Securing AI Agents with Information-Flow Control
Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
May 2025
Manuel Costa
VP, Distinguished Engineer
论文与出版物
-
-
-
-
Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
Communications of the ACM | October 2024, 第 67 卷(10): pp. 40-49
-
Confidential Computing Proofs
Mark Russinovich, Cédric Fournet, Greg Zaverucha, Josh Benaloh, Brandon Murdoch, Manuel Costa
ACM Queue | August 2024, 第 22 卷: pp. 73-100
-
-
-
Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
Proceedings of the VLDB Endowment | October 2023, 第 17 卷(2)
Nominee for Best Paper Award
-
Parma: Confidential Containers via Attested Execution Policies
Matthew Johnson, Stavros Volos, Ken Gordon, Sean Allen, Sylvan Clebsch, John Starks, Manuel Costa
March 2023
-
-
-
IA-CCF: Individual Accountability for Permissioned Ledgers
Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
-
-
-
AMP: Authentication of Media via Provenance
Paul England, Henrique S. Malvar, Eric Horvitz, Jack W. Stokes, Cédric Fournet, Rebecca Burke-Aguero, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, John Deutscher, Shabnam Erfani, Matt Gaylor, Andrew Jenks, Kevin Kane, Elissa M. Redmiles, Alex Shamis, Isha Sharma, Sam Wenker, Anika Zaman
12th ACM Multimedia Systems Conference | July 2021
-
Toward Confidential Cloud Computing
Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
January 2021
-
-
-
Multi-Stakeholder Media Provenance Management to Counter Synthetic Media Risks in News Publishing
J. Aythora, R. Burke‐Agüero, A. Chamayou, S. Clebsch, M. Costa, N. Earnshaw, L. Ellis, P. England, C. Fournet, M. Gaylor, C. Halford, E. Horvitz, A. Jenks, K. Kane, M. Lavallee, S. Lowenstein, B. MacCormack, H. S. Malvar, S. O'Brien, J. Parnall, E. M. Redmiles, A. Shamis, I. Sharma, J. W. Stokes, S. Wenker, A. Zaman
International Broadcasting Convention (IBC) | September 2020
-
-
-
CCF: A Framework for Building Confidential Verifiable Replicated Services
Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
MSR-TR-2019-16 | April 2019
作者：Microsoft
-
-
-
EnclaveDB – A Secure Database using SGX
Christian Priebe, Kapil Vaswani, Manuel Costa
To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
-
-
-
Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
USENIX Security Symposium 2017 | August 2017
-
Project Snowflake: Non-blocking safe manual memory management in .NET
Matthew J. Parkinson, Kapil Vaswani, Dimitrios Vytiniotis, Manuel Costa, Pantazis Deligiannis, Aaron Blankstein, Dylan McDermott, Jonathan Balkind
MSR-TR-2017-32 | July 2017
作者：Microsoft
-
Simple, Fast and Safe Manual Memory Management
Piyus Kedia, Manuel Costa, Dimitrios Vytiniotis, Matthew J. Parkinson, Kapil Vaswani, Aaron Blankstein
Proceedings of the Conference on Programming Langauges Design and Implementation (PLDI) | June 2017
-
-
-
Oblivious Multi-Party Machine Learning on Trusted Processors
Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
The 25th USENIX Security Symposium 2016 | July 2016
-
A Design and Verification Methodology for Secure Isolated Regions
Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
Programming Languages Design and Implementation (PLDI) | June 2016
-
-
-
Observing and Preventing Leakage in MapReduce
Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
MSR-TR-2015-70 | September 2015
作者：Microsoft
-
Secure Computation Interfaces
Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
MSR-TR-2015-67 | August 2015
作者：Microsoft
-
VC3: Trustworthy Data Analytics in the Cloud using SGX
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
36th IEEE Symposium on Security and Privacy | May 2015
-
-
-
VC3: Trustworthy Data Analytics in the Cloud
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
MSR-TR-2014-39 | February 2014
-
-
-
Dynamically Checking Ownership Policies in Concurrent C/C++ Programs
