IETF QUIC Record Layer
  
  Antoine Delignat-Lavaud, Cédric Fournet, Bryan Parno, Jonathan Protzenko, Tahina Ramananandro, Jay Bosamiya, Joseph Lallemand, Itsaka Rakotonirina, Yi Zhou
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Publication Project
- Toward Confidential Cloud Computing
  
  Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
  
  January 2021
  
  Publication
- HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)
  
  Marina Polubelova, Karthikeyan Bhargavan, Jonathan Protzenko, Benjamin Beurdouche, Aymeric Fromherz, Natalia Kulatova, Santiago Zanella-Béguelin
  
  ACM Conference on Computer and Communications Security (CCS) | November 2020
  
  Publication Access Project
- Analyzing Information Leakage of Updates to Natural Language Models
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
  
  ACM Conference on Computer and Communication Security (CCS) | November 2020
  
  Author's Version Project
- Visor: Privacy-Preserving Video Analytics as a Cloud Service
  
  Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
  
  29th USENIX Security Symposium | August 2020
  
  CSAW 2020 Applied Research Competition Award (Runner-up)
  
  Publication Project Project Project
- Alleviating Privacy Attacks via Causal Learning
  
  Shruti Tople, Amit Sharma, Aditya V. Nori
  
  International Conference on Machine Learning (ICML) | July 2020
  
  Publication Github Project Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Cornucopia: Temporal Safety for CHERI Heaps
  
  Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Sam Ainsworth, Lucian Paul-Trifu, Brooks Davis, Hongyan Xia, Edward Tomasz Napierala, Alexander Richardson, John Baldwin, David Chisnall, Jessica Clarke, Khilan Gudka, Alexandre Joannou, A. Theodore Markettos, Alfredo Mazzinghi, Robert Norton, Michael Roe, Peter Sewell, Stacey Son, Timothy M. Jones, Simon Moore, Peter G. Neumann, Robert N. M. Watson
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project
- Spectector: Principled Detection of Speculative Information Flows
  
  Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project Project
- Pointer Tagging for Memory Safety
  
  Tony Chen, David Chisnall
  
  MSR-TR-2019-17 | July 2019
  
  Published by Microsoft
  
  Publication Project
- snmalloc: A message passing Allocator
  
  David Chisnall, Sylvan Clebsch, Sophia Drossopoulou, Juliana Vicente Franco, Paul Lietar, Matthew J. Parkinson, Alex Shamis, Christoph M. Wintersteiger
  
  ISSM | June 2019, pp. 122-135
  
  Publication Project
- Theory and Practice of Finding Eviction Sets
  
  Pepe Vila, Boris Köpf, José F. Morales
  
  IEEE Symposium on Security and Privacy | May 2019
  
  Publication Project Project
- CHERI Concentrate: Practical Compressed Capabilities
  
  Jonathan Woodruff, Alexandre Joannou, Hongyan Xia, Anthony Fox, Robert Norton-Wright, Thomas Bauereiss, David Chisnall, Brooks Davis, Khilan Gudka, Nathaniel Filardo, A. Theodore Markettos, Michael Roe, Peter G. Neumann, Robert N. M. Watson, Simon W. Moore
  
  IEEE Transactions on Computers | April 2019
  
  Publication Publication Project
- CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
  
  Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
  
  Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
  
  Best paper award winner
  
  Publication Project
- CCF: A Framework for Building Confidential Verifiable Replicated Services
  
  Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
  
  MSR-TR-2019-16 | April 2019
  
  Published by Microsoft
  
  Publication Github Project
- Imperfect forward secrecy: how Diffie-Hellman fails in practice
  
  David Adrian, Karthik Bhargavan, Zakir Durumeric, Pierrick Gaudry, Matthew Green, J. Alex Halderman, Nadia Heninger, Drew Springall, Emmanuel Thomé, Luke Valenta, Benjamin VanderSloot, Eric Wustrow, Santiago Zanella-Béguelin, Paul Zimmermann
  
  Communications of The ACM | December 2018, Vol 62(1): pp. 106-114
  
  PDF DOI
- Contamination Attacks and Mitigation in Multi-Party Machine Learning
  
  Jamie Hayes, Olya Ohrimenko
  
  Neural Information Processing Systems (NeurIPS) | December 2018
  
  Publication Project
- Graviton: Trusted Execution Environments on GPUs
  
  Stavros Volos, Kapil Vaswani, Rordigo Bruno
  
  13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
  
  Author's Version Publication Project
- Structured Encryption and Leakage Suppression
  
  Seny Kamara, Tarik Moataz, Olya Ohrimenko
  
  CRYPTO | August 2018
  
  Publication
- EnclaveDB – A Secure Database using SGX
  
  Christian Priebe, Kapil Vaswani, Manuel Costa
  
  To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
  
  Publication
- Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
  
  Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
  
  USENIX Security Symposium 2017 | August 2017
  
  Publication Publication
- Loophole: Timing Attacks on Shared Event Loops in Chrome
  
  Pepe Vila, Boris Köpf
  
  USENIX Security Symposium | August 2017
  
  Distinguished paper award
  
  Publication Project
- Rigorous Analysis of Software Countermeasures against Cache Attacks
  
