Event-driven programming for robust software. - Frank Dabek; Nickolai Zeldovich; M. Frans Kaashoek; David Mazières; Robert Morris 005 (ACM SIGOPS European Workshop, 2002)

Virtual Appliances for Deploying and Maintaining Software. - Constantine P. Sapuntzakis; David Brumley; Ramesh Chandra; Nickolai Zeldovich; Jim Chow; Monica S. Lam; Mendel Rosenblum (LISA, 2003)

Multiprocessor Support for Event-Driven Programs. - Nickolai Zeldovich; Alexander Yip; Frank Dabek; Robert T. Morris; David Mazières; M. Frans Kaashoek (USENIX ATC, General Track, 2003)

The Collective: A Cache-Based System Management Architecture. - Ramesh Chandra; Nickolai Zeldovich; Constantine P. Sapuntzakis; Monica S. Lam (NSDI, 2005)

Interactive Performance Measurement with VNCPlay. - Nickolai Zeldovich; Ramesh Chandra (USENIX ATC, FREENIX Track, 2005)

Making Information Flow Explicit in HiStar. - Nickolai Zeldovich; Silas Boyd-Wickizer; Eddie Kohler; David Mazières (OSDI, 2006)

Securing Distributed Systems with Information Flow Control. - Nickolai Zeldovich; Silas Boyd-Wickizer; David Mazières (NSDI, 2008)

Hardware Enforcement of Application Security Policies Using Tagged Memory. - Nickolai Zeldovich; Hari Kannan; Michael Dalton; Christos Kozyrakis (OSDI, 2008)

Securing untrustworthy software using information flow control. - Nickolai Zeldovich (2008)

Delegating network security with more information. - Jad Naous; Ryan Stutsman; David Mazières; Nick McKeown; Nickolai Zeldovich (WREN, 2009)

Apprehending joule thieves with cinder. - Stephen M. Rumble; Ryan Stutsman; Philip Alexander Levis; David Mazières; Nickolai Zeldovich (MobiHeld, 2009)

Improving application security with data flow assertions. - Alexander Yip; Xi Wang 005; Nickolai Zeldovich; M. Frans Kaashoek (SOSP, 2009)

Nemesis: Preventing Authentication & Access Control Vulnerabilities in Web Applications. - Michael Dalton; Christos Kozyrakis; Nickolai Zeldovich (USENIX Security Symposium, 2009)

Locating cache performance bottlenecks using data profiling. - Aleksey Pesterev; Nickolai Zeldovich; Robert T. Morris (EuroSys, 2010)

An Analysis of Linux Scalability to Many Cores. - Silas Boyd-Wickizer; Austin T. Clements; Yandong Mao; Aleksey Pesterev; M. Frans Kaashoek; Robert Morris 005; Nickolai Zeldovich (OSDI, 2010)

Intrusion Recovery Using Selective Re-execution. - Taesoo Kim; Xi Wang 005; Nickolai Zeldovich; M. Frans Kaashoek (OSDI, 2010)

Tolerating Malicious Device Drivers in Linux. - Silas Boyd-Wickizer; Nickolai Zeldovich (USENIX ATC, 2010)

Making Linux Protection Mechanisms Egalitarian with UserFS. - Taesoo Kim; Nickolai Zeldovich (USENIX Security Symposium, 2010)

Separating Web Applications from User Data Storage with BSTORE. - Ramesh Chandra; Priya Gupta; Nickolai Zeldovich (WebApps, 2010)

Linux kernel vulnerabilities: state-of-the-art defenses and open problems. - Haogang Chen 001; Yandong Mao; Xi Wang 005; Dong Zhou 006; Nickolai Zeldovich; M. Frans Kaashoek (APSys, 2011)

Retroactive auditing. - Xi Wang 005; Nickolai Zeldovich; M. Frans Kaashoek (APSys, 2011)

Relational Cloud: a Database Service for the cloud. - Carlo Curino; Evan P. C. Jones; Raluca A. Popa; Nirmesh Malviya; Eugene Wu 002; Samuel Madden 001; Hari Balakrishnan; Nickolai Zeldovich (CIDR, 2011)

Energy management in mobile devices with the cinder operating system. - Arjun Roy; Stephen M. Rumble; Ryan Stutsman; Philip Alexander Levis; David Mazières; Nickolai Zeldovich (EuroSys, 2011)

