1

I Told You Tomorrow: Practical Time-Locked Secrets using Smart Contracts
A Time-Lock enables the release of a secret at a future point in time. Many approaches implement Time-Locks as cryptographic puzzles, …
Enrico Bacis, Dario Facchinetti, Marco Guarnieri, Marco Rosa, Matthew Rossi, Stefano Paraboschi
PDF Cite
SPECTECTOR: Principled detection of speculative information flows
Since the advent of SPECTRE, a number of countermeasures have been proposed and deployed. Rigorously reasoning about their …
Marco Guarnieri, Boris Köpf, José F. Morales, Jan Reineke, Andrés Sánchez
PDF Cite Code Project Poster Slides Video Extended version (arXiv) Preview video
CacheQuery: Learning Replacement Policies from Hardware Caches
We show how to infer deterministic cache replacement policies using off-the-shelf automata learning and program synthesis techniques. …
Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
PDF Cite Code Project Extended version (arXiv) Additional code
Information-Flow Control for Database-backed Applications
Securing database-backed applications requires tracking information across the program and the database together, since securing each …
Marco Guarnieri, Musard Balliu, Daniel Schoepe, David Basin, Andrei Sabelfeld
PDF Cite Code Project Technical report
Synthesis of Probabilistic Privacy Enforcement
Existing probabilistic privacy enforcement approaches permit the execution of a program that processes sensitive data only if the …
Martin Kucera, Petar Tsankov, Timon Gehr, Marco Guarnieri, Martin Vechev
PDF Cite Code
Securing Databases from Probabilistic Inference
Databases can leak confidential information when users combine query results with probabilistic data dependencies and prior knowledge. …
Marco Guarnieri, Srdjan Marinovic, David Basin
PDF Cite Code Project Extended version (arXiv)
Test Execution Checkpointing for Web Applications
Test isolation is a prerequisite for the correct execution of test suites on web applications. We present Test Execution Checkpointing, …
Marco Guarnieri, Petar Tsankov, Tristan Buchs, Mohammad Torabi Dashti, David Basin
PDF Cite Code
Strong and Provably Secure Database Access Control
Existing SQL access control mechanisms are extremely limited. Attackers can leak information and escalate their privileges using …
Marco Guarnieri, Srdjan Marinovic, David Basin
PDF Cite Code Project Extended version (arXiv) Executable models
Optimal Security-Aware Query Processing
Security-Aware Query Processing is the problem of computing answers to queries in the presence of access control policies. We present …
Marco Guarnieri, David Basin
PDF Cite Project
A Model-Driven Approach for Securing Software Architectures
Current IT systems consist usually of several components and services that communicate and exchange data over the Internet. They have …
Mario Arrigoni Neri, Marco Guarnieri, Eros Magri, Simone Mutti, Stefano Paraboschi
PDF Cite