  Goran Doychev, Boris Köpf
  
  ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
  
  Publication
- Oblivious Multi-Party Machine Learning on Trusted Processors
  
  Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
  
  The 25th USENIX Security Symposium 2016 | July 2016
  
  Publication Project Project
- A Design and Verification Methodology for Secure Isolated Regions
  
  Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
  
  Programming Languages Design and Implementation (PLDI) | June 2016
  
  Publication
- Moat: Verifying Confidentiality of Enclave Programs
  
  Rohit Sinha, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani
  
  The ACM Conference on Computer and Communications Security (CCS) | October 2015
  
  Publication
- Observing and Preventing Leakage in MapReduce
  
  Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
  
  MSR-TR-2015-70 | September 2015
  
  Published by Microsoft
  
  Publication Project
- Secure Computation Interfaces
  
  Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
  
  MSR-TR-2015-67 | August 2015
  
  Published by Microsoft
  
  Publication
- VC3: Trustworthy Data Analytics in the Cloud using SGX
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  36th IEEE Symposium on Security and Privacy | May 2015
  
  Publication Project
- Rollbaccine : Herd Immunity against Storage Rollback Attacks in TEEs
  
  David C. Y. Chu, Aditya Balasubramanian, Dee Bao, Natacha Crooks, Heidi Howard, Lucky E. Katahanas, Soujanya Ponnapalli
  
  2026 International Conference on Management of Data | May 2026
  
  Preprint
- Dorami: Privilege Separating Security Monitor on RISC-V TEEs
  
  Mark Kuhne, Stavros Volos, Shweta Shinde
  
  34th USENIX Security Symposium | August 2025
  
  Preprint Author's Version
- Smart Casual Verification of the Confidential Consortium Framework
  
  Heidi Howard, Markus Kuppe, Eddy Ashton, Amaury Chamayou, Natacha Crooks
  
  2025 Networked Systems Design and Implementation | April 2025
  
  Publication Preprint PDF Author's Version Project
- DORADD: Deterministic Parallel Execution in the Era of Microsecond-Scale Computing
  
  Zhengqing Liu, Musa Unal, Matthew J. Parkinson, Marios Kogias
  
  PPoPP ’25 | March 2025
  
  Publication Publication Project
- Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
  
  Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
  
  Publication Preprint Project
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud
  
  Andrew Jeffery, Julien Maffre, Heidi Howard, Richard Mortier
  
  July 2024
  
  Publication Project
- Concurrent Immediate Reference Counting
  
  Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang
  
  PACM PL | June 2024
  
  Publication Publication Project
- Optimizing Distributed Protocols with Query Rewrites
  
  David Chu, Rithvik Panchapakesan, Shadaj Laddad, Lucky Katahanas, Chris Liu, Kaushik Shivakumar, Natacha Crooks, Joe Hellerstein, Heidi Howard
  
  ACM International Conference on Management of Data (SIGMOD’24) | June 2024
  
  Publication Author's Version Preprint DOI
- Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
  
  Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
  
  ASPLOS ’24 | April 2024
  
  PDF DOI Publication Project
- Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple
  
  Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier
  
  Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
  
  Publication DOI
- Bigger, not Badder: Safely Scaling BFT Protocols
  
  David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard
  
  Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
  
  Publication DOI
- Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
  
  Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
  
  Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
  
  Nominee for Best Paper Award
  
  Publication Preprint Author's Version Project
- Confidential Computing within an AI Accelerator
  
  Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
  
  2023 USENIX Annual Technical Conference | July 2023
  
  Author's Version Publication Project
- Creating Trust by Abolishing Hierarchies
  
  Charly Castes, Adrien Ghosn, Neelu S. Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion
  
  June 2023
  
  DOI Publication Publication
- BeeGees: Stayin’ Alive in Chained BFT
  
  Neil Giridharan, Florian Suri-Payer, Matthew Ding, Heidi Howard, Ittai Abraham, Natacha Crooks
  
  Symposium on Principles of Distributed Computing (PODC) | June 2023
  
  Publication Preprint
- CHERIoT: Rethinking security for low-cost embedded systems
  
  Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  MSR-TR-2023-6 | February 2023
  
  Published by Microsoft
  
  PDF Github Github Github Project
- It’s not easy to relax: liveness in chained BFT protocols
  
  Ittai Abraham, Natacha Crooks, Neil Giridharan, Heidi Howard, Florian Suri-Payer
  
  International Symposium on Distributed Computing (DISC) | October 2022
  
  Brief Announcement
  
  Publication DOI
- Visor: Privacy-Preserving Video Analytics as a Cloud Service
  
  Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
  
  29th USENIX Security Symposium | August 2020
  
  CSAW 2020 Applied Research Competition Award (Runner-up)
  
  Publication Project Project Project
- CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
  
  Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
  
  Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
  
  Best paper award winner
  
  Publication Project
- CCF: A Framework for Building Confidential Verifiable Replicated Services
  
  Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
  
  MSR-TR-2019-16 | April 2019
  
  Published by Microsoft
  
  Publication Github Project
- Graviton: Trusted Execution Environments on GPUs
  
  Stavros Volos, Kapil Vaswani, Rordigo Bruno
  
  13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
  
  Author's Version Publication Project
- CheriRTOS: A Capability Model for Embedded Devices
  