Jean-Philippe Martin, Michael Hicks, Manuel Costa, Periklis Akritidis, Miguel Castro
37th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL) | January 2010
-
-
-
Fast Byte-Granularity Software Fault Isolation
Miguel Castro, Jean-Philippe Martin, Marcus Peinado, Periklis Akritidis, Austin Donnelly, Manuel Costa, Paul Barham, Richard Black
ACM Symposium on Operating Systems Principles (SOSP) | October 2009
-
Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
18th USENIX Security Symposium (USENIX Security '09) | August 2009
18th USENIX Security Symposium (USENIX Security '09)
-
-
-
Vigilante: End-to-End Containment of Internet Worm Epidemics
Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Lidong Zhou, Lintao Zhang, Paul Barham, Ant Rowstron
ACM Transactions on Computer Systems | December 2008
-
Data Randomization
Manuel Costa, Jean-Philippe Martin, Miguel Castro
MSR-TR-2008-120 | September 2008
-
Preventing memory error exploits with WIT
Periklis Akritidis, Cristian Cadar, Costin Raiciu, Manuel Costa, Miguel Castro
Proceedings of the IEEE Symposium on Security and Privacy | May 2008
Proceedings of the IEEE Symposium on Security and Privacy
-
Better bug reporting with better privacy
Miguel Castro, Manuel Costa, Jean-Philippe Martin
Proceedings of the 13th international conference on Architectural support for programming languages and operating systems | March 2008
-
-
-
Bouncer: securing software by blocking bad input
Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
ACM Symposium on Operating Systems Principles (SOSP) | October 2007
ACM Symposium on Operating Systems Principles (SOSP)
-
Bouncer: Securing Software by Blocking Bad Input
Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
ACM Symposium on Operating Systems Principles (SOSP) | October 2007
ISBN: 978-1-59593-591-5
-
-
-
Securing software by enforcing data-flow integrity
Miguel Castro, Manuel Costa, Tim Harris
Symposium on Operating Systems Design and Implementation (OSDI) | November 2006
-
End-to-End Containment of Internet Worm Epidemics
October 2006
博士论文：University of Cambridge | October 2006
-
-
-
Vigilante: end-to-end containment of internet worms
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron, Lintao Zhang, Lidong Zhou, Paul Barham
ACM Symposium on Operating Systems Principles (SOSP) | October 2005
-
Debunking some myths about structured and unstructured overlays
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the 2nd Symposium on Networked Systems Design and Implementation (NSDI'05) | May 2005
-
A First Look at Peer-to-Peer Worms: Threats and Defenses
Lidong Zhou, Lintao Zhang, Frank McSherry, Nicole Immorlica, Manuel Costa, Steve Chien
4th International Workshop on Peer-To-Peer Systems (IPTPS '05) | February 2005
4th International Workshop on Peer-To-Peer Systems (IPTPS '05)
-
-
-
Can we contain Internet worms?
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III) | November 2004
Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III)
-
Can we contain Internet worms?
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
MSR-TR-2004-83 | August 2004
-
Performance and Dependability of structured peer-to-peer overlays
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004) | June 2004
ISBN: 0-7695-2052-9
-
Peer-to-peer overlays: structured, unstructured, or both?
Miguel Castro, Manuel Costa, Ant Rowstron
MSR-TR-2004-73 | April 2004
-
PIC: Practical Internet Coordinates for Distance Estimation
Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
MSR-TR-2003-53 | March 2004
ICDCS
-
PIC: Practical Internet Coordinates for Distance Estimation
Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04) | March 2004
Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04)
-
Should we build Gnutella on a structured overlay?
