{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,25]],"date-time":"2026-03-25T14:29:55Z","timestamp":1774448995027,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":85,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,11,20]],"date-time":"2024-11-20T00:00:00Z","timestamp":1732060800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100006374","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["ONR N000142212084"],"award-info":[{"award-number":["ONR N000142212084"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Science Foundation","award":["CPS 1837382"],"award-info":[{"award-number":["CPS 1837382"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,11,20]]},"DOI":"10.1145\/3698038.3698547","type":"proceedings-article","created":{"date-parts":[[2024,11,14]],"date-time":"2024-11-14T06:32:43Z","timestamp":1731565963000},"page":"811-829","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Byways: High-Performance, Isolated Network Functions for Multi-Tenant Cloud Servers"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-2714-7963","authenticated-orcid":false,"given":"Xinyu","family":"Han","sequence":"first","affiliation":[{"name":"The George Washington University, Washington, D.C., USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-6371-4672","authenticated-orcid":false,"given":"Yuan","family":"Gao","sequence":"additional","affiliation":[{"name":"The George Washington University, Washington, D.C., USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1343-4492","authenticated-orcid":false,"given":"Gabriel","family":"Parmer","sequence":"additional","affiliation":[{"name":"The George Washington University, Washington, D.C., USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6728-4197","authenticated-orcid":false,"given":"Timothy","family":"Wood","sequence":"additional","affiliation":[{"name":"The George Washington University, Washington, D.C., USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,11,20]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Firecracker: Lightweight Virtualization for Serverless Applications. In 17th USENIX Symposium on Networked Systems Design and Implementation, NSDI.","author":"Agache Alexandru","year":"2020","unstructured":"Alexandru Agache, Marc Brooker, Alexandra Iordache, Anthony Liguori, Rolf Neugebauer, Phil Piwonka, and Diana-Maria Popa. 2020. Firecracker: Lightweight Virtualization for Serverless Applications. In 17th USENIX Symposium on Networked Systems Design and Implementation, NSDI."},{"key":"e_1_3_2_1_2_1","volume-title":"The Security Design of the AWS Nitro System - AWS Whitepaper. AWS Whitepaper (Feb","author":"Services Amazon Web","year":"2024","unstructured":"Amazon Web Services. 2024. The Security Design of the AWS Nitro System - AWS Whitepaper. AWS Whitepaper (Feb. 2024). https:\/\/docs.aws.amazon.com\/pdfs\/whitepapers\/latest\/security-design-of-aws-nitro-system\/security-design-of-aws-nitro-system.pdf"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2829988.2787493"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2018.1800069"},{"key":"e_1_3_2_1_5_1","volume-title":"Proc. USENIX Workshop on Embedded Systems. 55--65","author":"Bruno J.","unstructured":"J. Bruno, J. Brustoloni, E. Gabber, A. Silberschatz, and C. Small. 1999. Pebble: A component-based operating system for embedded applications. In Proc. USENIX Workshop on Embedded Systems. 55--65."},{"key":"e_1_3_2_1_6_1","unstructured":"Calico: Cloud Native CNI Implementation https:\/\/github.com\/projectcalico\/."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2021.3087447"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2019.00016"},{"key":"e_1_3_2_1_9_1","unstructured":"Container Network Interface (CNI): https:\/\/www.cni.dev\/."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2014.6906427"},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of the ACM Symposium on Operating Systems Principles (SOSP).","author":"Dragovic B.","unstructured":"B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, I. Pratt, A. Warfield, P. Barham, and R. Neugebauer. 