• The Collective: A Cache-Based System Management Architecture
  R. Chandra, N. Zeldovich, C. Sapuntzakis, and M. S. Lam
  In Proceedings of the Second Symposium on Networked Systems Design and Implementation (NSDI 2005), pages 259-272, May 2005.
  
  
• Understanding Data Lifetime via Whole System Simulation
  J. Chow, B. Pfaff, T. Garfinkel, K. Christopher, and M. Rosenblum
  To be presented at the USENIX Security Symposium in August 2004.
  Full paper: [pdf] [html]
  
  
• A Practical Dynamic Buffer Overflow Detector
  Olatunji Ruwase and M. S. Lam
  In Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS 2004), pages 159--169, February 2004.
  
  
• Ostia: A Delegating Architecture for Secure System Call Interposition
  Tal Garfinkel, Ben Pfaff, and Mendel Rosenblum
  In Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS 2004), pages 187--201, February 2004.
  Full paper: [ps] [pdf] [Bibtex Entry]
  
  
• Virtual Appliances for Deploying and Maintaining Software [BIBTeX]
  C. Sapuntzakis, D. Brumley, R. Chandra, N. Zeldovich, J. Chow, M. S. Lam, and M. Rosenblum
  In Proceedings of the 17th Large Installation Systems Administration Conference (LISA 2003), pages 181-194, October 2003.
  
  
• Terra: A Virtual Machine-Based Platform for Trusted Computing
  T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh.
  In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP 2003), pages 193-206, October 2003.
  
  
• Remote Timing Attacks are Practical
  David Brumley and Dan Boneh
  In Proceedings of the 12th USENIX Security Symposium, pages 1-14, August 2003. Best paper award.
  
  
• Oblivious Signature-Based Envelope
  Ninghui Li, Wenliang Du, and D. Boneh In Proceedings of the 22nd ACM Symposium on Principles of Distributed Computing (PODC), pp. 182-189, July 2003. Selected paper for Journal of Distributed Computing.
  
  
• Virtual Appliance in the Collective: A Road to Hassle-free Computing [BIBTeX]
  C. Sapuntzakis and M. S. Lam
  In Proceedings of the 9th Workshop on Hot Topics in Operating Systems (HOTOS IX), pages 55-60, May 2003.
  
  
• Flexible OS Support and Applications for Trusted Computing
  T. Garfinkel, M. Rosenblum, D. Boneh
  In Proceedings of the 9th Workshop on Hot Topics in Operating Systems (HOTOS-IX), pages 145-150, May 2003.
  
  
• SiRiUS: Securing Remote Untrusted Storage
  Eu-Jin Goh, Hovav Shacham, Nagendra Modadugu, and Dan Boneh
  In the Internet Society's 2003 Symposium on Network and Distributed System Security (NDSS), pages 131-145, February 2003.
  
  
• A Virtual Machine Introspection Based Architecture for Intrusion Detection
  Tal Garfinkel and Mendel Rosenblum
  In the Internet Society's 2003 Symposium on Network and Distributed System Security (NDSS), pages 191--206, February 2003.
  
  
• Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools
  Tal Garfinkel
  In the Internet Society's 2003 Symposium on Network and Distributed System Security (NDSS 2003), pages 163--157, February 2003.
  Full paper: [ps] [pdf] [Bibtex Entry]
  
  
• Optimizing the Migration of Virtual Computers [BIBTeX]
  C. Sapuntzakis, R. Chandra, B. Pfaff, J. Chow, M. S. Lam, and M. Rosenblum
  In Proceedings of the Fifth Symposium on Operating Systems Design and Implementation (OSDI), pages 377-390, December 2002.
  
  
• Attacking an Obfuscated Cipher by Injecting Faults
  Matthias Jacob, Dan Boneh, and Ed Felten,
  In Proceedings of the 2002 ACM Workshop on Digital Rights Management, pages 16-31, November 2002.
  
  
• Almost Entirely Correct Mixing with Applications to Voting
  Dan Boneh and Philippe Golle
  In Proceedings of the 9th ACM conference on Computer and Communications Security (CCS), pages 68-77, November 2002.
  
  
• Supporting Ubiquitous Computing with Stateless Consoles and Computation Caches
  B. K. Schmidt
  Ph.D. Thesis, Computer Science Department, Stanford University, August 2000.
  (Also available in PDF and gzip'ed postscript formats.)
  
  
• The Interactive Performance of SLIM: A Stateless, Thin-Client Architecture
  B. K. Schmidt, M. S. Lam, and J. D. Northcutt
  Proceedings of the Seventeenth ACM Symposium on Operating Systems Principles, Kiawah Island, SC, December 1999.
  Published in Operating Systems Review, 34(5):32-47.
  (Also available in PDF and gzip'ed postscript formats.)
  
  

This research is supported in part by the National Science Foundation under Grant No. 0121481, NSF student fellowships, and Stanford Graduate Fellowships. Any opinions, findings, and conclusions or recommendations expressed in this material are those of the authors and do not necessarily reflect the views of the National Science Foundation.