{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T17:10:10Z","timestamp":1784135410838,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":110,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,11,20]],"date-time":"2024-11-20T00:00:00Z","timestamp":1732060800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,11,20]]},"DOI":"10.1145\/3698038.3698558","type":"proceedings-article","created":{"date-parts":[[2024,11,14]],"date-time":"2024-11-14T06:32:43Z","timestamp":1731565963000},"page":"668-688","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["SURE: Secure Unikernels Make Serverless Computing Rapid and Efficient"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8620-6728","authenticated-orcid":false,"given":"Federico","family":"Parola","sequence":"first","affiliation":[{"name":"Politecnico di Torino"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1367-5544","authenticated-orcid":false,"given":"Shixiong","family":"Qi","sequence":"additional","affiliation":[{"name":"University of California, Riverside and University of Kentucky"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-3166-0675","authenticated-orcid":false,"given":"Anvaya B.","family":"Narappa","sequence":"additional","affiliation":[{"name":"University of California, Riverside"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1849-5155","authenticated-orcid":false,"given":"K. K.","family":"Ramakrishnan","sequence":"additional","affiliation":[{"name":"University of California, Riverside"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6134-7890","authenticated-orcid":false,"given":"Fulvio","family":"Risso","sequence":"additional","affiliation":[{"name":"Politecnico di Torino"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,11,20]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2024. https:\/\/istio.io\/. [ONLINE]."},{"key":"e_1_3_2_1_2_1","unstructured":"2024. Cilium. https:\/\/cilium.io\/. [ONLINE]."},{"key":"e_1_3_2_1_3_1","unstructured":"2024. Compatibility of Unikraft. https:\/\/unikraft.org\/docs\/concepts\/compatibility. [ONLINE]."},{"key":"e_1_3_2_1_4_1","unstructured":"2024. DPDK Poll Mode Driver. https:\/\/doc.dpdk.org\/guides\/prog_guide\/poll_mode_drv.html. [ONLINE]."},{"key":"e_1_3_2_1_5_1","unstructured":"2024. F-Stack. https:\/\/www.f-stack.org\/. [ONLINE]."},{"key":"e_1_3_2_1_6_1","unstructured":"2024. gvisor: The Container Security Platform. https:\/\/gvisor.dev\/. [ONLINE]."},{"key":"e_1_3_2_1_7_1","unstructured":"2024. Implementing Microservices on AWS. https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/microservices-on-aws\/microservices-on-aws.html. [ONLINE]."},{"key":"e_1_3_2_1_8_1","unstructured":"2024. Inter-VM Shared Memory device. https:\/\/www.qemu.org\/docs\/master\/system\/devices\/ivshmem.html. [ONLINE]."},{"key":"e_1_3_2_1_9_1","unstructured":"2024. Knative. https:\/\/knative.dev\/docs\/. [ONLINE]."},{"key":"e_1_3_2_1_10_1","unstructured":"2024. Kubernetes. https:\/\/kubernetes.io\/. [ONLINE]."},{"key":"e_1_3_2_1_11_1","unstructured":"2024. Locust: A Modern Load Testing Framework. https:\/\/locust.io\/. [ONLINE]."},{"key":"e_1_3_2_1_12_1","unstructured":"2024. lwIP - A Lightweight TCP\/IP stack. https:\/\/savannah.nongnu.org\/projects\/lwip\/. [ONLINE]."},{"key":"e_1_3_2_1_13_1","unstructured":"2024. Memory protection keys. https:\/\/lwn.net\/Articles\/643797\/. [ONLINE]."},{"key":"e_1_3_2_1_14_1","unstructured":"2024. NanoVMs. https:\/\/nanovms.com\/. [ONLINE]."},{"key":"e_1_3_2_1_15_1","unstructured":"2024. NGINX Service Mesh. https:\/\/www.nginx.com\/products\/nginx-service-mesh\/. [ONLINE]."},{"key":"e_1_3_2_1_16_1","unstructured":"2024 Online Boutique https:\/\/github com\/GoogleCloudPlatform\/microservices-demo. [ONLINE]."},{"key":"e_1_3_2_1_17_1","unstructured":"2024. Provisioned Concurrency for Lambda Functions. https:\/\/aws.amazon.com\/blogs\/aws\/new-provisioned-concurrency-for-lambda-functions\/. [ONLINE]."},{"key":"e_1_3_2_1_18_1","unstructured":"2024. recv(2) --- Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man2\/recv.2.html. [ONLINE]."