Publications by Edouard Bugnion

Lightweight Hypervisor Verification: Putting the Hardware Burger on a Diet

Edouard Bugnion, Charly Nicolas Lucien Castes, Thomas Emile Bourgeat

Hypervisors are an essential part of our computing infrastructure, yet ensuring their correctness remains a significant challenge for the community. While several hypervisors have been formally verified using traditional methods, they have typically requir ...

ACM2025

Shattering the Ephemeral Storage Cost Barrier for Data-Intensive Serverless Workflows

Edouard Bugnion

Serverless computing enables developers to deploy applications as work ows of functions that invoke one another, with cloud providers handling autoscaling and routing. However, serverless platforms lack e cient mechanisms for cross-function data transfers, ...

ACM2025

A RISC-V Extension to Minimize Privileges of Enclave Runtimes

Edouard Bugnion, Neelu Shivprakash Kalani

In confidential computing, the view of the system software is Manichean: the host operating system is untrusted and the TEE runtime system is fully trusted. However, the runtime system is often as complex as a full operating system, and thus is not free fr ...

ACM2023

Creating Trust by Abolishing Hierarchies

Mathias Josef Payer, Edouard Bugnion, Evangelos Marios Kogias, Adrien Ghosn, Charly Nicolas Lucien Castes, Neelu Shivprakash Kalani, Yuchen Qian

Software is going through a trust crisis. Privileged code is no longer trusted and processes insufficiently protect user code from unverified libraries. While usually treated separately, confidential computing and program compartmentalization are both symp ...

Association for Computing Machinery2023

Attestable Software Versioning for Stateful Confidential Computing

Edouard Bugnion, Charly Nicolas Lucien Castes

Trusted execution environments enable the creation of confidential and attestable enclaves that exclude the platform and service providers from the trusted base. From its initial attestable state, a stateful enclave such as a confidential database can hold ...

2022

Deploying Decentralized, Privacy-Preserving Proximity Tracing

Jean-Pierre Hubaux, James Richard Larus, Marcel Salathé, Mathias Josef Payer, Edouard Bugnion, Carmela González Troncoso, Theresa Stadler, Apostolos Pyrgelis, Sylvain Chatel, Wouter Lueks

2022

Enclosure: Language-Based Restriction of Untrusted Libraries

James Richard Larus, Mathias Josef Payer, Edouard Bugnion, Evangelos Marios Kogias, Adrien Ghosn

Programming languages and systems have failed to address the security implications of the increasingly frequent use of public libraries to construct modern software. Most languages provide tools and online repositories to publish, import, and use libraries ...

ACM2021

When to Hedge in Interactive Services

Edouard Bugnion, Aikaterini Argyraki, Mia Primorac

In online data-intensive (OLDI) services, each client request typically executes on multiple servers in parallel; as a result, “system hiccups”, although rare within a single server, can interfere with many client requests and cause violations of service-l ...

USENIX ASSOC2021

CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing

Marcel Salathé, Edouard Bugnion, Carmela González Troncoso, Wouter Lueks

There is growing evidence that SARS-CoV-2 can be transmitted beyond close proximity contacts, in particular in closed and crowded environments with insufficient ventilation. To help mitigation efforts, contact tracers need a way to notify those who were pr ...

2021

Benchmarking, Analysis, and Optimization of Serverless Function Snapshots

Edouard Bugnion, Evangelos Marios Kogias, Boris Robert Grot, Dmitrii Ustiugov

Serverless computing has seen rapid adoption due to its high scalability and flexible, pay-as-you-go billing model. In serverless, developers structure their services as a collection of functions, sporadically invoked by various events like clicks. High in ...

2021