2003. Xen and the Art of Virtualization. In Proceedings of the ACM Symposium on Operating Systems Principles (SOSP)."},{"key":"e_1_3_2_1_12_1","volume-title":"Fbufs: A High-Bandwidth Cross-Domain Transfer Facility. In Symposium on Operating Systems Principles. 189--202","author":"Druschel Peter","unstructured":"Peter Druschel and Larry L. Peterson. 1993. Fbufs: A High-Bandwidth Cross-Domain Transfer Facility. In Symposium on Operating Systems Principles. 189--202."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2517349.2522720"},{"key":"e_1_3_2_1_14_1","volume-title":"User Space Network Drivers. In ACM\/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS).","author":"Emmerich Paul","year":"2019","unstructured":"Paul Emmerich, Maximilian Pudelko, Simon Bauer, Stefan Huber, Thomas Zwickl, and Georg Carle. 2019. User Space Network Drivers. In ACM\/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS)."},{"key":"e_1_3_2_1_15_1","unstructured":"envoy. https:\/\/www.envoyproxy.io\/."},{"key":"e_1_3_2_1_16_1","unstructured":"extended Berkeley Packet Filter (eBPF). https:\/\/ebpf.io\/."},{"key":"e_1_3_2_1_17_1","unstructured":"Firecracker 2019. Firecracker: https:\/\/firecracker-microvm.github.io\/."},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 14th USENIX Conference on Networked Systems Design and Implementation","author":"Firestone Daniel","year":"2017","unstructured":"Daniel Firestone. 2017. VFP: a virtual switch platform for host sdn in the public cloud. In Proceedings of the 14th USENIX Conference on Networked Systems Design and Implementation (Boston, MA, USA) (NSDI'17). USENIX Association, USA, 315--328."},{"key":"e_1_3_2_1_19_1","volume-title":"Azure Accelerated Networking: SmartNICs in the Public Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18)","author":"Firestone Daniel","year":"2018","unstructured":"Daniel Firestone, Andrew Putnam, Sambhrama Mundkur, Derek Chiou, Alireza Dabagh, Mike Andrewartha, Hari Angepat, Vivek Bhanu, Adrian Caulfield, Eric Chung, Harish Kumar Chandrappa, Somesh Chaturmohta, Matt Humphrey, Jack Lavier, Norman Lam, Fengfen Liu, Kalin Ovtcharov, Jitu Padhye, Gautham Popuri, Shachar Raindel, Tejas Sapre, Mark Shaw, Gabriel Silva, Madhan Sivakumar, Nisheeth Srivastava, Anshuman Verma, Qasim Zuhair, Deepak Bansal, Doug Burger, Kushagra Vaid, David A. Maltz, and Albert Greenberg. 2018. Azure Accelerated Networking: SmartNICs in the Public Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18). 51--66. https:\/\/www.usenix.org\/conference\/nsdi18\/presentation\/firestone"},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the","author":"Ford Bryan","year":"1994","unstructured":"Bryan Ford and Jay Lepreau. 1994. Evolving Mach 3.0 to a migrating thread model. In Proceedings of the Winter 1994 USENIX Technical Conference and Exhibition."},{"key":"e_1_3_2_1_21_1","volume-title":"Configurable Scheduling. In 2020 IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS). IEEE, 160--173","author":"Gadepalli Phani Kishore","year":"2020","unstructured":"Phani Kishore Gadepalli, Runyu Pan, and Gabriel Parmer. 2020. Slite: OS Support for Near Zero-Cost, Configurable Scheduling. In 2020 IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS). IEEE, 160--173."},{"key":"e_1_3_2_1_22_1","volume-title":"Multi-core Coordination. In 25th IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS).","author":"Gadepalli Phani Kishore","year":"2019","unstructured":"Phani Kishore Gadepalli, Gregor Peach, Gabriel Parmer, Joseph Espy, and Zach Day. 2019. Chaos: a System for Criticality-Aware, Multi-core Coordination. In 25th IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS)."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304013"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN49398.2020.9209701"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3302424.3303976"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00048"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3387514.3405895"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2987550.2987583"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/258915.258931"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3281411.3281443"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3477132.3483542"},{"key":"e_1_3_2_1_32_1","unstructured":"Intel Data Plane Development Kit (DPDK). http:\/\/dpdk.org\/."