TrustedBSD: Adding Trusted Operating System Features to FreeBSD. - Robert N. M. Watson (USENIX ATC, FREENIX Track, 2001)

Secure Active Network Prototypes. - Sandra L. Murphy; Edward T. Lewis; Robert N. M. Watson (DANCE, 2002)

Ignoring the Great Firewall of China. - Richard Clayton 001; Steven J. Murdoch; Robert N. M. Watson (Privacy Enhancing Technologies, 2006)

Exploiting Concurrency Vulnerabilities in System Call Wrappers. - Robert N. M. Watson (WOOT, 2007)

Metrics for Security and Performance in Low-Latency Anonymity Systems. - Steven J. Murdoch; Robert N. M. Watson (Privacy Enhancing Technologies, 2008)

Capsicum: Practical Capabilities for UNIX. - Robert N. M. Watson; Jonathan Anderson; Ben Laurie; Kris Kennaway (USENIX Security Symposium, 2010)

The Age of Avatar Realism. - Laurel D. Riek; Robert N. M. Watson (IEEE Robotics Autom. Mag., 2010)

Introducing Capsicum: Practical Capabilities for UNIX. - Robert N. M. Watson; Jonathan Anderson; Ben Laurie; Kris Kennaway (login Usenix Mag., 2010)

How to Keep Bad Papers Out of Conferences (with Minimum Reviewer Effort). - Jonathan Anderson; Frank Stajano; Robert N. M. Watson (Security Protocols Workshop, 2011)

New approaches to operating system security extensibility. - Robert Nicholas Maxwell Watson (2011)

Exploring Compartmentalisation Hypotheses with SOAAP. - Khilan Gudka; Robert N. M. Watson; Steven Hand 001; Ben Laurie; Anil Madhavapeddy (SASO Workshops, 2012)

Stayin' Alive: Aliveness as an Alternative to Authentication. - Jonathan Anderson; Robert N. M. Watson (Security Protocols Workshop, 2012)

A taste of Capsicum: practical capabilities for UNIX. - Robert N. M. Watson; Jonathan Anderson; Ben Laurie; Kris Kennaway (Commun. ACM, 2012)

Network stack specialization for performance. - Ilias Marinos; Robert N. M. Watson; Mark Handley (HotNets, 2013)

Declarative, Temporal, and Practical Programming with Capabilities. - William R. Harris; Somesh Jha; Thomas W. Reps; Jonathan Anderson; Robert N. M. Watson (IEEE Symposium on Security and Privacy, 2013)

Towards a Theory of Application Compartmentalisation (Transcript of Discussion). - Robert N. M. Watson (Security Protocols Workshop, 2013)

Towards a Theory of Application Compartmentalisation. - Robert N. M. Watson; Steven J. Murdoch; Khilan Gudka; Jonathan Anderson; Peter G. Neumann; Ben Laurie (Security Protocols Workshop, 2013)

A Decade of OS Access-control Extensibility. - Robert N. M. Watson (ACM Queue, 2013)

TESLA: temporally enhanced system logic assertions. - Jonathan Anderson; Robert N. M. Watson; David Chisnall; Khilan Gudka; Ilias Marinos; Brooks Davis (EuroSys, 2014)

The CHERI capability model: Revisiting RISC in an age of risk. - Jonathan Woodruff; Robert N. M. Watson; David Chisnall; Simon W. Moore; Jonathan Anderson; Brooks Davis; Ben Laurie; Peter G. Neumann; Robert M. Norton; Michael Roe (ISCA, 2014)

Beyond the PDP-11: Architectural Support for a Memory-Safe C Abstract Machine. - David Chisnall; Colin Rothwell; Robert N. M. Watson; Jonathan Woodruff; Munraj Vadera; Simon W. Moore; Michael Roe; Brooks Davis; Peter G. Neumann (ASPLOS, 2015)

Clean Application Compartmentalization with SOAAP. - Khilan Gudka; Robert N. M. Watson; Jonathan Anderson; David Chisnall; Brooks Davis; Ben Laurie; Ilias Marinos; Peter G. Neumann; Alex Richardson 001 (CCS, 2015)