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the Second Workshop on Hot Topics in Networks (HotNets-II) | January 2004
-
-
-
Lightweight Logging for Lazy Release Consistent Distributed Shared Memory
Manuel Costa, Paulo Guedes, Manuel Sequeira, Nuno Neves, Miguel Castro
Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (OSDI'96) | October 1996
-
Efficient and Flexible Object Sharing
Miguel Castro, Paulo Guedes, Manuel Sequeira, Manuel Costa
Proceedings of the International Conference on Parallel Processing (ICPP'96), Proceedings of the International Conference on Parallel Processing (ICPP'96) | August 1996
-
-
-
Securing AI Agents with Information-Flow Control
Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
May 2025
-
Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
Communications of the ACM | October 2024, 第 67 卷(10): pp. 40-49
-
Confidential Computing Proofs
Mark Russinovich, Cédric Fournet, Greg Zaverucha, Josh Benaloh, Brandon Murdoch, Manuel Costa
ACM Queue | August 2024, 第 22 卷: pp. 73-100
-
Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
Proceedings of the VLDB Endowment | October 2023, 第 17 卷(2)
Nominee for Best Paper Award
-
Parma: Confidential Containers via Attested Execution Policies
Matthew Johnson, Stavros Volos, Ken Gordon, Sean Allen, Sylvan Clebsch, John Starks, Manuel Costa
March 2023
-
IA-CCF: Individual Accountability for Permissioned Ledgers
Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
-
Toward Confidential Cloud Computing
Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
January 2021
-
Multi-Stakeholder Media Provenance Management to Counter Synthetic Media Risks in News Publishing
J. Aythora, R. Burke‐Agüero, A. Chamayou, S. Clebsch, M. Costa, N. Earnshaw, L. Ellis, P. England, C. Fournet, M. Gaylor, C. Halford, E. Horvitz, A. Jenks, K. Kane, M. Lavallee, S. Lowenstein, B. MacCormack, H. S. Malvar, S. O'Brien, J. Parnall, E. M. Redmiles, A. Shamis, I. Sharma, J. W. Stokes, S. Wenker, A. Zaman
International Broadcasting Convention (IBC) | September 2020
-
CCF: A Framework for Building Confidential Verifiable Replicated Services
Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
MSR-TR-2019-16 | April 2019
作者：Microsoft
-
EnclaveDB – A Secure Database using SGX
Christian Priebe, Kapil Vaswani, Manuel Costa
To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
-
Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
USENIX Security Symposium 2017 | August 2017
-
Simple, Fast and Safe Manual Memory Management
Piyus Kedia, Manuel Costa, Dimitrios Vytiniotis, Matthew J. Parkinson, Kapil Vaswani, Aaron Blankstein
Proceedings of the Conference on Programming Langauges Design and Implementation (PLDI) | June 2017
-
Oblivious Multi-Party Machine Learning on Trusted Processors
Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
The 25th USENIX Security Symposium 2016 | July 2016
-
A Design and Verification Methodology for Secure Isolated Regions
Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
Programming Languages Design and Implementation (PLDI) | June 2016
-
Observing and Preventing Leakage in MapReduce
Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
MSR-TR-2015-70 | September 2015
作者：Microsoft
-
Secure Computation Interfaces
Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
MSR-TR-2015-67 | August 2015
作者：Microsoft
-
VC3: Trustworthy Data Analytics in the Cloud using SGX
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
36th IEEE Symposium on Security and Privacy | May 2015
-
VC3: Trustworthy Data Analytics in the Cloud
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
MSR-TR-2014-39 | February 2014
-
Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
18th USENIX Security Symposium (USENIX Security '09) | August 2009
18th USENIX Security Symposium (USENIX Security '09)
-
Vigilante: End-to-End Containment of Internet Worm Epidemics
Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Lidong Zhou, Lintao Zhang, Paul Barham, Ant Rowstron
ACM Transactions on Computer Systems | December 2008
-
Preventing memory error exploits with WIT
Periklis Akritidis, Cristian Cadar, Costin Raiciu, Manuel Costa, Miguel Castro
Proceedings of the IEEE Symposium on Security and Privacy | May 2008
Proceedings of the IEEE Symposium on Security and Privacy
-
Bouncer: Securing Software by Blocking Bad Input
Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
ACM Symposium on Operating Systems Principles (SOSP) | October 2007
ISBN: 978-1-59593-591-5
-
Securing software by enforcing data-flow integrity
Miguel Castro, Manuel Costa, Tim Harris
Symposium on Operating Systems Design and Implementation (OSDI) | November 2006
-
End-to-End Containment of Internet Worm Epidemics
October 2006
博士论文：University of Cambridge | October 2006
-
Vigilante: end-to-end containment of internet worms
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron, Lintao Zhang, Lidong Zhou, Paul Barham
ACM Symposium on Operating Systems Principles (SOSP) | October 2005
-
Can we contain Internet worms?
