Application Transparent Fault Management in Fault Tolerant Match. - Mark Russinovich; Zary Segall; Daniel P. Siewiorek (FTCS, 1993)

Fault-Tolerance for Off-The-Shelf Applications and Hardware. - Mark Russinovich; Zary Segall (FTCS, 1995)

Application-transparent checkpointing in Mach 3.O/UX. - Mark Russinovich; Zary Segall (HICSS (1), 1995)

Replay For Concurrent Non-Deterministic Shared Memory Applications. - Mark Russinovich; Bryce Cogswell (PLDI, 1996)

High-Performance Memory-Based Web Servers: Kernel and User-Space Performance. - Philippe Joubert; Robert B. King; Richard Neves; Mark Russinovich; John M. Tracey (USENIX ATC, General Track, 2001)

VC3: Trustworthy Data Analytics in the Cloud Using SGX. - Felix Schuster; Manuel Costa; Cédric Fournet; Christos Gkantsidis; Marcus Peinado; Gloria Mainar-Ruiz; Mark Russinovich (IEEE Symposium on Security and Privacy, 2015)

Resource Central: Understanding and Predicting Workloads for Improved Resource Management in Large Cloud Platforms. - Eli Cortez; Anand Bonde; Alexandre Muzio; Mark Russinovich; Marcus Fontoura; Ricardo Bianchini (SOSP, 2017)

Protean: VM Allocation Service at Scale. - Ori Hadary; Luke Marshall; Ishai Menache; Abhisek Pan; Esaias E. Greeff; David Dion; Star Dorminey; Shailesh Joshi; Yang Chen; Mark Russinovich; Thomas Moscibroda (OSDI, 2020)

Serverless in the Wild: Characterizing and Optimizing the Serverless Workload at a Large Cloud Provider. - Mohammad Shahrad; Rodrigo Fonseca; Iñigo Goiri; Gohar Irfan Chaudhry; Paul Batum; Jason Cooke; Eduardo Laureano; Colby Tresness; Mark Russinovich; Ricardo Bianchini (USENIX ATC, 2020)

Toward ML-centric cloud platforms. - Ricardo Bianchini; Marcus Fontoura; Eli Cortez; Anand Bonde; Alexandre Muzio; Ana-Maria Constantin; Thomas Moscibroda; Gabriel Magalhães 001; Girish Bablani; Mark Russinovich (Commun. ACM, 2020)

Virtual machine preserving host updates for zero day patching in public cloud. - Mark Russinovich; Naga K. Govindaraju; Melur Raghuraman; David Hepkin; Jamie Schwartz; Arun Kishan (EuroSys, 2021)

Toward confidential cloud computing. - Mark Russinovich; Manuel Costa; Cédric Fournet; David Chisnall; Antoine Delignat-Lavaud; Sylvan Clebsch; Kapil Vaswani; Vikas Bhatia (Commun. ACM, 2021)

PAC: Practical Accountability for CCF. - Alex Shamis; Peter R. Pietzuch; Miguel Castro 001; Edward Ashton; Amaury Chamayou; Sylvan Clebsch; Antoine Delignat-Lavaud; Cédric Fournet; Matthew Kerner; Julien Maffre; Manuel Costa; Mark Russinovich (CoRR, 2021)

Toward Confidential Cloud Computing: Extending hardware-enforced cryptographic protection to data while in use. - Mark Russinovich; Manuel Costa; Cédric Fournet; David Chisnall; Antoine Delignat-Lavaud; Sylvan Clebsch; Kapil Vaswani; Vikas Bhatia (ACM Queue, 2021)

IA-CCF: Individual Accountability for Permissioned Ledgers. - Alex Shamis; Peter R. Pietzuch; Burcu Canakci; Miguel Castro 001; Cédric Fournet; Edward Ashton; Amaury Chamayou; Sylvan Clebsch; Antoine Delignat-Lavaud; Matthew Kerner; Julien Maffre; Olga Vrousgou; et al. (NSDI, 2022)

