Efficient and Flexible Object Sharing. - Miguel Castro 001; Manuel Sequeira; Manuel Costa; Paulo Guedes (ICPP, Vol. 1, 1996)

Lightweight Logging for Lazy Release Consistent Distributed Shared Memory. - Manuel Costa; Paulo Guedes; Manuel Sequeira; Nuno Neves 001; Miguel Castro 001 (OSDI, 1996)

Mobile Augmented Reality for Environmental Management (MARE). - José Danado; A. Eduardo Dias; Teresa Romão; Nuno Correia 001; Adelaide Trabuco; Carlos Santos 001; David Araújo; Pedro Duarte; Rui Rebocho; José Palmeiro; João Serpa; Manuel Costa; et al. (Eurographics (Short Presentations), 2003)

Performance and Dependability of Structured Peer-to-Peer Overlays. - Miguel Castro 001; Manuel Costa; Antony I. T. Rowstron (DSN, 2004)

PIC: Practical Internet Coordinates for Distance Estimation. - Manuel Costa; Miguel Castro 001; Antony I. T. Rowstron; Peter B. Key (ICDCS, 2004)

Should we build Gnutella on a structured overlay? - Miguel Castro 001; Manuel Costa; Antony I. T. Rowstron (Comput. Commun. Rev., 2004)

A First Look at Peer-to-Peer Worms: Threats and Defenses. - Lidong Zhou; Lintao Zhang; Frank McSherry; Nicole Immorlica; Manuel Costa; Steve Chien (IPTPS, 2005)

Debunking Some Myths About Structured and Unstructured Overlays. - Miguel Castro 001; Manuel Costa; Antony I. T. Rowstron (NSDI, 2005)

3D environments as social learning tools: the VIRTU@LIS experience. - Tiago de Sousa Pedrosa; Âgela Guimarães Pereira; Nuno Cardoso; Manuel Costa; Tiago Carita; Edmundo Nobre; Pedro Pedrosa; Nuno Capeta; Sérgio Estêvão (SIGGRAPH Educators Program, 2005)

Vigilante: end-to-end containment of internet worms. - Manuel Costa; Jon Crowcroft; Miguel Castro 001; Antony I. T. Rowstron; Lidong Zhou; Lintao Zhang; Paul Barham 001 (SOSP, 2005)

Securing Software by Enforcing Data-flow Integrity. - Miguel Castro 001; Manuel Costa; Tim Harris 001 (OSDI, 2006)

Bouncer: securing software by blocking bad input. - Manuel Costa; Miguel Castro 001; Lidong Zhou; Lintao Zhang; Marcus Peinado (SOSP, 2007)

End-to-end containment of internet worm epidemics. - Manuel Costa (2007)

Better bug reporting with better privacy. - Miguel Castro 001; Manuel Costa; Jean-Philippe Martin (ASPLOS, 2008)

Preventing Memory Error Exploits with WIT. - Periklis Akritidis; Cristian Cadar; Costin Raiciu; Manuel Costa; Miguel Castro 001 (SP, 2008)

Vigilante: End-to-end containment of Internet worm epidemics. - Manuel Costa; Jon Crowcroft; Miguel Castro 001; Antony I. T. Rowstron; Lidong Zhou; Lintao Zhang; Paul Barham 001 (ACM Trans. Comput. Syst., 2008)

Fast byte-granularity software fault isolation. - Miguel Castro 001; Manuel Costa; Jean-Philippe Martin; Marcus Peinado; Periklis Akritidis; Austin Donnelly; Paul Barham 001; Richard Black (SOSP, 2009)

Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense against Out-of-Bounds Errors. - Periklis Akritidis; Manuel Costa; Miguel Castro 001; Steven Hand 001 (USENIX Security Symposium, 2009)

Dynamically checking ownership policies in concurrent c/c++ programs. - Jean-Phillipe Martin; Michael Hicks 001; Manuel Costa; Periklis Akritidis; Miguel Castro 001 (POPL, 2010)