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III) | November 2004
Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III)
-
-
-
-
Lightweight Logging for Lazy Release Consistent Distributed Shared Memory
Manuel Costa, Paulo Guedes, Manuel Sequeira, Nuno Neves, Miguel Castro
Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (OSDI'96) | October 1996
-
Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
Communications of the ACM | October 2024, 第 67 卷(10): pp. 40-49
-
Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
Proceedings of the VLDB Endowment | October 2023, 第 17 卷(2)
Nominee for Best Paper Award
-
AMP: Authentication of Media via Provenance
Paul England, Henrique S. Malvar, Eric Horvitz, Jack W. Stokes, Cédric Fournet, Rebecca Burke-Aguero, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, John Deutscher, Shabnam Erfani, Matt Gaylor, Andrew Jenks, Kevin Kane, Elissa M. Redmiles, Alex Shamis, Isha Sharma, Sam Wenker, Anika Zaman
12th ACM Multimedia Systems Conference | July 2021
-
CCF: A Framework for Building Confidential Verifiable Replicated Services
Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
MSR-TR-2019-16 | April 2019
作者：Microsoft
-
VC3: Trustworthy Data Analytics in the Cloud
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
MSR-TR-2014-39 | February 2014
-
Fast Byte-Granularity Software Fault Isolation
Miguel Castro, Jean-Philippe Martin, Marcus Peinado, Periklis Akritidis, Austin Donnelly, Manuel Costa, Paul Barham, Richard Black
ACM Symposium on Operating Systems Principles (SOSP) | October 2009
-
Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
18th USENIX Security Symposium (USENIX Security '09) | August 2009
18th USENIX Security Symposium (USENIX Security '09)
-
Data Randomization
Manuel Costa, Jean-Philippe Martin, Miguel Castro
MSR-TR-2008-120 | September 2008
-
Bouncer: Securing Software by Blocking Bad Input
Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
ACM Symposium on Operating Systems Principles (SOSP) | October 2007
ISBN: 978-1-59593-591-5
-
End-to-End Containment of Internet Worm Epidemics
October 2006
博士论文：University of Cambridge | October 2006
-
Debunking some myths about structured and unstructured overlays
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the 2nd Symposium on Networked Systems Design and Implementation (NSDI'05) | May 2005
-
A First Look at Peer-to-Peer Worms: Threats and Defenses
Lidong Zhou, Lintao Zhang, Frank McSherry, Nicole Immorlica, Manuel Costa, Steve Chien
4th International Workshop on Peer-To-Peer Systems (IPTPS '05) | February 2005
4th International Workshop on Peer-To-Peer Systems (IPTPS '05)
-
Can we contain Internet worms?
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III) | November 2004
Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III)
-
Can we contain Internet worms?
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
MSR-TR-2004-83 | August 2004
-
Performance and Dependability of structured peer-to-peer overlays
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004) | June 2004
ISBN: 0-7695-2052-9
-
Peer-to-peer overlays: structured, unstructured, or both?
Miguel Castro, Manuel Costa, Ant Rowstron
MSR-TR-2004-73 | April 2004
-
PIC: Practical Internet Coordinates for Distance Estimation
Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
MSR-TR-2003-53 | March 2004
ICDCS
-
PIC: Practical Internet Coordinates for Distance Estimation
Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04) | March 2004
Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04)
-
Should we build Gnutella on a structured overlay?
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the Second Workshop on Hot Topics in Networks (HotNets-II) | January 2004
-
-
-
Toward Confidential Cloud Computing
Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
January 2021
-
-
-
Project Snowflake: Non-blocking safe manual memory management in .NET
Matthew J. Parkinson, Kapil Vaswani, Dimitrios Vytiniotis, Manuel Costa, Pantazis Deligiannis, Aaron Blankstein, Dylan McDermott, Jonathan Balkind
MSR-TR-2017-32 | July 2017
作者：Microsoft
-
Simple, Fast and Safe Manual Memory Management
Piyus Kedia, Manuel Costa, Dimitrios Vytiniotis, Matthew J. Parkinson, Kapil Vaswani, Aaron Blankstein
Proceedings of the Conference on Programming Langauges Design and Implementation (PLDI) | June 2017
-
A Design and Verification Methodology for Secure Isolated Regions
Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
Programming Languages Design and Implementation (PLDI) | June 2016
-
Dynamically Checking Ownership Policies in Concurrent C/C++ Programs
Jean-Philippe Martin, Michael Hicks, Manuel Costa, Periklis Akritidis, Miguel Castro
