{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T07:10:53Z","timestamp":1763968253939,"version":"3.37.3"},"reference-count":71,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2018,11,1]],"date-time":"2018-11-01T00:00:00Z","timestamp":1541030400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2018,11,1]]},"DOI":"10.1109\/tdsc.2017.2745574","type":"journal-article","created":{"date-parts":[[2017,8,28]],"date-time":"2017-08-28T18:10:25Z","timestamp":1503943825000},"page":"945-958","source":"Crossref","is-referenced-by-count":3,"title":["How to Fillet a Penguin: Runtime Data Driven Partitioning of Linux Code"],"prefix":"10.1109","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4956-5593","authenticated-orcid":false,"given":"Oliver","family":"Schwahn","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8244-995X","authenticated-orcid":false,"given":"Stefan","family":"Winter","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8032-0623","authenticated-orcid":false,"given":"Nicolas","family":"Coppik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1106-7668","authenticated-orcid":false,"given":"Neeraj","family":"Suri","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"year":"2015","key":"ref71","article-title":"RTwiki"},{"year":"2015","key":"ref70","article-title":"VFIO -"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2006.31"},{"key":"ref38","first-page":"1351","article-title":"A new representation and crossover operator for search-based optimization of software modularization","author":"harman","year":"2002","journal-title":"Proc Genetic Evol Comput Conf"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2010.29"},{"journal-title":"Structured Design Fundamentals of a Discipline of Computer Program and Systems Design","year":"1979","author":"yourdon","key":"ref32"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2003.1232289"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/32.917524"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2007.70732"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/S0164-1212(03)00234-6"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-21599-0_7"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.1997.624574"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2013.6575348"},{"article-title":"CIL (C Intermediate Language)","year":"2016","author":"kerneis","key":"ref62"},{"key":"ref61","first-page":"15","article-title":"Rump file systems: Kernel code reborn","author":"kantee","year":"2009","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref63","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1007\/3-540-45937-5_16","article-title":"CIL: Intermediate language and tools for\n analysis and transformation of C programs","author":"necula","year":"2002","journal-title":"Proc Int Conf Compiler Construction"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/0164-1212(94)00049-S"},{"key":"ref64","first-page":"14","article-title":"Decaf: Moving device drivers to a modern language","author":"renzelmann","year":"2009","journal-title":"Proc USENIX Annu Tech Conf"},{"journal-title":"Refactoring Improving the Design of Existing Code","year":"1999","author":"fowler","key":"ref27"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.35"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1979.234183"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/302405.302629"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0053381"},{"article-title":"ACC: The AspeCt-oriented C compiler","year":"2015","author":"gong","key":"ref68"},{"article-title":"Sleeping in the interrupt handler","year":"2015","author":"love","key":"ref69"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"ref1","doi-asserted-by":"crossref","first-page":"237","DOI":"10.1145\/224057.224075","article-title":"On $\\mu$\n-kernel\n construction","author":"liedtke","year":"1995","journal-title":"Proc 15th ACM Symp Operating Syst Principles"},{"key":"ref20","article-title":"Joe-E: A\n security-oriented subset of Java","author":"mettler","year":"2010","journal-title":"Proc 17th Annu Netw Distrib Syst Security Symp"},{"key":"ref22","first-page":"409","article-title":"MiniBox: A two-way sandbox for x86 native code","author":"li","year":"2014","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043575"},{"key":"ref24","first-page":"309","article-title":"Wedge: Splitting applications into\n reduced-privilege compartments","author":"bittau","year":"2008","journal-title":"Proc 5th USENIX Symp Netw Syst Des Implementation"},{"key":"ref23","first-page":"5","article-title":"Privtrans: Automatically partitioning programs for privilege separation","author":"brumley","year":"2004","journal-title":"Proc 13th USENIX Secur Symp"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813690"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2592798.2592811"},{"key":"ref50","article-title":"Unmodified Device Driver Reuse and\n Improved System Dependability via Virtual Machines","author":"levasseur","year":"2004","journal-title":"Proceedings of