},{"key":"e_1_3_2_1_19_1","unstructured":"2024. runu OCI runtime. https:\/\/unikraft.org\/docs\/getting-started\/integrations\/container-runtimes. [ONLINE]."},{"key":"e_1_3_2_1_20_1","unstructured":"2024. send(2) --- Linux manual page. https:\/\/man7.org\/linux\/man-pages\/man2\/send.2.html. [ONLINE]."},{"key":"e_1_3_2_1_21_1","unstructured":"2024. Unix domain socket. https:\/\/en.wikipedia.org\/wiki\/Unix_domain_socket. [ONLINE]."},{"key":"e_1_3_2_1_22_1","unstructured":"2024. What is FaaS? https:\/\/www.ibm.com\/topics\/faas. [ONLINE]."},{"key":"e_1_3_2_1_23_1","unstructured":"2024. Write XOR eXecute. https:\/\/en.wikipedia.org\/w\/index.php?title=W%5EX&oldid=1145060869. [ONLINE]."},{"key":"e_1_3_2_1_24_1","volume-title":"Firecracker: Lightweight Virtualization for Serverless Applications. In 17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20)","author":"Agache Alexandru","year":"2020","unstructured":"Alexandru Agache, Marc Brooker, Alexandra Iordache, Anthony Liguori, Rolf Neugebauer, Phil Piwonka, and Diana-Maria Popa. 2020. Firecracker: Lightweight Virtualization for Serverless Applications. In 17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20). USENIX Association, Santa Clara, CA, 419--434. https:\/\/www.usenix.org\/conference\/nsdi20\/presentation\/agache"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3381052.3381315"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359989.3365412"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3015146"},{"key":"e_1_3_2_1_28_1","volume-title":"IX: A Protected Dataplane Operating System for High Throughput and Low Latency. In 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14)","author":"Belay Adam","year":"2014","unstructured":"Adam Belay, George Prekas, Ana Klimovic, Samuel Grossman, Christos Kozyrakis, and Edouard Bugnion. 2014. IX: A Protected Dataplane Operating System for High Throughput and Low Latency. In 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14). USENIX Association, Broomfield, CO, 49--65. https:\/\/www.usenix.org\/conference\/osdi14\/technical-sessions\/presentation\/belay"},{"key":"e_1_3_2_1_29_1","volume-title":"2020 USENIX Annual Technical Conference (USENIX ATC 20)","author":"Bittman Daniel","unstructured":"Daniel Bittman, Peter Alvaro, Pankaj Mehra, Darrell D. E. Long, and Ethan L. Miller. 2020. Twizzler: a Data-Centric OS for Non-Volatile Memory. In 2020 USENIX Annual Technical Conference (USENIX ATC 20). USENIX Association, 65--80. https:\/\/www.usenix.org\/conference\/atc20\/presentation\/bittman"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3392698"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472888"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3494867"},{"key":"e_1_3_2_1_33_1","volume-title":"20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23)","author":"Chen Jingrong","year":"2023","unstructured":"Jingrong Chen, Yongji Wu, Shihan Lin, Yechen Xu, Xinhao Kong, Thomas Anderson, Matthew Lentz, Xiaowei Yang, and Danyang Zhuo. 2023. Remote Procedure Call as a Managed System Service. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23). USENIX Association, Boston, MA, 141--159. https:\/\/www.usenix.org\/conference\/nsdi23\/presentation\/chen-jingrong"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3651890.3672216"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2000.821514"},{"key":"e_1_3_2_1_36_1","unstructured":"Drew Dean and Alan J Hu. 2004. Fixing races for fun and profit: how to use access (2).. In USENIX security symposium. 195--206."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378512"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3173204"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3343737.3343750"},{"key":"e_1_3_2_1_40_1","unstructured":"Stefano Garzarella. 2019. Howto measure the boot time of a Linux VM with QEMU\/KVM. https:\/\/stefano-garzarella.github.io\/posts\/2019-08-24-qemu-linux-boot-time\/. [ONLINE]."