{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,16]],"date-time":"2026-01-16T01:06:23Z","timestamp":1768525583120,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":45,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,3,30]],"date-time":"2025-03-30T00:00:00Z","timestamp":1743292800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"DARPA","award":["N66001-21-C-4024"],"award-info":[{"award-number":["N66001-21-C-4024"]}]},{"DOI":"10.13039\/501100006374","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CNS-17499711"],"award-info":[{"award-number":["CNS-17499711"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"name":"ONR","award":["N00014-23-1-2095"],"award-info":[{"award-number":["N00014-23-1-2095"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,3,30]]},"DOI":"10.1145\/3689031.3696090","type":"proceedings-article","created":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T06:25:20Z","timestamp":1742970320000},"page":"1177-1193","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Rakis: Secure Fast I\/O Primitives Across Trust Boundaries on Intel SGX"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-2458-7995","authenticated-orcid":false,"given":"Mansour","family":"Alharthi","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, United States"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-0532-5798","authenticated-orcid":false,"given":"Fan","family":"Sang","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, United States"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-3342-4494","authenticated-orcid":false,"given":"Dmitrii","family":"Kuvaiskii","sequence":"additional","affiliation":[{"name":"Intel Corporation, Hillsboro, United States"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5309-0391","authenticated-orcid":false,"given":"Mona","family":"Vij","sequence":"additional","affiliation":[{"name":"Intel Corporation, Hillsboro, United States"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7440-2067","authenticated-orcid":false,"given":"Taesoo","family":"Kim","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, United States"}]}],"member":"320","published-online":{"date-parts":[[2025,3,30]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"SCONE: Secure Linux Containers with Intel SGX. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16)","author":"Arnautov Sergei","year":"2016","unstructured":"Sergei Arnautov, Bohdan Trach, Franz Gregor, Thomas Knauth, Andre Martin, Christian Priebe, Joshua Lind, Divya Muthukumaran, Dan O'Keeffe, Mark L. Stillwell, David Goltzsche, Dave Eyers, R\u00fcdiger Kapitza, Peter Pietzuch, and Christof Fetzer. 2016. SCONE: Secure Linux Containers with Intel SGX. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16). USENIX Association, Savannah, GA, 689--703. https:\/\/www.usenix.org\/conference\/osdi16\/technical-sessions\/presentation\/arnautov"},{"key":"e_1_3_2_1_2_1","volume-title":"17th USENIX Conference on File and Storage Technologies (FAST 19)","author":"Bailleu Maurice","year":"2019","unstructured":"Maurice Bailleu, J\u00f6rg Thalheim, Pramod Bhatotia, Christof Fetzer, Michio Honda, and Kapil Vaswani. 2019. SPEICHER: Securing LSM-based Key-Value Stores using Shielded Execution. In 17th USENIX Conference on File and Storage Technologies (FAST 19). USENIX Association, Boston, MA, 173--190. https:\/\/www.usenix.org\/conference\/fast19\/presentation\/bailleu"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/2685048.2685070"},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Belay Adam","year":"2012","unstructured":"Adam Belay, Andrea Bittau, Ali Mashtizadeh, David Terei, David Mazi\u00e8res, and Christos Kozyrakis. 2012. Dune: Safe User-level Access to Privileged CPU Features. In Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI). Hollywood, CA."},{"key":"e_1_3_2_1_5_1","volume-title":"Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation","author":"Cadar Cristian","year":"2008","unstructured":"Cristian Cadar, Daniel Dunbar, and Dawson Engler. 2008. KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs. In Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation (San Diego, California) (OSDI'08). USENIX Association, USA, 209--224."