Select Publications
Journal articles
2023, 'Systematic Prevention of On-Core Timing Channels by Full Temporal Partitioning', IEEE Transactions on Computers, 72, pp. 1420 - 1430, http://dx.doi.org/10.1109/TC.2022.3212636
,2020, 'Towards Provable Timing-Channel Prevention', Operating Systems Review (ACM), 54, pp. 1 - 7, http://dx.doi.org/10.1145/3421473.3421475
,2020, 'Benchmarking Flaws Undermine Security Research', IEEE Security and Privacy, 18, pp. 48 - 57, http://dx.doi.org/10.1109/MSEC.2020.2969862
,2020, 'Secure IT without vulnerabilities and back doors', Zeitschrift fur Technikfolgenabschatzung in Theorie und Praxis / Journal for Technology Assessment in Theory and Practice, 29, pp. 30 - 36, http://dx.doi.org/10.14512/tatup.29.1.30
,2020, 'SeL4 in Australia: From Research to Real-World Trustworthy Systems', Communications of the ACM, 63, pp. 72 - 75, http://dx.doi.org/10.1145/3378426
,2018, 'Roundtable: Machine Learning for Embedded Systems: Hype or Lasting Impact?', IEEE Design and Test, 35, pp. 86 - 93, http://dx.doi.org/10.1109/MDAT.2018.2869988
,2018, 'A Formal Approach to Constructing Secure Air Vehicle Software', Computer, 51, pp. 14 - 23, http://dx.doi.org/10.1109/MC.2018.2876051
,2018, 'Formally verified software in the real world', Communications of the ACM, 61, pp. 68 - 77, http://dx.doi.org/10.1145/3230627
,2018, 'A survey of microarchitectural timing attacks and countermeasures on contemporary hardware', Journal of Cryptographic Engineering, 8, pp. 1 - 27, http://dx.doi.org/10.1007/s13389-016-0141-6
,2018, 'For Safety's Sake: We Need a New Hardware-Software Contract!', IEEE Design and Test, 35, pp. 27 - 30, http://dx.doi.org/10.1109/MDAT.2017.2766559
,2017, 'High-assurance timing analysis for a high-assurance real-time operating system', Real-Time Systems, 53, pp. 812 - 853, http://dx.doi.org/10.1007/s11241-017-9286-3
,2017, 'Technical perspective proving file systems meet expectations', Communications of the ACM, 60, pp. 74, http://dx.doi.org/10.1145/3051090
,2016, 'Your Processor Leaks Information - and There's Nothing You Can Do About It', , http://arxiv.org/abs/1612.04474v6
,2016, 'An Evaluation of Coarse-Grained Locking for Multicore Microkernels', ArXiv, https://pdfs.semanticscholar.org/762a/284bd8b6ace609285f72f22dc1e03b004f33.pdf
,2016, 'Cogent', ACM SIGARCH Computer Architecture News, 44, pp. 175 - 188, http://dx.doi.org/10.1145/2980024.2872404
,2016, 'It's Time: OS Mechanisms for Enforcing Asymmetric Temporal Integrity', , http://arxiv.org/abs/1606.00111v2
,2016, 'L4 microkernels: The lessons from 20 years of research and deployment', ACM Transactions on Computer Systems, 34, http://dx.doi.org/10.1145/2893177
,2016, 'CoGENT', ACM SIGOPS Operating Systems Review, 50, pp. 175 - 188, http://dx.doi.org/10.1145/2954680.2872404
,2014, 'A scalable lock manager for multicores', ACM Transactions on Database Systems, 39, http://dx.doi.org/10.1145/2691190.2691192
,2014, 'Comprehensive Formal Verification of an OS Microkernel', ACM Transactions on Computer Systems, 32, http://dx.doi.org/10.1145/2560537
,2012, 'It's time for trustworthy systems', IEEE Security and Privacy, 10, pp. 67 - 70, http://dx.doi.org/10.1109/MSP.2012.41
,2011, 'Improved device driver reliability through hardware verification reuse', ACM SIGARCH Computer Architecture News, 39, pp. 133 - 144, http://dx.doi.org/10.1145/1961295.1950383
,2010, 'Security and mobility the future is now', Electronics World, 116, pp. 31 - 32
,2010, 'Virtualizing embedded linux', Electronics World, 116, pp. 34 - 37
,2010, 'Virtualizing embedded linux', Electronics World, 116, pp. 34 - 37
,2010, 'seL4: formal verification of an operating-system kernel', Communications of the ACM, 53, pp. 107 - 115, http://dx.doi.org/10.1145/1743546.1743574