},{"key":"e_1_3_2_1_41_1","unstructured":"Thomas Graf. 2024. How eBPF will solve Service Mesh - Goodbye Sidecars. https:\/\/isovalent.com\/blog\/post\/2021-12-08-ebpf-servicemesh\/. [ONLINE]."},{"key":"e_1_3_2_1_42_1","volume-title":"Understanding and hardening linux containers. Whitepaper","author":"Grattafiori Aaron","year":"2016","unstructured":"Aaron Grattafiori. 2016. Understanding and hardening linux containers. Whitepaper, NCC Group (2016)."},{"key":"e_1_3_2_1_43_1","volume-title":"EPK: Scalable and Efficient Memory Protection Keys. In 2022 USENIX Annual Technical Conference (USENIX ATC 22)","author":"Gu Jinyu","year":"2022","unstructured":"Jinyu Gu, Hao Li, Wentai Li, Yubin Xia, and Haibo Chen. 2022. EPK: Scalable and Efficient Memory Protection Keys. In 2022 USENIX Annual Technical Conference (USENIX ATC 22). USENIX Association, Carlsbad, CA, 609--624. https:\/\/www.usenix.org\/conference\/atc22\/presentation\/gu-jinyu"},{"key":"e_1_3_2_1_44_1","volume-title":"Hodor: Intra-Process Isolation for High-Throughput Data Plane Libraries. In 2019 USENIX Annual Technical Conference (USENIX ATC 19)","author":"Hedayati Mohammad","year":"2019","unstructured":"Mohammad Hedayati, Spyridoula Gravani, Ethan Johnson, John Criswell, Michael L. Scott, Kai Shen, and Mike Marty. 2019. Hodor: Intra-Process Isolation for High-Throughput Data Plane Libraries. In 2019 USENIX Annual Technical Conference (USENIX ATC 19). USENIX Association, Renton, WA, 489--504. http:\/\/www.usenix.org\/conference\/atc19\/presentation\/hedayati-hodor"},{"key":"e_1_3_2_1_45_1","volume-title":"Abusing privileged and unprivileged linux containers. Whitepaper","author":"Hertz Jesse","year":"2016","unstructured":"Jesse Hertz. 2016. Abusing privileged and unprivileged linux containers. Whitepaper, NCC Group 48 (2016)."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3281411.3281443"},{"key":"e_1_3_2_1_47_1","volume-title":"2023 USENIX Annual Technical Conference (USENIX ATC 23)","author":"Huye Darby","unstructured":"Darby Huye, Yuri Shkuro, and Raja R. Sambasivan. 2023. Lifting the veil on Meta's microservice architecture: Analyses of topology and request workflows. In 2023 USENIX Annual Technical Conference (USENIX ATC 23). USENIX Association, Boston, MA, 419--432. https:\/\/www.usenix.org\/conference\/atc23\/presentation\/huye"},{"key":"e_1_3_2_1_48_1","volume-title":"NetVM: High Performance and Flexible Networking Using Virtualization on Commodity Platforms. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14)","author":"Hwang Jinho","year":"2014","unstructured":"Jinho Hwang, K. K. Ramakrishnan, and Timothy Wood. 2014. NetVM: High Performance and Flexible Networking Using Virtualization on Commodity Platforms. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14). USENIX Association, Seattle, WA, 445--458. https:\/\/www.usenix.org\/conference\/nsdi14\/technical-sessions\/presentation\/hwang"},{"key":"e_1_3_2_1_49_1","volume-title":"11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14)","author":"Jeong EunYoung","year":"2014","unstructured":"EunYoung Jeong, Shinae Wood, Muhammad Jamshed, Haewon Jeong, Sunghwan Ihm, Dongsu Han, and KyoungSoo Park. 2014. mTCP: a Highly Scalable User-level TCP Stack for Multicore Systems. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14). USENIX Association, Seattle, WA, 489--502. https:\/\/www.usenix.org\/conference\/nsdi14\/technical-sessions\/presentation\/jeong"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3445814.3446701"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3603269.3604816"},{"key":"e_1_3_2_1_52_1","volume-title":"Ion Stoica, and David A. Patterson.","author":"Jonas Eric","year":"2019","unstructured":"Eric Jonas, Johann Schleier-Smith, Vikram Sreekanti, Chia-Che Tsai, Anurag Khandelwal, Qifan Pu, Vaishaal Shankar, Joao Carreira, Karl Krauth, Neeraja Yadwadkar, Joseph E. Gonzalez, Raluca Ada Popa, Ion Stoica, and David A. Patterson. 