Queues Don't Matter When You Can JUMP Them! - Matthew P. Grosvenor; Malte Schwarzkopf; Ionel Gog; Robert N. M. Watson; Andrew W. Moore 002; Steven Hand 001; Jon Crowcroft (NSDI, 2015)

CHERI: A Hybrid Capability-System Architecture for Scalable Software Compartmentalization. - Robert N. M. Watson; Jonathan Woodruff; Peter G. Neumann; Simon W. Moore; Jonathan Anderson; David Chisnall; Nirav H. Dave; Brooks Davis; Khilan Gudka; Ben Laurie; Steven J. Murdoch; Robert M. Norton; et al. (IEEE Symposium on Security and Privacy, 2015)

Firmament: Fast, Centralized Cluster Scheduling at Scale. - Ionel Gog; Malte Schwarzkopf; Adam Gleave; Robert N. M. Watson; Steven Hand 001 (OSDI, 2016)

Into the depths of C: elaborating the de facto standards. - Kayvan Memarian; Justus Matthiesen; James Lingard; Kyndylan Nienhuis; David Chisnall; Robert N. M. Watson; Peter Sewell (PLDI, 2016)

CHERI: A Hardware-Software System to Support the Principle of Least Privilege. - Robert N. M. Watson; Simon W. Moore; Peter G. Neumann (ERCIM News, 2016)

Fast Protection-Domain Crossing in the CHERI Capability-System Architecture. - Robert N. M. Watson; Robert M. Norton; Jonathan Woodruff; Simon W. Moore; Peter G. Neumann; Jonathan Anderson; David Chisnall; Brooks Davis; Ben Laurie; Michael Roe; Nirav H. Dave; Khilan Gudka; et al. (IEEE Micro, 2016)

CHERI JNI: Sinking the Java Security Model into the C. - David Chisnall; Brooks Davis; Khilan Gudka; David Brazdil; Alexandre Joannou; Jonathan Woodruff; A. Theodore Markettos; J. Edward Maste; Robert M. Norton; Stacey D. Son; Michael Roe; Simon W. Moore; et al. (ASPLOS, 2017)

Separating Translation from Protection in Address Spaces with Dynamic Remapping. - Reto Achermann; Chris I. Dalton; Paolo Faraboschi; Moritz Hoffmann 001; Dejan S. Milojicic; Geoffrey Ndu; Alexander Richardson 001; Timothy Roscoe; Adrian L. Shaw; Robert N. M. Watson (HotOS, 2017)

Efficient Tagged Memory. - Alexandre Joannou; Jonathan Woodruff; Robert Kovacsics; Simon W. Moore; Alex Bradbury; Hongyan Xia; Robert N. M. Watson; David Chisnall; Michael Roe; Brooks Davis; Edward Napierala; John Baldwin; et al. (ICCD, 2017)

Disk|Crypt|Net: rethinking the stack for high-performance video streaming. - Ilias Marinos; Robert N. M. Watson; Mark Handley; Randall R. Stewart (SIGCOMM, 2017)

Applying Provenance in APT Monitoring and Analysis: Practical Challenges for Scalable, Efficient and Trustworthy Distributed Provenance. - Graeme Jenkinson; Lucian Carata; Thomas Bytheway; Ripduman Sohan; Robert N. M. Watson; Jonathan Anderson; Brian J. Kidney; Amanda Strnad; Arun Thomas; George V. Neville-Neil (TaPP, 2017)

Teaching Operating Systems with FreeBSD through Tracing, Analysis, and Experimentation. - George V. Neville-Neil; Robert N. M. Watson (login Usenix Mag., 2017)

CheriRTOS: A Capability Model for Embedded Devices. - Hongyan Xia; Jonathan Woodruff; Hadrien Barral; Lawrence Esswood; Alexandre Joannou; Robert Kovacsics; David Chisnall; Michael Roe; Brooks Davis; Edward Napierala; John Baldwin; Khilan Gudka; et al. (ICCD, 2018)

Structural Analysis of Whole-System Provenance Graphs. - Jyothish Soman; Thomas Bytheway; Lucian Carata; Nikilesh D. Balakrishnan; Ripduman Sohan; Robert N. M. Watson (IPAW, 2018)

