Publications by Edouard Bugnion

Lightweight Hypervisor Verification: Putting the Hardware Burger on a Diet

Edouard Bugnion, Charly Nicolas Lucien Castes, Thomas Emile Bourgeat

Hypervisors are an essential part of our computing infrastructure, yet ensuring their correctness remains a significant challenge for the community. While several hypervisors have been formally verified using traditional methods, they have typically requir ...

ACM2025

Shattering the Ephemeral Storage Cost Barrier for Data-Intensive Serverless Workflows

Edouard Bugnion

Serverless computing enables developers to deploy applications as work ows of functions that invoke one another, with cloud providers handling autoscaling and routing. However, serverless platforms lack e cient mechanisms for cross-function data transfers, ...

ACM2025

A RISC-V Extension to Minimize Privileges of Enclave Runtimes

Edouard Bugnion, Neelu Shivprakash Kalani

In confidential computing, the view of the system software is Manichean: the host operating system is untrusted and the TEE runtime system is fully trusted. However, the runtime system is often as complex as a full operating system, and thus is not free fr ...

ACM2023

Creating Trust by Abolishing Hierarchies

Adrien Ghosn, Edouard Bugnion, Evangelos Marios Kogias, Mathias Josef Payer, Charly Nicolas Lucien Castes, Yuchen Qian, Neelu Shivprakash Kalani

Software is going through a trust crisis. Privileged code is no longer trusted and processes insufficiently protect user code from unverified libraries. While usually treated separately, confidential computing and program compartmentalization are both symp ...

Association for Computing Machinery2023

Attestable Software Versioning for Stateful Confidential Computing

Edouard Bugnion, Charly Nicolas Lucien Castes

Trusted execution environments enable the creation of confidential and attestable enclaves that exclude the platform and service providers from the trusted base. From its initial attestable state, a stateful enclave such as a confidential database can hold ...

2022

Deploying Decentralized, Privacy-Preserving Proximity Tracing

Jean-Pierre Hubaux, Sylvain Chatel, Edouard Bugnion, James Richard Larus, Marcel Salathé, Carmela González Troncoso, Wouter Lueks, Mathias Josef Payer, Apostolos Pyrgelis, Theresa Stadler

2022

Enclosure: Language-Based Restriction of Untrusted Libraries

Adrien Ghosn, Edouard Bugnion, James Richard Larus, Evangelos Marios Kogias, Mathias Josef Payer

Programming languages and systems have failed to address the security implications of the increasingly frequent use of public libraries to construct modern software. Most languages provide tools and online repositories to publish, import, and use libraries ...

ACM2021

When to Hedge in Interactive Services

Aikaterini Argyraki, Edouard Bugnion, Mia Primorac

In online data-intensive (OLDI) services, each client request typically executes on multiple servers in parallel; as a result, “system hiccups”, although rare within a single server, can interfere with many client requests and cause violations of service-l ...

USENIX ASSOC2021

CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing

Edouard Bugnion, Marcel Salathé, Carmela González Troncoso, Wouter Lueks

There is growing evidence that SARS-CoV-2 can be transmitted beyond close proximity contacts, in particular in closed and crowded environments with insufficient ventilation. To help mitigation efforts, contact tracers need a way to notify those who were pr ...

2021

Benchmarking, Analysis, and Optimization of Serverless Function Snapshots

Boris Robert Grot, Edouard Bugnion, Dmitrii Ustiugov, Evangelos Marios Kogias

Serverless computing has seen rapid adoption due to its high scalability and flexible, pay-as-you-go billing model. In serverless, developers structure their services as a collection of functions, sporadically invoked by various events like clicks. High in ...

2021

A research agenda for digital proximity tracing apps

Edouard Bugnion, Marcel Salathé, Carmela González Troncoso, Theresa Stadler

E M H SWISS MEDICAL PUBLISHERS LTD2020

Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland

Edouard Bugnion, James Richard Larus, Marcel Salathé, Carmela González Troncoso, Wouter Lueks, Mathias Josef Payer, Theresa Stadler, Daniele Antonioli

In the wake of the pandemic of coronavirus disease 2019 (COVID-19), contact tracing has become a key element of strategies to control the spread of severe acute respiratory syndrome coronavirus-2 (SARS-CoV-2). Given the rapid and intense spread of SARS-CoV ...

E M H SWISS MEDICAL PUBLISHERS LTD2020

Tail-tolerance as a Systems Principle not a Metric

Edouard Bugnion, Evangelos Marios Kogias

Tail-latency tolerance (or just simply tail-tolerance) is the ability for a system to deliver a response with low-latency nearly all the time. It it typically expressed as a system metric (e.g., the 99th or 99.99th percentile latency) or as a service-level ...

Assoc Computing Machinery2020

HovercRaft: Achieving Scalability and Fault-tolerance for microsecond-scale Datacenter Services

Edouard Bugnion, Evangelos Marios Kogias

Cloud platform services must simultaneously be scalable, meet low tail latency service-level objectives, and be resilient to a combination of software, hardware, and network failures. Replication plays a fundamental role in meeting both the scalability and ...

2020

Mitigating Load Imbalance in Distributed Data Serving with Rack-Scale Memory Pooling

Babak Falsafi, Stanko Novakovic, Boris Robert Grot, Alexandros Daglis, Edouard Bugnion, Dmitrii Ustiugov

To provide low-latency and high-throughput guarantees, most large key-value stores keep the data in the memory of many servers. Despite the natural parallelism across lookups, the load imbalance, introduced by heavy skew in the popularity distribution of k ...

2019

Prefetched Address Translation

Boris Robert Grot, Edouard Bugnion, Dmitrii Ustiugov

With explosive growth in dataset sizes and increasing machine memory capacities, per-application memory footprints are commonly reaching into hundreds of GBs. Such huge datasets pressure the TLB, resulting in frequent misses that must be resolved through a ...

ASSOC COMPUTING MACHINERY2019

R2P2: Making RPCs first-class datacenter citizens

Adrien Ghosn, Edouard Bugnion, Georgios Prekas, Jonas Fietz, Evangelos Marios Kogias

Remote Procedure Calls are widely used to connect datacenter applications with strict tail-latency service level objectives in the scale of µs. Existing solutions utilize streaming or datagram-based transport protocols for RPCs that impose overheads and li ...

USENIX ASSOC2019

Lancet: A self-correcting Latency Measuring Tool

Edouard Bugnion, Evangelos Marios Kogias, Stephen Xin Mallon

We present LANCET, a self-correcting tool designed to measure the open-loop tail latency of µs-scale datacenter applications with high fan-in connection patterns. LANCET is self-correcting as it relies on online statistical tests to determine situations in ...

USENIX ASSOC2019

Secured Routines: Language-based Construction of Trusted Execution Environments

Adrien Ghosn, Edouard Bugnion, James Richard Larus

Trusted Execution Environments (TEEs), such as Intel SGX enclaves, use hardware to ensure the confidentiality and integrity of operations on sensitive data. While the technology is available on many processors, the complexity of its programming model and i ...

USENIX ASSOC2019

Flow control for Latency-Critical RPCs

Edouard Bugnion, Evangelos Marios Kogias

In today’s modern datacenters, the waiting time spent within a server’s queue is a major contributor of the end-to-end tail latency of μs-scale remote procedure calls. In traditional TCP, congestion control handles in-network congestion, while flow control ...

2018