{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T01:12:09Z","timestamp":1780708329811,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":121,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,11,20]],"date-time":"2024-11-20T00:00:00Z","timestamp":1732060800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Federal Ministry of Education and Research of Germany","award":["16KISK002"],"award-info":[{"award-number":["16KISK002"]}]},{"DOI":"10.13039\/501100006374","name":"European Research Council","doi-asserted-by":"publisher","award":["10107757"],"award-info":[{"award-number":["10107757"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006374","name":"HORIZON EUROPE Framework Programme","doi-asserted-by":"publisher","award":["101140087"],"award-info":[{"award-number":["101140087"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,11,20]]},"DOI":"10.1145\/3698038.3698518","type":"proceedings-article","created":{"date-parts":[[2024,11,14]],"date-time":"2024-11-14T06:32:43Z","timestamp":1731565963000},"page":"580-599","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["uIO: Lightweight and Extensible Unikernels"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9654-9983","authenticated-orcid":false,"given":"Masanori","family":"Misono","sequence":"first","affiliation":[{"name":"Technical University of Munich, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6728-1335","authenticated-orcid":false,"given":"Peter","family":"Okelmann","sequence":"additional","affiliation":[{"name":"Technical University of Munich, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0968-3357","authenticated-orcid":false,"given":"Charalampos","family":"Mainas","sequence":"additional","affiliation":[{"name":"Technical University of Munich, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3220-5735","authenticated-orcid":false,"given":"Pramod","family":"Bhatotia","sequence":"additional","affiliation":[{"name":"Technical University of Munich, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,11,20]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2021. The Big Idea Around Unikernels | Hacker News. https:\/\/news.ycombinator.com\/item?id=29427449. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_2_1","volume-title":"Proceedings of the 17th USENIX Symposium on Networked Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/nsdi20\/presentation\/agache","author":"Agache Alexandru","year":"2020","unstructured":"Alexandru Agache, Marc Brooker, Alexandra Iordache, Anthony Liguori, Rolf Neugebauer, Phil Piwonka, and Diana-Maria Popa. 2020. Firecracker: Lightweight Virtualization for Serverless Applications. In Proceedings of the 17th USENIX Symposium on Networked Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/nsdi20\/presentation\/agache"},{"key":"e_1_3_2_1_3_1","volume-title":"5th Annual UK Systems Research Challenges Workshop. Accessed: 2024-07-07","author":"Ahmad Kareem","year":"2020","unstructured":"Kareem Ahmad, Alan Dearle, Jon Lewis, and Ward Jaradat. 2020. Debugging Unikernel Operating Systems. https:\/\/uksystems.org\/workshop\/2020\/slides\/presso40.pdf. Presented at 5th Annual UK Systems Research Challenges Workshop. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the 2018 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/akkus","author":"Akkus Istemi Ekin","year":"2018","unstructured":"Istemi Ekin Akkus, Ruichuan Chen, Ivica Rimac, Manuel Stein, Klaus Satzke, Andre Beck, Paarijaat Aditya, and Volker Hilt. 2018. SAND: Towards High-Performance Serverless Computing. In Proceedings of the 2018 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/akkus"},{"key":"e_1_3_2_1_5_1","first-page":"40","article-title":"AMD64 Architecture Programmer's Manual Volume 2","volume":"3","author":"AMD.","year":"2023","unstructured":"AMD. 2023. AMD64 Architecture Programmer's Manual Volume 2: System Programming Revision 3.40 - Section 5.6.7. https:\/\/www.amd.com\/system\/files\/TechDocs\/24593.pdf. Accessed: 2024-07-07.","journal-title":"System Programming Revision"},{"key":"e_1_3_2_1_6_1","unstructured":"AMD. [n.d.]