2019. Cloud Programming Simplified: A Berkeley View on Serverless Computing. arXiv:1902.03383 [cs.OS]"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620678.3624783"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3571206"},{"key":"e_1_3_2_1_55_1","volume-title":"Speculative buffer overflows: Attacks and defenses. arXiv preprint arXiv:1807.03757","author":"Kiriansky Vladimir","year":"2018","unstructured":"Vladimir Kiriansky and Carl Waldspurger. 2018. Speculative buffer overflows: Attacks and defenses. arXiv preprint arXiv:1807.03757 (2018)."},{"key":"e_1_3_2_1_56_1","unstructured":"Avi Kivity. 2019. Building efficient I\/O intensive applications with Seastar. https:\/\/github.com\/CoreCppIL\/CoreCpp2019\/blob\/master\/Presentations\/Avi_Building_efficient_IO_intensive_applications_with_Seastar.pdf. [ONLINE]."},{"key":"e_1_3_2_1_57_1","volume-title":"OSv---Optimizing the Operating System for Virtual Machines. In 2014 USENIX Annual Technical Conference (USENIX ATC 14)","author":"Kivity Avi","year":"2014","unstructured":"Avi Kivity, Dor Laor, Glauber Costa, Pekka Enberg, Nadav Har'El, Don Marti, and Vlad Zolotarov. 2014. OSv---Optimizing the Operating System for Virtual Machines. In 2014 USENIX Annual Technical Conference (USENIX ATC 14). USENIX Association, Philadelphia, PA, 61--72. https:\/\/www.usenix.org\/conference\/atc14\/technical-sessions\/presentation\/kivity"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447786.3456248"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/2931088.2931093"},{"key":"e_1_3_2_1_60_1","volume-title":"Coccinelle: 10 Years of Automated Evolution in the Linux Kernel. In 2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Lawall Julia","year":"2018","unstructured":"Julia Lawall and Gilles Muller. 2018. Coccinelle: 10 Years of Automated Evolution in the Linux Kernel. In 2018 USENIX Annual Technical Conference (USENIX ATC 18). USENIX Association, Boston, MA, 601--614. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/lawall"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507759"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341302.3342071"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-020-00051-9"},{"key":"e_1_3_2_1_64_1","volume-title":"20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23)","author":"Li Hao","year":"2023","unstructured":"Hao Li, Yihan Dang, Guangda Sun, Guyue Liu, Danfeng Shan, and Peng Zhang. 2023. LemonNFV: Consolidating Heterogeneous Network Functions at Line Speed. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23). USENIX Association, Boston, MA, 1451--1468. https:\/\/www.usenix.org\/conference\/nsdi23\/presentation\/li-hao"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620678.3624645"},{"key":"e_1_3_2_1_66_1","volume-title":"Help Rather Than Recycle: Alleviating Cold Startup in Serverless Computing Through Inter-Function Container Sharing. In 2022 USENIX Annual Technical Conference (USENIX ATC 22)","author":"Li Zijun","year":"2022","unstructured":"Zijun Li, Linsong Guo, Quan Chen, Jiagan Cheng, Chuhao Xu, Deze Zeng, Zhuo Song, Tao Ma, Yong Yang, Chao Li, and Minyi Guo. 2022. Help Rather Than Recycle: Alleviating Cold Startup in Serverless Computing Through Inter-Function Container Sharing. In 2022 USENIX Annual Technical Conference (USENIX ATC 22). USENIX Association, Carlsbad, CA, 69--84. https:\/\/www.usenix.org\/conference\/atc22\/presentation\/li-zijun-help"},{"key":"e_1_3_2_1_67_1","unstructured":"Linux Programmer's Manual. 2024. tc-bpf(8). https:\/\/man7.org\/linux\/man-pages\/man8\/tc-bpf.8.html. [ONLINE]."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3472883.3487003"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3552326.3587454"},{"key":"e_1_3_2_1_70_1","volume-title":"Jitsu: Just-In-Time Summoning of Unikernels. In 12th USENIX Symposium on Networked Systems Design and Implementation (NSDI 15)","author":"Madhavapeddy Anil","year":"2015","unstructured":"Anil Madhavapeddy, Thomas Leonard, Magnus Skjegstad, Thomas Gazagnaire, David Sheets, Dave Scott, Richard Mortier, Amir Chaudhry, Balraj Singh, Jon Ludlam, Jon Crowcroft, and Ian Leslie. 