{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:30:00Z","timestamp":1750221000348,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":32,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,8,5]],"date-time":"2019-08-05T00:00:00Z","timestamp":1564963200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,8,5]]},"DOI":"10.1145\/3337821.3337900","type":"proceedings-article","created":{"date-parts":[[2019,7,25]],"date-time":"2019-07-25T12:34:36Z","timestamp":1564058076000},"page":"1-10","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Reducing Kernel Surface Areas for Isolation and Scalability"],"prefix":"10.1145","author":[{"given":"Daniel","family":"Zahka","sequence":"first","affiliation":[{"name":"Department of Computer Science & Engineering, Washington University in St. Louis"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Brian","family":"Kocoloski","sequence":"additional","affiliation":[{"name":"Department of Computer Science & Engineering, Washington University in St. Louis"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kate","family":"Keahey","sequence":"additional","affiliation":[{"name":"Mathematics & Computer Science Division, Argonne National Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2019,8,5]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Intel","author":"Intel Resource Director Technology Quiet Noisy","year":"2014","unstructured":"Quiet Noisy Neighbors with Intel Resource Director Technology . Technical report , Intel , Co ., 2014 . Quiet Noisy Neighbors with Intel Resource Director Technology. Technical report, Intel, Co., 2014."},{"key":"e_1_3_2_1_2_1","volume-title":"Secure and Fast microVMs for Serverless Computing","author":"Firecracker","year":"2019","unstructured":"Firecracker : Secure and Fast microVMs for Serverless Computing , 2019 . Online ; accessed 22 Apr 2019: https:\/\/firecracker-microvm.github.io\/. Firecracker: Secure and Fast microVMs for Serverless Computing, 2019. Online; accessed 22 Apr 2019: https:\/\/firecracker-microvm.github.io\/."},{"key":"e_1_3_2_1_3_1","volume-title":"the Speed of Containers, the Security of VMs","author":"Containers Kata","year":"2019","unstructured":"Kata Containers : the Speed of Containers, the Security of VMs , 2019 . Online ; accessed 22 Apr 2019: https:\/\/katacontainers.io\/. Kata Containers: the Speed of Containers, the Security of VMs, 2019. Online; accessed 22 Apr 2019: https:\/\/katacontainers.io\/."},{"key":"e_1_3_2_1_4_1","volume-title":"a New Approach to Container Isolation","author":"Nabla","year":"2019","unstructured":"Nabla containers : a New Approach to Container Isolation , 2019 . Online ; accessed 22 Apr 2019: https:\/\/nabla-containers.github.io\/. Nabla containers: a New Approach to Container Isolation, 2019. Online; accessed 22 Apr 2019: https:\/\/nabla-containers.github.io\/."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2408776.2408794"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2010.2080550"},{"key":"e_1_3_2_1_7_1","volume-title":"March","author":"Drysdale D.","year":"2016","unstructured":"D. Drysdale . Coverage-Guided Kernel Fuzzing with Syzkaller , March 2016 . Online ; accessed 22 Apr 2019: https:\/\/lwn.net\/Articles\/677764\/. D. Drysdale. Coverage-Guided Kernel Fuzzing with Syzkaller, March 2016. Online; accessed 22 Apr 2019: https:\/\/lwn.net\/Articles\/677764\/."},{"key":"e_1_3_2_1_8_1","volume-title":"AWS EC2 Virtualization 2017: Introducing Nitro. Online","author":"Gregg B.","year":"2019","unstructured":"B. Gregg . AWS EC2 Virtualization 2017: Introducing Nitro. Online ; accessed 22 Apr 2019 : http:\/\/www.brendangregg.com\/blog\/2017-11-29\/aws-ec2-virtualization-2017.html, 2017. B. Gregg. AWS EC2 Virtualization 2017: Introducing Nitro. Online; accessed 22 Apr 2019: http:\/\/www.brendangregg.com\/blog\/2017-11-29\/aws-ec2-virtualization-2017.html, 2017."},{"key":"e_1_3_2_1_9_1","volume-title":"HEPCloud, a New Paradigm for HEP Facilities: CMS Amazon Web Services Investigation. Computing and Software for Big Science, 1(1)","author":"Holzman B.","year":"2017","unstructured":"B. Holzman , L. Bauerdick , B. Bockelman , D. Dykstra , I. Fisk , S. Fuess , G. Garzoglio , M. Girone , O. Gutsche , D. Hufnagel , H. Kim , R. Kennedy , N. Magini , and D. Mason . HEPCloud, a New Paradigm for HEP Facilities: CMS Amazon Web Services Investigation. Computing and Software for Big Science, 1(1) , 2017 . B. Holzman, L. Bauerdick, B. Bockelman, D. Dykstra, I. Fisk, S. Fuess, G. Garzoglio, M. Girone, O. Gutsche, D. Hufnagel, H. Kim, R. Kennedy, N. Magini, and D. Mason. HEPCloud, a New Paradigm for HEP Facilities: CMS Amazon Web Services Investigation. Computing and Software for Big Science, 1(1), 2017."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid.2011.22"},{"key":"e_1_3_2_1_11_1","volume-title":"Unleashing Docker for HPC. In Proceedings of the Cray User Group Meeting","author":"Jacobsen D.","year":"2015","unstructured":"D. Jacobsen and R. Canon . Contain This , Unleashing Docker for HPC. In Proceedings of the Cray User Group Meeting , 2015 . D. Jacobsen and R. Canon. Contain This, Unleashing Docker for HPC. In Proceedings of the Cray User Group Meeting, 2015."