Fiat lux. - Paul E. Debevec; Tim Hawkins; Westley Sarokin; Haarm-Pieter Duiker; Tal Garfinkel; Christine Cheng; Jenny Huang (SIGGRAPH Electronic Art and Animation Catalog, 1999)

Flexible OS Support and Applications for Trusted Computing. - Tal Garfinkel; Mendel Rosenblum; Dan Boneh (HotOS, 2003)

Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools. - Tal Garfinkel (NDSS, 2003)

A Virtual Machine Introspection Based Architecture for Intrusion Detection. - Tal Garfinkel; Mendel Rosenblum (NDSS, 2003)

Terra: a virtual machine-based platform for trusted computing. - Tal Garfinkel; Ben Pfaff; Jim Chow; Mendel Rosenblum; Dan Boneh (SOSP, 2003)

Ostia: A Delegating Architecture for Secure System Call Interposition. - Tal Garfinkel; Ben Pfaff; Mendel Rosenblum (NDSS, 2004)

Data lifetime is a systems problem. - Tal Garfinkel; Ben Pfaff; Jim Chow; Mendel Rosenblum (ACM SIGOPS European Workshop, 2004)

Understanding Data Lifetime via Whole System Simulation (Awarded Best Paper!). - Jim Chow; Ben Pfaff; Tal Garfinkel; Kevin Christopher; Mendel Rosenblum (USENIX Security Symposium, 2004)

When Virtual Is Harder than Real: Security Challenges in Virtual Machine Based Computing Environments. - Tal Garfinkel; Mendel Rosenblum (HotOS, 2005)

Shredding Your Garbage: Reducing Data Lifetime Through Secure Deallocation. - Jim Chow; Ben Pfaff; Tal Garfinkel; Mendel Rosenblum (USENIX Security Symposium, 2005)

Virtual Machine Monitors: Current Technology and Future Trends. - Mendel Rosenblum; Tal Garfinkel (Computer, 2005)

Virtualization Aware File Systems: Getting Beyond the Limitations of Virtual Disks. - Ben Pfaff; Tal Garfinkel; Mendel Rosenblum (NSDI, 2006)

SANE: A Protection Architecture for Enterprise Networks. - Martín Casado; Tal Garfinkel; Aditya Akella; Michael J. Freedman; Dan Boneh; Nick McKeown (USENIX Security Symposium, 2006)

Compatibility Is Not Transparency: VMM Detection Myths and Realities. - Tal Garfinkel; Keith Adams; Andrew Warfield; Jason Franklin (HotOS, 2007)

Reducing shoulder-surfing by using gaze-based password entry. - Manu Kumar; Tal Garfinkel; Dan Boneh; Terry Winograd (SOUPS, 2007)

What Virtualization Can Do for Security. - Tal Garfinkel; Andrew Warfield (login Usenix Mag., 2007)

Overshadow: a virtualization-based approach to retrofitting protection in commodity operating systems. - Xiaoxin Chen; Tal Garfinkel; E. Christopher Lewis; Pratap Subrahmanyam; Carl A. Waldspurger; Dan Boneh; Jeffrey S. Dwoskin; Dan R. K. Ports (ASPLOS, 2008)

VMwareDecoupling Dynamic Program Analysis from Execution in Virtual Environments. - Jim Chow; Tal Garfinkel; Peter M. Chen (USENIX ATC, 2008)

Towards Application Security on Untrusted Operating Systems. - Dan R. K. Ports; Tal Garfinkel (HotSec, 2008)

Virtual machine contracts for datacenter and cloud computing environments. - Jeanna N. Matthews; Tal Garfinkel; Christofer Hoff; Jeff Wheeler (ACDC@ICAC, 2009)

Multi-stage replay with crosscut. - Jim Chow; Dominic G. Lucchetti; Tal Garfinkel; Geoffrey Lefebvre; Ryan Gardner; Joshua Mason; Sam Small; Peter M. Chen (VEE, 2010)

