Manuel Costa

VP, Distinguished Engineer

Publications

View by:

- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project
- Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
  
  Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
  
  Publication Preprint Project
- Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
  
  Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
  
  Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
  
  Nominee for Best Paper Award
  
  Publication Preprint Author's Version Project
- Parma: Confidential Containers via Attested Execution Policies
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean Allen, Sylvan Clebsch, John Starks, Manuel Costa
  
  March 2023
  
  Preprint
- IA-CCF: Individual Accountability for Permissioned Ledgers
  
  Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
  
  19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
  
  Publication Project
- AMP: Authentication of Media via Provenance
  
  Paul England, Henrique S. Malvar, Eric Horvitz, Jack W. Stokes, Cédric Fournet, Rebecca Burke-Aguero, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, John Deutscher, Shabnam Erfani, Matt Gaylor, Andrew Jenks, Kevin Kane, Elissa M. Redmiles, Alex Shamis, Isha Sharma, Sam Wenker, Anika Zaman
  
  12th ACM Multimedia Systems Conference | July 2021
  
  Publication Publication Project
- Toward Confidential Cloud Computing
  
  Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
  
  January 2021
  
  Publication
- Multi-Stakeholder Media Provenance Management to Counter Synthetic Media Risks in News Publishing
  
  J. Aythora, R. Burke‐Agüero, A. Chamayou, S. Clebsch, M. Costa, N. Earnshaw, L. Ellis, P. England, C. Fournet, M. Gaylor, C. Halford, E. Horvitz, A. Jenks, K. Kane, M. Lavallee, S. Lowenstein, B. MacCormack, H. S. Malvar, S. O'Brien, J. Parnall, E. M. Redmiles, A. Shamis, I. Sharma, J. W. Stokes, S. Wenker, A. Zaman
  
  International Broadcasting Convention (IBC) | September 2020
  
  Project
- CCF: A Framework for Building Confidential Verifiable Replicated Services
  
  Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
  
  MSR-TR-2019-16 | April 2019
  
  Published by Microsoft
  
  Publication Github Project
- EnclaveDB – A Secure Database using SGX
  
  Christian Priebe, Kapil Vaswani, Manuel Costa
  
  To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
  
  Publication
- Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
  
  Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
  
  USENIX Security Symposium 2017 | August 2017
  
  Publication Publication
- Project Snowflake: Non-blocking safe manual memory management in .NET
  
  Matthew J. Parkinson, Kapil Vaswani, Dimitrios Vytiniotis, Manuel Costa, Pantazis Deligiannis, Aaron Blankstein, Dylan McDermott, Jonathan Balkind
  
  MSR-TR-2017-32 | July 2017
  
  Published by Microsoft
  
  Publication Project
- Simple, Fast and Safe Manual Memory Management
  
  Piyus Kedia, Manuel Costa, Dimitrios Vytiniotis, Matthew J. Parkinson, Kapil Vaswani, Aaron Blankstein
  
  Proceedings of the Conference on Programming Langauges Design and Implementation (PLDI) | June 2017
  
  Publication
- Oblivious Multi-Party Machine Learning on Trusted Processors
  
  Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
  
  The 25th USENIX Security Symposium 2016 | July 2016
  
  Publication Project Project
- A Design and Verification Methodology for Secure Isolated Regions
  
  Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
  
  Programming Languages Design and Implementation (PLDI) | June 2016
  
  Publication
- Observing and Preventing Leakage in MapReduce
  
  Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
  
  MSR-TR-2015-70 | September 2015
  
  Published by Microsoft
  
  Publication Project
- Secure Computation Interfaces
  
  Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
  
  MSR-TR-2015-67 | August 2015
  
  Published by Microsoft
  
  Publication
- VC3: Trustworthy Data Analytics in the Cloud using SGX
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  36th IEEE Symposium on Security and Privacy | May 2015
  
  Publication Project
- VC3: Trustworthy Data Analytics in the Cloud
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  MSR-TR-2014-39 | February 2014
  
  Publication
- Dynamically Checking Ownership Policies in Concurrent C/C++ Programs
  
  Jean-Philippe Martin, Michael Hicks, Manuel Costa, Periklis Akritidis, Miguel Castro
  
  37th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL) | January 2010
  
  Publication
- Fast Byte-Granularity Software Fault Isolation
  
  Miguel Castro, Jean-Philippe Martin, Marcus Peinado, Periklis Akritidis, Austin Donnelly, Manuel Costa, Paul Barham, Richard Black
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2009
  