37th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL) | January 2010
-
Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
18th USENIX Security Symposium (USENIX Security '09) | August 2009
18th USENIX Security Symposium (USENIX Security '09)
-
-
-
Lightweight Logging for Lazy Release Consistent Distributed Shared Memory
Manuel Costa, Paulo Guedes, Manuel Sequeira, Nuno Neves, Miguel Castro
Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (OSDI'96) | October 1996
-
Better bug reporting with better privacy
Miguel Castro, Manuel Costa, Jean-Philippe Martin
Proceedings of the 13th international conference on Architectural support for programming languages and operating systems | March 2008
-
Bouncer: securing software by blocking bad input
Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
ACM Symposium on Operating Systems Principles (SOSP) | October 2007
ACM Symposium on Operating Systems Principles (SOSP)
-
-
-
Efficient and Flexible Object Sharing
Miguel Castro, Paulo Guedes, Manuel Sequeira, Manuel Costa
Proceedings of the International Conference on Parallel Processing (ICPP'96), Proceedings of the International Conference on Parallel Processing (ICPP'96) | August 1996
-
-
-
Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
Communications of the ACM | October 2024, 第 67 卷(10): pp. 40-49
-
Confidential Computing Proofs
Mark Russinovich, Cédric Fournet, Greg Zaverucha, Josh Benaloh, Brandon Murdoch, Manuel Costa
ACM Queue | August 2024, 第 22 卷: pp. 73-100
-
Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
Proceedings of the VLDB Endowment | October 2023, 第 17 卷(2)
Nominee for Best Paper Award
-
Vigilante: End-to-End Containment of Internet Worm Epidemics
Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Lidong Zhou, Lintao Zhang, Paul Barham, Ant Rowstron
ACM Transactions on Computer Systems | December 2008
-
-
-
Securing AI Agents with Information-Flow Control
Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
May 2025
-
Parma: Confidential Containers via Attested Execution Policies
Matthew Johnson, Stavros Volos, Ken Gordon, Sean Allen, Sylvan Clebsch, John Starks, Manuel Costa
March 2023
-
Toward Confidential Cloud Computing
Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
January 2021
-
-
-
Lightweight Logging for Lazy Release Consistent Distributed Shared Memory
Manuel Costa, Paulo Guedes, Manuel Sequeira, Nuno Neves, Miguel Castro
Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (OSDI'96) | October 1996
-
Efficient and Flexible Object Sharing
Miguel Castro, Paulo Guedes, Manuel Sequeira, Manuel Costa
Proceedings of the International Conference on Parallel Processing (ICPP'96), Proceedings of the International Conference on Parallel Processing (ICPP'96) | August 1996
-
IA-CCF: Individual Accountability for Permissioned Ledgers
Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
-
AMP: Authentication of Media via Provenance
Paul England, Henrique S. Malvar, Eric Horvitz, Jack W. Stokes, Cédric Fournet, Rebecca Burke-Aguero, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, John Deutscher, Shabnam Erfani, Matt Gaylor, Andrew Jenks, Kevin Kane, Elissa M. Redmiles, Alex Shamis, Isha Sharma, Sam Wenker, Anika Zaman
12th ACM Multimedia Systems Conference | July 2021
-
Multi-Stakeholder Media Provenance Management to Counter Synthetic Media Risks in News Publishing
J. Aythora, R. Burke‐Agüero, A. Chamayou, S. Clebsch, M. Costa, N. Earnshaw, L. Ellis, P. England, C. Fournet, M. Gaylor, C. Halford, E. Horvitz, A. Jenks, K. Kane, M. Lavallee, S. Lowenstein, B. MacCormack, H. S. Malvar, S. O'Brien, J. Parnall, E. M. Redmiles, A. Shamis, I. Sharma, J. W. Stokes, S. Wenker, A. Zaman
International Broadcasting Convention (IBC) | September 2020
-
EnclaveDB – A Secure Database using SGX
Christian Priebe, Kapil Vaswani, Manuel Costa
To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
-
Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
USENIX Security Symposium 2017 | August 2017
-
Simple, Fast and Safe Manual Memory Management
Piyus Kedia, Manuel Costa, Dimitrios Vytiniotis, Matthew J. Parkinson, Kapil Vaswani, Aaron Blankstein
Proceedings of the Conference on Programming Langauges Design and Implementation (PLDI) | June 2017
-
Oblivious Multi-Party Machine Learning on Trusted Processors
Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
The 25th USENIX Security Symposium 2016 | July 2016
-
A Design and Verification Methodology for Secure Isolated Regions
Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
Programming Languages Design and Implementation (PLDI) | June 2016
-
VC3: Trustworthy Data Analytics in the Cloud using SGX