},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings of the 16th USENIX Conference on Networked Systems Design and Implementation (NSDI).","author":"Kaffes Kostis","year":"2019","unstructured":"Kostis Kaffes, Timothy Chong, Jack Tigar Humphries, Adam Belay, David Mazi\u00e8res, and Christos Kozyrakis. 2019. Shinjuku: Preemptive Scheduling for μSecond-Scale Tail Latency. In Proceedings of the 16th USENIX Conference on Networked Systems Design and Implementation (NSDI)."},{"key":"e_1_3_2_1_34_1","volume-title":"Spectre Attacks: Exploiting Speculative Execution. In 40th IEEE Symposium on Security and Privacy (S&P'19)","author":"Kocher Paul","year":"2019","unstructured":"Paul Kocher, Jann Horn, Anders Fogh, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, and Yuval Yarom. 2019. Spectre Attacks: Exploiting Speculative Execution. In 40th IEEE Symposium on Security and Privacy (S&P'19)."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/354871.354874"},{"key":"e_1_3_2_1_36_1","unstructured":"Kubernetes: https:\/\/kubernetes.io."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224075"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3626202.3637564"},{"key":"e_1_3_2_1_39_1","unstructured":"Linux KVM: http:\/\/www.linux-kvm.org retrieved 9\/16\/12."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.5555\/647054.715771"},{"key":"e_1_3_2_1_41_1","volume-title":"Real-time Cache Management Framework for Multi-core Architectures. In 2013 IEEE 19th Real-Time and Embedded Technology and Applications Symposium (RTAS).","author":"Mancuso Renato","year":"2013","unstructured":"Renato Mancuso, Roman Dudko, Emiliano Betti, Marco Cesati, Marco Caccamo, and Rodolfo Pellizzoni. 2013. Real-time Cache Management Framework for Multi-core Architectures. In 2013 IEEE 19th Real-Time and Embedded Technology and Applications Symposium (RTAS)."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.5555\/2616448.2616491"},{"key":"e_1_3_2_1_43_1","volume-title":"ClickOS and the Art of Network Function Virtualization. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14)","author":"Martins Joao","year":"2014","unstructured":"Joao Martins, Mohamed Ahmed, Costin Raiciu, Vladimir Olteanu, Michio Honda, Roberto Bifulco, and Felipe Huici. 2014. ClickOS and the Art of Network Function Virtualization. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14). USENIX Association, Seattle, WA, 459--473. https:\/\/www.usenix.org\/conference\/nsdi14\/technical-sessions\/presentation\/martins"},{"key":"e_1_3_2_1_44_1","unstructured":"memtier_benchmark: https:\/\/github.com\/RedisLabs\/memtier_benchmark."},{"key":"e_1_3_2_1_45_1","volume-title":"Proceedings of the Twenty Fifth IEEE Real-Time Technology and Applications Symposium (RTAS '19)","author":"Nasri Mitra","unstructured":"Mitra Nasri, Thidapat (Tam) Chantem, Gedare Bloom, and Ryan M. Gerdes. 2019. On the Pitfalls and Vulnerabilities of Schedule Randomization against Schedule-Based Attacks. In Proceedings of the Twenty Fifth IEEE Real-Time Technology and Applications Symposium (RTAS '19)."},{"key":"e_1_3_2_1_46_1","unstructured":"Netlink: netlink 7 man page."},{"key":"e_1_3_2_1_47_1","unstructured":"NFQUEUE: https:\/\/netfilter.org\/projects\/libnetfilter_queue\/doxygen\/html\/index.html."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815423"},{"key":"e_1_3_2_1_49_1","volume-title":"Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation (OSDI).","author":"Panda Aurojit","year":"2016","unstructured":"Aurojit Panda, Sangjin Han, Keon Jang, Melvin Walls, Sylvia Ratnasamy, and Scott Shenker. 2016. NetBricks: Taking the V out of NFV. In Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation (OSDI)."},{"key":"e_1_3_2_1_50_1","volume-title":"Proceedings of the Workshop on Operating Systems Platforms for Embedded Real-Time applications (OSPERT).","author":"Parmer Gabriel","year":"2010","unstructured":"Gabriel Parmer. 