Docovery: toward generic automatic document recovery. - Tomasz Kuchta; Cristian Cadar; Miguel Castro 001; Manuel Costa (ASE, 2014)

Observing and Preventing Leakage in MapReduce. - Olga Ohrimenko; Manuel Costa; Cédric Fournet; Christos Gkantsidis; Markulf Kohlweiss; Divya Sharma (CCS, 2015)

Broom: Sweeping Out Garbage Collection from Big Data Systems. - Ionel Gog; Jana Giceva; Malte Schwarzkopf; Kapil Vaswani; Dimitrios Vytiniotis; Ganesan Ramalingam; Manuel Costa; Derek Gordon Murray; Steven Hand 001; Michael Isard (HotOS, 2015)

VC3: Trustworthy Data Analytics in the Cloud Using SGX. - Felix Schuster; Manuel Costa; Cédric Fournet; Christos Gkantsidis; Marcus Peinado; Gloria Mainar-Ruiz; Mark Russinovich (IEEE Symposium on Security and Privacy, 2015)

A design and verification methodology for secure isolated regions. - Rohit Sinha 001; Manuel Costa; Akash Lal; Nuno P. Lopes; Sriram K. Rajamani; Sanjit A. Seshia; Kapil Vaswani (PLDI, 2016)

Oblivious Multi-Party Machine Learning on Trusted Processors. - Olga Ohrimenko; Felix Schuster; Cédric Fournet; Aastha Mehta; Sebastian Nowozin; Kapil Vaswani; Manuel Costa (USENIX Security Symposium, 2016)

Simple, fast, and safe manual memory management. - Piyus Kedia; Manuel Costa; Matthew J. Parkinson; Kapil Vaswani; Dimitrios Vytiniotis; Aaron Blankstein (PLDI, 2017)

Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory. - Daniel Gruss; Julian Lettner; Felix Schuster; Olga Ohrimenko; István Haller; Manuel Costa (USENIX Security Symposium, 2017)

The Pyramid Scheme: Oblivious RAM for Trusted Processors. - Manuel Costa; Lawrence Esswood; Olga Ohrimenko; Felix Schuster; Sameer Wagh (CoRR, 2017)

Managing Spacecraft Memory Buffers with Concurrent Data Collection and Downlink. - Gregg R. Rabideau; Steve A. Chien; M. Galer; Federico Nespoli; Manuel Costa (J. Aerosp. Inf. Syst., 2017)

Project snowflake: non-blocking safe manual memory management in .NET. - Matthew J. Parkinson; Dimitrios Vytiniotis; Kapil Vaswani; Manuel Costa; Pantazis Deligiannis; Dylan McDermott; Aaron Blankstein; Jonathan Balkind (Proc. ACM Program. Lang., 2017)

EnclaveDB: A Secure Database Using SGX. - Christian Priebe; Kapil Vaswani; Manuel Costa (IEEE Symposium on Security and Privacy, 2018)

AMP: Authentication of Media via Provenance. - Paul England; Henrique S. Malvar; Eric Horvitz; Jack W. Stokes; Cédric Fournet; Amaury Chamayou; Sylvan Clebsch; Manuel Costa; Shabnam Erfani; Kevin Kane; Alex Shamis (CoRR, 2020)

AMP: authentication of media via provenance. - Paul England; Henrique S. Malvar; Eric Horvitz; Jack W. Stokes; Cédric Fournet; Rebecca Burke-Aguero; Amaury Chamayou; Sylvan Clebsch; Manuel Costa; John Deutscher; Shabnam Erfani; Matt Gaylor; et al. (MMSys, 2021)

Toward confidential cloud computing. - Mark Russinovich; Manuel Costa; Cédric Fournet; David Chisnall; Antoine Delignat-Lavaud; Sylvan Clebsch; Kapil Vaswani; Vikas Bhatia (Commun. ACM, 2021)