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
36th IEEE Symposium on Security and Privacy | May 2015
-
Dynamically Checking Ownership Policies in Concurrent C/C++ Programs
Jean-Philippe Martin, Michael Hicks, Manuel Costa, Periklis Akritidis, Miguel Castro
37th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL) | January 2010
-
Fast Byte-Granularity Software Fault Isolation
Miguel Castro, Jean-Philippe Martin, Marcus Peinado, Periklis Akritidis, Austin Donnelly, Manuel Costa, Paul Barham, Richard Black
ACM Symposium on Operating Systems Principles (SOSP) | October 2009
-
Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
18th USENIX Security Symposium (USENIX Security '09) | August 2009
18th USENIX Security Symposium (USENIX Security '09)
-
Preventing memory error exploits with WIT
Periklis Akritidis, Cristian Cadar, Costin Raiciu, Manuel Costa, Miguel Castro
Proceedings of the IEEE Symposium on Security and Privacy | May 2008
Proceedings of the IEEE Symposium on Security and Privacy
-
Better bug reporting with better privacy
Miguel Castro, Manuel Costa, Jean-Philippe Martin
Proceedings of the 13th international conference on Architectural support for programming languages and operating systems | March 2008
-
Bouncer: securing software by blocking bad input
Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
ACM Symposium on Operating Systems Principles (SOSP) | October 2007
ACM Symposium on Operating Systems Principles (SOSP)
-
Bouncer: Securing Software by Blocking Bad Input
Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
ACM Symposium on Operating Systems Principles (SOSP) | October 2007
ISBN: 978-1-59593-591-5
-
Securing software by enforcing data-flow integrity
Miguel Castro, Manuel Costa, Tim Harris
Symposium on Operating Systems Design and Implementation (OSDI) | November 2006
-
Vigilante: end-to-end containment of internet worms
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron, Lintao Zhang, Lidong Zhou, Paul Barham
ACM Symposium on Operating Systems Principles (SOSP) | October 2005
-
Debunking some myths about structured and unstructured overlays
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the 2nd Symposium on Networked Systems Design and Implementation (NSDI'05) | May 2005
-
A First Look at Peer-to-Peer Worms: Threats and Defenses
Lidong Zhou, Lintao Zhang, Frank McSherry, Nicole Immorlica, Manuel Costa, Steve Chien
4th International Workshop on Peer-To-Peer Systems (IPTPS '05) | February 2005
4th International Workshop on Peer-To-Peer Systems (IPTPS '05)
-
Can we contain Internet worms?
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III) | November 2004
Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III)
-
Performance and Dependability of structured peer-to-peer overlays
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004) | June 2004
ISBN: 0-7695-2052-9
-
PIC: Practical Internet Coordinates for Distance Estimation
Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04) | March 2004
Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04)
-
Should we build Gnutella on a structured overlay?
Miguel Castro, Manuel Costa, Ant Rowstron
Proceedings of the Second Workshop on Hot Topics in Networks (HotNets-II) | January 2004
-
-
-
CCF: A Framework for Building Confidential Verifiable Replicated Services
Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
MSR-TR-2019-16 | April 2019
作者：Microsoft
-
Project Snowflake: Non-blocking safe manual memory management in .NET
Matthew J. Parkinson, Kapil Vaswani, Dimitrios Vytiniotis, Manuel Costa, Pantazis Deligiannis, Aaron Blankstein, Dylan McDermott, Jonathan Balkind
MSR-TR-2017-32 | July 2017
作者：Microsoft
-
Observing and Preventing Leakage in MapReduce
Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
MSR-TR-2015-70 | September 2015
作者：Microsoft
-
Secure Computation Interfaces
Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
MSR-TR-2015-67 | August 2015
作者：Microsoft
-
VC3: Trustworthy Data Analytics in the Cloud
Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
MSR-TR-2014-39 | February 2014
-
Data Randomization
Manuel Costa, Jean-Philippe Martin, Miguel Castro
MSR-TR-2008-120 | September 2008
-
Can we contain Internet worms?
Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
MSR-TR-2004-83 | August 2004
-
Peer-to-peer overlays: structured, unstructured, or both?
Miguel Castro, Manuel Costa, Ant Rowstron
MSR-TR-2004-73 | April 2004
-
PIC: Practical Internet Coordinates for Distance Estimation
Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
MSR-TR-2003-53 | March 2004
ICDCS
-
-
-
End-to-End Containment of Internet Worm Epidemics
October 2006
博士论文：University of Cambridge | October 2006
-