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/IISWC.2016.7581261"},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of Linux Symposium","author":"Kivity A.","year":"2007","unstructured":"A. Kivity , Y. Kamay , D. Laor , U. Lublin , and A. Liguori . kvm: the Linux Virtual Machine Monitor . In Proceedings of Linux Symposium , 2007 . A. Kivity, Y. Kamay, D. Laor, U. Lublin, and A. Liguori. kvm: the Linux Virtual Machine Monitor. In Proceedings of Linux Symposium, 2007."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS.2014.73"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3225058.3225125"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2818950.2818965"},{"key":"e_1_3_2_1_17_1","volume-title":"Singularity: Scientific Containers for Mobility of Compute. PloS ONE, 12(5)","author":"Kurtzer G.","year":"2017","unstructured":"G. Kurtzer , V. Sochat , and M. Bauer . Singularity: Scientific Containers for Mobility of Compute. PloS ONE, 12(5) , 2017 . G. Kurtzer, V. Sochat, and M. Bauer. Singularity: Scientific Containers for Mobility of Compute. PloS ONE, 12(5), 2017."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2901318.2901329"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2885497"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/CLUSTER.2018.00022"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCRI.2015.10"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132763"},{"issue":"239","key":"e_1_3_2_1_23_1","article-title":"Lightweight Linux Containers for Consistent Development and Deployment","volume":"2014","author":"Merkel D.","year":"2014","unstructured":"D. Merkel . Docker : Lightweight Linux Containers for Consistent Development and Deployment . Linux Journal , 2014 ( 239 ), 2014 . D. Merkel. Docker: Lightweight Linux Containers for Consistent Development and Deployment. Linux Journal, 2014(239), 2014.","journal-title":"Linux Journal"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2749246.2749273"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SC.2018.00029"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2856126"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/582034.582091"},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation, (OSDI '12)","author":"Shue D.","year":"2012","unstructured":"D. Shue , M. Freedman , and A. Shaikh . Performance Isolation and Fairness for Multi-Tenant Cloud Storage . In Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation, (OSDI '12) , 2012 . D. Shue, M. Freedman, and A. Shaikh. Performance Isolation and Fairness for Multi-Tenant Cloud Storage. In Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation, (OSDI '12), 2012."},{"issue":"1","key":"e_1_3_2_1_29_1","first-page":"1","volume":"8","author":"Storlie C.","year":"2014","unstructured":"C. Storlie , B. Anderson , S. V. Wiel , D. Quist , C. Hash , and N. Brown . Stochastic Identification of Malware with Dynamic Traces. The Annals of Applied Statistics , 8 ( 1 ): 1 -- 18 , 2014 . C. Storlie, B. Anderson, S. V. Wiel, D. Quist, C. Hash, and N. Brown. Stochastic Identification of Malware with Dynamic Traces. The Annals of Applied Statistics, 8(1):1--18, 2014.","journal-title":"Stochastic Identification of Malware with Dynamic Traces. The Annals of Applied Statistics"},{"key":"e_1_3_2_1_30_1","volume-title":"Exascale Numerical Laboratories. In Future Online Analysis Workshop, 2017","author":"Szalay A.","year":"2017","unstructured":"A. Szalay . Exascale Numerical Laboratories. In Future Online Analysis Workshop, 2017 . Online : https:\/\/press3.mcs.anl.gov\/\/futureplatform\/files\/ 2017 \/01\/szalay-doe-workshop-2017.pdf. A. Szalay. Exascale Numerical Laboratories. In Future Online Analysis Workshop, 2017. Online: https:\/\/press3.mcs.anl.gov\/\/futureplatform\/files\/2017\/01\/szalay-doe-workshop-2017.pdf."},{"key":"e_1_3_2_1_31_1","volume-title":"VMware","author":"Taheri R.","year":"2015","unstructured":"R. Taheri . Virtualizing Performance-Critical Database Applications in VMware vSphere 6.0. Technical report , VMware , 2015 . R. Taheri. Virtualizing Performance-Critical Database Applications in VMware vSphere 6.0. Technical report, VMware, 2015."},{"key":"e_1_3_2_1_32_1","volume-title":"February","author":"Vyukov D.","year":"2016","unstructured":"D. Vyukov . Kernel: add Kcov Code Coverage , February 2016 . Online ; accessed 22 Apr 2019: https:\/\/lwn.net\/Articles\/674854\/. D. Vyukov. Kernel: add Kcov Code Coverage, February 2016. Online; accessed 22 Apr 2019: https:\/\/lwn.net\/Articles\/674854\/."}],"event":{"name":"ICPP 2019: 48th International Conference on Parallel Processing","sponsor":["University of Tsukuba University of Tsukuba"],"location":"Kyoto Japan","acronym":"ICPP 2019"},"container-title":["Proceedings of the 48th International Conference on Parallel Processing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3337821.3337900","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3337821.3337900","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:25:41Z","timestamp":1750206341000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3337821.3337900"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,8,5]]},"references-count":32,"alternative-id":["10.1145\/3337821.3337900","10.1145\/3337821"],"URL":"https:\/\/doi.org\/10.1145\/3337821.3337900","relation":{},"subject":[],"published":{"date-parts":[[2019,8,5]]},"assertion":[{"value":"2019-08-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}