. AMD Secure Encrypted Virtualization (SEV). https:\/\/www.amd.com\/en\/developer\/sev.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 2018 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/amit","author":"Amit Nadav","year":"2018","unstructured":"Nadav Amit and Michael Wei. 2018. The Design and Implementation of Hyperupcalls. In Proceedings of the 2018 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/amit"},{"key":"e_1_3_2_1_8_1","unstructured":"Arm. [n. d.]. ARM Memory Access Permission and Domains. https:\/\/developer.arm.com\/documentation\/dui0056\/d\/caches-and-tightly-coupled-memories\/memory-management-units\/memory-access-permissions-and-domains. Accessed: 2024-10-06."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2872362.2872371"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945462"},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of the 2005 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/2005-usenix-annual-technical-conference\/qemu-fast-and-portable-dynamic-translator","author":"Bellard Fabrice","year":"2005","unstructured":"Fabrice Bellard. 2005. QEMU, A Fast and Portable Dynamic Translator. In Proceedings of the 2005 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/2005-usenix-annual-technical-conference\/qemu-fast-and-portable-dynamic-translator"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224077"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2015.89"},{"key":"e_1_3_2_1_14_1","unstructured":"Bryan Cantrill. 2016. Unikernels are Unfit for Production. https:\/\/www.tritondatacenter.com\/blog\/unikernels-are-unfit-for-production. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3392698"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/HOTOS.2001.990073"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2018.8406155"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3094405.3094412"},{"key":"e_1_3_2_1_19_1","unstructured":"Cyril Soldani. [n. d.]. cffs\/app-sqlite-test: Performance experiment with SQLite on Unikraft. https:\/\/github.com\/cffs\/app-sqlite-test. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_20_1","unstructured":"Hermitux developers. [n. d.]. Debugging \u00b7 ssrg-vt\/hermitux Wiki. https:\/\/github.com\/ssrg-vt\/hermitux\/wiki\/Debugging. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_21_1","unstructured":"Hermitux developers. [n. d.]. Profiling \u00b7 ssrg-vt\/hermitux Wiki. https:\/\/github.com\/ssrg-vt\/hermitux\/wiki\/Profiling. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_22_1","unstructured":"Solo5 developers. [n. d.]. Solo5 gdb stub. https:\/\/github.com\/Solo5\/solo5\/blob\/master\/tenders\/hvt\/hvt_gdb_kvm_x86_64.c. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_23_1","unstructured":"The Unikraft developers. 2022. Debugging a Unikernel - linuxu. https:\/\/unikraft.org\/docs\/internals\/debugging#linuxu. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_24_1","unstructured":"Unikraft developers. [n. d.]. Unikraft libramfs library. https:\/\/github.com\/unikraft\/unikraft\/tree\/staging\/lib\/ramfs. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_25_1","unstructured":"Unikraft developers. [n.d.]. Unikraft ukalloc library. https:\/\/github.com\/unikraft\/unikraft\/tree\/staging\/lib\/ukalloc. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_26_1","unstructured":"Unikraft developers. [n. d.]. Unikraft uksignal library. https:\/\/github.com\/unikraft\/unikraft\/tree\/staging\/lib\/uksignal. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_27_1","unstructured":"Unikraft developers. [n.d.]. Unikraft vfscore library. https:\/\/github.com\/unikraft\/unikraft\/tree\/staging\/lib\/vfscore. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_28_1","unstructured":"Virtiofs Developers. [n. d.]. virtiofs - Shared File System for Virtual Machines. https:\/\/virtio-fs.gitlab.io\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2996890.3007875"},{"key":"e_1_3_2_1_30_1","unstructured":"F5 Inc. [n. d.]. Advanced Load Balancer Web Server & Reverse Proxy - NGINX. https:\/\/www.nginx.com\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3343737.3343750"},{"key":"e_1_3_2_1_32_1","unstructured":"Free Software Foundation. [n. d.]