{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,20]],"date-time":"2026-02-20T18:43:38Z","timestamp":1771613018046,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":51,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,10,11]],"date-time":"2018-10-11T00:00:00Z","timestamp":1539216000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,10,11]]},"DOI":"10.1145\/3267809.3267845","type":"proceedings-article","created":{"date-parts":[[2018,9,28]],"date-time":"2018-09-28T18:00:41Z","timestamp":1538157641000},"page":"199-211","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":42,"title":["Unikernels as Processes"],"prefix":"10.1145","author":[{"given":"Dan","family":"Williams","sequence":"first","affiliation":[{"name":"IBM T.J. Watson Research Center"}]},{"given":"Ricardo","family":"Koller","sequence":"additional","affiliation":[{"name":"IBM T.J. Watson Research Center"}]},{"given":"Martin","family":"Lucina","sequence":"additional","affiliation":[{"name":"robur.io \/ Center for the Cultivation of Technology"}]},{"given":"Nikhil","family":"Prakash","sequence":"additional","affiliation":[{"name":"BITS Pilani"}]}],"member":"320","published-online":{"date-parts":[[2018,10,11]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"AWS Lambda. https:\/\/aws.amazon.com\/lambda\/. (Accessed on 2018-08-28).  AWS Lambda. https:\/\/aws.amazon.com\/lambda\/. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_2_1","unstructured":"Clive: Removing (most of) the software stack from the cloud. http:\/\/lsub.org\/ls\/clive.html. (Accessed on 2018-08-28).  Clive: Removing (most of) the software stack from the cloud. http:\/\/lsub.org\/ls\/clive.html. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_3_1","unstructured":"Erlang on Xen. http:\/\/erlangonxen.org. (Accessed on 2018-08-28).  Erlang on Xen. http:\/\/erlangonxen.org. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_4_1","unstructured":"frankenlibc - tools for running rump unikernels in userspace. https:\/\/github.com\/justincormack\/frankenlibc. (Accessed on 2018-08-28).  frankenlibc - tools for running rump unikernels in userspace. https:\/\/github.com\/justincormack\/frankenlibc. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_5_1","unstructured":"ftrace - Function Tracer. https:\/\/www.kernel.org\/doc\/Documentation\/trace\/ftrace.txt. (Accessed on 2018-08-28).  ftrace - Function Tracer. https:\/\/www.kernel.org\/doc\/Documentation\/trace\/ftrace.txt. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_6_1","unstructured":"gvisor - Container Runtime Sandbox. https:\/\/github.com\/google\/gvisor. (Accessed on 2018-08-28).  gvisor - Container Runtime Sandbox. https:\/\/github.com\/google\/gvisor. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_7_1","unstructured":"IBM Cloud functions. https:\/\/www.ibm.com\/cloud\/functions. (Accessed on 2018-08-28).  IBM Cloud functions. https:\/\/www.ibm.com\/cloud\/functions. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_8_1","unstructured":"Kernel Samepage Merging. https:\/\/www.linux-kvm.org\/page\/KSM. (Accessed on 2018-08-28).  Kernel Samepage Merging. https:\/\/www.linux-kvm.org\/page\/KSM. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_9_1","unstructured":"The rumprun unikernel and toolchain for various platforms. http:\/\/repo.rumpkernel.org\/rumprun. (Accessed on 2018-08-28).  The rumprun unikernel and toolchain for various platforms. http:\/\/repo.rumpkernel.org\/rumprun. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_10_1","unstructured":"runtime.js - javascript library operating system for the cloud. http:\/\/runtimejs.org\/. (Accessed on 2018-08-28).  runtime.js - javascript library operating system for the cloud. http:\/\/runtimejs.org\/. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_11_1","unstructured":"Seccomp security profiles for Docker. https:\/\/docs.docker.com\/engine\/security\/seccomp\/. (Accessed on 2018-08-28).  Seccomp security profiles for Docker. https:\/\/docs.docker.com\/engine\/security\/seccomp\/. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_12_1","unstructured":"Solo5 - A sandboxed execution environment for unikernels. https:\/\/github.com\/solo5\/solo5. (Accessed on 2018-08-28).  Solo5 - A sandboxed execution environment for unikernels. https:\/\/github.com\/solo5\/solo5. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_13_1","unstructured":"The Python Performance Benchmark Suite. http:\/\/pyperformance.readthedocs.io\/. (Accessed on 2018-08-28).  The Python Performance Benchmark Suite. http:\/\/pyperformance.readthedocs.io\/. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_14_1","unstructured":"Trinity - A Linux System call fuzz tester. http:\/\/codemonkey.org.uk\/projects\/trinity\/. (Accessed on 2018-08-28).  Trinity - A Linux System call fuzz tester. http:\/\/codemonkey.org.uk\/projects\/trinity\/. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_15_1","unstructured":"Zerovm. http:\/\/www.zerovm.org\/. (Accessed on 2018-08-28).  Zerovm. http:\/\/www.zerovm.org\/. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945462"},{"key":"e_1_3_2_1_17_1","volume-title":"Proc. of USENIX OSDI","author":"Ben-Yehuda M.","year":"2010"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2015.89"},{"key":"e_1_3_2_1_19_1","unstructured":"Cantrill B. Unikernels are unfit for production. https:\/\/www.joyent.com\/blog\/unikernels-are-unfit-for-production Jan. 2016. (Accessed on 2018-08-28).  Cantrill B. Unikernels are unfit for production. https:\/\/www.joyent.com\/blog\/unikernels-are-unfit-for-production Jan. 2016. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629581"},{"key":"e_1_3_2_1_21_1","unstructured":"Corbet J. Securely renting out your CPU with Linux. https:\/\/lwn.net\/Articles\/120647\/ Jan. 2005. (Accessed on 2018-08-28).  Corbet J. Securely renting out your CPU with Linux. https:\/\/lwn.net\/Articles\/120647\/ Jan. 2005. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_22_1","unstructured":"Dautenhahn N. Kasampalis T. Dietz W. Criswell J. and Adve V. Nested kernel: An operating system architecture for intra-kernel privilege separation.  Dautenhahn N. Kasampalis T. Dietz W. Criswell J. and Adve V. Nested kernel: An operating system architecture for intra-kernel privilege separation."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-67425-4_12"},{"key":"e_1_3_2_1_24_1","unstructured":"Edge J. A seccomp overview. https:\/\/lwn.net\/Articles\/656307\/ Sept. 2015. (Accessed on 2018-08-28).  Edge J. A seccomp overview. https:\/\/lwn.net\/Articles\/656307\/ Sept. 2015. (Accessed on 2018-08-28)."},{"key":"e_1_3_2_1_25_1","volume-title":"Proc. of USENIX OSDI","author":"Erlingsson","year":"2006"},{"key":"e_1_3_2_1_26_1","volume-title":"Proc. of USENIX OSDI","author":"Gupta D.","year":"2008"},{"key":"e_1_3_2_1_27_1","volume-title":"Proc. of USENIX Annual Technical Conf.","author":"Kivity A.","year":"2014"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3102980.3103008"},{"key":"e_1_3_2_1_30_1","volume-title":"Proc. of Internet Society NDSS","author":"Kurmus A.","year":"2013"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660331"},{"key":"e_1_3_2_1_32_1","volume-title":"Proc. of USENIX Annual Technical Conf.","author":"Li Y.","year":"2017"},{"key":"e_1_3_2_1_33_1","volume-title":"Proc. of USENIX Security Symposium","author":"Lipp M.","year":"2018"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451167"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132763"},{"key":"e_1_3_2_1_36_1","volume-title":"Proc. of USENIX NSDI","author":"Martins J.","year":"2014"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1976.233837"},{"key":"e_1_3_2_1_38_1","volume-title":"Proc. of Winter USENIX Conference","author":"McCanne S.","year":"1993"},{"key":"e_1_3_2_1_39_1","unstructured":"OpenBSD. PLEDGE(2) - restrict system operations OpenBSD man page.  OpenBSD. PLEDGE(2) - restrict system operations OpenBSD man page."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950399"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23455"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2541583.2541587"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/1047915.1047919"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2015.139"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.5555\/1060289.1060307"},{"key":"e_1_3_2_1_46_1","volume-title":"Proc. of USENIX Security Symposium","author":"Watson R. N.","year":"2010"},{"key":"e_1_3_2_1_47_1","volume-title":"Proc. of USENIX HotCloud","author":"Williams D.","year":"2016"},{"key":"e_1_3_2_1_48_1","volume-title":"Proc. of USENIX HotCloud","author":"Williams D.","year":"2018"},{"key":"e_1_3_2_1_49_1","volume-title":"Proc. of Internet Society NDSS","author":"Wu C.","year":"2013"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.25"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043576"}],"event":{"name":"SoCC '18: ACM Symposium on Cloud Computing","location":"Carlsbad CA USA","acronym":"SoCC '18","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the ACM Symposium on Cloud Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3267809.3267845","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3267809.3267845","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:44:30Z","timestamp":1750207470000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3267809.3267845"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,10,11]]},"references-count":51,"alternative-id":["10.1145\/3267809.3267845","10.1145\/3267809"],"URL":"https:\/\/doi.org\/10.1145\/3267809.3267845","relation":{},"subject":[],"published":{"date-parts":[[2018,10,11]]},"assertion":[{"value":"2018-10-11","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}