Pointer Provenance in a Capability Architecture. - Alfredo Mazzinghi; Ripduman Sohan; Robert N. M. Watson (TaPP, 2018)

CheriABI: Enforcing Valid Pointer Provenance and Minimizing Pointer Privilege in the POSIX C Run-time Environment. - Brooks Davis; Robert N. M. Watson; Alexander Richardson 001; Peter G. Neumann; Simon W. Moore; John Baldwin; David Chisnall; Jessica Clarke 001; Nathaniel Wesley Filardo; Khilan Gudka; Alexandre Joannou; Ben Laurie; et al. (ASPLOS, 2019)

CHERIvoke: Characterising Pointer Revocation using CHERI Capabilities for Temporal Memory Safety. - Hongyan Xia; Jonathan Woodruff; Sam Ainsworth; Nathaniel Wesley Filardo; Michael Roe; Alexander Richardson 001; Peter Rugg; Peter G. Neumann; Simon W. Moore; Robert N. M. Watson; Timothy M. Jones 001 (MICRO, 2019)

Thunderclap: Exploring Vulnerabilities in Operating System IOMMU Protection via DMA from Untrustworthy Peripherals. - A. Theodore Markettos; Colin Rothwell; Brett F. Gutstein; Allison Pearce; Peter G. Neumann; Simon W. Moore; Robert N. M. Watson (NDSS, 2019)

Through computer architecture, darkly. - A. Theodore Markettos; Robert N. M. Watson; Simon W. Moore; Peter Sewell; Peter G. Neumann (Commun. ACM, 2019)

Rack-Scale Capabilities: Fine-Grained Protection for Large-Scale Memories. - Kirk M. Bresniker; Paolo Faraboschi; Avi Mendelson; Dejan S. Milojicic; Timothy Roscoe; Robert N. M. Watson (Computer, 2019)

Exploring C semantics and pointer provenance. - Kayvan Memarian; Victor B. F. Gomes; Brooks Davis; Stephen Kell; Alexander Richardson 001; Robert N. M. Watson; Peter Sewell (Proc. ACM Program. Lang., 2019)

Memory-Side Protection With a Capability Enforcement Co-Processor. - Leonid Azriel; Lukas Humbel; Reto Achermann; Alex Richardson 001; Moritz Hoffmann 001; Avi Mendelson; Timothy Roscoe; Robert N. M. Watson; Paolo Faraboschi; Dejan S. Milojicic (ACM Trans. Archit. Code Optim., 2019)

CHERI Concentrate: Practical Compressed Capabilities. - Jonathan Woodruff; Alexandre Joannou; Hongyan Xia; Anthony C. J. Fox; Robert M. Norton; David Chisnall; Brooks Davis; Khilan Gudka; Nathaniel Wesley Filardo; A. Theodore Markettos; Michael Roe; Peter G. Neumann; et al. (IEEE Trans. Computers, 2019)

CHERI Macaroons: Efficient, host-based access control for cyber-physical systems. - Michael Dodson; Alastair R. Beresford; Alexander Richardson 001; Jessica Clarke 001; Robert N. M. Watson (EuroS&P Workshops, 2020)

Position Paper: Defending Direct Memory Access with CHERI Capabilities. - A. Theodore Markettos; John Baldwin; Ruslan Bukin; Peter G. Neumann; Simon W. Moore; Robert N. M. Watson (HASP@MICRO, 2020)

Cornucopia: Temporal Safety for CHERI Heaps. - Nathaniel Wesley Filardo; Brett F. Gutstein; Jonathan Woodruff; Sam Ainsworth; Lucian Paul-Trifu; Brooks Davis; Hongyan Xia; Edward Tomasz Napierala; Alexander Richardson 001; John Baldwin; David Chisnall; Jessica Clarke 001; et al. (SP, 2020)

Rigorous engineering for hardware security: Formal modelling and proof in the CHERI design and implementation process. - Kyndylan Nienhuis; Alexandre Joannou; Thomas Bauereiss; Anthony C. J. Fox; Michael Roe; Brian Campbell 001; Matthew Naylor; Robert M. Norton; Simon W. Moore; Peter G. Neumann; Ian Stark; Robert N. M. Watson; et al. (SP, 2020)

