SAFE is a clean-slate design for a highly secure computer system, with pervasive
mechanisms for tracking and limiting information flows. At the lowest level, the SAFE …

The trusted execution environment (TEE) is the security basis of embedded systems, which
can provide a hardware-based isolated execution environment for security-sensitive …

Hypervisors are low level execution platforms that provide isolated partitions on shared
resources, allowing to design secure systems without using dedicated hardware devices. A …

The isolation of security critical components from an untrusted OS allows to both protect
applications and to harden the OS itself. Virtualization of the memory subsystem is a key …

Given recent high-profile successes in formal verification of security-related properties (eg,
for seL4), and the rising popularity of applying formal methods to cryptographic libraries and …

Progress has recently been made on specifying instruction set architectures (ISAs) in
executable formalisms rather than through prose. However, to date, those formal …

Methods for proving that concurrent software does not leak its secrets has remained an
active topic of research for at least the past four decades. Despite an impressive array of …

This work focuses on the study of constant-time implementations; giving formal guarantees
that such implementations are protected against cache-based timing attacks in virtualized …

In order to host a general purpose operating system, hypervisors need to virtualize the CPU
memory subsystem. This entails dynami-cally changing MMU resources, in particular the …

SAFE is a clean-slate design for a highly secure computer system, with pervasive
mechanisms for tracking and limiting information flows. At the lowest level, the SAFE …