{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,28]],"date-time":"2026-07-28T05:17:19Z","timestamp":1785215839114,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":65,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,5,8]],"date-time":"2023-05-08T00:00:00Z","timestamp":1683504000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"European Research Council","award":["610150"],"award-info":[{"award-number":["610150"]}]},{"DOI":"10.13039\/501100001659","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["CRC 1223"],"award-info":[{"award-number":["CRC 1223"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,5,8]]},"DOI":"10.1145\/3552326.3567503","type":"proceedings-article","created":{"date-parts":[[2023,5,5]],"date-time":"2023-05-05T17:33:02Z","timestamp":1683307982000},"page":"398-415","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":16,"title":["Groundhog: Efficient Request Isolation in FaaS"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5461-0213","authenticated-orcid":false,"given":"Mohamed","family":"Alzayat","sequence":"first","affiliation":[{"name":"Max Planck Institute for Software Systems (MPI-SWS), Saarbruecken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3701-9296","authenticated-orcid":false,"given":"Jonathan","family":"Mace","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Software Systems (MPI-SWS), Saarbruecken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7239-1114","authenticated-orcid":false,"given":"Peter","family":"Druschel","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Software Systems (MPI-SWS), Saarbruecken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0888-3093","authenticated-orcid":false,"given":"Deepak","family":"Garg","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Software Systems (MPI-SWS), Saarbruecken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,5,8]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Cve-2014-0160: The Heartbleed Bug."},{"key":"e_1_3_2_1_2_1","first-page":"07","article-title":"-23633: Action Pack Rails possible leak of response to subsequent requests. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-23633","volume":"12","author":"Aaron Patterson","year":"2022","unstructured":"Aaron Patterson. CVE-2022-23633: Action Pack Rails possible leak of response to subsequent requests. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-23633, Accessed 12.07.2022.","journal-title":"Accessed"},{"key":"e_1_3_2_1_3_1","first-page":"419","volume-title":"17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20)","author":"Agache A.","year":"2020","unstructured":"Agache, A., Brooker, M., Iordache, A., Liguori, A., Neugebauer, R., Piwonka, P., and Popa, D.-M. Firecracker: Lightweight virtualization for serverless applications. In 17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20) (2020), pp. 419--434."},{"key":"e_1_3_2_1_4_1","first-page":"923","volume-title":"2018 Usenix Annual Technical Conference (USENIX ATC 18)","author":"Akkus I. E.","year":"2018","unstructured":"Akkus, I. E., Chen, R., Rimac, I., Stein, M., Satzke, K., Beck, A., Aditya, P., and Hilt, V. SAND: Towards high-performance serverless computing. In 2018 Usenix Annual Technical Conference (USENIX ATC 18) (2018), pp. 923--935."},{"key":"e_1_3_2_1_5_1","unstructured":"Alzayat Mohamed and Mace Jonathan and Druschel Peter and Garg Deepak . Groundhog Project Website. https:\/\/groundhog.mpi-sws.org\/."},{"key":"e_1_3_2_1_6_1","unstructured":"Amazon AWS. AWS Lambda. https:\/\/aws.amazon.com\/lambda\/."},{"key":"e_1_3_2_1_7_1","first-page":"11","article-title":"-11-13. https:\/\/aws.amazon.com\/blogs\/aws\/new-provisioned-concurrency-for-lambda-functions\/\/","volume":"24","author":"Amazon AWS","year":"2014","unstructured":"Amazon AWS. Release: AWS Lambda on 2014-11-13. https:\/\/aws.amazon.com\/blogs\/aws\/new-provisioned-concurrency-for-lambda-functions\/\/, Accessed 24.11.2021.","journal-title":"Accessed"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3492321.3524270"},{"key":"e_1_3_2_1_9_1","unstructured":"Apache. OpenWhisk. https:\/\/openwhisk.apache.org\/."},{"key":"e_1_3_2_1_10_1","unstructured":"Apache. Apache MPM prefork. https:\/\/httpd.apache.org\/docs\/2.4\/mod\/prefork.html Accessed 02.03.2021."},{"key":"e_1_3_2_1_11_1","unstructured":"Apache. Pre-Warmed actions in Openwhisk. https:\/\/github.com\/apache\/openwhisk\/blob\/master\/docs\/actions.md\/ Accessed 24.11.2021."