  Hongyan Xia, Jonathan Woodruff, Hadrien Barral, Lawrence Esswood, Alexandre Joannou, Robert Kovacsics, David Chisnall, Michael Roe, Brooks Davis, Edward Napierala, John Baldwin, Khilan Gudka, Peter G. Neumann, Alex Richardson, Simon W. Moore, Robert N. M. Watson
  
  Proceedings of the 2018 IEEE 36th International Conference on Computer Design (ICCD) | October 2018
  
  Publication Project
- Dynamic Region Ownership for Concurrency Safety
  
  Fridtjof Peer Stoldt, Brandt Bucher, Sylvan Clebsch, Matthew Johnson, Matthew J. Parkinson, Guido Van Rossum, Eric Snow, Tobias Wrigstad
  
  PACMPL | June 2025, Vol 9(PLDI)
  
  Preprint Publication Project
- Smart Casual Verification of the Confidential Consortium Framework
  
  Heidi Howard, Markus Kuppe, Eddy Ashton, Amaury Chamayou, Natacha Crooks
  
  2025 Networked Systems Design and Implementation | April 2025
  
  Publication Preprint PDF Author's Version Project
- DORADD: Deterministic Parallel Execution in the Era of Microsecond-Scale Computing
  
  Zhengqing Liu, Musa Unal, Matthew J. Parkinson, Marios Kogias
  
  PPoPP ’25 | March 2025
  
  Publication Publication Project
- BatchIt: Optimizing Message-Passing Allocators for Producer-Consumer Workloads: An Intellectual Abstract
  
  Nathaniel Filardo, Matthew J. Parkinson
  
  Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM’24) | June 2024
  
  Publication Publication Project
- Reference Counting Deeply Immutable Data Structures with Cycles: an Intellectual Abstract
  
  Matthew J. Parkinson, Sylvan Clebsch, Tobias Wrigstad
  
  n Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM ’24) | June 2024
  
  Preprint Publication Project
- Concurrent Immediate Reference Counting
  
  Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang
  
  PACM PL | June 2024
  
  Publication Publication Project
- Optimizing Distributed Protocols with Query Rewrites
  
  David Chu, Rithvik Panchapakesan, Shadaj Laddad, Lucky Katahanas, Chris Liu, Kaushik Shivakumar, Natacha Crooks, Joe Hellerstein, Heidi Howard
  
  ACM International Conference on Management of Data (SIGMOD’24) | June 2024
  
  Publication Author's Version Preprint DOI
- Scalable, Interpretable Distributed Protocol Verification by Inductive Proof Slicing
  
  William Schultz, Eddy Ashton, Heidi Howard, Stavros Tripakis
  
  April 2024
  
  Publication
- When Concurrency Matters: Behaviour-Oriented Concurrency
  
  Luke Cheeseman, Matthew J. Parkinson, Sylvan Clebsch, Marios Kogias, Sophia Drossopoulou, David Chisnall, Tobias Wrigstad, Paul Liétar
  
  Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
  
  DOI Preprint Project
- Reference Capabilities for Flexible Memory Management
  
  Ellen Arvidsson, Elias Castegren, Sylvan Clebsch, Sophia Drossopoulou, Matthew J. Parkinson, James Noble, Tobias Wrigstad
  
  Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
  
  DOI Preprint Project
- Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
  
  Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
  
  Usenix Security Symposium | August 2023
  
  Publication Project
- Wait-Free Weak Reference Counting
  
  Matthew J. Parkinson, Sylvan Clebsch, Ben Simner
  
  ACM SIGPLAN International Symposium on Memory Management | June 2023
  
  Publication DOI Project
- Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
  
  Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
  
  IEEE Symposium on Security and Privacy (S&P) | May 2023
  
  Publication Project Project
- ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER
  
  Haobin Ni, Antoine Delignat-Lavaud, Cédric Fournet, Tahina Ramananandro, Nikhil Swamy
  
  Certified Programs and Proofs | January 2023
  
  Publication Author's Version Project
- Revizor: Testing Black-box CPUs against Speculation Contracts
  
  Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
  
  27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’22) | March 2022
  
  IEEE MICRO Top Pick
  
  Author's Version Video Video Github Project
- Hardware-Software Contracts for Secure Speculation
  
  Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Best Paper Award
  
  Publication Project Project
- HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)
  
  Marina Polubelova, Karthikeyan Bhargavan, Jonathan Protzenko, Benjamin Beurdouche, Aymeric Fromherz, Natalia Kulatova, Santiago Zanella-Béguelin
  
  ACM Conference on Computer and Communications Security (CCS) | November 2020
  
  Publication Access Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Rigorous Analysis of Software Countermeasures against Cache Attacks
  
  Goran Doychev, Boris Köpf
  
  ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
  
  Publication
- A Design and Verification Methodology for Secure Isolated Regions
  
  Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
  
  Programming Languages Design and Implementation (PLDI) | June 2016
  
  Publication
- Moat: Verifying Confidentiality of Enclave Programs
  
  Rohit Sinha, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani
  
  The ACM Conference on Computer and Communications Security (CCS) | October 2015
  
  Publication
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
  
  Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
  
  ASPLOS ’24 | April 2024
  
  PDF DOI Publication Project
- CHERIoT: Complete Memory Safety for Embedded Devices
  
  Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653
  
  Publication DOI Publication Project
- Confidential Computing within an AI Accelerator
  
  Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
  
  2023 USENIX Annual Technical Conference | July 2023
  
  Author's Version Publication Project
- CHERIoT: Rethinking security for low-cost embedded systems
  
  Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  MSR-TR-2023-6 | February 2023
  
  Published by Microsoft
  
  PDF Github Github Github Project
- Toward Confidential Cloud Computing
  
  Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
  
  January 2021
  
  Publication
- Pointer Tagging for Memory Safety
  
  Tony Chen, David Chisnall
  
  MSR-TR-2019-17 | July 2019
  
  Published by Microsoft
  
  Publication Project
- CHERI Concentrate: Practical Compressed Capabilities
  
  Jonathan Woodruff, Alexandre Joannou, Hongyan Xia, Anthony Fox, Robert Norton-Wright, Thomas Bauereiss, David Chisnall, Brooks Davis, Khilan Gudka, Nathaniel Filardo, A. Theodore Markettos, Michael Roe, Peter G. Neumann, Robert N. M. Watson, Simon W. Moore
  
  IEEE Transactions on Computers | April 2019
  
  Publication Publication Project
- CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
  
  Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
  
  Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
  
  Best paper award winner
  
  Publication Project
- Graviton: Trusted Execution Environments on GPUs
  
  Stavros Volos, Kapil Vaswani, Rordigo Bruno
  
  13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
  
  Author's Version Publication Project
- Domain Generalization using Causal Matching
  
  Divyat Mahajan, Shruti Tople, Amit Sharma
  
  International Conference on Machine Learning (ICML) | July 2021
  
  Publication Github Project Project
- Visor: Privacy-Preserving Video Analytics as a Cloud Service
  
  Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
  
  29th USENIX Security Symposium | August 2020
  
  CSAW 2020 Applied Research Competition Award (Runner-up)
  
  Publication Project Project Project

- Rollbaccine : Herd Immunity against Storage Rollback Attacks in TEEs
  
  David C. Y. Chu, Aditya Balasubramanian, Dee Bao, Natacha Crooks, Heidi Howard, Lucky E. Katahanas, Soujanya Ponnapalli
  
  2026 International Conference on Management of Data | May 2026
  
  Preprint
- Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
  
  Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos
  
  2026 IEEE Symposium on Security and Privacy | May 2026
  
  Accepted at IEEE SP 2025, publication delayed due to embargo.
  
  Publication Project
- Optimizing Agent Planning for Security and Autonomy
  
  Aashish Kolluri, Rishi Sharma, Manuel Costa, Boris Köpf, Tobias Niessen, Mark Russinovich, Shruti Tople, Santiago Zanella-Béguelin
  
  ICLR 2026 | February 2026
  
  Publication Preprint Project
- Dorami: Privilege Separating Security Monitor on RISC-V TEEs
  
  Mark Kuhne, Stavros Volos, Shweta Shinde
  
  34th USENIX Security Symposium | August 2025
  
  Preprint Author's Version
- Smart Casual Verification of the Confidential Consortium Framework
  
  Heidi Howard, Markus Kuppe, Eddy Ashton, Amaury Chamayou, Natacha Crooks
  
  2025 Networked Systems Design and Implementation | April 2025
  
  Publication Preprint PDF Author's Version Project
- DORADD: Deterministic Parallel Execution in the Era of Microsecond-Scale Computing
  
  Zhengqing Liu, Musa Unal, Matthew J. Parkinson, Marios Kogias
  
  PPoPP ’25 | March 2025
  
  Publication Publication Project
- AMuLeT: Automated Design-Time Testing of Secure Speculation Countermeasures
  
  Bo Fu, Leo Tenenbaum, David Adler, Assaf Klein, Arpit Gogia, Alaa R. Alameldeen, Marco Guarnieri, M. Silberstein, Oleksii Oleksenko, Gururaj Saileshwar
  
  30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems | February 2025
  
  Publication DOI Publication Project
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
  
  Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  Author's Version Publication Project
- Closed-Form Bounds for DP-SGD against Record-level Inference
  
  Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  USENIX Security Symposium | August 2024
  
  Publication Project
- BatchIt: Optimizing Message-Passing Allocators for Producer-Consumer Workloads: An Intellectual Abstract
  
  Nathaniel Filardo, Matthew J. Parkinson
  
  Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM’24) | June 2024
  
  Publication Publication Project
- Reference Counting Deeply Immutable Data Structures with Cycles: an Intellectual Abstract
  
  Matthew J. Parkinson, Sylvan Clebsch, Tobias Wrigstad
  
  n Proceedings of the 2024 ACM SIGPLAN International Symposium on Memory Management (ISMM ’24) | June 2024
  
  Preprint Publication Project
- Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition
  