  Publication
- Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
  
  Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
  
  18th USENIX Security Symposium (USENIX Security '09) | August 2009
  
  18th USENIX Security Symposium (USENIX Security '09)
  
  Publication
- Vigilante: End-to-End Containment of Internet Worm Epidemics
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Lidong Zhou, Lintao Zhang, Paul Barham, Ant Rowstron
  
  ACM Transactions on Computer Systems | December 2008
  
  Publication
- Data Randomization
  
  Manuel Costa, Jean-Philippe Martin, Miguel Castro
  
  MSR-TR-2008-120 | September 2008
  
  Publication
- Preventing memory error exploits with WIT
  
  Periklis Akritidis, Cristian Cadar, Costin Raiciu, Manuel Costa, Miguel Castro
  
  Proceedings of the IEEE Symposium on Security and Privacy | May 2008
  
  Proceedings of the IEEE Symposium on Security and Privacy
  
  Publication
- Better bug reporting with better privacy
  
  Miguel Castro, Manuel Costa, Jean-Philippe Martin
  
  Proceedings of the 13th international conference on Architectural support for programming languages and operating systems | March 2008
  
  Publication Publication Publication
- Bouncer: securing software by blocking bad input
  
  Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2007
  
  ACM Symposium on Operating Systems Principles (SOSP)
  
  Publication
- Bouncer: Securing Software by Blocking Bad Input
  
  Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2007
  
  ISBN: 978-1-59593-591-5
  
  Publication Publication
- Securing software by enforcing data-flow integrity
  
  Miguel Castro, Manuel Costa, Tim Harris
  
  Symposium on Operating Systems Design and Implementation (OSDI) | November 2006
  
  Publication
- End-to-End Containment of Internet Worm Epidemics
  
  Manuel Costa
  
  October 2006
  
  PhD Thesis: University of Cambridge | October 2006
  
  Publication
- Vigilante: end-to-end containment of internet worms
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron, Lintao Zhang, Lidong Zhou, Paul Barham
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2005
  
  DOI PDF Publication
- Debunking some myths about structured and unstructured overlays
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the 2nd Symposium on Networked Systems Design and Implementation (NSDI'05) | May 2005
  
  Publication
- A First Look at Peer-to-Peer Worms: Threats and Defenses
  
  Lidong Zhou, Lintao Zhang, Frank McSherry, Nicole Immorlica, Manuel Costa, Steve Chien
  
  4th International Workshop on Peer-To-Peer Systems (IPTPS '05) | February 2005
  
  4th International Workshop on Peer-To-Peer Systems (IPTPS '05)
  
  Publication
- Can we contain Internet worms?
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
  
  Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III) | November 2004
  
  Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III)
  
  Publication
- Can we contain Internet worms?
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
  
  MSR-TR-2004-83 | August 2004
  
  Publication
- Performance and Dependability of structured peer-to-peer overlays
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004) | June 2004
  
  ISBN: 0-7695-2052-9
  
  Publication Publication
- Peer-to-peer overlays: structured, unstructured, or both?
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  MSR-TR-2004-73 | April 2004
  
  Publication
- PIC: Practical Internet Coordinates for Distance Estimation
  
  Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
  
  MSR-TR-2003-53 | March 2004
  
  ICDCS
  
  Publication
- PIC: Practical Internet Coordinates for Distance Estimation
  
  Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
  
  Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04) | March 2004
  
  Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04)
  
  Publication
- Should we build Gnutella on a structured overlay?
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the Second Workshop on Hot Topics in Networks (HotNets-II) | January 2004
  
  Publication Publication
- Lightweight Logging for Lazy Release Consistent Distributed Shared Memory
  
  Manuel Costa, Paulo Guedes, Manuel Sequeira, Nuno Neves, Miguel Castro
  
  Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (OSDI'96) | October 1996
  
  Publication
- Efficient and Flexible Object Sharing
  
  Miguel Castro, Paulo Guedes, Manuel Sequeira, Manuel Costa
  
  Proceedings of the International Conference on Parallel Processing (ICPP'96), Proceedings of the International Conference on Parallel Processing (ICPP'96) | August 1996
  
  Publication

- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project
- Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
  
  Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
  
  Publication Preprint Project
- Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
  
  Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
  
  Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
  
  Nominee for Best Paper Award
  
  Publication Preprint Author's Version Project
- Parma: Confidential Containers via Attested Execution Policies
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean Allen, Sylvan Clebsch, John Starks, Manuel Costa
  
  March 2023
  
  Preprint
- IA-CCF: Individual Accountability for Permissioned Ledgers
  
  Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
  
  19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
  
  Publication Project
- Toward Confidential Cloud Computing
  
  Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
  
  January 2021
  
  Publication
- Multi-Stakeholder Media Provenance Management to Counter Synthetic Media Risks in News Publishing
  
  J. Aythora, R. Burke‐Agüero, A. Chamayou, S. Clebsch, M. Costa, N. Earnshaw, L. Ellis, P. England, C. Fournet, M. Gaylor, C. Halford, E. Horvitz, A. Jenks, K. Kane, M. Lavallee, S. Lowenstein, B. MacCormack, H. S. Malvar, S. O'Brien, J. Parnall, E. M. Redmiles, A. Shamis, I. Sharma, J. W. Stokes, S. Wenker, A. Zaman
  
  International Broadcasting Convention (IBC) | September 2020
  
  Project
- CCF: A Framework for Building Confidential Verifiable Replicated Services
  
  Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
  
  MSR-TR-2019-16 | April 2019
  
  Published by Microsoft
  
  Publication Github Project
- EnclaveDB – A Secure Database using SGX
  
  Christian Priebe, Kapil Vaswani, Manuel Costa
  
  To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
  
  Publication
- Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
  
  Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
  
  USENIX Security Symposium 2017 | August 2017
  
  Publication Publication
- Simple, Fast and Safe Manual Memory Management
  
  Piyus Kedia, Manuel Costa, Dimitrios Vytiniotis, Matthew J. Parkinson, Kapil Vaswani, Aaron Blankstein
  
  Proceedings of the Conference on Programming Langauges Design and Implementation (PLDI) | June 2017
  
  Publication
- Oblivious Multi-Party Machine Learning on Trusted Processors
  
  Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
  
  The 25th USENIX Security Symposium 2016 | July 2016
  
  Publication Project Project
- A Design and Verification Methodology for Secure Isolated Regions
  
  Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
  
  Programming Languages Design and Implementation (PLDI) | June 2016
  
  Publication
- Observing and Preventing Leakage in MapReduce
  
  Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
  
  MSR-TR-2015-70 | September 2015
  
  Published by Microsoft
  
  Publication Project
- Secure Computation Interfaces
  
  Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
  
  MSR-TR-2015-67 | August 2015
  
  Published by Microsoft
  
  Publication
- VC3: Trustworthy Data Analytics in the Cloud using SGX
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  36th IEEE Symposium on Security and Privacy | May 2015
  
  Publication Project
- VC3: Trustworthy Data Analytics in the Cloud
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  MSR-TR-2014-39 | February 2014
  
  Publication
- Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
  
  Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
  
  18th USENIX Security Symposium (USENIX Security '09) | August 2009
  
  18th USENIX Security Symposium (USENIX Security '09)
  
  Publication
- Vigilante: End-to-End Containment of Internet Worm Epidemics
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Lidong Zhou, Lintao Zhang, Paul Barham, Ant Rowstron
  
  ACM Transactions on Computer Systems | December 2008
  
  Publication
- Preventing memory error exploits with WIT
  
  Periklis Akritidis, Cristian Cadar, Costin Raiciu, Manuel Costa, Miguel Castro
  
  Proceedings of the IEEE Symposium on Security and Privacy | May 2008
  
  Proceedings of the IEEE Symposium on Security and Privacy
  
  Publication
- Bouncer: Securing Software by Blocking Bad Input
  
  Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2007
  
  ISBN: 978-1-59593-591-5
  
  Publication Publication
- Securing software by enforcing data-flow integrity
  
  Miguel Castro, Manuel Costa, Tim Harris
  
  Symposium on Operating Systems Design and Implementation (OSDI) | November 2006
  
  Publication
- End-to-End Containment of Internet Worm Epidemics
  
  Manuel Costa
  
  October 2006
  
  PhD Thesis: University of Cambridge | October 2006
  
  Publication
- Vigilante: end-to-end containment of internet worms
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron, Lintao Zhang, Lidong Zhou, Paul Barham
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2005
  
  DOI PDF Publication
- Can we contain Internet worms?
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
  
  Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III) | November 2004
  
  Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III)
  