,2007, 'Mobile maladies [4]', Scientific American, 296, pp. 14
,2007, 'CAmkES: A component model for secure microkernel-based embedded systems', Journal of Systems and Software, 80, pp. 687 - 699
,2007, 'Towards trustworthy computing systems: taking microkernels to the next level', ACM Sigops Operating Systems Review, 41, pp. 3 - 11
,2006, 'Are virtual-machine monitors microkernels done right?', Operating Systems Review (ACM), 40, pp. 95 - 99, http://dx.doi.org/10.1145/1113361.1113363
,2006, 'A simulation model for the density of states and for incomplete ionization in crystalline silicon. I. Establishing the model in Si : P', Journal of Applied Physics, 100
,2006, 'A simulation model for the density of states and for incomplete ionization in crystalline silicon. II. Investigation of Si : As and Si : B and usage in device simulation', Journal of Applied Physics, 100
,2005, 'User-level device drivers: Achieved performance', Journal of Computer Science and Technology, 20, pp. 654 - 664
,2004, 'An open GNSS receiver platform architecture', Positioning, 3, pp. 63 - 69
,2003, 'Reassessment of the intrinsic carrier density in crystalline silicon in view of band-gap narrowing', Journal of Applied Physics, 93,, pp. 1598 - 1604
,2002, 'A numerical model of p n junctions bordering on surfaces', Solar Energy Materials and Solar Cells, 74, pp. 165 - 174
,2002, 'Development of a three-dimensional numerical model of grain boundaries in highly doped polycrystalline silicon and applications to solar cells', Journal of Applied Physics, 91, pp. 4271 - 4274
,2002, 'Numerical modeling of highly doped Si:P emitters based of Fermi-Dirac statistics and self-consistent material parameters', Journal of Applied Physics, 92, pp. 3187 - 3197
,2002, 'Predicted electronic properties of polycrystalline silicon from three-dimensional device modeling combined with defect-pool model', Journal of Applied Physics, 92, pp. 2561 - 2574
,2001, 'Application of an improved bandgap narrowing model to the numerical simulation of recombination properties of phosphorus doped silicon emitters', Solar Energy Materials and Solar Cells, pp. 95 - 103
,2001, 'Improvements in the numerical modeling of highly injected crystalline silicon solar cells', Solar Energy Materials and Solar Cells, pp. 149 - 155
,2001, 'Numerical simulation of electron-beam-induced current near a silicon grain boundary and impact of a p-n junction space charge region', Solar Energy Materials and Solar Cells, pp. 63 - 69
,2000, 'Simulation and optimization of metal-insulator-semiconductor inversion-layer silicon solar cells', IEEE Transactions on Electron Devices, pp. 2167 - 2178
,1998, 'Charge Collection and Radiation Hardness of a SOI Microdosimeter for Medical and Space Applications', IEEE Transactions on Nuclear Science, pp. 2700 - 2710
,1998, 'The Mungi Single-Address-Space Operating System', Software-Practice and Experience, pp. 901 - 928
,1997, 'Assessment and Parameterisation of Coulomb-Enhanced Auger Recombination Coefficients in Lowly Injected Crystalline Silicon', Journal of Applied Physics, pp. 4938 - 4944
,1997, 'Modeling and Simulation of Tunneling through Ultra-Thin Gate Dielectrics', Journal of Applied Physics, pp. 7900 - 7908
,1996, 'Improved modelling of grain boundary recombination in bulk and p-n junction regions of polycrystalline silicon solar cells', Journal of Applied Physics, pp. 6783 - 6795
,1996, 'Numerical quantification and minimisation of perimeter losses in high-efficiency silicon solar cells', Progress in Photovoltaics, pp. 355 - 367
,1996, 'Rear serface passivation of high-efficiency silicon solar cells by a floating junction', Journal of Applied Physics, pp. 3574 - 3586
,