Publications

Gilles Barthe, Marcel Böhme, Sunjay Cauligi, Chitchanok Chuengsatiansup, Daniel Genkin, Marco Guarnieri, David Mateos Romero, Peter Schwabe, David Wu, Yuval Yarom (2024). Testing side-channel security of cryptographic implementations against future microarchitectures. Tech Report.

PDF Cite Code Project arXiv version

Gideon Mohr, Marco Guarnieri, Jan Reineke (2023). Synthesizing Hardware-Software Leakage Contracts for RISC-V Open-Source Processors. DATE 2024.

PDF Cite Code Project Project arXiv version

Zilong Wang, Gideon Mohr, Klaus von Gleissenthall, Jan Reineke, Marco Guarnieri (2023). Specification and Verification of Side-channel Security for Open-source Processors via Leakage Contracts. CCS 2023.

PDF Cite Code Project Extended version (arXiv) Distinguished paper award

Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein (2023). Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing. S&P 2023.

PDF Cite Code Project Extended version (arXiv)

Xaver Fabian, Marco Patrignani, Marco Guarnieri (2022). Automatic Detection of Speculative Execution Combinations. CCS 2022.

PDF Cite Code Project Extended version (arXiv) Distinguished paper award

Sankha Narayan Guria, Niki Vazou, Marco Guarnieri, James Parker (2022). Anosy: Approximated Knowledge Synthesis with Refinement Types for Declassification. PLDI 2022.

PDF Cite Code DOI Extended version (arXiv)

Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila (2021). Hardware-Software Contracts for Secure Speculation. S&P 2021.

PDF Cite Code Project Project Poster Slides Video Extended version (arXiv) Preview video Best paper award

Marco Patrignani, Marco Guarnieri (2021). Exorcising Spectres with Secure Compilers. CCS 2021.

PDF Cite Project Extended version (arXiv)

Marco Guarnieri, Marco Patrignani (2021). Contract-aware Secure Compilation. Technical report.

PDF Cite Extended version (arXiv)

Enrico Bacis, Dario Facchinetti, Marco Guarnieri, Marco Rosa, Matthew Rossi, Stefano Paraboschi (2021). I Told You Tomorrow: Practical Time-Locked Secrets using Smart Contracts. ARES 2021.

PDF Cite

Marco Guarnieri, Boris Köpf, José F. Morales, Jan Reineke, Andrés Sánchez (2020). SPECTECTOR: Principled detection of speculative information flows. S&P 2020.

PDF Cite Code Project Poster Slides Video Extended version (arXiv) Preview video

Pepe Vila, Andreas Abel, Marco Guarnieri, Boris Köpf, Jan Reineke (2020). Flushgeist: Cache Leaks from Beyond the Flush. Technical report.

PDF Cite Project Extended version (arXiv)

Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf (2020). CacheQuery: Learning Replacement Policies from Hardware Caches. PLDI 2020.

PDF Cite Code Project Extended version (arXiv) Additional code

Marco Guarnieri, Musard Balliu, Daniel Schoepe, David Basin, Andrei Sabelfeld (2019). Information-Flow Control for Database-backed Applications. EuroS&P 2019.

PDF Cite Code Project Technical report

Martin Kucera, Petar Tsankov, Timon Gehr, Marco Guarnieri, Martin Vechev (2017). Synthesis of Probabilistic Privacy Enforcement. CCS 2017.

PDF Cite Code

Marco Guarnieri, Srdjan Marinovic, David Basin (2017). Securing Databases from Probabilistic Inference. CSF 2017.

PDF Cite Code Project Extended version (arXiv)

Marco Guarnieri (2017). Formal Foundations for Access and Inference Control in Databases. PhD Thesis.

PDF Cite Project

Marco Guarnieri, Petar Tsankov, Tristan Buchs, Mohammad Torabi Dashti, David Basin (2017). Test Execution Checkpointing for Web Applications. ISSTA 2017.

PDF Cite Code

Marco Guarnieri, Srdjan Marinovic, David Basin (2016). Strong and Provably Secure Database Access Control. EuroS&P 2016.

PDF Cite Code Project Extended version (arXiv) Executable models

Marco Guarnieri, David Basin (2014). Optimal Security-Aware Query Processing. VLDB 2014.

PDF Cite Project

Mario Arrigoni Neri, Marco Guarnieri, Eros Magri, Simone Mutti, Stefano Paraboschi (2013). A Model-Driven Approach for Securing Software Architectures. Secrypt 2013.

PDF Cite

Marco Guarnieri, Mario Arrigoni Neri, Eros Magri, Simone Mutti (2013). On the Notion of Redundancy in Access Control Policies. SACMAT 2013.

PDF Cite

Angelo Gargantini, Marco Guarnieri, Eros Magri (2013). AURORA: AUtomatic RObustness coveRage Analysis Tool. ICST 2013.

PDF Cite Code

Gabriel Serme, Anderson Santana De Oliveira, Marco Guarnieri, Paul el Khoury (2012). Towards Assisted Remediation of Security Vulnerabilities. Securware 2012.

PDF Cite

Mario Arrigoni Neri, Marco Guarnieri, Eros Magri, Simone Mutti, Stefano Paraboschi (2012). Conflict Detection in Security Policies using Semantic Web Technology. ESTEL 2012.

PDF Cite

Marco Guarnieri, Eros Magri, Simone Mutti (2012). Automated Management and Analysis of Security Policies using Eclipse. Eclipse-IT 2012.

PDF Cite

Francesco Bolis, Angelo Gargantini, Marco Guarnieri, Eros Magri (2012). Evolutionary Testing of PHP Web Applications with WETT. SSBSE 2012.

PDF Cite

Francesco Bolis, Angelo Gargantini, Marco Guarnieri, Eros Magri, Lorenzo Musto (2012). Model-Driven Testing for Web Applications using Abstract State Machines. MDWE 2012.

PDF Cite

Angelo Gargantini, Marco Guarnieri, Eros Magri (2012). Extending Coverage Criteria by Evaluating their Robustness to Code Structure Changes. ICTSS 2012.

PDF Cite

Marco Guarnieri, Eros Magri, Davide Brugali, Luca Gherardi (2012). A Domain Specific Language for Modeling Differential Constraints of Mobile Robots. Robotica 2012.

PDF Cite Code

Angelo Gargantini, Marco Guarnieri, Eros Magri (2011). An Eclipse based environment for conformance testing by FSMs. Eclipse-IT 2011.

PDF Cite Code

Marco Guarnieri, Paul el Khoury, Gabriel Serme (2011). Security vulnerabilities detection and protection using Eclipse. Eclipse-IT 2011.

PDF Cite