. GDB: The GNU Project Debugger. https:\/\/www.sourceware.org\/gdb\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_33_1","unstructured":"Free Software Foundation. [n. d.]. lwIP - A Lightweight TCP\/IP stack - Summary. https:\/\/savannah.nongnu.org\/projects\/lwip\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_34_1","unstructured":"Free Software Foundation. [n. d.]. Remote Stub (Debugging with GDB). https:\/\/sourceware.org\/gdb\/onlinedocs\/gdb\/Remote-Stub.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_35_1","unstructured":"Mike Frysingerj. [n.d.]. Function Tracer Design. https:\/\/docs.kernel.org\/trace\/ftrace-design.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of the 2014 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc14\/technical-sessions\/presentation\/fu","author":"Fu Yangchun","year":"2014","unstructured":"Yangchun Fu, Junyuan Zeng, and Zhiqiang Lin. 2014. HYPERSHELL: A Practical Hypervisor Layer Guest OS Shell for Automated In-VM Management. In Proceedings of the 2014 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc14\/technical-sessions\/presentation\/fu"},{"key":"e_1_3_2_1_37_1","volume-title":"Proceedings of the 2003 Network and Distributed System Security Symposium","author":"Garfinkel Tal","year":"2003","unstructured":"Tal Garfinkel and Mendel Rosenblum. 2003. A Virtual Machine Introspection Based Architecture for Intrusion Detection. In Proceedings of the 2003 Network and Distributed System Security Symposium. Internet Society. https:\/\/www.ndss-symposium.org\/ndss2003\/virtual-machine-introspection-based-architecture-intrusion-detection\/"},{"key":"e_1_3_2_1_38_1","unstructured":"gcc developers. [n. d.]. x86 Options (Using the GNU Compiler Collection (GCC)). https:\/\/gcc.gnu.org\/onlinedocs\/gcc\/x86-Options.html#index-mnop-mcount. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314590"},{"key":"e_1_3_2_1_40_1","unstructured":"Will Glozer. [n. d.]. wg\/wrk: Modern HTTP benchmarking tool. https:\/\/github.com\/wg\/wrk. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_41_1","unstructured":"Google. [n.d.]. Guest environment | Compute Engine Documentation | Google Cloud. https:\/\/cloud.google.com\/compute\/docs\/images\/guest-environment. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_42_1","volume-title":"Unikernel Profiling: Flame Graphs from dom0. https:\/\/www.brendangregg.com\/blog\/2016-01-27\/unikernel-profiling-from-dom0.html. Accessed: 2024-07-07.","author":"Gregg Brendan","year":"2016","unstructured":"Brendan Gregg. 2016. Unikernel Profiling: Flame Graphs from dom0. https:\/\/www.brendangregg.com\/blog\/2016-01-27\/unikernel-profiling-from-dom0.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_43_1","volume-title":"NFV Platforms with MirageOS Unikernels","author":"Haddad Wassim","unstructured":"Wassim Haddad, Heikki Mahkonen, and Ravi Manghirmalani. 2016. NFV Platforms with MirageOS Unikernels. http:\/\/unikernel.org\/blog\/2016\/unikernel-nfv-platform. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132211.3134447"},{"key":"e_1_3_2_1_45_1","volume-title":"Proceedings of the 2019 USENIX Annual Technical Conference. USENIX Association. http:\/\/www.usenix.org\/conference\/atc19\/presentation\/hedayati-hodor","author":"Hedayati Mohammad","year":"2019","unstructured":"Mohammad Hedayati, Spyridoula Gravani, Ethan Johnson, John Criswell, Michael L. Scott, Kai Shen, and Mike Marty. 2019. Hodor: Intra-Process Isolation for High-Throughput Data Plane Libraries. In Proceedings of the 2019 USENIX Annual Technical Conference. USENIX Association. http:\/\/www.usenix.org\/conference\/atc19\/presentation\/hedayati-hodor"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/2893177"},{"key":"e_1_3_2_1_47_1","article-title":"MINIX 3: a Highly Reliable","volume":"40","author":"Herder Jorrit N.","year":"2006","unstructured":"Jorrit N. Herder, Herbert Bos, Ben Gras, Philip Homburg, and Andrew S. Tanenbaum. 