  Publication
- Lightweight Logging for Lazy Release Consistent Distributed Shared Memory
  
  Manuel Costa, Paulo Guedes, Manuel Sequeira, Nuno Neves, Miguel Castro
  
  Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (OSDI'96) | October 1996
  
  Publication
- Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
  
  Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
  
  Publication Preprint Project
- Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
  
  Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
  
  Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
  
  Nominee for Best Paper Award
  
  Publication Preprint Author's Version Project
- AMP: Authentication of Media via Provenance
  
  Paul England, Henrique S. Malvar, Eric Horvitz, Jack W. Stokes, Cédric Fournet, Rebecca Burke-Aguero, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, John Deutscher, Shabnam Erfani, Matt Gaylor, Andrew Jenks, Kevin Kane, Elissa M. Redmiles, Alex Shamis, Isha Sharma, Sam Wenker, Anika Zaman
  
  12th ACM Multimedia Systems Conference | July 2021
  
  Publication Publication Project
- CCF: A Framework for Building Confidential Verifiable Replicated Services
  
  Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
  
  MSR-TR-2019-16 | April 2019
  
  Published by Microsoft
  
  Publication Github Project
- VC3: Trustworthy Data Analytics in the Cloud
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  MSR-TR-2014-39 | February 2014
  
  Publication
- Fast Byte-Granularity Software Fault Isolation
  
  Miguel Castro, Jean-Philippe Martin, Marcus Peinado, Periklis Akritidis, Austin Donnelly, Manuel Costa, Paul Barham, Richard Black
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2009
  
  Publication
- Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
  
  Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
  
  18th USENIX Security Symposium (USENIX Security '09) | August 2009
  
  18th USENIX Security Symposium (USENIX Security '09)
  
  Publication
- Data Randomization
  
  Manuel Costa, Jean-Philippe Martin, Miguel Castro
  
  MSR-TR-2008-120 | September 2008
  
  Publication
- Bouncer: Securing Software by Blocking Bad Input
  
  Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2007
  
  ISBN: 978-1-59593-591-5
  
  Publication Publication
- End-to-End Containment of Internet Worm Epidemics
  
  Manuel Costa
  
  October 2006
  
  PhD Thesis: University of Cambridge | October 2006
  
  Publication
- Debunking some myths about structured and unstructured overlays
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the 2nd Symposium on Networked Systems Design and Implementation (NSDI'05) | May 2005
  
  Publication
- A First Look at Peer-to-Peer Worms: Threats and Defenses
  
  Lidong Zhou, Lintao Zhang, Frank McSherry, Nicole Immorlica, Manuel Costa, Steve Chien
  
  4th International Workshop on Peer-To-Peer Systems (IPTPS '05) | February 2005
  
  4th International Workshop on Peer-To-Peer Systems (IPTPS '05)
  
  Publication
- Can we contain Internet worms?
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
  
  Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III) | November 2004
  
  Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III)
  
  Publication
- Can we contain Internet worms?
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
  
  MSR-TR-2004-83 | August 2004
  
  Publication
- Performance and Dependability of structured peer-to-peer overlays
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004) | June 2004
  
  ISBN: 0-7695-2052-9
  
  Publication Publication
- Peer-to-peer overlays: structured, unstructured, or both?
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  MSR-TR-2004-73 | April 2004
  
  Publication
- PIC: Practical Internet Coordinates for Distance Estimation
  
  Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
  
  MSR-TR-2003-53 | March 2004
  
  ICDCS
  
  Publication
- PIC: Practical Internet Coordinates for Distance Estimation
  
  Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
  
  Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04) | March 2004
  
  Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04)
  
  Publication
- Should we build Gnutella on a structured overlay?
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the Second Workshop on Hot Topics in Networks (HotNets-II) | January 2004
  
  Publication Publication
- Toward Confidential Cloud Computing
  
  Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
  
  January 2021
  
  Publication
- Project Snowflake: Non-blocking safe manual memory management in .NET
  
  Matthew J. Parkinson, Kapil Vaswani, Dimitrios Vytiniotis, Manuel Costa, Pantazis Deligiannis, Aaron Blankstein, Dylan McDermott, Jonathan Balkind
  
  MSR-TR-2017-32 | July 2017
  
  Published by Microsoft
  
  Publication Project
- Simple, Fast and Safe Manual Memory Management
  
  Piyus Kedia, Manuel Costa, Dimitrios Vytiniotis, Matthew J. Parkinson, Kapil Vaswani, Aaron Blankstein
  