},{"key":"e_1_3_2_1_6_1","volume-title":"Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX. In 2017 USENIX Annual Technical Conference (USENIX ATC 17)","author":"Tsai Chia","year":"2017","unstructured":"Chia che Tsai, Donald E. Porter, and Mona Vij. 2017. Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX. In 2017 USENIX Annual Technical Conference (USENIX ATC 17). USENIX Association, Santa Clara, CA, 645--658. https:\/\/www.usenix.org\/conference\/atc17\/technical-sessions\/presentation\/tsai"},{"key":"e_1_3_2_1_7_1","unstructured":"Graeme Connell. 2022. Technology Deep Dive: Building a Faster ORAM Layer for Enclaves. https:\/\/signal.org\/blog\/building-faster-oram\/."},{"key":"e_1_3_2_1_8_1","unstructured":"Curl. 2023. A command line tool for transferring data with URLs. https:\/\/curl.se\/."},{"key":"e_1_3_2_1_9_1","unstructured":"Curl. 2023. HTTP\/3 with Curl. https:\/\/curl.se\/docs\/http3.html."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"Jason A Donenfeld. 2017. Wireguard: next generation kernel network tunnel.. In NDSS. 1--12.","DOI":"10.14722\/ndss.2017.23160"},{"key":"e_1_3_2_1_11_1","unstructured":"DPDK. 2023. Data Plane Development Kit (DPDK). http:\/\/www.dpdk.org."},{"key":"e_1_3_2_1_12_1","volume-title":"14th USENIX Workshop on Offensive Technologies (WOOT 20)","author":"Fioraldi Andrea","year":"2020","unstructured":"Andrea Fioraldi, Dominik Maier, Heiko Ei\u00dffeldt, and Marc Heuse. 2020. AFL++: Combining Incremental Steps of Fuzzing Research. In 14th USENIX Workshop on Offensive Technologies (WOOT 20). USENIX Association."},{"key":"e_1_3_2_1_13_1","unstructured":"Chris Hager and Frieder Paape. 2023. Block Building inside SGX. https:\/\/writings.flashbots.net\/block-building-inside-sgx."},{"key":"e_1_3_2_1_14_1","volume-title":"Achieving Keyless CDNs with Conclaves. In 29th USENIX Security Symposium (USENIX Security 20)","author":"Herwig Stephen","year":"2020","unstructured":"Stephen Herwig, Christina Garman, and Dave Levin. 2020. Achieving Keyless CDNs with Conclaves. In 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, 735--751. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/herwig"},{"key":"e_1_3_2_1_15_1","unstructured":"Intel 2023. Intel\u00ae Software Guard Extensions Programming Reference. https:\/\/www.intel.com\/content\/dam\/develop\/external\/us\/en\/documents\/329298-002-629101.pdf."},{"key":"e_1_3_2_1_16_1","unstructured":"io_uring. 2023. Efficient IO with io_uring. https:\/\/kernel.dk\/io_uring.pdf."},{"key":"e_1_3_2_1_17_1","unstructured":"iperf3. 2023. A TCP UDP and SCTP network bandwidth measurement tool. https:\/\/github.com\/esnet\/iperf."},{"key":"e_1_3_2_1_18_1","unstructured":"Magnus Karlsson. 2023. AF_XDP Sockets: High Performance Networking for Cloud-Native Networking Technology Guide. https:\/\/networkbuilders.intel.com\/docs\/networkbuilders\/af-xdp-sockets-high-performance-networking-for-cloud-native-networking-technology-guide.pdf."},{"key":"e_1_3_2_1_19_1","unstructured":"Linux Kernel. 2023. AF_XDP - Linux Networking Documentation. https:\/\/www.kernel.org\/doc\/html\/v5.10\/networking\/af_xdp.html."},{"key":"e_1_3_2_1_20_1","unstructured":"Linux Kernel. 2023. io_uring_enter in io_uring\/io_uring.c (Linux v6.7-rc8). https:\/\/elixir.bootlin.com\/linux\/v6.7-rc8\/source\/io_uring\/io_uring.c#L3688."},{"key":"e_1_3_2_1_21_1","unstructured":"Linux Kernel. 2023. xsk_recvmsg in net\/xdp\/xsk.c (Linux v6.7-rc8). https:\/\/elixir.bootlin.com\/linux\/v6.7-rc8\/source\/net\/xdp\/xsk.c#L901."},{"key":"e_1_3_2_1_22_1","unstructured":"Linux Kernel. 2023. xsk_sendmsg in net\/xdp\/xsk.c (Linux v6.7-rc8). https:\/\/elixir.bootlin.com\/linux\/v6.7-rc8\/source\/net\/xdp\/xsk.c#L856."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3190508.3190518"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3593856.3595913"},{"key":"e_1_3_2_1_25_1","unstructured":"liburing. 2023. The io_uring library. https:\/\/github.com\/axboe\/liburing."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359627"},{"key":"e_1_3_2_1_27_1","unstructured":"LwIP. 2023. A small independent implementation of the TCP\/IP protocol suite. https:\/\/github.com\/lwip-tcpip\/lwip."},{"key":"e_1_3_2_1_28_1","unstructured":"MCrypt. 2023. Encryption tool. https:\/\/mcrypt.sourceforge.net\/."},{"key":"e_1_3_2_1_29_1","unstructured":"Memcached. 2023. A distributed memory object caching system. https:\/\/memcached.org\/."},{"key":"e_1_3_2_1_30_1","unstructured":"Intel newsroom. 