Azure Research

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos

2026 IEEE Symposium on Security and Privacy | May 2026

Accepted at IEEE SP 2025, publication delayed due to embargo.

Publication Projet

AMuLeT: Automated Design-Time Testing of Secure Speculation Countermeasures

Bo Fu, Leo Tenenbaum, David Adler, Assaf Klein, Arpit Gogia, Alaa R. Alameldeen, Marco Guarnieri, M. Silberstein, Oleksii Oleksenko, Gururaj Saileshwar

30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems | February 2025

Publication DOI Publication Projet

Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances

Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa

Communications of the ACM | October 2024, Vol 67(10): pp. 40-49

Publication Preprint Projet

Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring

Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos

ACM Conference on Computer and Communications Security (CCS) | October 2024

Author's Version Publication Project

Principled Microarchitectural Isolation on Cloud CPUs

Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko

ACM Conference on Computer and Communications Security (CCS) | October 2024

CCS Distinguished Paper Award

Author's Version Publication Projet

Closed-Form Bounds for DP-SGD against Record-level Inference

Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin

USENIX Security Symposium | August 2024

Publication Project

FairyWREN: A Sustainable Cache for Emerging Write-Read-Erase Flash Interfaces

Sara McAllister, Sherry Wang, Benjamin Berg, Daniel S. Berger, George Amvrosiadis, Nathan Beckmann, G. R. Ganger

USENIX OSDI 2024 | July 2024

Preprint

Managing Memory Tiers with CXL in Virtualized Environments

Yuhong Zhong, Daniel S. Berger, Carl Waldspurger, Ishwar Agarwal, Rajat Agarwal, Frank Hady, Karthik Kumar, Mark D. Hill, Mosharaf Chowdhury, Asaf Cidon

USENIX OSDI | July 2024

Publication

Concurrent Immediate Reference Counting

Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang

PACM PL | June 2024

Publication Publication Projet

Designing Cloud Servers for Lower Carbon

Jaylen Wang, Daniel S. Berger, Fiodar Kazhamiaka, Celine Irvene, Chaojie Zhang, Esha Choukse, Kali Frost, Rodrigo Fonseca, Brijesh Warrier, Chetan Bansal, Jonathan Stern, Ricardo Bianchini, Akshitha Sriraman

ISCA | June 2024

Publication

SmartOClock: Workload- and Risk-Aware Overclocking in the Cloud

Jovan Stojkovic, Pulkit Misra, Íñigo Goiri, Sam Whitlock, Esha Choukse, Mayukh Das, Chetan Bansal, Jason Lee, Zoey Sun, Haoran Qiu, Reed Zimmermann, Savyasachi Samal, Brijesh Warrier, Ashish Raniwala, Ricardo Bianchini

ISCA | June 2024

Publication

Bigger, not Badder: Safely Scaling BFT Protocols

David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard

Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024

Publication DOI

Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple

Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier

Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024

Publication DOI

On the Efficacy of Differentially Private Few-shot Image Classification

Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela

Transactions on Machine Learning Research | December 2023, Vol 2023

DOI Preprint Preprint Publication Projet

CHERIoT: Complete Memory Safety for Embedded Devices

Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia

2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653

Publication DOI Publication Projet

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko

Usenix Security Symposium | August 2023

Publication Project

An Introduction to the Compute Express Link (CXL) Interconnect

Debendra Das Sharma, R. Blankenship, Daniel S. Berger

June 2023

DOI Publication

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein

IEEE Symposium on Security and Privacy (S&P) | May 2023

Publication Projet Projet

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos

2026 IEEE Symposium on Security and Privacy | May 2026

Accepted at IEEE SP 2025, publication delayed due to embargo.