  Edoardo Debenedetti, Javier Rando, Daniel Paleka, Fineas Silaghi, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Ahmed Salem, Rui Wen, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramer, Sahar Abdelnabi, Lea Schönherr
  
  NeurIPS 2024 | June 2024
  
  Preprint Project
- Optimizing Distributed Protocols with Query Rewrites
  
  David Chu, Rithvik Panchapakesan, Shadaj Laddad, Lucky Katahanas, Chris Liu, Kaushik Shivakumar, Natacha Crooks, Joe Hellerstein, Heidi Howard
  
  ACM International Conference on Management of Data (SIGMOD’24) | June 2024
  
  Publication Author's Version Preprint DOI
- Invariant Aggregator for Defending against Federated Backdoor Attacks
  
  Xiaoya Wang, Dimitrios Dimitriadis, Oluwasanmi Koyejo, Shruti Tople
  
  International Conference on Artificial Intelligence and Statistics, AISTATS | May 2024
  
  Editor(s): Sanjoy Dasgupta, Stephan Mandt, Yingzhen Li
  
  Preprint Publication Project
- Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety
  
  Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Jessica Clarke, Peter Rugg, Brooks Davis, Mark Johnston, Robert Norton-Wright, David Chisnall, Simon W. Moore, Peter G. Neumann, Robert N. M. Watson
  
  ASPLOS ’24 | April 2024
  
  PDF DOI Publication Project
- Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple
  
  Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier
  
  Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
  
  Publication DOI
- Bigger, not Badder: Safely Scaling BFT Protocols
  
  David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard
  
  Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024
  
  Publication DOI
- Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
  
  Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
  
  Usenix Security Symposium | August 2023
  
  Publication Project
- Confidential Computing within an AI Accelerator
  
  Kapil Vaswani, Stavros Volos, Cédric Fournet, Antonio Nino Diaz, Ken Gordon, Balaji Vembu, Sam Webster, David Chisnall, Saurabh Kulkarni, Graham Cunningham , Richard Osborne , Daniel Wilkinson
  
  2023 USENIX Annual Technical Conference | July 2023
  
  Author's Version Publication Project
- Two-in-One: A Model Hijacking Attack Against Text Generation Models
  
  Wai Man Si, Michael Backes, Yang Zhang, Ahmed Salem
  
  USENIX Security Symposium | July 2023
  
  Publication
- UnGANable: Defending Against GAN-based Face Manipulation
  
  Zheng Li, Ning Yu, Ahmed Salem, Michael Backes, Mario Fritz, Yang Zhang
  
  USENIX Security Symposium | July 2023
  
  Publication
- Bayesian Estimation of Differential Privacy
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
  
  2023 International Conference on Machine Learning | July 2023
  
  Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
  
  Publication Project
- Creating Trust by Abolishing Hierarchies
  
  Charly Castes, Adrien Ghosn, Neelu S. Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion
  
  June 2023
  
  DOI Publication Publication
- BeeGees: Stayin’ Alive in Chained BFT
  
  Neil Giridharan, Florian Suri-Payer, Matthew Ding, Heidi Howard, Ittai Abraham, Natacha Crooks
  
  Symposium on Principles of Distributed Computing (PODC) | June 2023
  
  Publication Preprint
- Wait-Free Weak Reference Counting
  
  Matthew J. Parkinson, Sylvan Clebsch, Ben Simner
  
  ACM SIGPLAN International Symposium on Memory Management | June 2023
  
  Publication DOI Project
- Analyzing Leakage of Personally Identifiable Information in Language Models
  
  Nils Lukas, Ahmed Salem, Robert Sim, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
  
  Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
  
  Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
  
  IEEE Symposium on Security and Privacy (S&P) | May 2023
  
  Publication Project Project
- Distribution Inference Risks: Identifying and Mitigating Sources of Leakage
  
  Valentin Hartmann, Leo Meynent, Maxime Peyrard, Dimitrios Dimitriadis, Shruti Tople, Robert West
  
  IEEE Conference on Secure and Trustworthy Machine Learning (SatML) | February 2023
  
  Publication Project Project
- ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER
  
  Haobin Ni, Antoine Delignat-Lavaud, Cédric Fournet, Tahina Ramananandro, Nikhil Swamy
  
  Certified Programs and Proofs | January 2023
  
  Publication Author's Version Project
- Membership Inference Attacks and Generalization: A Causal Perspective
  
  Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena
  
  Computer and Communications Security (CCS) | November 2022
  
  Publication Project
- It’s not easy to relax: liveness in chained BFT protocols
  
  Ittai Abraham, Natacha Crooks, Neil Giridharan, Heidi Howard, Florian Suri-Payer
  
  International Symposium on Distributed Computing (DISC) | October 2022
  
  Brief Announcement
  
  Publication DOI
- Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web
  
  Avinash Sudhodanan, Andrew Paverd
  
  31st USENIX Security Symposium | August 2022
  
  Preprint
- IA-CCF: Individual Accountability for Permissioned Ledgers
  
  Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
  
  19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
  
  Publication Project
- Revizor: Testing Black-box CPUs against Speculation Contracts
  
  Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
  
  27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’22) | March 2022
  
  IEEE MICRO Top Pick
  
  Author's Version Video Video Github Project
- Leakage of Dataset Properties in Multi-Party Machine Learning
  