A Trigger-Based Middleware Cache for ORMs. - Priya Gupta; Nickolai Zeldovich; Samuel Madden 001 (Middleware, 2011)

Intrusion recovery for database-backed web applications. - Ramesh Chandra; Taesoo Kim; Meelap Shah; Neha Narula; Nickolai Zeldovich (SOSP, 2011)

Software fault isolation with API integrity and multi-principal modules. - Yandong Mao; Haogang Chen 001; Dong Zhou 006; Xi Wang 005; Nickolai Zeldovich; M. Frans Kaashoek (SOSP, 2011)

CryptDB: protecting confidentiality with encrypted query processing. - Raluca A. Popa; Catherine M. S. Redfield; Nickolai Zeldovich; Hari Balakrishnan (SOSP, 2011)

Secure In-Band Wireless Pairing. - Shyamnath Gollakota; Nabeel Ahmed; Nickolai Zeldovich; Dina Katabi (USENIX Security Symposium, 2011)

Experiences in Cyber Security Education: The MIT Lincoln Laboratory Capture-the-Flag Exercise. - Joseph Werther; Michael Zhivich; Tim Leek; Nickolai Zeldovich (CSET, 2011)

Recovering from intrusions in distributed systems with DARE. - Taesoo Kim; Ramesh Chandra; Nickolai Zeldovich (APSys, 2012)

Undefined behavior: what happened to my code? - Xi Wang 005; Haogang Chen 001; Alvin Cheung; Zhihao Jia; Nickolai Zeldovich; M. Frans Kaashoek (APSys, 2012)

Scalable address spaces using RCU balanced trees. - Austin T. Clements; M. Frans Kaashoek; Nickolai Zeldovich (ASPLOS, 2012)

Improving network connection locality on multicore systems. - Aleksey Pesterev; Jacob Strauss; Nickolai Zeldovich; Robert T. Morris (EuroSys, 2012)

Efficient Patch-based Auditing for Web Application Vulnerabilities. - Taesoo Kim; Ramesh Chandra; Nickolai Zeldovich (OSDI, 2012)

Improving Integer Security for Systems with KINT. - Xi Wang 005; Haogang Chen 001; Zhihao Jia; Nickolai Zeldovich; M. Frans Kaashoek (OSDI, 2012)

CPHASH: a cache-partitioned hash table. - Zviad Metreveli; Nickolai Zeldovich; M. Frans Kaashoek (PPoPP, 2012)

CryptDB: processing queries on an encrypted database. - Raluca A. Popa; Catherine M. S. Redfield; Nickolai Zeldovich; Hari Balakrishnan (Commun. ACM, 2012)

Succinct Functional Encryption and Applications: Reusable Garbled Circuits and Beyond. - Shafi Goldwasser; Yael Tauman Kalai; Raluca A. Popa; Vinod Vaikuntanathan; Nickolai Zeldovich (IACR Cryptol. ePrint Arch., 2012)

Security bugs in embedded interpreters. - Haogang Chen 001; Cody Cutler; Taesoo Kim; Yandong Mao; Xi Wang 005; Nickolai Zeldovich; M. Frans Kaashoek (APSys, 2013)

Optimizing unit test execution in large software programs using dependency analysis. - Taesoo Kim; Ramesh Chandra; Nickolai Zeldovich (APSys, 2013)

Authenticated storage using small trusted hardware. - Hsin-Jung Yang; Victor Costan; Nickolai Zeldovich; Srinivas Devadas (CCSW, 2013)

How to Run Turing Machines on Encrypted Data. - Shafi Goldwasser; Yael Tauman Kalai; Raluca A. Popa; Vinod Vaikuntanathan; Nickolai Zeldovich (CRYPTO (2), 2013)

RadixVM: scalable address spaces for multithreaded applications. - Austin T. Clements; M. Frans Kaashoek; Nickolai Zeldovich (EuroSys, 2013)

Systematic Analysis of Defenses against Return-Oriented Programming. - Richard Skowyra; Kelly Casteel; Hamed Okhravi; Nickolai Zeldovich; William W. Streilein (RAID, 2013)

Asynchronous intrusion recovery for interconnected web services. - Ramesh Chandra; Taesoo Kim; Nickolai Zeldovich (SOSP, 2013)