},{"key":"e_1_3_2_1_12_1","first-page":"07","article-title":"-13943: Apache Tomcat possible leakage of previous request headers. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-13943","volume":"12","author":"Apache Tomcat Security","year":"2020","unstructured":"Apache Tomcat Security team. CVE-2020-13943: Apache Tomcat possible leakage of previous request headers. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-13943, Accessed 12.07.2022.","journal-title":"Accessed"},{"key":"e_1_3_2_1_13_1","first-page":"07","article-title":"-25762: Apache Tomcat request mix-up. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-25762","volume":"12","author":"Apache Tomcat Security","year":"2022","unstructured":"Apache Tomcat Security team. CVE-2022-25762: Apache Tomcat request mix-up. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-25762, Accessed 12.07.2022.","journal-title":"Accessed"},{"key":"e_1_3_2_1_14_1","unstructured":"AWS Lambda. Implementing statelessness in functions. https:\/\/docs.aws.amazon.com\/lambda\/latest\/operatorguide\/statelessness-functions.html Accessed 01.09.2022."},{"key":"e_1_3_2_1_15_1","unstructured":"AWS Lambda. Security Overview of AWS Lambda. https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/security-overview-aws-lambda\/lambda-executions.html Accessed 01.09.2022."},{"key":"e_1_3_2_1_16_1","unstructured":"AWS Lambda. Predictable start-up times with Provisioned Concurrency). https:\/\/aws.amazon.com\/blogs\/compute\/new-for-aws-lambda-predictable-start-up-times-with-provisioned-concurrency\/ Accessed 02.03.2021."},{"key":"e_1_3_2_1_17_1","first-page":"645","volume-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Boucher S.","year":"2018","unstructured":"Boucher, S., Kalia, A., Andersen, D. G., and Kaminsky, M. Putting the\" micro\" back in microservice. In 2018 USENIX Annual Technical Conference (USENIX ATC 18) (2018), pp. 645--650."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3392698"},{"key":"e_1_3_2_1_19_1","first-page":"915","volume-title":"Proceedings of the 3rd International Conference on Mechatronics and Industrial Informatics (2015\/10)","author":"Chen Y.","unstructured":"Chen, Y. Checkpoint and restore of micro-service in docker containers. In Proceedings of the 3rd International Conference on Mechatronics and Industrial Informatics (2015\/10), pp. 915--918."},{"key":"e_1_3_2_1_20_1","unstructured":"Cloudflare. Cloudflare Workers. https:\/\/workers.cloudflare.com\/ Accessed 25.11.2021."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCGRID.2006.106"},{"key":"e_1_3_2_1_22_1","unstructured":"CRIU. Checkpoint\/Restore In Userspace). https:\/\/www.criu.org\/ Accessed 03.12.2020."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378512"},{"key":"e_1_3_2_1_24_1","unstructured":"Emptymonkey . A ptrace library designed to simplify syscall injection in Linux. https:\/\/github.com\/emptymonkey\/ptrace_do Accessed 03.12.2020."},{"key":"e_1_3_2_1_25_1","unstructured":"Fastly. https:\/\/www.fastly.com\/). https:\/\/www.fastly.com\/ Accessed 25.11.2021."},{"key":"e_1_3_2_1_26_1","unstructured":"Google. Google Cloud Functions. https:\/\/cloud.google.com\/functions Accessed 12.01.2022."},{"key":"e_1_3_2_1_27_1","unstructured":"Google Cloud Functions. Tips & Tricks for Cold Start). https:\/\/cloud.google.com\/functions\/docs\/bestpractices\/tips Accessed 02.03.2021."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3062341.3062363"},{"key":"e_1_3_2_1_29_1","unstructured":"IBM. IBM Cloud functions. https:\/\/cloud.ibm.com\/functions\/ Accessed 12.01.2022."},{"key":"e_1_3_2_1_30_1","first-page":"07","article-title":"-26281: async-h1 HTTP\/1.1 parser for Rust leak different user's request. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-26281","volume":"12","author":"Jacob Rothstein","year":"2020","unstructured":"Jacob Rothstein. CVE-2020-26281: async-h1 HTTP\/1.1 parser for Rust leak different user's request. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-26281, Accessed 12.07.2022.","journal-title":"Accessed"},{"key":"e_1_3_2_1_31_1","first-page":"107","volume-title":"2019 USENIX Annual Technical Conference (USENIX ATC 19)","author":"Jangda A.","year":"2019","unstructured":"Jangda, A., Powers, B., Berger, E. D., and Guha, A. Not so fast: Analyzing the performance of webassembly vs. native code. In 2019 USENIX Annual Technical Conference (USENIX ATC 19) (2019), pp. 107--120."},{"key":"e_1_3_2_1_32_1","unstructured":"John Graham-Cumming (cloudflare). Cloudbleed: Incident report on memory leak caused by Cloudflare parser bug. https:\/\/blog.cloudflare.com\/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug\/ Accessed 11.07.2022."