2010. The case for thread migration: Predictable IPC in a customizable and reliable OS. In Proceedings of the Workshop on Operating Systems Platforms for Embedded Real-Time applications (OSPERT)."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2008.13"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2011.25"},{"key":"e_1_3_2_1_53_1","volume-title":"2015 IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS)","author":"Pellizzoni Rodolfo","year":"2015","unstructured":"Rodolfo Pellizzoni, Neda Paryab, Man-Ki Yoon, Stanley Bak, Sibin Mohan, and Rakesh B. Bobba. 2015. A generalized model for preventing information leakage in hard real-time systems. 2015 IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS) (2015)."},{"key":"e_1_3_2_1_54_1","volume-title":"12th USENIX Symposium on Networked Systems Design and Implementation (NSDI 15)","author":"Pfaf Ben","year":"2015","unstructured":"Ben Pfaf, Justin Pettit, Teemu Koponen, Ethan Jackson, Andy Zhou, Jarno Rajahalme, Jesse Gross, Alex Wang, Joe Stringer, Pravin Shelar, Keith Amidon, and Mart\u00edn Casado. 2015. The Design and Implementation of Open vSwitch. In 12th USENIX Symposium on Networked Systems Design and Implementation (NSDI 15). 117--130. https:\/\/www.usenix.org\/conference\/nsdi15\/technical-sessions\/presentation\/pfaff"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.5555\/3488766.3488779"},{"key":"e_1_3_2_1_56_1","volume-title":"SafeBricks: Shielding Network Functions in the Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18)","author":"Poddar Rishabh","year":"2018","unstructured":"Rishabh Poddar, Chang Lan, Raluca Ada Popa, and Sylvia Ratnasamy. 2018. SafeBricks: Shielding Network Functions in the Cloud. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18). 201--216. https:\/\/www.usenix.org\/conference\/nsdi18\/presentation\/poddar"},{"key":"e_1_3_2_1_57_1","unstructured":"QEMU. https:\/\/www.qemu.org\/."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3600006.3613137"},{"key":"e_1_3_2_1_59_1","volume-title":"Proceedings of the USENIX Annual Technical Conference (USENIX ATC).","author":"Ren Yuxin","year":"2020","unstructured":"Yuxin Ren, Guyue Liu, Vlad Nitu, Wenyuan Shao, Riley Kennedy, Gabriel Parmer, Timothy Wood, and Alain Tchana. 2020. Fine-Grained Isolation for Scalable, Dynamic, Multi-tenant Edge Clouds. In Proceedings of the USENIX Annual Technical Conference (USENIX ATC)."},{"key":"e_1_3_2_1_60_1","unstructured":"Seccomp BPF. https:\/\/www.kernel.org\/doc\/html\/latest\/userspace-api\/seccomp_filter.html."},{"key":"e_1_3_2_1_61_1","volume-title":"Real-Time Edge. In IEEE Real-Time Systems Symposium (RTSS).","author":"Shao Wenyuan","year":"2022","unstructured":"Wenyuan Shao, Bite Ye, Huachuan Wang, Gabriel Parmer, and Yuxin Ren. 2022. Edge-RT: OS Support for Controlled Latency in the Multi-Tenant, Real-Time Edge. In IEEE Real-Time Systems Symposium (RTSS)."},{"key":"e_1_3_2_1_62_1","volume-title":"Symposium on Operating Systems Principles. 170--185","author":"Shapiro Jonathan S.","unstructured":"Jonathan S. Shapiro, Jonathan M. Smith, and David J. Farber. 1999. EROS: a fast capability system. In Symposium on Operating Systems Principles. 170--185. citeseer.ist.psu.edu\/shapiro99eros.html"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2342356.2342359"},{"key":"e_1_3_2_1_64_1","unstructured":"snort. https:\/\/www.snort.org\/."},{"key":"e_1_3_2_1_65_1","unstructured":"SR-IOV: PCI-SIG SR-IOV Primer: An Introduction to SR-IOV Technology. 321211--002 Revision 2.5."},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755913.1755935"},{"key":"e_1_3_2_1_67_1","volume-title":"Time-Shared Systems. In Real-Time Systems Symposium. IEEE.","author":"Stoica Ion","unstructured":"Ion Stoica, Hussein Abdel-Wahab, Kevin Jeffay, Sanjoy K. Baruah, Johannes E. Gehrke, and C. Greg Plaxton. 1996. A Proportional Share Resource Allocation Algorithm for Real-Time, Time-Shared Systems. In Real-Time Systems Symposium. IEEE."},{"key":"e_1_3_2_1_68_1","unstructured":"strongswan. https:\/\/strongswan.org\/."