The scalable commutativity rule: designing scalable software for multicore processors. - Austin T. Clements; M. Frans Kaashoek; Nickolai Zeldovich; Robert T. Morris; Eddie Kohler (SOSP, 2013)

Towards optimization-safe systems: analyzing the impact of undefined behavior. - Xi Wang 005; Nickolai Zeldovich; M. Frans Kaashoek; Armando Solar-Lezama (SOSP, 2013)

An Ideal-Security Protocol for Order-Preserving Encoding. - Raluca A. Popa; Frank H. Li; Nickolai Zeldovich (IEEE Symposium on Security and Privacy, 2013)

Reusable garbled circuits and succinct functional encryption. - Shafi Goldwasser; Yael Tauman Kalai; Raluca A. Popa; Vinod Vaikuntanathan; Nickolai Zeldovich (STOC, 2013)

Practical and Effective Sandboxing for Non-root Users. - Taesoo Kim; Nickolai Zeldovich (USENIX ATC, 2013)

Overcoming the Worst-Case Curse for Cryptographic Constructions. - Shafi Goldwasser; Yael Tauman Kalai; Raluca A. Popa; Vinod Vaikuntanathan; Nickolai Zeldovich (IACR Cryptol. ePrint Arch., 2013)

Multi-Key Searchable Encryption. - Raluca A. Popa; Nickolai Zeldovich (IACR Cryptol. ePrint Arch., 2013)

Processing Analytical Queries over Encrypted Data. - Stephen Tu; M. Frans Kaashoek; Samuel Madden 001; Nickolai Zeldovich (Proc. VLDB Endow., 2013)

Why does cryptographic software fail?: a case study and open problems. - David Lazar; Haogang Chen 001; Xi Wang 005; Nickolai Zeldovich (APSys, 2014)

VerSum: Verifiable Computations over Large Public Logs. - Jelle van den Hooff; M. Frans Kaashoek; Nickolai Zeldovich (CCS, 2014)

Building Web Applications on Top of Encrypted Data Using Mylar. - Raluca Ada Popa; Emily Stark 001; Steven Valdez; Jonas Helfer; Nickolai Zeldovich; Hari Balakrishnan (NSDI, 2014)

Nail: A Practical Tool for Parsing and Generating Data Formats. - Julian Bangert; Nickolai Zeldovich (OSDI, 2014)

Identifying Information Disclosure in Web Applications with Retroactive Auditing. - Haogang Chen 001; Taesoo Kim; Xi Wang 005; Nickolai Zeldovich; M. Frans Kaashoek (OSDI, 2014)

Jitk: A Trustworthy In-Kernel Interpreter Infrastructure. - Xi Wang 005; David Lazar; Nickolai Zeldovich; Adam Chlipala; Zachary Tatlock (OSDI, 2014)

Nail: A Practical Interface Generator for Data Formats. - Julian Bangert; Nickolai Zeldovich (IEEE Symposium on Security and Privacy Workshops, 2014)

Building Web Applications on Top of Encrypted Data Using Mylar. - Raluca Ada Popa; Emily Stark 001; Jonas Helfer; Steven Valdez; Nickolai Zeldovich; M. Frans Kaashoek; Hari Balakrishnan (login Usenix Mag., 2014)

Hare: a file system for non-cache-coherent multicores. - Charles Gruenwald III; Filippo Sironi; M. Frans Kaashoek; Nickolai Zeldovich (EuroSys, 2015)

Amber: Decoupling User Data from Web Applications. - Tej Chajed; Jon Gjengset; Jelle van den Hooff; M. Frans Kaashoek; James Mickens; Robert Morris 005; Nickolai Zeldovich (HotOS, 2015)

Specifying Crash Safety for Storage Systems. - Haogang Chen 001; Daniel Ziegler 002; Adam Chlipala; M. Frans Kaashoek; Eddie Kohler; Nickolai Zeldovich (HotOS, 2015)

Using Crash Hoare logic for certifying the FSCQ file system. - Haogang Chen 001; Daniel Ziegler 002; Tej Chajed; Adam Chlipala; M. Frans Kaashoek; Nickolai Zeldovich (SOSP, 2015)

Vuvuzela: scalable private messaging resistant to traffic analysis. - Jelle van den Hooff; David Lazar; Matei Zaharia; Nickolai Zeldovich (SOSP, 2015)