},{"key":"e_1_3_2_1_33_1","volume-title":"Pagurus: Eliminating cold startup in serverless computing with inter-action container sharing. arXiv preprint arXiv:2108.11240","author":"Li Z.","year":"2021","unstructured":"Li, Z., Chen, Q., and Guo, M. Pagurus: Eliminating cold startup in serverless computing with inter-action container sharing. arXiv preprint arXiv:2108.11240 (2021)."},{"key":"e_1_3_2_1_34_1","unstructured":"Linux. Fork system call. https:\/\/man7.org\/linux\/man-pages\/man2\/fork.2.html\/ Accessed 21.04.2021."},{"key":"e_1_3_2_1_35_1","unstructured":"Linux. ptrace - process trace interface. https:\/\/man7.org\/linux\/man-pages\/man2\/ptrace.2.html\/ Accessed 21.04.2021."},{"key":"e_1_3_2_1_36_1","unstructured":"Linux. SOFT-DIRTY PTEs. https:\/\/www.kernel.org\/doc\/Documentation\/vm\/soft-dirty.txt\/ Accessed 21.04.2021."},{"key":"e_1_3_2_1_37_1","unstructured":"Linux. Userfaultfd. https:\/\/www.kernel.org\/doc\/html\/latest\/admin-guide\/mm\/userfaultfd.html Accessed 21.04.2021."},{"key":"e_1_3_2_1_38_1","first-page":"383","volume-title":"12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16)","author":"Lion D.","year":"2016","unstructured":"Lion, D., Chiu, A., Sun, H., Zhuang, X., Grcevski, N., and Yuan, D. Don't get caught in the cold, warm-up your JVM: Understand and eliminate JVM warm-up overhead in data-parallel systems. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16) (2016), pp. 383--400."},{"key":"e_1_3_2_1_39_1","first-page":"49","volume-title":"12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16)","author":"Litton J.","year":"2016","unstructured":"Litton, J., Vahldiek-Oberwagner, A., Elnikety, E., Garg, D., Bhattacharjee, B., and Druschel, P. Light-weight contexts: An OS abstraction for safety and performance. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16) (2016), pp. 49--64."},{"key":"e_1_3_2_1_40_1","unstructured":"Louis-Noel Pouchet. Polybench\/C). http:\/\/web.cse.ohio-state.edu\/~pouchet.2\/software\/polybench\/ Accessed 21.11.2021."},{"key":"e_1_3_2_1_41_1","unstructured":"Microsoft. Azure Functions. https:\/\/azure.microsoft.com\/en-us\/services\/functions\/ Accessed 04.01.2022."},{"key":"e_1_3_2_1_42_1","unstructured":"Mohamed ALzayat. Detecting a bug in soft-dirty bits Kernel v5.6+. https:\/\/lore.kernel.org\/linux-mm\/daa3dd43-1c1d-e035-58ea-994796df4660@suse.cz\/T\/ Accessed 20.04.2021."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.5555\/3357034.3357060"},{"key":"e_1_3_2_1_44_1","first-page":"57","volume-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Oakes E.","year":"2018","unstructured":"Oakes, E., Yang, L., Zhou, D., Houck, K., Harter, T., Arpaci-Dusseau, A., and Arpaci-Dusseau, R. SOCK: Rapid task provisioning with serverless-optimized containers. In 2018 USENIX Annual Technical Conference (USENIX ATC 18) (2018), pp. 57--70."},{"key":"e_1_3_2_1_45_1","unstructured":"OpenFaaS. OpenFaaS. https:\/\/www.openfaas.com\/ Accessed 12.01.2022."},{"key":"e_1_3_2_1_46_1","unstructured":"OpenWhisk. OpenWhisk commit. https:\/\/github.com\/apache\/openwhisk\/commit\/ed3f76e38d89468d11e862ee0539e74f02ac7f8e."},{"key":"e_1_3_2_1_47_1","unstructured":"OWASP . OWASP Serverless Top 10. https:\/\/owasp.org\/www-project-serverless-top-10\/ Accessed 02.03.2021."},{"key":"e_1_3_2_1_48_1","unstructured":"Rich Jones. Gone in 60 Milliseconds: Intrusion and Exfiltration in Server-less Architectures. https:\/\/media.ccc.de\/v\/33c3-7865-gone_in_60_milliseconds Accessed 02.03.2021."},{"key":"e_1_3_2_1_49_1","first-page":"492","volume-title":"PDPTA","volume":"6","author":"Rieker M.","year":"2006","unstructured":"Rieker, M., Ansel, J., and Cooperman, G. Transparent user-level checkpointing for the native posix thread library for linux. In PDPTA (2006), vol. 6, pp. 492--498."},{"key":"e_1_3_2_1_50_1","first-page":"1063","volume-title":"Proceedings of the 52nd Annual IEEE\/ACM International Symposium on Microarchitecture (2019), MICRO '52","author":"Shahrad M.","unstructured":"Shahrad, M., Balkind, J., and Wentzlaff, D. Architectural implications of function-as-a-service computing. In Proceedings of the 52nd Annual IEEE\/ACM International Symposium on Microarchitecture (2019), MICRO '52, p. 1063--1075."