Research

T Bilot, N El Madhoun, A Zouaoui, K Al Agha, T Pasquier (2026). LARES: Host-centered Lateral Movement Detection via Inductive Graph Reasoning. IEEE ACSAC'26.

T Bilot, B Jiang, T Pasquier (2026). PIDSMaker: Building and Evaluating Provenance-based Intrusion Detection Systems. ACM KDD'26.

D Teguia, L Duval, T Pisenti, K Lazri, D Hagimont, T Pasquier, R Lachaize, A Tchana (2026). Inside Out: A Paradigm Shift In VM Introspection. USENIX OSDI'26.

T Prasad, R Vora, SY Lim, N P Hoang, T Pasquier (2026). Work-in-Progress: RegTrack: Uncovering Global Disparities in Third-party Advertising and Tracking. MADWeb'26.

2025

T Bilot, T Pasquier (2025). Toward Practical and Usable Provenance-based Intrusion Detection Systems. USENIX ;login:.

T Bilot, B Jiang, Z Li, N El Madhoun, K Al Agha, A Zouaoui, T Pasquier (2025). Sometimes Simpler is Better: A Comprehensive Analysis of State-of-the-Art Provenance-Based Intrusion Detection Systems. USENIX Sec'25.

B Jiang, T Bilot, N El Madhoun, K Al Agha, A Zouaoui, S Iqbal, X Han, T Pasquier (2025). ORTHRUS: Achieving High Quality of Attribution in Provenance-based Intrusion Detection Systems. USENIX Sec'25.

T Abrar, A Shamail, M J Iqbal, A Ahmed, M Abdullah, M Shayan, F Zaffar, T Pasquier, D Eyers, A Gehani (2025). On the Reproducibility of Provenance-based Intrusion Detection that uses Deep Learning. ACM REP'25.

2024

SY Lim, T Prasad, X Han, T Pasquier (2024). SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions. ACM CCSW'24.

X Cao, S Patel, SY Lim, X Han, T Pasquier (2024). FetchBPF: Customizable Prefetching Policies in Linux with eBPF. USENIX ATC'24.

N Boufford, J Wonsil, A Pocock, J Sullivan, M Seltzer, T Pasquier (2024). Computational Experiment Comprehension using Provenance Summarization. ACM REP'24.

Z Cheng, Q Lv, J Liang, Y Wang, D Sun, T Pasquier, X Han (2024). Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance. IEEE S&P'24.

Z Cheng, Q Lv, J Liang, Y Wang, D Sun, T Pasquier, X Han (2024). Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance (Supplementary Material).

2023

SY Lim, X Han, T Pasquier (2023). Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing. SIGCOMM Workshop on eBPF and Kernel Extensions.

PDF Project DOI

2022

A Trisovic, M K Lau, T Pasquier, M Crosas (2022). A large-scale study on research code quality and execution. Nature Scientific Data.

2021

SY Lim, B Stelea, X Han, T Pasquier (2021). Secure Namespaced Kernel Audit for Containers. ACM SoCC'21.

X Han, X Yu, T Pasquier, D Li, J Rhee, J Mickens, M Seltzer, H Chen (2021). SIGL: Securing Software Installations Through Deep Graph Learning. USENIX Sec'21.

2020

A Fekry, L Carata, T Pasquier, A Rice (2020). Accelerating the Configuration Tuning of Big Data Analytics with Similarity-aware Multitask Bayesian Optimization. IEEE BigData'20.

PDF Slides

X Han, J Mickens, A Gehani, M Seltzer, T Pasquier (2020). Xanthus: Push-button Orchestration of Host Provenance Data Collection. ACM P-RECS'20.

A Fekry, L Carata, T Pasquier, A Rice, A Hopper (2020). To Tune or Not to Tune? In Search of Optimal Configurations for Data Analytics. ACM KDD'20.

X Han, T Pasquier, A Bates, J Mickens, M Seltzer (2020). UNICORN: Runtime Provenance-Based Detector for Advanced Persistent Threats. NDSS'20.

M K Lau, T Pasquier, M Seltzer (2020). Rclean: A Tool for Writing Cleaner, More Transparent Code. In The Journal of Open Source Software.

D O'Keeffe, A Vranaki, T Pasquier, D Eyers (2020). Facilitating plausible deniability for cloud providers regarding tenants' activities using trusted execution. IEEE IC2E'20.

C Mistry, B Stelea, V Kumar, T Pasquier (2020). Demonstrating the Practicality of Unikernels to Build a Serverless Platform at the Edge. In IEEE CloudCom'20.

Code PDF DOI

2019

S C Chan, J Cheney, P Bhatotia, T Pasquier, A Gehani, H Irshad, L Carata, M Seltzer (2019). ProvMark: A Provenance Expressiveness Benchmarking System. ACM/IFIP Middleware'19.