Guidelines for Using the CryptDB System Securely. - Raluca Ada Popa; Nickolai Zeldovich; Hari Balakrishnan (IACR Cryptol. ePrint Arch., 2015)

A Differential Approach to Undefined Behavior Detection. - Xi Wang 005; Nickolai Zeldovich; M. Frans Kaashoek; Armando Solar-Lezama (ACM Trans. Comput. Syst., 2015)

Sieve: Cryptographically Enforced Access Control for User Data in Untrusted Clouds. - Frank Wang; James Mickens; Nickolai Zeldovich; Vinod Vaikuntanathan (NSDI, 2016)

Alpenhorn: Bootstrapping Secure Communication without Leaking Metadata. - David Lazar; Nickolai Zeldovich (OSDI, 2016)

Report on the NSF Workshop on Formal Methods for Security. - Stephen Chong; Joshua D. Guttman; Anupam Datta; Andrew C. Myers; Benjamin C. Pierce; Patrick Schaumont; Tim Sherwood; Nickolai Zeldovich (CoRR, 2016)

Stadium: A Distributed Metadata-Private Messaging System. - Nirvan Tyagi; Yossi Gilad; Matei Zaharia; Nickolai Zeldovich (IACR Cryptol. ePrint Arch., 2016)

Scaling a file system to many cores using an operation log. - Srivatsa S. Bhat; Rasha Eqbal; Austin T. Clements; M. Frans Kaashoek; Nickolai Zeldovich (SOSP, 2017)

Verifying a high-performance crash-safe file system using a tree specification. - Haogang Chen 001; Tej Chajed; Alex Konradi; Stephanie Wang; Atalay Mert Ileri; Adam Chlipala; M. Frans Kaashoek; Nickolai Zeldovich (SOSP, 2017)

Algorand: Scaling Byzantine Agreements for Cryptocurrencies. - Yossi Gilad; Rotem Hemo; Silvio Micali; Georgios Vlachos; Nickolai Zeldovich (SOSP, 2017)

Stadium: A Distributed Metadata-Private Messaging System. - Nirvan Tyagi; Yossi Gilad; Derek Leung; Matei Zaharia; Nickolai Zeldovich (SOSP, 2017)

Certifying a file system using crash hoare logic: correctness in the presence of crashes. - Tej Chajed; Haogang Chen 001; Adam Chlipala; M. Frans Kaashoek; Nickolai Zeldovich; Daniel Ziegler 002 (Commun. ACM, 2017)

Veil: Private Browsing Semantics Without Browser-side Assistance. - Frank Wang; James Mickens; Nickolai Zeldovich (NDSS, 2018)

Verifying concurrent software using movers in CSPEC. - Tej Chajed; M. Frans Kaashoek; Butler W. Lampson; Nickolai Zeldovich (OSDI, 2018)

Proving confidentiality in a file system using DiskSec. - Atalay Mert Ileri; Tej Chajed; Adam Chlipala; M. Frans Kaashoek; Nickolai Zeldovich (OSDI, 2018)

Karaoke: Distributed Private Messaging Immune to Passive Traffic Analysis. - David Lazar; Yossi Gilad; Nickolai Zeldovich (OSDI, 2018)

A Revised and Verified Proof of the Scalable Commutativity Rule. - Lillian Tsai; Eddie Kohler; M. Frans Kaashoek; Nickolai Zeldovich (CoRR, 2018)

Vault: Fast Bootstrapping for Cryptocurrencies. - Derek Leung; Adam Suhl; Yossi Gilad; Nickolai Zeldovich (IACR Cryptol. ePrint Arch., 2018)

Vault: Fast Bootstrapping for the Algorand Cryptocurrency. - Derek Leung; Adam Suhl; Yossi Gilad; Nickolai Zeldovich (NDSS, 2019)

Extracting and Optimizing Formally Verified Code for Systems Programming. - Eleftherios Ioannidis; M. Frans Kaashoek; Nickolai Zeldovich (NFM, 2019)

Argosy: verifying layered storage systems with recovery refinement. - Tej Chajed; Joseph Tassarotti; M. Frans Kaashoek; Nickolai Zeldovich (PLDI, 2019)

Notary: a device for secure transaction approval. - Anish Athalye; Adam Belay; M. Frans Kaashoek; Robert Morris 005; Nickolai Zeldovich (SOSP, 2019)