Singularity: Planet-Scale, Preemptive and Elastic Scheduling of AI Workloads. - Dharma Shukla; Muthian Sivathanu; Srinidhi Viswanatha; Bhargav S. Gulavani; Rimma Nehme; Amey Agrawal; Chen Chen; Nipun Kwatra; Ramachandran Ramjee; Pankaj Sharma; Atul Katiyar; Vipul Modi; et al. (CoRR, 2022)

Who's Harry Potter? Approximate Unlearning in LLMs. - Ronen Eldan; Mark Russinovich (CoRR, 2023)

Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability. - Heidi Howard; Fritz Alder; Edward Ashton; Amaury Chamayou; Sylvan Clebsch; Manuel Costa; Antoine Delignat-Lavaud; Cédric Fournet; Andrew Jeffery; Matthew Kerner; Fotios Kounelis; Markus A. Kuppe; et al. (Proc. VLDB Endow., 2023)

Why Should I Trust Your Code?: Confidential computing enables users to authenticate code running in TEEs, but users also need evidence this code is trustworthy. - Antoine Delignat-Lavaud; Cédric Fournet; Kapil Vaswani; Sylvan Clebsch; Maik Riechert; Manuel Costa; Mark Russinovich (ACM Queue, 2023)

Confidential Computing: Elevating Cloud Security and Privacy: Working toward a more secure and innovative future. - Mark Russinovich (ACM Queue, 2023)

Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack. - Mark Russinovich; Ahmed Salem 001; Ronen Eldan (CoRR, 2024)

Hey, That's My Model! Introducing Chain & Hash, An LLM Fingerprinting Technique. - Mark Russinovich; Ahmed Salem 001 (CoRR, 2024)

Confidential Computing Proofs: An alternative to cryptographic zero-knowledge. - Mark Russinovich; Cédric Fournet; Greg Zaverucha; Josh Benaloh; Brandon Murdoch; Manuel Costa (ACM Queue, 2024)

The Price of Intelligence: Three risks inherent in LLMs. - Mark Russinovich; Ahmed Salem 001; Santiago Zanella-Béguelin; Yonatan Zunger (ACM Queue, 2024)

Why Should I Trust Your Code? - Antoine Delignat-Lavaud; Cédric Fournet; Kapil Vaswani; Sylvan Clebsch; Maik Riechert; Manuel Costa; Mark Russinovich (Commun. ACM, 2024)

Confidential Computing: Elevating Cloud Security and Privacy. - Mark Russinovich (Commun. ACM, 2024)

Lessons From Red Teaming 100 Generative AI Products. - Blake Bullwinkel; Amanda J. Minnich; Shiven Chawla; Gary Lopez; Martin Pouliot; Whitney Maxwell; Joris de Gruyter; Katherine Pratt; Saphir Qi; Nina Chikanov; Roman Lutz; Raja Sekhar Rao Dheekonda; et al. (CoRR, 2025)

Obliviate: Efficient Unmemorization for Protecting Intellectual Property in Large Language Models. - Mark Russinovich; Ahmed Salem 001 (CoRR, 2025)

Jailbreaking is (Mostly) Simpler Than You Think. - Mark Russinovich; Ahmed Salem 001 (CoRR, 2025)

Securing AI Agents with Information-Flow Control. - Manuel Costa; Boris Köpf; Aashish Kolluri; Andrew Paverd; Mark Russinovich; Ahmed Salem 001; Shruti Tople; Lukas Wutschitz; Santiago Zanella-Béguelin (CoRR, 2025)

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge. - Sahar Abdelnabi; Aideen Fay; Ahmed Salem 001; Egor Zverev; Kai-Chieh Liao; Chi-Huang Liu; Chun-Chih Kuo; Jannis Weigend; Danyael Manlangit; Alex Apostolov; Haris Umair; João Donato; et al. (CoRR, 2025)

LogiPlan: A Structured Benchmark for Logical Planning and Relational Reasoning in LLMs. - Yanan Cai; Ahmed Salem 001; Besmira Nushi; Mark Russinovich (CoRR, 2025)

A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreaks. - Blake Bullwinkel; Mark Russinovich; Ahmed Salem 001; Santiago Zanella-Béguelin; Daniel Jones; Giorgio Severi; Eugenia Kim; Keegan Hines; Amanda J. Minnich; Yonatan Zunger; Ram Shankar Siva Kumar (CoRR, 2025)