2021. Intel SGX Protects German Electronic Patient Records. https:\/\/www.intel.com\/content\/www\/us\/en\/newsroom\/news\/intel-sgx-protects-german-electronic-patient-records.html."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064219"},{"key":"e_1_3_2_1_32_1","volume-title":"Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI)","author":"Peter Simon","year":"2014","unstructured":"Simon Peter, Jialin Li, Irene Zhang, Dan R. K. Ports, Doug Woos, Arvind Krishnamurthy, Thomas Anderson, and Timothy Roscoe. 2014. Arrakis: The Operating System is the Control Plane. In Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI). Broomfield, Colorado."},{"key":"e_1_3_2_1_33_1","volume-title":"SafeBricks: Shielding Network Functions in the Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18)","author":"Poddar Rishabh","year":"2018","unstructured":"Rishabh Poddar, Chang Lan, Raluca Ada Popa, and Sylvia Ratnasamy. 2018. SafeBricks: Shielding Network Functions in the Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18). USENIX Association, Renton, WA, 201--216. https:\/\/www.usenix.org\/conference\/nsdi18\/presentation\/poddar"},{"key":"e_1_3_2_1_34_1","unstructured":"Christian Priebe Divya Muthukumaran Joshua Lind Huanzhou Zhu Shujie Cui Vasily A. Sartakov and Peter Pietzuch. 2020. SGX-LKL: Securing the Host OS Interface for Trusted Execution. arXiv:1908.11143 [cs.OS]"},{"key":"e_1_3_2_1_35_1","unstructured":"Redis. 2023. The open source in-memory data store used by millions of developers as a database cache streaming engine and message broker. https:\/\/redis.io\/."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378469"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23500"},{"key":"e_1_3_2_1_38_1","unstructured":"SPDK. 2023. Intel Storage Performance Development Kit. http:\/\/www.spdk.io."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447786.3456255"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3185467.3185469"},{"key":"e_1_3_2_1_41_1","unstructured":"UnixBench. 2023. The original BYTE UNIX benchmark suite. https:\/\/github.com\/kdlucas\/byte-unixbench\/tree\/master."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3079856.3080208"},{"key":"e_1_3_2_1_43_1","unstructured":"xdp tools. 2023. Library and utilities for use with XDP. https:\/\/github.com\/xdp-project\/xdp-tools."},{"key":"e_1_3_2_1_44_1","volume-title":"xsk_prod_nb_free in xdp-tools\/headers\/xdp\/xsk.h at libxdp. https:\/\/github.com\/xdp-project\/xdp-tools\/blob\/a7b0903ca29b5e58090a3cbb118f59446055b367\/headers\/xdp\/xsk.h#L92","unstructured":"xdp tools. 2023. xsk_prod_nb_free in xdp-tools\/headers\/xdp\/xsk.h at libxdp. https:\/\/github.com\/xdp-project\/xdp-tools\/blob\/a7b0903ca29b5e58090a3cbb118f59446055b367\/headers\/xdp\/xsk.h#L92."},{"key":"e_1_3_2_1_45_1","volume-title":"Opaque: An Oblivious and Encrypted Distributed Analytics Platform. In 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17)","author":"Zheng Wenting","year":"2017","unstructured":"Wenting Zheng, Ankur Dave, Jethro G. Beekman, Raluca Ada Popa, Joseph E. Gonzalez, and Ion Stoica. 2017. Opaque: An Oblivious and Encrypted Distributed Analytics Platform. In 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17). USENIX Association, Boston, MA, 283--298. https:\/\/www.usenix.org\/conference\/nsdi17\/technical-sessions\/presentation\/zheng"}],"event":{"name":"EuroSys '25: Twentieth European Conference on Computer Systems","location":"Rotterdam Netherlands","acronym":"EuroSys '25","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the Twentieth European Conference on Computer Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3689031.3696090","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3689031.3696090","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3689031.3696090","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T11:22:30Z","timestamp":1755775350000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3689031.3696090"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,30]]},"references-count":45,"alternative-id":["10.1145\/3689031.3696090","10.1145\/3689031"],"URL":"https:\/\/doi.org\/10.1145\/3689031.3696090","relation":{},"subject":[],"published":{"date-parts":[[2025,3,30]]},"assertion":[{"value":"2025-03-30","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}