Verifying concurrent, crash-safe systems with Perennial. - Tej Chajed; Joseph Tassarotti; M. Frans Kaashoek; Nickolai Zeldovich (SOSP, 2019)

Yodel: strong metadata security for voice calls. - David Lazar; Yossi Gilad; Nickolai Zeldovich (SOSP, 2019)

Efficiently Mitigating Transient Execution Attacks using the Unmapped Speculation Contract. - Jonathan Behrens; Anton Cao; Cel Skeggs; Adam Belay; M. Frans Kaashoek; Nickolai Zeldovich (OSDI, 2020)

Aardvark: A Concurrent Authenticated Dictionary with Short Proofs. - Derek Leung; Yossi Gilad; Sergey Gorbunov 001; Leonid Reyzin; Nickolai Zeldovich (IACR Cryptol. ePrint Arch., 2020)

GoJournal: a verified, concurrent, crash-safe journaling system. - Tej Chajed; Joseph Tassarotti; Mark Theng; Ralf Jung 002; M. Frans Kaashoek; Nickolai Zeldovich (OSDI, 2021)

Compact Certificates of Collective Knowledge. - Silvio Micali; Leonid Reyzin; Georgios Vlachos; Riad S. Wahby; Nickolai Zeldovich (SP, 2021)

Verifying Hardware Security Modules with Information-Preserving Refinement. - Anish Athalye; M. Frans Kaashoek; Nickolai Zeldovich (OSDI, 2022)

Groove: Flexible Metadata-Private Messaging. - Ludovic Barman; Moshe Kol; David Lazar; Yossi Gilad; Nickolai Zeldovich (OSDI, 2022)

Verifying the DaisyNFS concurrent and crash-safe file system with sequential reasoning. - Tej Chajed; Joseph Tassarotti; Mark Theng; M. Frans Kaashoek; Nickolai Zeldovich (OSDI, 2022)

Aardvark: An Asynchronous Authenticated Dictionary with Applications to Account-based Cryptocurrencies. - Derek Leung; Yossi Gilad; Sergey Gorbunov 001; Leonid Reyzin; Nickolai Zeldovich (USENIX Security Symposium, 2022)

The K2 Architecture for Trustworthy Hardware Security Modules. - Anish Athalye; M. Frans Kaashoek; Nickolai Zeldovich; Joseph Tassarotti (KISV@SOSP, 2023)

Verifying vMVCC, a high-performance transaction library using multi-version concurrency control. - Yun-Sheng Chang; Ralf Jung 002; Upamanyu Sharma; Joseph Tassarotti; M. Frans Kaashoek; Nickolai Zeldovich (OSDI, 2023)

Private Web Search with Tiptoe. - Alexandra Henzinger; Emma Dauterman; Henry Corrigan-Gibbs; Nickolai Zeldovich (SOSP, 2023)

Grove: a Separation-Logic Library for Verifying Distributed Systems. - Upamanyu Sharma; Ralf Jung 002; Joseph Tassarotti; M. Frans Kaashoek; Nickolai Zeldovich (SOSP, 2023)

Grove: a Separation-Logic Library for Verifying Distributed Systems (Extended Version). - Upamanyu Sharma; Ralf Jung 002; Joseph Tassarotti; M. Frans Kaashoek; Nickolai Zeldovich (CoRR, 2023)

Probability from Possibility: Probabilistic Confidentiality for Storage Systems Under Nondeterminism. - Atalay Mert Ileri; Nickolai Zeldovich; Adam Chlipala; M. Frans Kaashoek (CSF, 2024)

Modular Verification of Secure and Leakage-Free Systems: From Application Specification to Circuit-Level Implementation. - Anish Athalye; Henry Corrigan-Gibbs; M. Frans Kaashoek; Joseph Tassarotti; Nickolai Zeldovich (SOSP, 2024)

PoWER Never Corrupts: Tool-Agnostic Verification of Crash Consistency and Corruption Detection. - Hayley LeBlanc; Jacob R. Lorch; Chris Hawblitzel; Cheng Huang; Yiheng Tao; Nickolai Zeldovich; Vijay Chidambaram (OSDI, 2025)

Shipwright: Proving liveness of distributed systems with Byzantine participants. - Derek Leung; Nickolai Zeldovich; M. Frans Kaashoek (CoRR, 2025)