  Wanrong Zhang, Shruti Tople, Olga Ohrimenko
  
  Usenix Security | August 2021
  
  Publication Project
- Domain Generalization using Causal Matching
  
  Divyat Mahajan, Shruti Tople, Amit Sharma
  
  International Conference on Machine Learning (ICML) | July 2021
  
  Publication Github Project Project
- Grey-box Extraction of Natural Language Models
  
  Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
  
  International Conference on Machine Learning | July 2021
  
  Editor(s): Marina Meila and Tong Zhang
  
  PDF Project
- Hardware-Software Contracts for Secure Speculation
  
  Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Best Paper Award
  
  Publication Project Project
- A Security Model and Fully Verified Implementation for the IETF QUIC Record Layer
  
  Antoine Delignat-Lavaud, Cédric Fournet, Bryan Parno, Jonathan Protzenko, Tahina Ramananandro, Jay Bosamiya, Joseph Lallemand, Itsaka Rakotonirina, Yi Zhou
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Publication Project
- HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)
  
  Marina Polubelova, Karthikeyan Bhargavan, Jonathan Protzenko, Benjamin Beurdouche, Aymeric Fromherz, Natalia Kulatova, Santiago Zanella-Béguelin
  
  ACM Conference on Computer and Communications Security (CCS) | November 2020
  
  Publication Access Project
- Analyzing Information Leakage of Updates to Natural Language Models
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
  
  ACM Conference on Computer and Communication Security (CCS) | November 2020
  
  Author's Version Project
- Visor: Privacy-Preserving Video Analytics as a Cloud Service
  
  Rishabh Poddar, Ganesh Ananthanarayanan, Srinath Setty, Stavros Volos, Raluca Ada Popa
  
  29th USENIX Security Symposium | August 2020
  
  CSAW 2020 Applied Research Competition Award (Runner-up)
  
  Publication Project Project Project
- Alleviating Privacy Attacks via Causal Learning
  
  Shruti Tople, Amit Sharma, Aditya V. Nori
  
  International Conference on Machine Learning (ICML) | July 2020
  
  Publication Github Project Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Cornucopia: Temporal Safety for CHERI Heaps
  
  Nathaniel Filardo, Brett F. Gutstein, Jonathan Woodruff, Sam Ainsworth, Lucian Paul-Trifu, Brooks Davis, Hongyan Xia, Edward Tomasz Napierala, Alexander Richardson, John Baldwin, David Chisnall, Jessica Clarke, Khilan Gudka, Alexandre Joannou, A. Theodore Markettos, Alfredo Mazzinghi, Robert Norton, Michael Roe, Peter Sewell, Stacey Son, Timothy M. Jones, Simon Moore, Peter G. Neumann, Robert N. M. Watson
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project
- Spectector: Principled Detection of Speculative Information Flows
  
  Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project Project
- Theory and Practice of Finding Eviction Sets
  
  Pepe Vila, Boris Köpf, José F. Morales
  
  IEEE Symposium on Security and Privacy | May 2019
  
  Publication Project Project
- CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment
  
  Brooks Davis, Robert N. M. Watson, Alexander Richardson, Peter G. Neumann, Simon W. Moore, John Baldwin, David Chisnall, James Clarke, Nathaniel Wesley Filardo, Khilan Gudka, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, J. Edward Maste, Alfredo Mazzinghi, Edward Tomasz Napierala, Robert Norton-Wright, Michael Roe, Peter Sewell, Stacey Son, Jonathan Woodruff
  
  Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems | April 2019
  
  Best paper award winner
  
  Publication Project
- Contamination Attacks and Mitigation in Multi-Party Machine Learning
  
  Jamie Hayes, Olya Ohrimenko
  
  Neural Information Processing Systems (NeurIPS) | December 2018
  
  Publication Project
- Graviton: Trusted Execution Environments on GPUs
  
  Stavros Volos, Kapil Vaswani, Rordigo Bruno
  
  13th USENIX Symposium on Operating Systems Design and Implementation | October 2018
  
  Author's Version Publication Project
- CheriRTOS: A Capability Model for Embedded Devices
  
  Hongyan Xia, Jonathan Woodruff, Hadrien Barral, Lawrence Esswood, Alexandre Joannou, Robert Kovacsics, David Chisnall, Michael Roe, Brooks Davis, Edward Napierala, John Baldwin, Khilan Gudka, Peter G. Neumann, Alex Richardson, Simon W. Moore, Robert N. M. Watson
  
  Proceedings of the 2018 IEEE 36th International Conference on Computer Design (ICCD) | October 2018
  
  Publication Project
- Structured Encryption and Leakage Suppression
  
  Seny Kamara, Tarik Moataz, Olya Ohrimenko
  
  CRYPTO | August 2018
  
  Publication
- EnclaveDB – A Secure Database using SGX
  
  Christian Priebe, Kapil Vaswani, Manuel Costa
  
  To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
  
  Publication
- Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
  
  Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
  
  USENIX Security Symposium 2017 | August 2017
  
  Publication Publication
- Loophole: Timing Attacks on Shared Event Loops in Chrome
  
