Optimal Parameter Selection for Efficient Memory Integrity Verification Using Merkle Hash Trees. - Dan Williams 001; Emin Gün Sirer (NCA, 2004)

Nexus: a new operating system for trustworthy computing. - Alan Shieh; Dan Williams 001; Emin Gün Sirer; Fred B. Schneider (SOSP, 2005)

Device Driver Safety Through a Reference Validation Mechanism. - Dan Williams 001; Patrick Reynolds; Kevin Walsh 001; Emin Gün Sirer; Fred B. Schneider (OSDI, 2008)

Unshackle the Cloud! - Dan Williams 001; Eslam Elnikety; Mohamed Eldehiry; Hani Jamjoom; Hai Huang; Hakim Weatherspoon (HotCloud, 2011)

Logical attestation: an authorization architecture for trustworthy computing. - Emin Gün Sirer; Willem de Bruijn; Patrick Reynolds; Alan Shieh; Kevin Walsh 001; Dan Williams 001; Fred B. Schneider (SOSP, 2011)

Overdriver: handling memory overload in an oversubscribed cloud. - Dan Williams 001; Hani Jamjoom; Yew-Huey Liu; Hakim Weatherspoon (VEE, 2011)

The Xen-Blanket: virtualize once, run everywhere. - Dan Williams 001; Hani Jamjoom; Hakim Weatherspoon (EuroSys, 2012)

Pico replication: a high availability framework for middleboxes. - Shriram Rajagopalan; Dan Williams 001; Hani Jamjoom (SoCC, 2013)

Mizan: a system for dynamic load balancing in large-scale graph processing. - Zuhair Khayyat; Karim Awara; Amani AlOnazi; Hani Jamjoom; Dan Williams 001; Panos Kalnis (EuroSys, 2013)

AIN: A Blueprint for an All-IP Data Center Network. - Vasileios Pappas; Hani Jamjoom; Dan Williams 001 (HotCloud, 2013)

Escape Capsule: Explicit State Is Robust and Scalable. - Shriram Rajagopalan; Dan Williams 001; Hani Jamjoom; Andrew Warfield (HotOS, 2013)

Split/Merge: System Support for Elastic Execution in Virtual Middleboxes. - Shriram Rajagopalan; Dan Williams 001; Hani Jamjoom; Andrew Warfield (NSDI, 2013)

Cementing high availability in openflow with RuleBricks. - Dan Williams 001; Hani Jamjoom (HotSDN, 2013)

Plug into the Supercloud. - Dan Williams 001; Hani Jamjoom; Hakim Weatherspoon (IEEE Internet Comput., 2013)

Software Defining System Devices with the "Banana" Double-Split Driver Model. - Dan Williams 001; Hani Jamjoom; Hakim Weatherspoon (HotCloud, 2014)

TideWatch: Fingerprinting the cyclicality of big data workloads. - Dan Williams 001; Shuai Zheng 002; Xiangliang Zhang 001; Hani Jamjoom (INFOCOM, 2014)

Don't call them middleboxes, call them middlepipes. - Hani Jamjoom; Dan Williams 001; Upendra Sharma (HotSDN, 2014)

Flux: multi-surface computing in Android. - Alexander Van't Hof; Hani Jamjoom; Jason Nieh; Dan Williams 001 (EuroSys, 2015)

Unikernel Monitors: Extending Minimalism Outside of the Box. - Dan Williams 001; Ricardo Koller (HotCloud, 2016)

Version Traveler: Fast and Memory-Efficient Version Switching in Graph Processing Systems. - Xiaoen Ju; Dan Williams 001; Hani Jamjoom; Kang G. Shin (USENIX ATC, 2016)

Enabling Efficient Hypervisor-as-a-Service Clouds with Eemeral Virtualization. - Dan Williams 001; Yaohui Hu; Umesh Deshpande; Piush K. Sinha; Nilton Bila; Kartik Gopalan; Hani Jamjoom (VEE, 2016)

Will Serverless End the Dominance of Linux in the Cloud? - Ricardo Koller; Dan Williams 001 (HotOS, 2017)

Multi-Hypervisor Virtual Machines: Enabling an Ecosystem of Hypervisor-level Services. - Kartik Gopalan; Rohith Kugve; Hardik Bagdi; Yaohui Hu; Dan Williams 001; Nilton Bila (USENIX ATC, 2017)

Unikernels as Processes. - Dan Williams 001; Ricardo Koller; Martin Lucina; Nikhil Prakash (SoCC, 2018)

Say Goodbye to Virtualization for a Safer Cloud. - Dan Williams 001; Ricardo Koller; Brandon Lum (HotCloud, 2018)

An Ounce of Prevention is Worth a Pound of Cure: Ahead-of-time Preparation for Safe High-level Container Interfaces. - Ricardo Koller; Dan Williams 001 (HotStorage, 2019)