Publication Projet

AMuLeT: Automated Design-Time Testing of Secure Speculation Countermeasures

Bo Fu, Leo Tenenbaum, David Adler, Assaf Klein, Arpit Gogia, Alaa R. Alameldeen, Marco Guarnieri, M. Silberstein, Oleksii Oleksenko, Gururaj Saileshwar

30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems | February 2025

Publication DOI Publication Projet

Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances

Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa

Communications of the ACM | October 2024, Vol 67(10): pp. 40-49

Publication Preprint Projet

Principled Microarchitectural Isolation on Cloud CPUs

Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko

ACM Conference on Computer and Communications Security (CCS) | October 2024

CCS Distinguished Paper Award

Author's Version Publication Projet

Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring

Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos

ACM Conference on Computer and Communications Security (CCS) | October 2024

Author's Version Publication Project

Closed-Form Bounds for DP-SGD against Record-level Inference

Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin

USENIX Security Symposium | August 2024

Publication Project

Bigger, not Badder: Safely Scaling BFT Protocols

David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard

Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024

Publication DOI

On the Efficacy of Differentially Private Few-shot Image Classification

Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela

Transactions on Machine Learning Research | December 2023, Vol 2023

DOI Preprint Preprint Publication Projet

CHERIoT: Complete Memory Safety for Embedded Devices

Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia

2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653

Publication DOI Publication Projet

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko

Usenix Security Symposium | August 2023

Publication Project

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein

IEEE Symposium on Security and Privacy (S&P) | May 2023

Publication Projet Projet

Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances

Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa

Communications of the ACM | October 2024, Vol 67(10): pp. 40-49

Publication Preprint Projet

Principled Microarchitectural Isolation on Cloud CPUs

Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko

ACM Conference on Computer and Communications Security (CCS) | October 2024

CCS Distinguished Paper Award

Author's Version Publication Projet

FairyWREN: A Sustainable Cache for Emerging Write-Read-Erase Flash Interfaces

Sara McAllister, Sherry Wang, Benjamin Berg, Daniel S. Berger, George Amvrosiadis, Nathan Beckmann, G. R. Ganger

USENIX OSDI 2024 | July 2024

Preprint

Managing Memory Tiers with CXL in Virtualized Environments

Yuhong Zhong, Daniel S. Berger, Carl Waldspurger, Ishwar Agarwal, Rajat Agarwal, Frank Hady, Karthik Kumar, Mark D. Hill, Mosharaf Chowdhury, Asaf Cidon

USENIX OSDI | July 2024

Publication

Concurrent Immediate Reference Counting

Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang

PACM PL | June 2024

Publication Publication Projet

Designing Cloud Servers for Lower Carbon

Jaylen Wang, Daniel S. Berger, Fiodar Kazhamiaka, Celine Irvene, Chaojie Zhang, Esha Choukse, Kali Frost, Rodrigo Fonseca, Brijesh Warrier, Chetan Bansal, Jonathan Stern, Ricardo Bianchini, Akshitha Sriraman

ISCA | June 2024

Publication

SmartOClock: Workload- and Risk-Aware Overclocking in the Cloud

Jovan Stojkovic, Pulkit Misra, Íñigo Goiri, Sam Whitlock, Esha Choukse, Mayukh Das, Chetan Bansal, Jason Lee, Zoey Sun, Haoran Qiu, Reed Zimmermann, Savyasachi Samal, Brijesh Warrier, Ashish Raniwala, Ricardo Bianchini

ISCA | June 2024

Publication

Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple

Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier

Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024

Publication DOI

Bigger, not Badder: Safely Scaling BFT Protocols

David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard

Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024

Publication DOI

An Introduction to the Compute Express Link (CXL) Interconnect

Debendra Das Sharma, R. Blankenship, Daniel S. Berger

June 2023

DOI Publication

Principled Microarchitectural Isolation on Cloud CPUs

Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko

ACM Conference on Computer and Communications Security (CCS) | October 2024

CCS Distinguished Paper Award

Author's Version Publication Projet

CHERIoT: Complete Memory Safety for Embedded Devices

Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia

2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653

Publication DOI Publication Projet

Closed-Form Bounds for DP-SGD against Record-level Inference

Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin

USENIX Security Symposium | August 2024

Publication Project

On the Efficacy of Differentially Private Few-shot Image Classification

Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela

Transactions on Machine Learning Research | December 2023, Vol 2023

DOI Preprint Preprint Publication Projet

Concurrent Immediate Reference Counting

Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang

PACM PL | June 2024

Publication Publication Projet

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko

Usenix Security Symposium | August 2023

Publication Project

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein

IEEE Symposium on Security and Privacy (S&P) | May 2023

Publication Projet Projet

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos

2026 IEEE Symposium on Security and Privacy | May 2026

Accepted at IEEE SP 2025, publication delayed due to embargo.