the Operating Systems Design and Implementation Symposium"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/1217935.1217941"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945466"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/2517349.2522719"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043568"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2010.61"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629581"},{"key":"ref54","first-page":"241","article-title":"Device driver safety through a reference validation mechanism","author":"williams","year":"2008","journal-title":"Proc of the 8th USENIX Symp on Operating Systems Design and Implementation"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/DASC.2007.16"},{"key":"ref52","first-page":"4","article-title":"SafeDrive: Safe and recoverable extensions\n using language-based techniques","author":"zhou","year":"2006","journal-title":"Proc of the 7th Symp on Operating systems design and implementation"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1133572.1133615"},{"key":"ref11","first-page":"480","article-title":"The reliable computing base: A paradigm for software-based reliability","author":"engel","year":"2012","journal-title":"Workshop on Software-Based Methods for Robust Embedded Systems"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.26"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/566726.566751"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1346281.1346303"},{"year":"2016","key":"ref14","article-title":"GLPK (GNU Linear Programming Kit)"},{"key":"ref15","first-page":"16","article-title":"Preventing privilege escalation","author":"provos","year":"2003","journal-title":"Proc 12th USENIX Secur Symp"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"ref17","first-page":"29","article-title":"Capsicum: Practical capabilities for\n UNIX","author":"watson","year":"2010","journal-title":"Proc 19th USENIX Security Symp"},{"key":"ref18","first-page":"273","article-title":"Privman: A library for partitioning applications","author":"kilpatrick","year":"0","journal-title":"Proc FREENIX Track USENIX Annu Tech Conf"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1346256.1346278"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2009.5270357"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2560537"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2012.6263933"},{"key":"ref5","first-page":"1","article-title":"Who watches the watchmen? - Protecting operating system reliability mechanisms","author":"d\u00f6bel","year":"2012","journal-title":"Proceedings of the 8th USENIX Conference on Hot Topics in System Dependability"},{"key":"ref8","doi-asserted-by":"crossref","DOI":"10.1201\/b12327","author":"walker","year":"2012","journal-title":"The Tao of Computing"},{"journal-title":"Linux Kernel Development How Fast It is Going Who is Doing It What They Are Doing and Who is Sponsoring It","year":"2016","author":"corbet","key":"ref7"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950401"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/800216.806586"},{"article-title":"Why does windows crash?","year":"2005","author":"ganapathi","key":"ref46"},{"article-title":"Windows XP embedded with service pack 1 reliability","year":"2003","author":"simpson","key":"ref45"},{"key":"ref48","doi-asserted-by":"crossref","first-page":"554","DOI":"10.1109\/DSN.2007.85","article-title":"Robustness testing of the windows DDK","author":"mendon\u00e7a","year":"2007","journal-title":"Proc 37th Annu IEEE\/IFIP Int Conf Depend Syst Netw"},{"key":"ref47","first-page":"12","article-title":"Windows\n XP kernel crash analysis","author":"ganapathi","year":"2006","journal-title":"20th Large Installation System Administration Conference"},{"key":"ref42","doi-asserted-by":"crossref","first-page":"23","DOI":"10.1145\/2479942.2479946","article-title":"A framework for partitioning and execution of data stream applications in mobile cloud computing","volume":"40","author":"yang","year":"2013","journal-title":"ACM SIGMETRICS Performance Eval Rev"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/1966445.1966473"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/502034.502042"},{"key":"ref43","first-page":"4","article-title":"Energy efficiency of mobile clients in cloud computing","author":"miettinen","year":"2010","journal-title":"Proc 2nd USENIX Conf Hot Topics Cloud Comput"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/8528978\/08017464.pdf?arnumber=8017464","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T21:52:44Z","timestamp":1643233964000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8017464\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,11,1]]},"references-count":71,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2017.2745574","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"type":"print","value":"1545-5971"},{"type":"electronic","value":"1941-0018"},{"type":"electronic","value":"2160-9209"}],"subject":[],"published":{"date-parts":[[2018,11,1]]}}}