2006. MINIX 3: a Highly Reliable, Self-repairing Operating System. SIGOPS Oper. Syst. Rev. 40, 3 (2006).","journal-title":"Self-repairing Operating System. SIGOPS Oper. Syst. Rev."},{"key":"e_1_3_2_1_48_1","unstructured":"\"F5 Inc.\". [n.d.]. Controlling NGINX Processes at Runtime. https:\/\/docs.nginx.com\/nginx\/admin-guide\/basic-functionality\/runtime-control\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_49_1","volume-title":"Intel\u00a9 64 and IA-32 Architectures Software Developer's Manual","year":"2024","unstructured":"Intel. 2022. Intel\u00a9 64 and IA-32 Architectures Software Developer's Manual Volume 3A: System Programming Guide, Order Number: 253668-078US - Chapter 4.6.2 Protection Keys. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_50_1","volume-title":"Intel\u00a9 64 and IA-32 Architectures Software Developer's Manual","year":"2024","unstructured":"Intel. 2022. Intel\u00a9 64 and IA-32 Architectures Software Developer's Manual Volume 3B: System Programming Guide, Order Number: 253668-078US - Chapter 19 Performance Monitoring. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_51_1","unstructured":"Intel. [n.d.]. Intel\u00ae Trust Domain Extensions (Intel TDX). https:\/\/www.intel.com\/content\/www\/us\/en\/developer\/articles\/technical\/intel-trust-domain-extensions.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICTC.2018.8539634"},{"key":"e_1_3_2_1_53_1","volume-title":"Proceedings of the 16th USENIX Symposium on Operating Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/osdi22\/presentation\/jing","author":"Jing Yuzhuo","year":"2022","unstructured":"Yuzhuo Jing and Peng Huang. 2022. Operating System Support for Safe and Efficient Auxiliary Execution. In Proceedings of the 16th USENIX Symposium on Operating Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/osdi22\/presentation\/jing"},{"key":"e_1_3_2_1_54_1","unstructured":"Justin Cormack. [n. d.]. justincormack\/frankenlibc: Tools for Running Rump Unikernels in Userspace. https:\/\/github.com\/justincormack\/frankenlibc. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_55_1","unstructured":"Linux kernel developers. [n. d.]. BPF Documentation. https:\/\/docs.kernel.org\/bpf\/index.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_56_1","unstructured":"Linux kernel developers. [n. d.]. Cgruop-v1 Documentation. https:\/\/www.kernel.org\/doc\/Documentation\/cgroup-v1\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_57_1","unstructured":"Linux kernel developers. [n. d.]. eBPF verifier. https:\/\/docs.kernel.org\/bpf\/verifier.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_58_1","unstructured":"Linux kernel developers. [n. d.]. elf(5) - Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man5\/elf.5.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_59_1","unstructured":"Linux kernel developers. [n.d.]. fuse(4) --- Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man4\/fuse.4.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_60_1","unstructured":"Linux kernel developers. [n.d.]. ld.so(8) --- Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man8\/ld.so.8.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_61_1","unstructured":"Linux kernel developers. [n. d.]. libc(7) --- Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man7\/libc.7.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_62_1","unstructured":"Linux kernel developers. [n. d.]. socket(7) - Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man7\/socket.7.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_63_1","unstructured":"Linux kernel developers. [n.d.]. syscalls(2) --- Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man2\/syscalls.2.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_64_1","volume-title":"Proceedings of the 2007 Linux Symposium.","author":"Kivity Avi","year":"2007","unstructured":"Avi Kivity, Yaniv Kamay, Dor Laor, Uri Lublin, and Anthony Liguori. 2007. KVM: the Linux Virtual Machine Monitor. In Proceedings of the 2007 Linux Symposium."},{"key":"e_1_3_2_1_65_1","volume-title":"Proceedings of the 2014 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc14\/technical-sessions\/presentation\/kivity","author":"Kivity Avi","year":"2014","unstructured":"Avi Kivity, Dor Laor, Glauber Costa, Pekka Enberg, Nadav Har'El, Don Marti, and Vlad Zolotarov. 