An always-on detector for Prime+Probe and Flush+Reload contention on Arm Cortex-A. Ships as a kernel module + lightweight userspace daemon; <1% overhead on SPEC.

Hardware partitioning for confidential GPU workloads on Mali. Splits the command stream and memory hierarchy so untrusted tenants cannot observe each other's tiles.

Selective authentication of firmware code regions to keep boot latency tractable on real-time SoCs. Integrates with TF-A; upstream patches in review.

An operating-system substrate for Arm Confidential Compute Architecture. Treats realms as first-class composable units with explicit memory and IPC contracts.

Coverage-guided fuzzer for Arm Trusted Firmware-A, with custom harnesses for PSCI and SCMI. Has found 17 CVEs to date.

Detector that motivated ArmGuard. Retained as a reproducibility artifact for the 2025 ISCA paper.