Registration & Coffee 8. a.m.–9.30 a.m.

Session 1: Confidential Computing: Real World Challenges!
(Chair: Amro Awad)

Nigel Edwards (HPE Labs), Challenges in confidential computing
Naga Gurumoorthy (Microsoft), Confidential Computing in Azure – Learnings and Road Ahead
Jeremy O'Donoghue (Qualcomm), Attestation in Confidential Computing: towards an interoperable future

Coffee Break 11 a.m.–11.15 a.m.

Session 2: Confidential Computing: New World Challenges!
(Chair: Hyokeun Lee)
Hamed Haddadi (Imperial), Confidential Agents on Edge Devices
Noa Zilberman (Oxford), Towards panel-scale confidential computing
Andrew Paverd (Microsoft Research), Non-confidential Confidential Computing
Dominic Rizzo (ZeroRISC), Rooting Confidential Computing in Open Silicon: From Chiplet-Scale Attestation to Post-Quantum Cryptography

Lunch Break 1245 p.m.–01.30 p.m.

Session 3: Usecases and Limitations of Confidential Computing
(Chair: Ahmad Atamli)

Ihsen Alouani (QUB), The Trust Abyss: Cross Layer Vulnerability Landscape of the Cognitive Infrastructure
Robert Trager (Oxford), Enabling AI Governance through Confidential Computing
Franck Courbon (Ethicronics), The Hardware Beneath the Enclave: A Blind Spot in Confidential Computing

Session 4: Architectural Challenges for Supporting Confidential Computing I
(Chair: Ihsen Alouani)

Amir Al Sadi (Imperial), Attestable Communication Policies for Confidential Computing Pipelines
Aristide Tanyi-Jong Akem (Southampton), Does Mutable Accelerator Logic Create an Attestation Gap in Confidential Computing?
Sunho Lee (Oxford), Exploiting Access Patterns for Efficient Memory Protection in Accelerators
Nicholas Johnson (UCLA), Fiducia: A Modular Secure Peripheral Interface for Trusted Execution Environments

Coffee Break 03.45 p.m.–04.00 p.m.

Session 5: Architectural Challenges for Supporting Confidential Computing II
(Chair: Sunho Lee)

Peiyao Sun (Southampton), IOTEE: Trust Beyond the CPU
Henry Wang (Oxford), Exploring Access Control Design for Confidential Computing under Memory Virtualization
Henry Chu (Louisiana), An Immutable Attestation Registry for Mitigating Temporal Integrity Vulnerabilities in Confidential AI Enclaves