2014. OSv---Optimizing the Operating System for Virtual Machines. In Proceedings of the 2014 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc14\/technical-sessions\/presentation\/kivity"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3125719.3125727"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447786.3456248"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3050748.3050757"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3387526"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.1900138"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-59851-8_22"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/2931088.2931093"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-54999-6_6"},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507759"},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-020-00051-9"},{"key":"e_1_3_2_1_77_1","unstructured":"Arm Limited. [n. d.]. ARM Architecture Reference Manual ARMv7-A and ARMv7-R edition - Domains. https:\/\/developer.arm.com\/documentation\/ddi0406\/b\/System-Level-Architecture\/Virtual-Memory-System-Architecture--VMSA-\/Memory-access-control\/Domains. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1145\/3552326.3587454"},{"key":"e_1_3_2_1_79_1","volume-title":"Proceedings of the 12th USENIX Symposium on Networked Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/nsdi15\/technical-sessions\/presentation\/madhavapeddy","author":"Madhavapeddy Anil","year":"2015","unstructured":"Anil Madhavapeddy, Thomas Leonard, Magnus Skjegstad, Thomas Gazagnaire, David Sheets, Dave Scott, Richard Mortier, Amir Chaudhry, Balraj Singh, Jon Ludlam, Jon Crowcroft, and Ian Leslie. 2015. Jitsu: Just-In-Time Summoning of Unikernels. In Proceedings of the 12th USENIX Symposium on Networked Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/nsdi15\/technical-sessions\/presentation\/madhavapeddy"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/2490301.2451167"},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132763"},{"key":"e_1_3_2_1_82_1","volume-title":"Proceedings of the 11th USENIX Symposium on Networked Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/nsdi14\/technical-sessions\/presentation\/martins","author":"Martins Joao","year":"2014","unstructured":"Joao Martins, Mohamed Ahmed, Costin Raiciu, Vladimir Olteanu, Michio Honda, Roberto Bifulco, and Felipe Huici. 2014. ClickOS and the Art of Network Function Virtualization. In Proceedings of the 11th USENIX Symposium on Networked Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/nsdi14\/technical-sessions\/presentation\/martins"},{"key":"e_1_3_2_1_83_1","volume-title":"Proceedings of the 1993 USENIX Winter. USENIX Association. https:\/\/www.usenix.org\/conference\/usenix-winter-1993-conference\/bsd-packet-filter-new-architecture-user-level-packet","author":"McCanne Steven","year":"1993","unstructured":"Steven McCanne and Van Jacobson. 1993. The BSD Packet Filter: A New Architecture for User-level Packet Capture. In Proceedings of the 1993 USENIX Winter. USENIX Association. https:\/\/www.usenix.org\/conference\/usenix-winter-1993-conference\/bsd-packet-filter-new-architecture-user-level-packet"},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1145\/3492321.3519586"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2018.1700175"},{"key":"e_1_3_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313808.3313817"},{"key":"e_1_3_2_1_87_1","unstructured":"OASIS Open. 2018. Virtual I\/O Device (VIRTIO) Version 1.1. https:\/\/docs.oasis-open.org\/virtio\/virtio\/v1.1\/csprd01\/virtio-v1.1-csprd01.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_88_1","unstructured":"OpenSSH developers. [n. d.]. OpenSSH. https:\/\/www.openssh.com\/.Accessed: 2024-07-07."