SENG, the SGX-Enforcing Network Gateway: Authorizing Communication from Shielded Clients. - Fabian Schwarz; Christian Rossow (USENIX Security Symposium, 2020)

FeIDo: Recoverable FIDO2 Tokens Using Electronic IDs. - Fabian Schwarz; Khue Do; Gunnar Heide; Lucjan Hanzlik; Christian Rossow (CCS, 2022)

TrustedGateway: TEE-Assisted Routing and Firewall Enforcement Using ARM TrustZone. - Fabian Schwarz (RAID, 2022)

00SEVen - Re-enabling Virtual Machine Forensics: Introspecting Confidential VMs Using Privileged in-VM Agents. - Fabian Schwarz; Christian Rossow (USENIX Security Symposium, 2024)

TEE-based designs for network gateways, web authentication, and VM introspection. - Fabian Schwarz (2024)

KeyVisor - A Lightweight ISA Extension for Protected Key Handles with CPU-enforced Usage Policies. - Fabian Schwarz; Jan Philipp Thoma; Christian Rossow; Tim Güneysu (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2025)