  Proceedings of the Conference on Programming Langauges Design and Implementation (PLDI) | June 2017
  
  Publication
- A Design and Verification Methodology for Secure Isolated Regions
  
  Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
  
  Programming Languages Design and Implementation (PLDI) | June 2016
  
  Publication
- Dynamically Checking Ownership Policies in Concurrent C/C++ Programs
  
  Jean-Philippe Martin, Michael Hicks, Manuel Costa, Periklis Akritidis, Miguel Castro
  
  37th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL) | January 2010
  
  Publication
- Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
  
  Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
  
  18th USENIX Security Symposium (USENIX Security '09) | August 2009
  
  18th USENIX Security Symposium (USENIX Security '09)
  
  Publication
- Lightweight Logging for Lazy Release Consistent Distributed Shared Memory
  
  Manuel Costa, Paulo Guedes, Manuel Sequeira, Nuno Neves, Miguel Castro
  
  Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (OSDI'96) | October 1996
  
  Publication
- Better bug reporting with better privacy
  
  Miguel Castro, Manuel Costa, Jean-Philippe Martin
  
  Proceedings of the 13th international conference on Architectural support for programming languages and operating systems | March 2008
  
  Publication Publication Publication
- Bouncer: securing software by blocking bad input
  
  Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2007
  
  ACM Symposium on Operating Systems Principles (SOSP)
  
  Publication
- Efficient and Flexible Object Sharing
  
  Miguel Castro, Paulo Guedes, Manuel Sequeira, Manuel Costa
  
  Proceedings of the International Conference on Parallel Processing (ICPP'96), Proceedings of the International Conference on Parallel Processing (ICPP'96) | August 1996
  
  Publication

- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project
- Parma: Confidential Containers via Attested Execution Policies
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean Allen, Sylvan Clebsch, John Starks, Manuel Costa
  
  March 2023
  
  Preprint
- Toward Confidential Cloud Computing
  
  Mark Russinovich, Manuel Costa, Cédric Fournet, David Chisnall, Antoine Delignat-Lavaud, Sylvan Clebsch, Kapil Vaswani, Vikas Bhatia
  
  January 2021
  
  Publication
- Confidential Container Groups: Implementing Confidential Computing on Azure Container Instances
  
  Matthew Johnson, Stavros Volos, Ken Gordon, Sean T. Allen, Sylvan Clebsch, Christoph M. Wintersteiger, John Starks, Manuel Costa
  
  Communications of the ACM | October 2024, Vol 67(10): pp. 40-49
  
  Publication Preprint Project
- Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability
  
  Heidi Howard, Fritz Alder, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Antoine Delignat-Lavaud, Cédric Fournet, Andrew Jeffery, Matthew Kerner, Fotios Kounelis, Markus Kuppe, Julien Maffre, Mark Russinovich, Christoph M. Wintersteiger
  
  Proceedings of the VLDB Endowment | October 2023, Vol 17(2)
  
  Nominee for Best Paper Award
  
  Publication Preprint Author's Version Project
- Vigilante: End-to-End Containment of Internet Worm Epidemics
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Lidong Zhou, Lintao Zhang, Paul Barham, Ant Rowstron
  
  ACM Transactions on Computer Systems | December 2008
  
  Publication
- Lightweight Logging for Lazy Release Consistent Distributed Shared Memory
  
  Manuel Costa, Paulo Guedes, Manuel Sequeira, Nuno Neves, Miguel Castro
  
  Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (OSDI'96) | October 1996
  
  Publication
- Efficient and Flexible Object Sharing
  
  Miguel Castro, Paulo Guedes, Manuel Sequeira, Manuel Costa
  
  Proceedings of the International Conference on Parallel Processing (ICPP'96), Proceedings of the International Conference on Parallel Processing (ICPP'96) | August 1996
  
  Publication
- IA-CCF: Individual Accountability for Permissioned Ledgers
  
  Alex Shamis, Peter Pietzuch, Burcu Canakci, Miguel Castro, Cédric Fournet, Eddy Ashton, Amaury Chamayou, Sylvan Clebsch, Antoine Delignat-Lavaud, Matthew Kerner, Julien Maffre, Olga Vrousgou, Christoph M. Wintersteiger, Manuel Costa, Mark Russinovich
  
  19th USENIX Symposium on Networked Systems Design and Implementation (NSDI 22) | April 2022
  
