| ACAI- Protecting Accelerator Execution with Arm Confidential Computing Architecture | USENIX Sec | 2024 |
| CAGE- Complementing Arm CCA with GPU Extensions | NDSS | 2024 |
| Core slicing- Closing the gap between leaky confidential {VMs} and bare-metal cloud | OSDI | 2024 |
| Trusted Heterogeneous Disaggregated Architectures | APSys | 2023 |
| | |