},{"key":"e_1_3_2_1_89_1","volume-title":"Proceedings of the 2019 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc19\/presentation\/park-soyeon","author":"Park Soyeon","year":"2019","unstructured":"Soyeon Park, Sangho Lee, Wen Xu, HyunGon Moon, and Taesoo Kim. 2019. libmpk: Software Abstraction for Intel Memory Protection Keys (Intel MPK). In Proceedings of the 2019 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc19\/presentation\/park-soyeon"},{"key":"e_1_3_2_1_90_1","unstructured":"Per Buer. 2019. Unikernels Aren't Dead They're Just Not Containers. https:\/\/www.infoq.com\/presentations\/unikernels-includeos\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_91_1","volume-title":"Plan 9 from Bell Labs. Comput. Syst. 8, 2","author":"Pike Rob","year":"1995","unstructured":"Rob Pike, David L. Presotto, Sean Dorward, Bob Flandrena, Ken Thompson, Howard Trickey, and Phil Winterbottom. 1995. Plan 9 from Bell Labs. Comput. Syst. 8, 2 (1995). http:\/\/www.usenix.org\/publications\/compsystems\/1995\/sum_pike.pdf"},{"key":"e_1_3_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1145\/3552326.3587458"},{"key":"e_1_3_2_1_93_1","unstructured":"Redis Ltd. [n.d.]. Redis. https:\/\/redis.io\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_94_1","unstructured":"Redis Ltd. [n. d.]. Redis Persistence. https:\/\/redis.io\/docs\/manual\/persistence\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.1145\/1400097.1400108"},{"key":"e_1_3_2_1_96_1","unstructured":"Peter Jay Salzman Michael Burian Ori Pomerantz Bob Mottram and Jim Huang. [n. d.]. The Linux Kernel Module Programming Guide. https:\/\/sysprog21.github.io\/lkmpg\/. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1145\/3445814.3446731"},{"key":"e_1_3_2_1_98_1","volume-title":"Proceedings of the 12th USENIX Symposium on Operating Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/osdi16\/technical-sessions\/presentation\/schatzberg","author":"Schatzberg Dan","year":"2016","unstructured":"Dan Schatzberg, James Cadden, Han Dong, Orran Krieger, and Jonathan Appavoo. 2016. EbbRT: A Framework for Building Per-Application Library Operating Systems. In Proceedings of the 12th USENIX Symposium on Operating Systems Design and Implementation. USENIX Association. https:\/\/www.usenix.org\/conference\/osdi16\/technical-sessions\/presentation\/schatzberg"},{"key":"e_1_3_2_1_99_1","doi-asserted-by":"publisher","DOI":"10.1145\/3123878.3131976"},{"key":"e_1_3_2_1_100_1","volume-title":"Proceedings of the 29th USENIX Conference on Security Symposium. USENIX Association. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/schrammel","author":"Schrammel David","year":"2020","unstructured":"David Schrammel, Samuel Weiser, Stefan Steinegger, Martin Schwarzl, Michael Schwarz, Stefan Mangard, and Daniel Gruss. 2020. Donky: Domain Keys - Efficient in-Process Isolation for RISC-V and X86. In Proceedings of the 29th USENIX Conference on Security Symposium. USENIX Association. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/schrammel"},{"key":"e_1_3_2_1_101_1","unstructured":"Amazon Web Service. [n. d.]. AWS Systems Manager Documentation. https:\/\/docs.aws.amazon.com\/systems-manager\/index.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_102_1","unstructured":"SQLite developers. [n. d.]. SQLite Home Page. https:\/\/www.sqlite.org\/index.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_103_1","unstructured":"SQLite developers. [n. d.]. Using the SQLite Online Backup API. https:\/\/www.sqlite.org\/backup.html. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_104_1","doi-asserted-by":"publisher","DOI":"10.1145\/3381052.3381326"},{"key":"e_1_3_2_1_105_1","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecurity49315.2020.9138883"},{"key":"e_1_3_2_1_106_1","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS49365.2020.9213020"},{"key":"e_1_3_2_1_107_1","volume-title":"Proceedings of the 2018 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/thalheim","author":"Thalheim J\u00f6rg","year":"2018","unstructured":"J\u00f6rg Thalheim, Pramod Bhatotia, Pedro Fonseca, and Baris Kasikci. 2018. Cntr: Lightweight OS Containers. In Proceedings of the 2018 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/thalheim"},{"key":"e_1_3_2_1_108_1","doi-asserted-by":"publisher","DOI":"10.1145\/3492321.3519589"},{"key":"e_1_3_2_1_109_1","unstructured":"ubpf developers. [n. d.]