},{"key":"e_1_3_2_1_51_1","first-page":"205","volume-title":"2020 USENIX Annual Technical Conference (USENIX ATC 20)","author":"Shahrad M.","year":"2020","unstructured":"Shahrad, M., Fonseca, R., Goiri, I., Chaudhry, G., Batum, P., Cooke, J., Laureano, E., Tresness, C., Russinovich, M., and Bianchini, R. Serverless in the wild: Characterizing and optimizing the serverless workload at a large cloud provider. In 2020 USENIX Annual Technical Conference (USENIX ATC 20) (July 2020), pp. 205--218."},{"key":"e_1_3_2_1_52_1","first-page":"419","volume-title":"2020 USENIX Annual Technical Conference (USENIX ATC 20)","author":"Shillaker S.","year":"2020","unstructured":"Shillaker, S., and Pietzuch, P. Faasm: Lightweight isolation for efficient stateful serverless computing. In 2020 USENIX Annual Technical Conference (USENIX ATC 20) (July 2020), pp. 419--433."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3423211.3425682"},{"key":"e_1_3_2_1_54_1","volume-title":"Refunction: Eliminating serverless cold starts through container reuse. Master's thesis","author":"Stenbom O.","year":"2019","unstructured":"Stenbom, O. Refunction: Eliminating serverless cold starts through container reuse. Master's thesis, Imperial College London, 2019."},{"key":"e_1_3_2_1_55_1","first-page":"199","volume-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Thalheim J.","year":"2018","unstructured":"Thalheim, J., Bhatotia, P., Fonseca, P., and Kasikci, B. Cntr: Lightweight OS containers. In 2018 USENIX Annual Technical Conference (USENIX ATC 18) (2018), pp. 199--212."},{"key":"e_1_3_2_1_56_1","first-page":"12","article-title":"-papers\/13\/-Lucet-A-Compiler-and-Runtime-for-High-Concurrency-Low-Latency-Sandboxing","volume":"03","author":"Tyler McMullen A","year":"2020","unstructured":"Tyler McMullen (Fastly). Lucet: A Compiler and Runtime for High-Concurrency Low-Latency Sandboxing). https:\/\/popl20.sigplan.org\/details\/prisc-2020-papers\/13\/-Lucet-A-Compiler-and-Runtime-for-High-Concurrency-Low-Latency-Sandboxing, Accessed 03.12.2020.","journal-title":"Accessed"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3445814.3446714"},{"key":"e_1_3_2_1_58_1","volume-title":"Linux Symposium","volume":"69","author":"Vasavada M.","year":"2011","unstructured":"Vasavada, M., Mueller, F., Hargrove, P. H., and Roman, E. Comparing different approaches for incremental checkpointing: The showdown. In Linux Symposium (2011), vol. 69."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3357526.3357542"},{"key":"e_1_3_2_1_60_1","unstructured":"Victor Stinner. The Python Performance Benchmark Suite). https:\/\/pyperformance.readthedocs.io Accessed 21.11.2021."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2015.45"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3302424.3303978"},{"key":"e_1_3_2_1_63_1","first-page":"07","article-title":"-27218: Eclipse jetty possible data injection into subsequent request. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-27218","volume":"12","author":"Wayne Beaton","year":"2020","unstructured":"Wayne Beaton. CVE-2020-27218: Eclipse jetty possible data injection into subsequent request. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020-27218, Accessed 12.07.2022.","journal-title":"Accessed"},{"key":"e_1_3_2_1_64_1","unstructured":"WebAssembly. WebAssembly). https:\/\/webassembly.org\/."},{"key":"e_1_3_2_1_65_1","first-page":"07","article-title":"-16779: RubyGem excon leak previous response. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-16779","volume":"12","author":"Wesley Beary","year":"2019","unstructured":"Wesley Beary. CVE-2019-16779: RubyGem excon leak previous response. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-16779, Accessed 12.07.2022.","journal-title":"Accessed"}],"event":{"name":"EuroSys '23: Eighteenth European Conference on Computer Systems","location":"Rome Italy","acronym":"EuroSys '23","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the Eighteenth European Conference on Computer Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3552326.3567503","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3552326.3567503","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:47:39Z","timestamp":1750178859000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3552326.3567503"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,8]]},"references-count":65,"alternative-id":["10.1145\/3552326.3567503","10.1145\/3552326"],"URL":"https:\/\/doi.org\/10.1145\/3552326.3567503","relation":{},"subject":[],"published":{"date-parts":[[2023,5,8]]},"assertion":[{"value":"2023-05-08","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}