{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T01:41:23Z","timestamp":1773193283733,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":45,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,11,4]],"date-time":"2024-11-04T00:00:00Z","timestamp":1730678400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"NSF","award":["CNS-2047283"],"award-info":[{"award-number":["CNS-2047283"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,11,4]]},"DOI":"10.1145\/3694715.3695943","type":"proceedings-article","created":{"date-parts":[[2024,11,15]],"date-time":"2024-11-15T19:28:18Z","timestamp":1731698898000},"page":"95-109","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Fast & Safe IO Memory Protection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-6404-2522","authenticated-orcid":false,"given":"Benny","family":"Rubin","sequence":"first","affiliation":[{"name":"Cornell University, Ithaca, United States"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1530-2568","authenticated-orcid":false,"given":"Saksham","family":"Agarwal","sequence":"additional","affiliation":[{"name":"UIUC, Urbana, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7136-1706","authenticated-orcid":false,"given":"Qizhe","family":"Cai","sequence":"additional","affiliation":[{"name":"Cornell University, Ithaca, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6731-9938","authenticated-orcid":false,"given":"Rachit","family":"Agarwal","sequence":"additional","affiliation":[{"name":"Cornell University, Ithaca, United States"}]}],"member":"320","published-online":{"date-parts":[[2024,11,15]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Gautam Kumar, Sylvia Ratnasamy, David Culler, and Amin Vahdat.","author":"Agarwal Saksham","year":"2022","unstructured":"Saksham Agarwal, Rachit Agarwal, Behnam Montazeri, Masoud Moshref, Khaled Elmeleegy, Luigi Rizzo, Marc Asher de Kruijf, Gautam Kumar, Sylvia Ratnasamy, David Culler, and Amin Vahdat. 2022. Understanding host interconnect congestion. In ACM HotNets."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Saksham Agarwal Arvind Krishnamurthy and Rachit Agarwal. 2023. Host Congestion Control. In ACM SIGCOMM.","DOI":"10.1145\/3603269.3604878"},{"key":"e_1_3_2_1_3_1","unstructured":"A. Aggarwal S. Savage and T. Anderson. 2000. Understanding the performance of TCP pacing. In IEEE INFOCOM."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","unstructured":"Markuze Alex Shay Vargaftik Gil Kupfer Boris Pismeny Nadav Amit Adam Morrison and Dan Tsafrir. 2021. Characterizing exploiting and detecting DMA code injection vulnerabilities in the presence of an IOMMU. In ACM EUROSYS.","DOI":"10.1145\/3447786.3456249"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Mohammad Alizadeh Albert Greenberg David A. Maltz Jitendra Padhye Parveen Patel Balaji Prabhakar Sudipta Sengupta and Murari Sridharan. 2010. Data Center TCP (DCTCP). In ACM SIGCOMM.","DOI":"10.1145\/1851182.1851192"},{"key":"e_1_3_2_1_6_1","volume-title":"Dan Tsafrir, and Assaf Schuster.","author":"Amit Nadav","year":"2011","unstructured":"Nadav Amit, Muli Ben-Yehuda, IBM Research, Dan Tsafrir, and Assaf Schuster. 2011. vIOMMU: Efficient IOMMU Emulation. In USENIX ATC."},{"key":"e_1_3_2_1_7_1","volume-title":"IOMMU: Strategies for mitigating the IOTLB bottleneck. In ISCA.","author":"Amit Nadav","year":"2010","unstructured":"Nadav Amit, Muli Ben-Yehuda, and Ben-Ami Yassour. 2010. IOMMU: Strategies for mitigating the IOTLB bottleneck. In ISCA."},{"key":"e_1_3_2_1_8_1","first-page":"547","article-title":"I\/O memory management unit providing self invalidated mapping. (2017)","volume":"9","author":"Basu Arkaprava","year":"2017","unstructured":"Arkaprava Basu, Mark D Hill, and Michael M Swift. 2017. I\/O memory management unit providing self invalidated mapping. (2017). US Patent 9,547,603.","journal-title":"US Patent"},{"key":"e_1_3_2_1_9_1","unstructured":"Muli Ben-Yehuda Jimi Xenidis Michal Ostrowski Karl Rister Alexis Bruemmer Leendert van Doorn and Doorn Amd. 2007. The price of safety: Evaluating IOMMU performance. In OLS."},{"key":"e_1_3_2_1_10_1","volume-title":"Large-reach memory management unit caches","author":"Bhattacharjee Abhishek","unstructured":"Abhishek Bhattacharjee. 2013. Large-reach memory management unit caches. In IEEE\/ACM MICRO."