A picture of me.

Dan O'Keeffe

Hello, and welcome to my website. I'm a post-doctoral researcher in the Large-Scale Distributed Systems (LSDS) group of the Department of Computing, Imperial College London. Previously I was a member of the OPERA group at the University of Cambridge Computer Laboratory, where I completed my PhD under Prof. Jean Bacon. Prior to joining Imperial I also spent several years as a software engineer in the financial services industry building stream processing platforms for high-frequency trading.

My research interests lie broadly in the areas of distributed systems, networking, databases, and software engineering, with a current focus on cloud computing security. In particular, as part of the SeReCa and CloudSafetyNet projects I am investigating techniques for improving user control and visibility over sensitive data in cloud platforms.

In addition to cloud security, I have a strong interest in stream processing systems. My current research activities in this area are concentrated on the ITA-DSM project, which transplants popular "Big Data" stream processing platforms like Twitter Storm to wireless mobile and sensor network environments.

The best way to get in touch with me is via email at d.okeeffe at imperial dot ac dot uk.

Recent Publications

  • Glamdring: Automatic Application Partitioning for Intel SGX, J.Lind, C. Priebe, D. Muthukumuran, D. O'Keeffe, P-L. Aublin, F. Kelbert, T. Reiher, D. Goltzche, D. Eyers, R. Kapitza, C. Fetzer and P. Pietzuch, In Proceedings of the USENIX Annual Technical Conference (USENIX ATC), 2017 (to appear).
  • SCONE: Secure Linux Containers with Intel SGX, S.Arnautov, B. Trach, F. Gregor, T. Knauth, A. Martin, C. Priebe, J.Lind, D. Muthukumuran, D. O'Keeffe, M. Stillwell, D. Goltzche, D. Eyers, R. Kapitza, P. Pietzuch, and C. Fetzer, In Proceedings of the 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI), 2016.
  • FlowWatcher: Defending against Data Disclosure Vulnerabilities in Web Applications, D. Muthukumuran, D. O'Keeffe, C. Priebe, D. Eyers, B. Shand, and P. Pietzuch, In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS), 2015.
  • Network-Aware Stream Query Processing in Mobile Ad-Hoc Networks, D. O'Keeffe, T. Salonidis and P. Pietzuch, In Proceedings of the IEEE Military Communications Conference (MILCOM), 2015.
  • CloudSafetyNet: Detecting data leakage between Cloud tenants, C. Priebe, D. Muthukumuran, D. O'Keeffe, D. Eyers, B. Shand, R. Kapitza, and P. Pietzuch, In Proceedings of the 6th ACM Cloud Computing Security Workshop (CCSW), 2014.
  • Adaptive Stream Query Planning for Hybrid Coalition Networks, D. O'Keeffe, T. Salonidis, and P. Pietzuch, 8th Annual Conference of the ITA (ACITA), 2014.
  • Adaptive Stream Processing for Hybrid Coalition Networks: Challenges and Initial Solutions, J. Kurose, D. O'Keeffe, P. Pietzuch, T. Salonidis, A. Seetharam, and D. Towsley. 7th Annual Conference of the ITA (ACITA), 2013.

Current Projects

CSN logo


Exploits secure hardware extensions in modern commodity CPUs (e.g. Intel SGX) to protect cloud services and applications from malicious cloud providers.

CSN logo


Investigates how to monitor information flow in cloud systems to reduce the likelihood of unwanted data disclosure.

ITA-DSM logo


Explores data stream processing in non-traditional environments like mesh and mobile ad-hoc networks.


Please see the CATE database for current undergraduate and MSc project proposals.