{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,21]],"date-time":"2025-11-21T05:55:50Z","timestamp":1763704550970,"version":"3.45.0"},"reference-count":50,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,26]],"date-time":"2025-10-26T00:00:00Z","timestamp":1761436800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,26]],"date-time":"2025-10-26T00:00:00Z","timestamp":1761436800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,26]]},"DOI":"10.1109\/iccad66269.2025.11240860","type":"proceedings-article","created":{"date-parts":[[2025,11,20]],"date-time":"2025-11-20T18:39:34Z","timestamp":1763663974000},"page":"1-9","source":"Crossref","is-referenced-by-count":0,"title":["FPGA-CC: Confidential Containers for Virtualized FPGAs"],"prefix":"10.1109","author":[{"given":"Ke","family":"Xia","sequence":"first","affiliation":[{"name":"Rutgers University,NJ,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sheng","family":"Wei","sequence":"additional","affiliation":[{"name":"Rutgers University,NJ,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"year":"2025","key":"ref1","article-title":"Amazon EC2 F2 instances"},{"year":"2025","key":"ref2","article-title":"Microsoft Azure with AMD Alveo U250"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2021.3063670"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378482"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378491"},{"key":"ref6","first-page":"991","article-title":"Do OS abstractions make sense on FPGAs?","volume-title":"USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Korolija"},{"year":"2025","key":"ref7","article-title":"Docker"},{"year":"2025","key":"ref8","article-title":"Kubernetes"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICMCCE51767.2020.00109"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507732"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.23919\/DATE48585.2020.9116333"},{"year":"2025","key":"ref12","article-title":"Intel SGX"},{"year":"2025","key":"ref13","article-title":"Confidential containers"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SEED51797.2021.00025"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-023-00144-1"},{"year":"2025","key":"ref16","article-title":"AMD-SEV guide"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18074.2021.9586207"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507733"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/AsianHOST59942.2023.10409376"},{"key":"ref20","article-title":"GPU operator with confidential containers and Kata"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44687-7_37"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/FCCM.2012.25"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO56248.2022.00018"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2661582"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s11704-022-2127-0"},{"article-title":"Are FPGAs suitable for edge computing?","volume-title":"USENIX workshop on hot topics in edge computing (HotEdge)","author":"Biookaghazadeh","key":"ref26"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2017.2748393"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD.2018.00122"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/FPT.2014.7082768"},{"year":"2025","key":"ref30","article-title":"enclave-cc"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.23919\/DATE51398.2021.9474026"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3152701.3152709"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00020"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/AsianHOST47458.2019.9006701"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3492323.3495635"},{"year":"2023","key":"ref36","article-title":"Public cloud security breaches"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2020.i3.169-195"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00049"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3419100"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-17227-5_11"},{"year":"2025","key":"ref41","article-title":"runc"},{"year":"2022","key":"ref42","article-title":"AMD Vitis security library"},{"year":"2025","key":"ref43","article-title":"Xilinx container runtime"},{"year":"2025","key":"ref44","article-title":"Trusted components for attestation and secret management"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3242897"},{"year":"2025","key":"ref46","article-title":"The CIFAR-10 dataset"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref48","first-page":"3459","article-title":"HECK-LER: Breaking confidential VMs with malicious interrupts","volume-title":"USENIX Security","author":"Schl\u00fcter"},{"year":"2022","key":"ref49","article-title":"Advanced encryption standard aes engine LogiCORE IP product guide (PG383)"},{"year":"2023","key":"ref50","article-title":"Vitis High-Level Synthesis User Guide (UG1399)"}],"event":{"name":"2025 IEEE\/ACM International Conference On Computer Aided Design (ICCAD)","start":{"date-parts":[[2025,10,26]]},"location":"Munich, Germany","end":{"date-parts":[[2025,10,30]]}},"container-title":["2025 IEEE\/ACM International Conference On Computer Aided Design (ICCAD)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11240608\/11240621\/11240860.pdf?arnumber=11240860","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,21]],"date-time":"2025-11-21T05:45:22Z","timestamp":1763703922000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11240860\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,26]]},"references-count":50,"URL":"https:\/\/doi.org\/10.1109\/iccad66269.2025.11240860","relation":{},"subject":[],"published":{"date-parts":[[2025,10,26]]}}}