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","unstructured":"Qizhe Cai Shubham Chaudhary Midhul Vuppalapati Jaehyun Hwang and Rachit Agarwal. 2021. Understanding host network stack overheads. In ACM SIGCOMM.","DOI":"10.1145\/3452296.3472888"},{"key":"e_1_3_2_1_12_1","volume-title":"Understanding and Improving the Latency of DRAM-Based Memory Systems. CoRR","author":"Chang Kevin K.","year":"2017","unstructured":"Kevin K. Chang. 2017. Understanding and Improving the Latency of DRAM-Based Memory Systems. CoRR (2017)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2896377.2901453"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-73699-0"},{"key":"e_1_3_2_1_15_1","volume-title":"Ajay Tirumala, and Alex Warshavsky.","author":"Dugan Jon","year":"2021","unstructured":"Jon Dugan, John Estabrook, Jim Ferbuson, Andrew Gallatin, Mark Gates, Kevin Gibbs, Stephen Hemminger, Nathan Jones, Gerrit Renker Feng Qin, Ajay Tirumala, and Alex Warshavsky. 2021. iPerf. https:\/\/iperf.fr\/. (2021)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"Alireza Farshin Luigi Rizzo Khaled Elmeleegy and Dejan Kosti\u0107. 2023. Overcoming the IOTLB wall for multi-100-Gbps Linux-based networking. PeerJ Comput. Sci. (2023).","DOI":"10.7717\/peerj-cs.1385"},{"key":"e_1_3_2_1_17_1","unstructured":"Will Glozer. 2021. wrk HTTP benchmark. https:\/\/github.com\/wg\/wrk. (2021)."},{"key":"e_1_3_2_1_18_1","unstructured":"Yuchen Hao Zhenman Fang Glenn Reinman and Jason Cong. 2017. Supporting Address Translation for Accelerator-Centric Architectures. In HPCA."},{"key":"e_1_3_2_1_19_1","unstructured":"HewlettPackard. 2021. Netperf. https:\/\/github.com\/HewletPackard\/netperf. (2021)."},{"key":"e_1_3_2_1_20_1","unstructured":"Jaehyun Hwang Qizhe Cai Ao Tang and Rachit Agarwal. 2020. TCP \u2248 RDMA: CPU-efficient Remote Storage Access with i10. In NSDI."},{"key":"e_1_3_2_1_21_1","unstructured":"Jaehyun Hwang Midhul Vuppalapati Simon Peter and Rachit Agarwal. 2021. Rearchitecting Linux Storage Stack for \u03bcs Latency and High Throughput. In USENIX OSDI."},{"key":"e_1_3_2_1_22_1","volume-title":"Chris Steele, and Danielle Rohe.","author":"Indigo Jamie","year":"2022","unstructured":"Jamie Indigo, Dave Smart, Chris Steele, and Danielle Rohe. 2022. Web Almanac 2022: Page Weight. (2022). https:\/\/almanac.httparchive.org\/en\/2022\/page-weight#request-bytes"},{"key":"e_1_3_2_1_23_1","unstructured":"Intel. 2012. Intel\u00ae Data Direct I\/O Technology. https:\/\/www.intel.com\/content\/dam\/www\/public\/us\/en\/documents\/technology-briefs\/data-direct-i-o-technology-brief.pdf. (2012)."},{"key":"e_1_3_2_1_24_1","unstructured":"Intel. 2023. Intel Virtualization Technology for Directed I\/O. https:\/\/www.intel.com\/content\/www\/us\/en\/content-details\/774206\/intel-virtualization-technology-for-directed-i-o-architecture-specification.html. (2023)."},{"key":"e_1_3_2_1_25_1","unstructured":"Intel. 2024. Intel Performance Counter Monitor. https:\/\/github.com\/intel\/pcm. (2024)."},{"key":"e_1_3_2_1_26_1","unstructured":"Intel. 2024. Intel\u00ae Network Adapter Driver for E810 Series Devices under Linux. https:\/\/www.intel.com\/content\/www\/us\/en\/download\/19630\/intel-network-adapter-driver-for-e810-series-devices-under-linux.html. (2024)."},{"key":"e_1_3_2_1_27_1","volume-title":"DevIOus: Device-Driven Side-Channel Attacks on the IOMMU. In IEEE Symposium on Security and Privacy.","author":"Kim Taehun","year":"2023","unstructured":"Taehun Kim, Hyeongjin Park, Seokmin Lee, Seunghee Shin, Junbeom Hur, and Youngjoo Shin. 2023. DevIOus: Device-Driven Side-Channel Attacks on the IOMMU. In IEEE Symposium on Security and Privacy."},{"key":"e_1_3_2_1_28_1","volume-title":"New abstractions and mechanisms for virtualizing future many-core systems","author":"Kumar Sanjay","unstructured":"Sanjay Kumar. 2008. New abstractions and mechanisms for virtualizing future many-core systems. Georgia Institute of Technology."},{"key":"e_1_3_2_1_29_1","volume-title":"HyperTRIO: hyper-tenant translation of I\/O addresses","author":"Lavrov Alexey","unstructured":"Alexey Lavrov and David Wentzlaff. 2020. HyperTRIO: hyper-tenant translation of I\/O addresses. In ACM\/IEEE ISCA."},{"key":"e_1_3_2_1_30_1","volume-title":"Adaptive-latency DRAM: Optimizing DRAM timing for the common-case","author":"Lee Donghyuk","unstructured":"Donghyuk Lee, Yoongu Kim, Gennady Pekhimenko, Samira Khan, Vivek Seshadri, Kevin Chang, and Onur Mutlu. 