A Linux in unikernel clothing. - Hsuan-Chi Kuo; Dan Williams 001; Ricardo Koller; Sibin Mohan (EuroSys, 2020)

SecQuant: Quantifying Container System Call Exposure. - Sunwoo Jang; Somin Song; Byungchul Tak; Sahil Suneja; Michael V. Le; Chuan Yue; Dan Williams 001 (ESORICS (2), 2022)

KASLR in the age of MicroVMs. - Benjamin Holmes 002; Jason Waterman; Dan Williams 001 (EuroSys, 2022)

Verified programs can party: optimizing kernel extensions via post-verification merging. - Hsuan-Chi Kuo; Kai-Hsun Chen; Yicheng Lu; Dan Williams 001; Sibin Mohan; Tianyin Xu (EuroSys, 2022)

Securing Container-based Clouds with Syscall-aware Scheduling. - Michael V. Le; Salman Ahmed 001; Dan Williams 001; Hani Jamjoom (AsiaCCS, 2023)

Protect the System Call, Protect (Most of) the World with BASTION. - Christopher Jelesnianski; Mohannad Ismail; Yeongjin Jang; Dan Williams 001; Changwoo Min (ASPLOS (3), 2023)

Kernel extension verification is untenable. - Jinghao Jia; Raj Sahu; Adam Oswald; Dan Williams 001; Michael V. Le; Tianyin Xu (HotOS, 2023)

Enabling eBPF on Embedded Systems Through Decoupled Verification. - Milo Craun; Adam Oswald; Dan Williams 001 (eBPF@SIGCOMM, 2023)

Practical and Flexible Kernel CFI Enforcement using eBPF. - Jinghao Jia; Michael V. Le; Salman Ahmed 001; Dan Williams 001; Hani Jamjoom (eBPF@SIGCOMM, 2023)

Enabling BPF Runtime policies for better BPF management. - Raj Sahu; Dan Williams 001 (eBPF@SIGCOMM, 2023)

Programmable System Call Security with eBPF. - Jinghao Jia; YiFei Zhu; Dan Williams 001; Andrea Arcangeli; Claudio Canella; Hubertus Franke; Tobin Feldman-Fitzthum; Dimitrios Skarlatos 002; Daniel Gruss; Tianyin Xu (CoRR, 2023)

SEVeriFast: Minimizing the root of trust for fast startup of SEV microVMs. - Benjamin Holmes 002; Jason Waterman; Dan Williams 001 (ASPLOS (2), 2024)

Unsafe kernel extension composition via BPF program nesting. - Siddharth Chintamaneni; Sai Roop Somaraju; Dan Williams 001 (eBPF@SIGCOMM, 2024)

Eliminating eBPF Tracing Overhead on Untraced Processes. - Milo Craun; Khizar Hussain; Uddhav Gautam; Zhengjie Ji; Tanuj Rao; Dan Williams 001 (eBPF@SIGCOMM, 2024)

Broadly Enabling KLEE to Effortlessly Find Unrecoverable Errors in Rust. - Ying Zhang 066; Peng Li; Yu Ding; Lingxiang Wang; Dan Williams 001; Na Meng 001 (ICSE-SEIP, 2024)

Fast (Trapless) Kernel Probes Everywhere. - Jinghao Jia; Michael V. Le; Salman Ahmed 001; Dan Williams 001; Hani Jamjoom; Tianyin Xu (USENIX ATC, 2024)

SeaK: Rethinking the Design of a Secure Allocator for OS Kernel. - Zicheng Wang; Yicheng Guang; Yueqi Chen 001; Zhenpeng Lin; Michael V. Le; Dang K. Le; Dan Williams 001; Xinyu Xing 001; Zhongshu Gu; Hani Jamjoom (USENIX Security Symposium, 2024)

Introduction to the Special Section on USENIX ATC 2023. - Dan Williams 001; Julia Lawall (ACM Trans. Storage, 2024)

Extending Applications Safely and Efficiently. - Yusheng Zheng; Tong Yu; Yiwei Yang 002; Yanpeng Hu; Xiaozheng Lai; Dan Williams 001; Andi Quinn (OSDI, 2025)

Rex: Closing the language-verifier gap with safe and usable kernel extensions. - Jinghao Jia; Ruowen Qin; Milo Craun; Egor Lukiyanov; Ayush Bansal; Minh Phan; Michael V. Le; Hubertus Franke; Hani Jamjoom; Tianyin Xu; Dan Williams 001 (USENIX ATC, 2025)

Safe and usable kernel extensions with Rax. - Jinghao Jia; Ruowen Qin; Milo Craun; Egor Lukiyanov; Ayush Bansal; Michael V. Le; Hubertus Franke; Hani Jamjoom; Tianyin Xu; Dan Williams 001 (CoRR, 2025)