T Pasquier, D Eyers, M Seltzer (2019). From Here to Provtopia. Springer Poly'19.

A Fekry, L Carata, T Pasquier, Andrew Rice, Andy Hopper (2019). Towards Seamless Configuration Tuning of Big Data Analytics. IEEE ICDCS'19.

T Pasquier, D Eyers, J Bacon (2019). Viewpoint | Personal Data and the Internet of Things: It is time to care about digital provenance. In Communications of the ACM.

2018

T Pasquier, X Han, T Moyer, A Bates, O Hermant, D Eyers, J Bacon, M Seltzer (2018). Runtime Analysis of Whole-System Provenance. In CCS ‘18.

PDF Code DOI

X Han, T Pasquier, M Seltzer (2018). Provenance-based Intrusion Detection: Opportunities and Challenges. In Workshop on the Theory and Practice of Provenance.

T Pasquier, M K Lau, X Han, E Fong, B Lerner, E Boose, M Crosas, A Ellison, M Seltzer (2018). Sharing and Preserving Computational Analyses for Posterity with encapsulator. In Computing in Science & Engineering.

PDF Code DOI

T Pasquier, J Singh, J Powles, D Eyers, M Seltzer, J Bacon (2018). Data provenance to audit compliance with privacy policy in the Internet of Things. In Personal and Ubiquitous Computing.

2017

T Pasquier, X Han, M Goldstein, T Moyer, D Eyers, M Seltzer, J Bacon (2017). Practical Whole-System Provenance Capture. In SoCC ‘17.

PDF Code DOI

T Pasquier, M K Lau, A Trisovic, E Boose, B Couturier, M Crosas, A Ellison, V Gibson, C Jones, M Seltzer (2017). If these data could talk. In SciData.

X Han, T Pasquier, T Ranjan, M Goldstein, M Seltzer (2017). FRAPpuccino: Fault-detection through Runtime Analysis of Provenance. In HotCloud.

T Pasquier, D Eyers, J Bacon (2017). PHP2Uni: Building Unikernels using Scripting Language Transpilation. In IC2E.

2016

J Singh, T Pasquier, J Bacon, J Powles, R Diaconu, D Eyers (2016). Big Ideas paper: Policy-driven middleware for a legally-compliant Internet of Things. In Middleware.

T Pasquier, J Bacon, J Singh, D Eyers (2016). Data-Centric Access Control for Cloud Computing. In SACMAT.

J Singh, T Pasquier, J Bacon, H Ko, D Eyers (2016). Twenty security considerations for cloud-supported Internet of Things. In IoT Journal.

T Pasquier, D Eyers (2016). Information Flow Audit for Transparency and Compliance in the Handling of Personal Data. In CLaw.

T Pasquier, J Singh, J Bacon, D Eyers (2016). Information Flow Audit for PaaS clouds. In IC2E.

2015

T Pasquier, J Singh, J Bacon (2015). Clouds of Things Need Information Flow Control with Hardware Roots of Trust. In CloudCom.

T Pasquier, J Singh, D Eyers, J Bacon (2015). CamFlow: Managed Data-Sharing for Cloud Services. In TCC.

J Singh, J Powles, T Pasquier, J Bacon (2015). Data Flow Management and Compliance in Cloud Computing. In Cloud Computing Magazine.

T Pasquier, J Singh, J Bacon, O Hermant (2015). Managing Big Data with Information Flow Control. In CLOUD.

J Singh, T Pasquier, J Bacon (2015). Securing Tags to Control Information Flows within the Internet of Things. In RIoT.

J Singh, T Pasquier, J Bacon, D Eyers (2015). Integrating Messaging Middleware and Information Flow Control. In IC2E.

T Pasquier, J Singh, J Bacon (2015). Information Flow Control for Strong Protection with Flexible Sharing in PaaS. In FPaaS.

T Pasquier, J Powles (2015). Expressing and Enforcing Location Requirements in the Cloud using Information Flow Control. In CLaw.

2014

T Pasquier, J Bacon, D Eyers (2014). FlowK: Information Flow Control for the Cloud. In CloudCom.

J Singh, J Bacon, J Crowcroft, A Madhavapeddy, T Pasquier, W Kuan Hon, C Millard (2014). Regional clouds: technical considerations. In UCAM-CL-TR-863.

T Pasquier, J Bacon, B Shand (2014). FlowR: Aspect Oriented Programming for Information Flow Control in Ruby. In Modularity.

J Bacon, D Eyers, T Pasquier, J Singh, I Papagiannis, P Pietzuch (2014). Information Flow Control for Secure Cloud Computing. In TNSM.