  Publication Project
- AMP: Authentication of Media via Provenance
  
  Paul England, Henrique S. Malvar, Eric Horvitz, Jack W. Stokes, Cédric Fournet, Rebecca Burke-Aguero, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, John Deutscher, Shabnam Erfani, Matt Gaylor, Andrew Jenks, Kevin Kane, Elissa M. Redmiles, Alex Shamis, Isha Sharma, Sam Wenker, Anika Zaman
  
  12th ACM Multimedia Systems Conference | July 2021
  
  Publication Publication Project
- Multi-Stakeholder Media Provenance Management to Counter Synthetic Media Risks in News Publishing
  
  J. Aythora, R. Burke‐Agüero, A. Chamayou, S. Clebsch, M. Costa, N. Earnshaw, L. Ellis, P. England, C. Fournet, M. Gaylor, C. Halford, E. Horvitz, A. Jenks, K. Kane, M. Lavallee, S. Lowenstein, B. MacCormack, H. S. Malvar, S. O'Brien, J. Parnall, E. M. Redmiles, A. Shamis, I. Sharma, J. W. Stokes, S. Wenker, A. Zaman
  
  International Broadcasting Convention (IBC) | September 2020
  
  Project
- EnclaveDB – A Secure Database using SGX
  
  Christian Priebe, Kapil Vaswani, Manuel Costa
  
  To appear in the Proceedings of the IEEE Symposium on Security & Privacy, May 2018 | May 2018
  
  Publication
- Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory
  
  Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa
  
  USENIX Security Symposium 2017 | August 2017
  
  Publication Publication
- Simple, Fast and Safe Manual Memory Management
  
  Piyus Kedia, Manuel Costa, Dimitrios Vytiniotis, Matthew J. Parkinson, Kapil Vaswani, Aaron Blankstein
  
  Proceedings of the Conference on Programming Langauges Design and Implementation (PLDI) | June 2017
  
  Publication
- Oblivious Multi-Party Machine Learning on Trusted Processors
  
  Olya Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa
  
  The 25th USENIX Security Symposium 2016 | July 2016
  
  Publication Project Project
- A Design and Verification Methodology for Secure Isolated Regions
  
  Sanjit Seshia, Akash Lal, Rohit Sinha, Sriram Rajamani, Manuel Costa, Kapil Vaswani
  
  Programming Languages Design and Implementation (PLDI) | June 2016
  
  Publication
- VC3: Trustworthy Data Analytics in the Cloud using SGX
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  36th IEEE Symposium on Security and Privacy | May 2015
  
  Publication Project
- Dynamically Checking Ownership Policies in Concurrent C/C++ Programs
  
  Jean-Philippe Martin, Michael Hicks, Manuel Costa, Periklis Akritidis, Miguel Castro
  
  37th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL) | January 2010
  
  Publication
- Fast Byte-Granularity Software Fault Isolation
  
  Miguel Castro, Jean-Philippe Martin, Marcus Peinado, Periklis Akritidis, Austin Donnelly, Manuel Costa, Paul Barham, Richard Black
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2009
  
  Publication
- Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense Against Out-of-Bounds Errors
  
  Periklis Akritidis, Manuel Costa, Miguel Castro, Steven Hand
  
  18th USENIX Security Symposium (USENIX Security '09) | August 2009
  
  18th USENIX Security Symposium (USENIX Security '09)
  
  Publication
- Preventing memory error exploits with WIT
  
  Periklis Akritidis, Cristian Cadar, Costin Raiciu, Manuel Costa, Miguel Castro
  
  Proceedings of the IEEE Symposium on Security and Privacy | May 2008
  
  Proceedings of the IEEE Symposium on Security and Privacy
  
  Publication
- Better bug reporting with better privacy
  
  Miguel Castro, Manuel Costa, Jean-Philippe Martin
  
  Proceedings of the 13th international conference on Architectural support for programming languages and operating systems | March 2008
  
  Publication Publication Publication
- Bouncer: securing software by blocking bad input
  
  Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2007
  
  ACM Symposium on Operating Systems Principles (SOSP)
  
  Publication
- Bouncer: Securing Software by Blocking Bad Input
  
  Manuel Costa, Miguel Castro, Lidong Zhou, Lintao Zhang, Marcus Peinado
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2007
  