2015. Adaptive-latency DRAM: Optimizing DRAM timing for the common-case. In IEEE HPCA."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Moshe Malka Nadav Amit Muli Ben-Yehuda and Dan Tsafrir. 2015. rIOMMU: Efficient IOMMU for I\/O Devices that Employ Ring Buffers. In ACM ASPLOS.","DOI":"10.1145\/2694344.2694355"},{"key":"e_1_3_2_1_32_1","unstructured":"Moshe Malka Nadav Amit and Dan Tsafrir. 2015. Efficient intra-operating system protection against harmful DMAs. In USENIX FAST."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"crossref","unstructured":"Alex Markuze Adam Morrison and Dan Tsafrir. 2016. True IOMMU Protection from DMA Attacks: When Copy is Faster than Zero Copy. In ACM ASPLOS.","DOI":"10.1145\/2872362.2872379"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3173175"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"crossref","unstructured":"Beno\u00eet Morgan \u00c9ric Alata Vincent Nicomette and Mohamed Ka\u00e2niche. 2016. Bypassing IOMMU Protection against I\/O Attacks. In LADC.","DOI":"10.1109\/LADC.2016.31"},{"key":"e_1_3_2_1_36_1","volume-title":"TCP behavior with many flows","author":"Morris Robert Tappan","unstructured":"Robert Tappan Morris. 1997. TCP behavior with many flows. In IEEE ICNP."},{"key":"e_1_3_2_1_37_1","volume-title":"Yury Audzevich, Sergio L\u00f3pez-Buedo, and Andrew W. Moore.","author":"Neugebauer Rolf","year":"2018","unstructured":"Rolf Neugebauer, Gianni Antichi, Jos\u00e9 Fernando Zazo, Yury Audzevich, Sergio L\u00f3pez-Buedo, and Andrew W. Moore. 2018. Understanding PCIe performance for end host networking. In ACM SIGCOMM."},{"key":"e_1_3_2_1_38_1","unstructured":"nginx. 2024. nginx. https:\/\/nginx.org\/en\/. (2024)."},{"key":"e_1_3_2_1_39_1","unstructured":"Omer Peleg Adam Morrison Benjamin Serebrin and Dan Tsafrir. 2015. Utilizing the IOMMU scalably. In USENIX ATC."},{"key":"e_1_3_2_1_40_1","unstructured":"Solal Pirelli and George Candea. 2020. A Simpler and Faster NIC Driver Model for Network Functions. In USENIX OSDI."},{"key":"e_1_3_2_1_41_1","unstructured":"Redis. 2024. Redis. https:\/\/redis.io. (2024)."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"crossref","unstructured":"Benny Rubin Saksham Agarwal Qizhe Cai and Rachit Agarwal. 2024. Fast & Safe IO Memory Protection. In tech report.","DOI":"10.1145\/3694715.3695943"},{"key":"e_1_3_2_1_43_1","volume-title":"Security considerations of commodity x86 virtualization","author":"Vaarala Sami","year":"2006","unstructured":"Sami Vaarala and Jukka Manner. 2006. Security considerations of commodity x86 virtualization. Helsinki University of Technology, Telecommunications Software and Multimedia Laboratory (2006)."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"crossref","unstructured":"Midhul Vuppalapati Saksham Agarwal Henry Schuh Baris Kasikci Arvind Krishnamurthy and Rachit Agarwal. 2024. Understanding the host network. In ACM SIGCOMM.","DOI":"10.1145\/3651890.3672271"},{"key":"e_1_3_2_1_45_1","volume-title":"Paul","author":"Yang Ziye","year":"2017","unstructured":"Ziye Yang, James R. Harris, Benjamin Walker, Daniel Verkamp, Changpeng Liu, Cunyin Chang, Gang Cao, Jonathan Stern, Vishal Verma, and Luse E. Paul. 2017. SPDK: A Development Kit to Build High Performance Storage Applications. In IEEE CLOUDCOM."}],"event":{"name":"SOSP '24: ACM SIGOPS 30th Symposium on Operating Systems Principles","location":"Austin TX USA","acronym":"SOSP '24","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems","USENIX"]},"container-title":["Proceedings of the ACM SIGOPS 30th Symposium on Operating Systems Principles"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3694715.3695943","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3694715.3695943","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:05:47Z","timestamp":1750291547000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3694715.3695943"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,4]]},"references-count":45,"alternative-id":["10.1145\/3694715.3695943","10.1145\/3694715"],"URL":"https:\/\/doi.org\/10.1145\/3694715.3695943","relation":{},"subject":[],"published":{"date-parts":[[2024,11,4]]},"assertion":[{"value":"2024-11-15","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}