PAC: Practical Accountability for CCF. - Alex Shamis; Peter R. Pietzuch; Miguel Castro 001; Edward Ashton; Amaury Chamayou; Sylvan Clebsch; Antoine Delignat-Lavaud; Cédric Fournet; Matthew Kerner; Julien Maffre; Manuel Costa; Mark Russinovich (CoRR, 2021)

Toward Confidential Cloud Computing: Extending hardware-enforced cryptographic protection to data while in use. - Mark Russinovich; Manuel Costa; Cédric Fournet; David Chisnall; Antoine Delignat-Lavaud; Sylvan Clebsch; Kapil Vaswani; Vikas Bhatia (ACM Queue, 2021)

IA-CCF: Individual Accountability for Permissioned Ledgers. - Alex Shamis; Peter R. Pietzuch; Burcu Canakci; Miguel Castro 001; Cédric Fournet; Edward Ashton; Amaury Chamayou; Sylvan Clebsch; Antoine Delignat-Lavaud; Matthew Kerner; Julien Maffre; Olga Vrousgou; et al. (NSDI, 2022)

Dropbear: Machine Learning Marketplaces made Trustworthy with Byzantine Model Agreement. - Alex Shamis; Peter R. Pietzuch; Antoine Delignat-Lavaud; Andrew Paverd; Manuel Costa (CoRR, 2022)

COCOAEXPO: Confidential Containers via Attested Execution Policies. - Matthew A. Johnson 003; Stavros Volos; Ken Gordon; Sean T. Allen; Christoph M. Wintersteiger; Sylvan Clebsch; John Starks; Manuel Costa (CoRR, 2023)

Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability. - Heidi Howard; Fritz Alder; Edward Ashton; Amaury Chamayou; Sylvan Clebsch; Manuel Costa; Antoine Delignat-Lavaud; Cédric Fournet; Andrew Jeffery; Matthew Kerner; Fotios Kounelis; Markus A. Kuppe; et al. (Proc. VLDB Endow., 2023)

Why Should I Trust Your Code?: Confidential computing enables users to authenticate code running in TEEs, but users also need evidence this code is trustworthy. - Antoine Delignat-Lavaud; Cédric Fournet; Kapil Vaswani; Sylvan Clebsch; Maik Riechert; Manuel Costa; Mark Russinovich (ACM Queue, 2023)

Confidential Container Groups: Implementing confidential computing on Azure container instances. - Matthew A. Johnson 003; Stavros Volos; Ken Gordon; Sean T. Allen; Christoph M. Wintersteiger; Sylvan Clebsch; John Starks; Manuel Costa (ACM Queue, 2024)

Confidential Computing Proofs: An alternative to cryptographic zero-knowledge. - Mark Russinovich; Cédric Fournet; Greg Zaverucha; Josh Benaloh; Brandon Murdoch; Manuel Costa (ACM Queue, 2024)

Why Should I Trust Your Code? - Antoine Delignat-Lavaud; Cédric Fournet; Kapil Vaswani; Sylvan Clebsch; Maik Riechert; Manuel Costa; Mark Russinovich (Commun. ACM, 2024)

Confidential Container Groups. - Matthew A. Johnson 003; Stavros Volos; Ken Gordon; Sean T. Allen; Christoph M. Wintersteiger; Sylvan Clebsch; John Starks; Manuel Costa (Commun. ACM, 2024)

Transparent Attested DNS for Confidential Computing Services. - Antoine Delignat-Lavaud; Cédric Fournet; Kapil Vaswani; Manuel Costa; Sylvan Clebsch; Christoph M. Wintersteiger (CoRR, 2025)

Securing AI Agents with Information-Flow Control. - Manuel Costa; Boris Köpf; Aashish Kolluri; Andrew Paverd; Mark Russinovich; Ahmed Salem 001; Shruti Tople; Lukas Wutschitz; Santiago Zanella-Béguelin (CoRR, 2025)