  ISBN: 978-1-59593-591-5
  
  Publication Publication
- Securing software by enforcing data-flow integrity
  
  Miguel Castro, Manuel Costa, Tim Harris
  
  Symposium on Operating Systems Design and Implementation (OSDI) | November 2006
  
  Publication
- Vigilante: end-to-end containment of internet worms
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron, Lintao Zhang, Lidong Zhou, Paul Barham
  
  ACM Symposium on Operating Systems Principles (SOSP) | October 2005
  
  DOI PDF Publication
- Debunking some myths about structured and unstructured overlays
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the 2nd Symposium on Networked Systems Design and Implementation (NSDI'05) | May 2005
  
  Publication
- A First Look at Peer-to-Peer Worms: Threats and Defenses
  
  Lidong Zhou, Lintao Zhang, Frank McSherry, Nicole Immorlica, Manuel Costa, Steve Chien
  
  4th International Workshop on Peer-To-Peer Systems (IPTPS '05) | February 2005
  
  4th International Workshop on Peer-To-Peer Systems (IPTPS '05)
  
  Publication
- Can we contain Internet worms?
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
  
  Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III) | November 2004
  
  Proceedings of the Third Workshop on Hot Topics in Networks (HotNets III)
  
  Publication
- Performance and Dependability of structured peer-to-peer overlays
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004) | June 2004
  
  ISBN: 0-7695-2052-9
  
  Publication Publication
- PIC: Practical Internet Coordinates for Distance Estimation
  
  Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
  
  Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04) | March 2004
  
  Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04)
  
  Publication
- Should we build Gnutella on a structured overlay?
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  Proceedings of the Second Workshop on Hot Topics in Networks (HotNets-II) | January 2004
  
  Publication Publication
- CCF: A Framework for Building Confidential Verifiable Replicated Services
  
  Mark Russinovich, Edward Ashton, Christine Avanessians, Miguel Castro, Amaury Chamayou, Sylvan Clebsch, Manuel Costa, Cédric Fournet, Matthew Kerner, Sid Krishna, Julien Maffre, Thomas Moscibroda, Kartik Nayak, Olga Ohrimenko, Felix Schuster, Roy Schuster, Alex Shamis, Olga Vrousgou, Christoph M. Wintersteiger
  
  MSR-TR-2019-16 | April 2019
  
  Published by Microsoft
  
  Publication Github Project
- Project Snowflake: Non-blocking safe manual memory management in .NET
  
  Matthew J. Parkinson, Kapil Vaswani, Dimitrios Vytiniotis, Manuel Costa, Pantazis Deligiannis, Aaron Blankstein, Dylan McDermott, Jonathan Balkind
  
  MSR-TR-2017-32 | July 2017
  
  Published by Microsoft
  
  Publication Project
- Observing and Preventing Leakage in MapReduce
  
  Olya Ohrimenko, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Markulf Kohlweiss, Divya Sharma
  
  MSR-TR-2015-70 | September 2015
  
  Published by Microsoft
  
  Publication Project
- Secure Computation Interfaces
  
  Manuel Costa, Sriram Rajamani, Mark Russinovich, Kapil Vaswani, Orion Hodson, Marcus Peinado
  
  MSR-TR-2015-67 | August 2015
  
  Published by Microsoft
  
  Publication
- VC3: Trustworthy Data Analytics in the Cloud
  
  Felix Schuster, Manuel Costa, Cédric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, Mark Russinovich
  
  MSR-TR-2014-39 | February 2014
  
  Publication
- Data Randomization
  
  Manuel Costa, Jean-Philippe Martin, Miguel Castro
  
  MSR-TR-2008-120 | September 2008
  
  Publication
- Can we contain Internet worms?
  
  Manuel Costa, Jon Crowcroft, Miguel Castro, Ant Rowstron
  
  MSR-TR-2004-83 | August 2004
  
  Publication
- Peer-to-peer overlays: structured, unstructured, or both?
  
  Miguel Castro, Manuel Costa, Ant Rowstron
  
  MSR-TR-2004-73 | April 2004
  
  Publication
- PIC: Practical Internet Coordinates for Distance Estimation
  
  Manuel Costa, Miguel Castro, Ant Rowstron, Peter Key
  
  MSR-TR-2003-53 | March 2004
  
  ICDCS
  
  Publication
- End-to-End Containment of Internet Worm Epidemics
  
  Manuel Costa
  
  October 2006
  
  PhD Thesis: University of Cambridge | October 2006
  
  Publication