  Pepe Vila, Boris Köpf
  
  USENIX Security Symposium | August 2017
  
  Distinguished paper award
  
  Publication Project
- Rigorous Analysis of Software Countermeasures against Cache Attacks
  
  Goran Doychev, Boris Köpf
  
  ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
  
  Publication
- Oblivious Multi-Party Machine Learning on Trusted Processors
  
  Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
  
  The 25th USENIX Security Symposium 2016 | July 2016
  
  Publication Project Project
- A Design and Verification Methodology for Secure Isolated Regions
  
  Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
  
  Programming Languages Design and Implementation (PLDI) | June 2016
  
  Publication
- Moat: Verifying Confidentiality of Enclave Programs
  
  Rohit Sinha, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani
  
  The ACM Conference on Computer and Communications Security (CCS) | October 2015
  
  Publication
- VC3: Trustworthy Data Analytics in the Cloud using SGX
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  36th IEEE Symposium on Security and Privacy | May 2015
  
  Publication Project
- Permissive Information-Flow Analysis for Large Language Models
  
  Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
  
  Transactions on Machine Learning Research (TMLR) | October 2025
  
  Publication Publication Project
- Dynamic Region Ownership for Concurrency Safety
  
  Fridtjof Peer Stoldt, Brandt Bucher, Sylvan Clebsch, Matthew Johnson, Matthew J. Parkinson, Guido Van Rossum, Eric Snow, Tobias Wrigstad
  
  PACMPL | June 2025, Vol 9(PLDI)
  
  Preprint Publication Project
- Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
  
  Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
  
  Publication Preprint Project
- Concurrent Immediate Reference Counting
  
  Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang
  
  PACM PL | June 2024
  
  Publication Publication Project
- On the Efficacy of Differentially Private Few-shot Image Classification
  
  Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela
  
  Transactions on Machine Learning Research | December 2023, Vol 2023
  
  DOI Preprint Preprint Publication Project
- CHERIoT: Complete Memory Safety for Embedded Devices
  
  Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653
  
  Publication DOI Publication Project
- When Concurrency Matters: Behaviour-Oriented Concurrency
  
  Luke Cheeseman, Matthew J. Parkinson, Sylvan Clebsch, Marios Kogias, Sophia Drossopoulou, David Chisnall, Tobias Wrigstad, Paul Liétar
  
  Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
  
  DOI Preprint Project
- Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
  
  Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
  
  Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
  
  Nominee for Best Paper Award
  
  Publication Preprint Author's Version Project
- Reference Capabilities for Flexible Memory Management
  
  Ellen Arvidsson, Elias Castegren, Sylvan Clebsch, Sophia Drossopoulou, Matthew J. Parkinson, James Noble, Tobias Wrigstad
  
  Proc. ACM Program. Lang. | October 2023, Vol 7(OOPSLA2)
  
  DOI Preprint Project
- MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models
  
  Yixi Xu, Sumit Mukherjee, Xiyang Liu, Shruti Tople, Rahul Dodhia, Juan M. Lavista Ferres
  
  Transactions on Machine Learning Research (TMLR) | October 2022
  
  Publication Project Project
- snmalloc: A message passing Allocator
  
  David Chisnall, Sylvan Clebsch, Sophia Drossopoulou, Juliana Vicente Franco, Paul Lietar, Matthew J. Parkinson, Alex Shamis, Christoph M. Wintersteiger
  
  ISSM | June 2019, pp. 122-135
  
  Publication Project
- CHERI Concentrate: Practical Compressed Capabilities
  
  Jonathan Woodruff, Alexandre Joannou, Hongyan Xia, Anthony Fox, Robert Norton-Wright, Thomas Bauereiss, David Chisnall, Brooks Davis, Khilan Gudka, Nathaniel Filardo, A. Theodore Markettos, Michael Roe, Peter G. Neumann, Robert N. M. Watson, Simon W. Moore
  
  IEEE Transactions on Computers | April 2019
  
  Publication Publication Project
- Imperfect forward secrecy: how Diffie-Hellman fails in practice
  
  David Adrian, Karthik Bhargavan, Zakir Durumeric, Pierrick Gaudry, Matthew Green, J. Alex Halderman, Nadia Heninger, Drew Springall, Emmanuel Thomé, Luke Valenta, Benjamin VanderSloot, Eric Wustrow, Santiago Zanella-Béguelin, Paul Zimmermann
  
  Communications of The ACM | December 2018, Vol 62(1): pp. 106-114
  
  PDF DOI
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project Project
- Toward Confidential Cloud Computing
  
  Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
  
  January 2021
  
  Publication
- The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
  
  Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin, Reza Shokri, Shruti Tople
  
  February 2025
  
  DOI Preprint Project
- LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud
  
  Andrew Jeffery, Julien Maffre, Heidi Howard, Richard Mortier
  
  July 2024
  
  Publication Project
- Scalable, Interpretable Distributed Protocol Verification by Inductive Proof Slicing
  