. iovisor\/ubpf: Userspace eBPF VM. https:\/\/github.com\/iovisor\/ubpf. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_110_1","unstructured":"Unikraft developers. [n. d.]. Unikraft Release: v0.9.0 Hyperion. https:\/\/github.com\/unikraft\/unikraft\/tree\/RELEASE-0.9.0. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_111_1","unstructured":"Unikraft developers. [n.d.]. unikraft\/lib-nginx: Unikraft port of NG-INX. https:\/\/github.com\/unikraft\/lib-nginx. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_112_1","unstructured":"Unikraft developers. [n.d.]. unikraft\/lib-redis: Unikraft port of Redis in-memory data structure store. https:\/\/github.com\/unikraft\/lib-redis. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_113_1","unstructured":"Unikraft developers. [n.d.]. unikraft\/lib-sqlite: Unikraft port of SQLite. https:\/\/github.com\/unikraft\/lib-sqlite. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_114_1","volume-title":"Proceedings of the 28th USENIX Security Symposium. USENIX Association. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/vahldiek-oberwagner","author":"Vahldiek-Oberwagner Anjo","year":"2019","unstructured":"Anjo Vahldiek-Oberwagner, Eslam Elnikety, Nuno O. Duarte, Michael Sammler, Peter Druschel, and Deepak Garg. 2019. ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK). In Proceedings of the 28th USENIX Security Symposium. USENIX Association. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/vahldiek-oberwagner"},{"key":"e_1_3_2_1_115_1","volume-title":"Proceedings of the 24th European Wireless Conference. IEEE Computer Society.","author":"Valsamas Polychronis","year":"2018","unstructured":"Polychronis Valsamas, Sotiris Skaperas, and Lefteris Mamatas. 2018. Elastic Content Distribution Based on Unikernels and Change-Point Analysis. In Proceedings of the 24th European Wireless Conference. IEEE Computer Society."},{"key":"e_1_3_2_1_116_1","unstructured":"Fedora Project Wiki. [n.d.]. Features\/VirtioSerial - Fedora Project Wiki. https:\/\/fedoraproject.org\/wiki\/Features\/VirtioSerial. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_117_1","unstructured":"QEMU wiki. [n.d.]. Documentation\/9psetup - QEMU. https:\/\/wiki.qemu.org\/Documentation\/9psetup. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_118_1","unstructured":"QEMU wiki. [n.d.]. Features\/gdbstub - QEMU. https:\/\/wiki.qemu.org\/Features\/gdbstub. Accessed: 2024-07-07."},{"key":"e_1_3_2_1_119_1","doi-asserted-by":"publisher","DOI":"10.1145\/3267809.3267845"},{"key":"e_1_3_2_1_120_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.04.069"},{"key":"e_1_3_2_1_121_1","volume-title":"Proceedings of the 2018 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/zhang-yiming","author":"Zhang Yiming","year":"2018","unstructured":"Yiming Zhang, Jon Crowcroft, Dongsheng Li, Chengfen Zhang, Huiba Li, Yaozheng Wang, Kai Yu, Yongqiang Xiong, and Guihai Chen. 2018. KylinX: A Dynamic Library Operating System for Simplified and Efficient Cloud Virtualization. In Proceedings of the 2018 USENIX Annual Technical Conference. USENIX Association. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/zhang-yiming"}],"event":{"name":"SoCC '24: ACM Symposium on Cloud Computing","location":"Redmond WA USA","acronym":"SoCC '24","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the ACM Symposium on Cloud Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3698038.3698518","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3698038.3698518","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T19:00:16Z","timestamp":1755889216000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3698038.3698518"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,20]]},"references-count":121,"alternative-id":["10.1145\/3698038.3698518","10.1145\/3698038"],"URL":"https:\/\/doi.org\/10.1145\/3698038.3698518","relation":{},"subject":[],"published":{"date-parts":[[2024,11,20]]},"assertion":[{"value":"2024-11-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}