Verified Security for the Morello Capability-enhanced Prototype Arm Architecture. - Thomas Bauereiss; Brian Campbell 001; Thomas Sewell; Alasdair Armstrong; Lawrence Esswood; Ian Stark; Graeme Barnes; Robert N. M. Watson; Peter Sewell (ESOP, 2022)

CompartOS: CHERI Compartmentalization for Embedded Systems. - Hesham Almatary; Michael Dodson; Jessica Clarke 001; Peter Rugg; Ivan Gomes; Michal Podhradsky; Peter G. Neumann; Simon W. Moore; Robert N. M. Watson (CoRR, 2022)

Architectural Contracts for Safe Speculation. - Franz A. Fuchs; Jonathan Woodruff; Peter Rugg; Marno van der Maas; Alexandre Joannou; Alexander Richardson 001; Jessica Clarke 001; Nathaniel Wesley Filardo; Brooks Davis; John Baldwin; Peter G. Neumann; Simon W. Moore; et al. (ICCD, 2023)

CHERIoT: Complete Memory Safety for Embedded Devices. - Saar Amar; David Chisnall; Tony Chen; Nathaniel Wesley Filardo; Ben Laurie; Kunyan Liu; Robert M. Norton; Simon W. Moore; Yucong Tao; Robert N. M. Watson; Hongyan Xia (MICRO, 2023)

The Arm Morello Evaluation Platform - Validating CHERI-Based Security in a High-Performance System. - Richard Grisenthwaite; Graeme Barnes; Robert N. M. Watson; Simon W. Moore; Peter Sewell; Jonathan Woodruff (IEEE Micro, 2023)

Cornucopia Reloaded: Load Barriers for CHERI Heap Temporal Safety. - Nathaniel Wesley Filardo; Brett F. Gutstein; Jonathan Woodruff; Jessica Clarke 001; Peter Rugg; Brooks Davis; Mark Johnston; Robert M. Norton; David Chisnall; Simon W. Moore; Peter G. Neumann; Robert N. M. Watson (ASPLOS (2), 2024)

Formal Mechanised Semantics of CHERI C: Capabilities, Undefined Behaviour, and Provenance. - Vadim Zaliva; Kayvan Memarian; Ricardo Almeida 003; Jessica Clarke 001; Brooks Davis; Alexander Richardson 001; David Chisnall; Brian Campbell 001; Ian Stark; Robert N. M. Watson; Peter Sewell (ASPLOS (1), 2024)

Safe Speculation for Cheri. - Franz A. Fuchs; Jonathan Woodruff; Peter Rugg; Alexandre Joannou; Jessica Clarke 001; John Baldwin; Brooks Davis; Peter G. Neumann; Robert N. M. Watson; Simon W. Moore (ICCD, 2024)

CHERI: Hardware-Enabled C/C++ Memory Protection at Scale. - Robert N. M. Watson; David Chisnall; Jessica Clarke 001; Brooks Davis; Nathaniel Wesley Filardo; Ben Laurie; Simon W. Moore; Peter G. Neumann; Alexander Richardson 001; Peter Sewell; Konrad Witaszczyk; Jonathan Woodruff (IEEE Secur. Priv., 2024)

Randomized Testing of RISC-V CPUs Using Direct Instruction Injection. - Alexandre Joannou; Peter Rugg; Jonathan Woodruff; Franz A. Fuchs; Marno van der Maas; Matthew Naylor; Michael Roe; Robert N. M. Watson; Peter G. Neumann; Simon W. Moore (IEEE Des. Test, 2024)

It Is Time to Standardize Principles and Practices for Software Memory Safety. - Robert N. M. Watson; John Baldwin; David Chisnall; Tony Chen; Jessica Clarke 001; Brooks Davis; Nathaniel Wesley Filardo; Brett F. Gutstein; Graeme Jenkinson; Ben Laurie; Alfredo Mazzinghi; Simon W. Moore; et al. (Commun. ACM, 2025)