  William Schultz, Eddy Ashton, Heidi Howard, Stavros Tripakis
  
  April 2024
  
  Publication
- CHERIoT: Rethinking security for low-cost embedded systems
  
  Saar Amar, Tony Chen, David Chisnall, Felix Domke, Nathaniel Filardo, Kunyan Liu, Robert Norton-Wright, Yucong Tao, Robert N. M. Watson, Hongyan Xia
  
  MSR-TR-2023-6 | February 2023
  
  Published by Microsoft
  
  PDF Github Github Github Project
- Pointer Tagging for Memory Safety
  
  Tony Chen, David Chisnall
  
  MSR-TR-2019-17 | July 2019
  
  Published by Microsoft
  
  Publication Project
- CCF: A Framework for Building Confidential Verifiable Replicated Services
  
  Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
  
  MSR-TR-2019-16 | April 2019
  
  Published by Microsoft
  
  Publication Github Project
- Observing and Preventing Leakage in MapReduce
  
  Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
  
  MSR-TR-2015-70 | September 2015
  
  Published by Microsoft
  
  Publication Project
- Secure Computation Interfaces
  
  Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
  
  MSR-TR-2015-67 | August 2015
  
  Published by Microsoft
  
  Publication

Azure Research – Security and Privacy

Publications

Rollbaccine : Herd Immunity against Storage Rollback Attacks in TEEs

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Optimizing Agent Planning for Security and Autonomy

Permissive Information-Flow Analysis for Large Language Models

Dorami: Privilege Separating Security Monitor on RISC-V TEEs

Dynamic Region Ownership for Concurrency Safety

Securing AI Agents with Information-Flow Control

Smart Casual Verification of the Confidential Consortium Framework

DORADD: Deterministic Parallel Execution in the Era of Microsecond-Scale Computing

AMuLeT: Automated Design-Time Testing of Secure Speculation Countermeasures

The Canary’s Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text

Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances

Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring

Principled Microarchitectural Isolation on Cloud CPUs

Closed-Form Bounds for DP-SGD against Record-level Inference

LSKV: A Confidential Distributed Datastore to Protect Critical Data in the Cloud

BatchIt: Optimizing Message-Passing Allocators for Producer-Consumer Workloads: An Intellectual Abstract

Reference Counting Deeply Immutable Data Structures with Cycles: an Intellectual Abstract

Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition

Concurrent Immediate Reference Counting

Optimizing Distributed Protocols with Query Rewrites

Invariant Aggregator for Defending against Federated Backdoor Attacks

Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety

Bigger, not Badder: Safely Scaling BFT Protocols

Scalable, Interpretable Distributed Protocol Verification by Inductive Proof Slicing

Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple

On the Efficacy of Differentially Private Few-shot Image Classification

CHERIoT: Complete Memory Safety for Embedded Devices

When Concurrency Matters: Behaviour-Oriented Concurrency

Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability

Reference Capabilities for Flexible Memory Management

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Confidential Computing within an AI Accelerator

Bayesian Estimation of Differential Privacy

Two-in-One: A Model Hijacking Attack Against Text Generation Models

UnGANable: Defending Against GAN-based Face Manipulation

Creating Trust by Abolishing Hierarchies

BeeGees: Stayin’ Alive in Chained BFT

Wait-Free Weak Reference Counting

Analyzing Leakage of Personally Identifiable Information in Language Models

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning

CHERIoT: Rethinking security for low-cost embedded systems

Distribution Inference Risks: Identifying and Mitigating Sources of Leakage

ASN1*: Provably Correct Non-Malleable Parsing for ASN.1 DER

Membership Inference Attacks and Generalization: A Causal Perspective

MACE: A Flexible Framework for Membership Privacy Estimation in Generative Models

It’s not easy to relax: liveness in chained BFT protocols

Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web

IA-CCF: Individual Accountability for Permissioned Ledgers

Revizor: Testing Black-box CPUs against Speculation Contracts

Leakage of Dataset Properties in Multi-Party Machine Learning

Domain Generalization using Causal Matching

Grey-box Extraction of Natural Language Models

A Security Model and Fully Verified Implementation for the IETF QUIC Record Layer

Hardware-Software Contracts for Secure Speculation

Toward Confidential Cloud Computing

HACL×N: Verified Generic SIMD Crypto (for all your favourite platforms)

Analyzing Information Leakage of Updates to Natural Language Models

Visor: Privacy-Preserving Video Analytics as a Cloud Service

Alleviating Privacy Attacks via Causal Learning

CacheQuery: learning replacement policies from hardware caches

Cornucopia: Temporal Safety for CHERI Heaps

Spectector: Principled Detection of Speculative Information Flows

Pointer Tagging for Memory Safety

snmalloc: A message passing Allocator

Theory and Practice of Finding Eviction Sets

CHERI Concentrate: Practical Compressed Capabilities

CCF: A Framework for Building Confidential Verifiable Replicated Services

CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment

Imperfect forward secrecy: how Diffie-Hellman fails in practice

Contamination Attacks and Mitigation in Multi-Party Machine Learning

Graviton: Trusted Execution Environments on GPUs

CheriRTOS: A Capability Model for Embedded Devices

Structured Encryption and Leakage Suppression

EnclaveDB – A Secure Database using SGX

Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory

Loophole: Timing Attacks on Shared Event Loops in Chrome