},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/2000064.2000099"},{"key":"e_1_3_2_1_70_1","volume-title":"Protocols for High-Speed Networks. North Holland","author":"Tennenhouse David","unstructured":"David Tennenhouse. 1989. Layered Multiplexing Considered Harmful. In Protocols for High-Speed Networks. North Holland, Amsterdam, 143--148."},{"key":"e_1_3_2_1_71_1","unstructured":"The Composite Component-Based System source: https:\/\/github.com\/gparmer\/composite."},{"key":"e_1_3_2_1_72_1","volume-title":"Proceedings of the 2019 USENIX Conference on Usenix Annual Technical Conference (Renton, WA, USA) (USENIX ATC '19). USENIX Association, USA, 521--536","author":"Thimmaraju Kashyap","year":"2019","unstructured":"Kashyap Thimmaraju, Saad Hermak, G\u00e1bor R\u00e9tv\u00e1ri, and Stefan Schmid. 2019. MTS: bringing multi-tenancy to virtual networking. In Proceedings of the 2019 USENIX Conference on Usenix Annual Technical Conference (Renton, WA, USA) (USENIX ATC '19). USENIX Association, USA, 521--536."},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/3229616.3229618"},{"key":"e_1_3_2_1_74_1","volume-title":"Proceedings of the Thirteenth EuroSys Conference.","author":"Vanga Manohar","unstructured":"Manohar Vanga, Arpan Gujarati, and Bj\u00f6rn B. Brandenburg. 2018. Tableau: a high-throughput and predictable VM scheduler for high-density workloads. In Proceedings of the Thirteenth EuroSys Conference."},{"key":"e_1_3_2_1_75_1","volume-title":"Referenced from","author":"Virtual","year":"2023","unstructured":"Virtual I\/O Device (VIRTIO) Version 1.3, Committee Specification Draft 01, Referenced from 06 October 2023, https:\/\/docs.oasis-open.org\/virtio\/virtio\/v1.3\/virtio-v1.3.html."},{"key":"e_1_3_2_1_76_1","volume-title":"Intel Systems Programming Guide","year":"2024","unstructured":"VTx: Intel Systems Programming Guide, Volume 3C, chapter 24, Order Number: 325384-083US, Updated March 2024."},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2015.7108434"},{"key":"e_1_3_2_1_78_1","volume-title":"Exploiting Concurrency Vulnerabilities in System Call Wrappers. In First USENIX Workshop on Offensive Technologies (WOOT 07)","author":"Watson Robert N. M.","year":"2007","unstructured":"Robert N. M. Watson. 2007. Exploiting Concurrency Vulnerabilities in System Call Wrappers. In First USENIX Workshop on Offensive Technologies (WOOT 07)."},{"key":"e_1_3_2_1_79_1","unstructured":"wrk2. https:\/\/github.com\/delimitrou\/DeathStarBench\/tree\/master\/wrk2."},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/2038642.2038651"},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359647"},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1145\/2940147.2940155"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/3627703.3650071"},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620678.3624652"},{"key":"e_1_3_2_1_85_1","volume-title":"16th USENIX Symposium on Networked Systems Design and Implementation (NSDI).","author":"Zhuo Danyang","year":"2019","unstructured":"Danyang Zhuo, Kaiyuan Zhang, Yibo Zhu, Hongqiang Harry Liu, Matthew Rockett, Arvind Krishnamurthy, and Thomas Anderson. 2019. Slim: OS Kernel Support for a Low-Overhead Container Overlay Network. In 16th USENIX Symposium on Networked Systems Design and Implementation (NSDI)."}],"event":{"name":"SoCC '24: ACM Symposium on Cloud Computing","location":"Redmond WA USA","acronym":"SoCC '24","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the ACM Symposium on Cloud Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3698038.3698547","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3698038.3698547","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T19:02:53Z","timestamp":1755889373000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3698038.3698547"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,20]]},"references-count":85,"alternative-id":["10.1145\/3698038.3698547","10.1145\/3698038"],"URL":"https:\/\/doi.org\/10.1145\/3698038.3698547","relation":{},"subject":[],"published":{"date-parts":[[2024,11,20]]},"assertion":[{"value":"2024-11-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}