2015. Jitsu: Just-In-Time Summoning of Unikernels. In 12th USENIX Symposium on Networked Systems Design and Implementation (NSDI 15). USENIX Association, Oakland, CA, 559--573. https:\/\/www.usenix.org\/conference\/nsdi15\/technical-sessions\/presentation\/madhavapeddy"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451167"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/2557963.2566628"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132763"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"crossref","unstructured":"Felix Moebius Tobias Pfandzelter and David Bermbach. 2024. Are Unikernels Ready for Serverless on the Edge? arXiv:2403.00515 [cs.DC] https:\/\/arxiv.org\/abs\/2403.00515","DOI":"10.1109\/IC2E61754.2024.00022"},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/263326.263335"},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447786.3456239"},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00037"},{"key":"e_1_3_2_1_78_1","volume-title":"14th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20)","author":"Narayanan Vikram","year":"2020","unstructured":"Vikram Narayanan, Tianjiao Huang, David Detweiler, Dan Appel, Zhaofeng Li, Gerd Zellweger, and Anton Burtsev. 2020. RedLeaf: Isolation and Communication in a Safe Operating System. In 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20). USENIX Association, 21--39. https:\/\/www.usenix.org\/conference\/osdi20\/presentation\/narayanan-vikram"},{"key":"e_1_3_2_1_79_1","volume-title":"2019 USENIX Annual Technical Conference (USENIX ATC 19)","author":"Park Soyeon","year":"2019","unstructured":"Soyeon Park, Sangho Lee, Wen Xu, HyunGon Moon, and Taesoo Kim. 2019. libmpk: Software Abstraction for Intel Memory Protection Keys (Intel MPK). In 2019 USENIX Annual Technical Conference (USENIX ATC 19). USENIX Association, Renton, WA, 241--254. https:\/\/www.usenix.org\/conference\/atc19\/presentation\/park-soyeon"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.5555\/2789770.2789779"},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1145\/1961295.1950399"},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1145\/3544216.3544259"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/2103656.2103678"},{"key":"e_1_3_2_1_84_1","volume-title":"2012 USENIX Annual Technical Conference (USENIX ATC 12)","author":"Rizzo Luigi","year":"2012","unstructured":"Luigi Rizzo. 2012. netmap: A Novel Framework for Fast Packet I\/O. In 2012 USENIX Annual Technical Conference (USENIX ATC 12). USENIX Association, Boston, MA, 101--112. https:\/\/www.usenix.org\/conference\/atc12\/technical-sessions\/presentation\/rizzo"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/3472883.3486974"},{"key":"e_1_3_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1145\/3600006.3613155"},{"key":"e_1_3_2_1_87_1","volume-title":"17th USENIX Symposium on Operating Systems Design and Implementation (OSDI 23)","author":"Saokar Harshit","year":"2023","unstructured":"Harshit Saokar, Soteris Demetriou, Nick Magerko, Max Kontorovich, Josh Kirstein, Margot Leibold, Dimitrios Skarlatos, Hitesh Khandelwal, and Chunqiang Tang. 2023. ServiceRouter: Hyperscale and Minimal Cost Service Mesh at Meta. In 17th USENIX Symposium on Operating Systems Design and Implementation (OSDI 23). USENIX Association, Boston, MA, 969--985. https:\/\/www.usenix.org\/conference\/osdi23\/presentation\/saokar"},{"key":"e_1_3_2_1_88_1","doi-asserted-by":"publisher","DOI":"10.1145\/3445814.3446731"},{"key":"e_1_3_2_1_89_1","volume-title":"Jenny: Securing Syscalls for PKU-based Memory Isolation Systems. In 31st USENIX Security Symposium (USENIX Security 22)","author":"Schrammel David","year":"2022","unstructured":"David Schrammel, Samuel Weiser, Richard Sadek, and Stefan Mangard. 2022. Jenny: Securing Syscalls for PKU-based Memory Isolation Systems. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 936--952. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/schrammel"},{"key":"e_1_3_2_1_90_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Schrammel David","year":"2020","unstructured":"David Schrammel, Samuel Weiser, Stefan Steinegger, Martin Schwarzl, Michael Schwarz, Stefan Mangard, and Daniel Gruss. 