Publication Projet

AMuLeT: Automated Design-Time Testing of Secure Speculation Countermeasures

Bo Fu, Leo Tenenbaum, David Adler, Assaf Klein, Arpit Gogia, Alaa R. Alameldeen, Marco Guarnieri, M. Silberstein, Oleksii Oleksenko, Gururaj Saileshwar

30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems | February 2025

Publication DOI Publication Projet

Principled Microarchitectural Isolation on Cloud CPUs

Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko

ACM Conference on Computer and Communications Security (CCS) | October 2024

CCS Distinguished Paper Award

Author's Version Publication Projet

Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring

Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos

ACM Conference on Computer and Communications Security (CCS) | October 2024

Author's Version Publication Project

Closed-Form Bounds for DP-SGD against Record-level Inference

Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin

USENIX Security Symposium | August 2024

Publication Project

FairyWREN: A Sustainable Cache for Emerging Write-Read-Erase Flash Interfaces

Sara McAllister, Sherry Wang, Benjamin Berg, Daniel S. Berger, George Amvrosiadis, Nathan Beckmann, G. R. Ganger

USENIX OSDI 2024 | July 2024

Preprint

Managing Memory Tiers with CXL in Virtualized Environments

Yuhong Zhong, Daniel S. Berger, Carl Waldspurger, Ishwar Agarwal, Rajat Agarwal, Frank Hady, Karthik Kumar, Mark D. Hill, Mosharaf Chowdhury, Asaf Cidon

USENIX OSDI | July 2024

Publication

Designing Cloud Servers for Lower Carbon

Jaylen Wang, Daniel S. Berger, Fiodar Kazhamiaka, Celine Irvene, Chaojie Zhang, Esha Choukse, Kali Frost, Rodrigo Fonseca, Brijesh Warrier, Chetan Bansal, Jonathan Stern, Ricardo Bianchini, Akshitha Sriraman

ISCA | June 2024

Publication

SmartOClock: Workload- and Risk-Aware Overclocking in the Cloud

Jovan Stojkovic, Pulkit Misra, Íñigo Goiri, Sam Whitlock, Esha Choukse, Mayukh Das, Chetan Bansal, Jason Lee, Zoey Sun, Haoran Qiu, Reed Zimmermann, Savyasachi Samal, Brijesh Warrier, Ashish Raniwala, Ricardo Bianchini

ISCA | June 2024

Publication

Unanimous 2PC: Fault-tolerant Distributed Transactions Can be Fast and Simple

Chris Jensen, Heidi Howard, Antonios Katsarakis, Richard Mortier

Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024

Publication DOI

Bigger, not Badder: Safely Scaling BFT Protocols

David C. Y. Chu, Chris Liu, Natacha Crooks, Joseph M. Hellerstein, Heidi Howard

Principles and Practice of Consistency for Distributed Data (PaPoC’24) | April 2024

Publication DOI

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko

Usenix Security Symposium | August 2023

Publication Project

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein

IEEE Symposium on Security and Privacy (S&P) | May 2023

Publication Projet Projet

Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances

Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa

Communications of the ACM | October 2024, Vol 67(10): pp. 40-49

Publication Preprint Projet

Concurrent Immediate Reference Counting

Jaehwang Jung, Jeonghyeon Kim, Matthew J. Parkinson, Jeehoon Kang

PACM PL | June 2024

Publication Publication Projet

On the Efficacy of Differentially Private Few-shot Image Classification

Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard Turner, Antti Honkela

Transactions on Machine Learning Research | December 2023, Vol 2023

DOI Preprint Preprint Publication Projet

CHERIoT: Complete Memory Safety for Embedded Devices

Saar Amar, David Chisnall, Tony Chen, Nathaniel Filardo, Ben Laurie, Kunyan Liu, Robert Norton-Wright, Simon W. Moore, Yucong Tao, Robert N. M. Watson, Hongyan Xia

2023 56th IEEE/ACM International Symposium on Microarchitecture (MICRO) | October 2023, pp. 641-653

Publication DOI Publication Projet

An Introduction to the Compute Express Link (CXL) Interconnect

Debendra Das Sharma, R. Blankenship, Daniel S. Berger

June 2023

DOI Publication