Paradigms for virtualization based host security. - Tal Garfinkel (2010)

The Design and Evolution of Live Storage Migration in VMware ESX. - Ali José Mashtizadeh; Emré Celebi; Tal Garfinkel; Min Cai (USENIX ATC, 2011)

XvMotion: Unified Virtual Machine Migration over Long Distance. - Ali José Mashtizadeh; Min Cai; Gabriel Tarasuk-Levin; Ricardo Koller; Tal Garfinkel; Sreekanth Setty (USENIX ATC, 2014)

Towards Practical Default-On Multi-Core Record/Replay. - Ali José Mashtizadeh; Tal Garfinkel; David Terei; David Mazières; Mendel Rosenblum (ASPLOS, 2017)

Position Paper: Progressive Memory Safety for WebAssembly. - Craig Disselkoen; John Renner; Conrad Watt; Tal Garfinkel; Amit Levy; Deian Stefan (HASP@ISCA, 2019)

Gobi: WebAssembly as a Practical Path to Library Sandboxing. - Shravan Narayan; Tal Garfinkel; Sorin Lerner; Hovav Shacham; Deian Stefan (CoRR, 2019)

Retrofitting Fine Grain Isolation in the Firefox Renderer. - Shravan Narayan; Craig Disselkoen; Tal Garfinkel; Nathan Froyd; Eric Rahm; Sorin Lerner; Hovav Shacham; Deian Stefan (USENIX Security Symposium, 2020)

Retrofitting Fine Grain Isolation in the Firefox Renderer (Extended Version). - Shravan Narayan; Craig Disselkoen; Tal Garfinkel; Nathan Froyd; Eric Rahm; Sorin Lerner; Hovav Shacham; Deian Stefan (CoRR, 2020)

The Road to Less Trusted Code: Lowering the Barrier to In-Process Sandboxing. - Tal Garfinkel; Shravan Narayan; Craig Disselkoen; Hovav Shacham; Deian Stefan (login Usenix Mag., 2020)

Going beyond the Limits of SFI: Flexible and Secure Hardware-Assisted In-Process Isolation with HFI. - Shravan Narayan; Tal Garfinkel; Mohammadkazem Taram; Joey Rudek; Daniel Moghimi; Evan Johnson 001; Chris Fallin; Anjo Vahldiek-Oberwagner; Michael LeMay; Ravi Sahita; Dean M. Tullsen; Deian Stefan (ASPLOS (3), 2023)

Hardware-Assisted Fault Isolation: Going Beyond the Limits of Software-Based Sandboxing. - Shravan Narayan; Tal Garfinkel; Mohammadkazem Taram; Joey Rudek; Daniel Moghimi; Evan Johnson 001; Chris Fallin; Anjo Vahldiek-Oberwagner; Michael LeMay; Ravi Sahita; Dean M. Tullsen; Deian Stefan (IEEE Micro, 2024)

Extended User Interrupts (xUI): Fast and Flexible Notification without Polling. - Berk Aydogmus; Linsong Guo; Danial Zuberi; Tal Garfinkel; Dean M. Tullsen; Amy Ousterhout; Kazem Taram (ASPLOS (2), 2025)

Segue & ColorGuard: Optimizing SFI Performance and Scalability on Modern Architectures. - Shravan Narayan; Tal Garfinkel; Evan Johnson 001; Zachary Yedidia; Yingchen Wang; Andrew Brown; Anjo Vahldiek-Oberwagner; Michael LeMay; Wenyong Huang; Xin Wang; Mingqiu Sun; Dean M. Tullsen; et al. (ASPLOS (1), 2025)

The Benefits and Limitations of User Interrupts for Preemptive Userspace Scheduling. - Linsong Guo; Danial Zuberi; Tal Garfinkel; Amy Ousterhout (NSDI, 2025)