2020. Donky: Domain Keys - Efficient In-Process Isolation for RISC-V and x86. In 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, 1677--1694. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/schrammel"},{"key":"e_1_3_2_1_91_1","volume-title":"2020 USENIX Annual Technical Conference (USENIX ATC 20)","author":"Shahrad Mohammad","year":"2020","unstructured":"Mohammad Shahrad, Rodrigo Fonseca, Inigo Goiri, Gohar Chaudhry, Paul Batum, Jason Cooke, Eduardo Laureano, Colby Tresness, Mark Russinovich, and Ricardo Bianchini. 2020. Serverless in the Wild: Characterizing and Optimizing the Serverless Workload at a Large Cloud Provider. In 2020 USENIX Annual Technical Conference (USENIX ATC 20). USENIX Association, 205--218. https:\/\/www.usenix.org\/conference\/atc20\/presentation\/shahrad"},{"key":"e_1_3_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1145\/2940147.2940149"},{"key":"e_1_3_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1145\/3651890.3672221"},{"key":"e_1_3_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.1145\/3381052.3381326"},{"key":"e_1_3_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS49365.2020.9213020"},{"key":"e_1_3_2_1_96_1","doi-asserted-by":"publisher","DOI":"10.1145\/2592798.2592812"},{"key":"e_1_3_2_1_97_1","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Vahldiek-Oberwagner Anjo","year":"2019","unstructured":"Anjo Vahldiek-Oberwagner, Eslam Elnikety, Nuno O. Duarte, Michael Sammler, Peter Druschel, and Deepak Garg. 2019. ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK). In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1221--1238. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/vahldiek-oberwagner"},{"key":"e_1_3_2_1_98_1","doi-asserted-by":"publisher","DOI":"10.1145\/3371038"},{"key":"e_1_3_2_1_99_1","volume-title":"18th USENIX Conference on File and Storage Technologies (FAST 20)","author":"Wang Ao","year":"2020","unstructured":"Ao Wang, Jingyuan Zhang, Xiaolong Ma, Ali Anwar, Lukas Rupprecht, Dimitrios Skourtis, Vasily Tarasov, Feng Yan, and Yue Cheng. 2020. InfiniCache: Exploiting Ephemeral Serverless Functions to Build a Cost-Effective Memory Cache. In 18th USENIX Conference on File and Storage Technologies (FAST 20). USENIX Association, Santa Clara, CA, 267--281. https:\/\/www.usenix.org\/conference\/fast20\/presentation\/wang-ao"},{"key":"e_1_3_2_1_100_1","volume-title":"Unikernel Monitors: Extending Minimalism Outside of the Box. In 8th USENIX Workshop on Hot Topics in Cloud Computing (HotCloud 16)","author":"Williams Dan","year":"2016","unstructured":"Dan Williams and Ricardo Koller. 2016. Unikernel Monitors: Extending Minimalism Outside of the Box. In 8th USENIX Workshop on Hot Topics in Cloud Computing (HotCloud 16). USENIX Association, Denver, CO. https:\/\/www.usenix.org\/conference\/hotcloud16\/workshop-program\/presentation\/williams"},{"key":"e_1_3_2_1_101_1","volume-title":"23rd USENIX Security Symposium (USENIX Security 14)","author":"Yarom Yuval","year":"2014","unstructured":"Yuval Yarom and Katrina Falkner. 2014. FLUSH+RELOAD: A High Resolution, Low Noise, L3 Cache Side-Channel Attack. In 23rd USENIX Security Symposium (USENIX Security 14). USENIX Association, San Diego, CA, 719--732. https:\/\/www.usenix.org\/conference\/usenixsecurity14\/technical-sessions\/presentation\/yarom"},{"key":"e_1_3_2_1_102_1","volume-title":"StackMap: Low-Latency Networking with the OS Stack and Dedicated NICs. In 2016 USENIX Annual Technical Conference (USENIX ATC 16)","author":"Yasukata Kenichi","year":"2016","unstructured":"Kenichi Yasukata, Michio Honda, Douglas Santry, and Lars Eggert. 2016. StackMap: Low-Latency Networking with the OS Stack and Dedicated NICs. In 2016 USENIX Annual Technical Conference (USENIX ATC 16). USENIX Association, Denver, CO, 43--56. https:\/\/www.usenix.org\/conference\/atc16\/technical-sessions\/presentation\/yasukata"},{"key":"e_1_3_2_1_103_1","volume-title":"11th USENIX Workshop on Hot Topics in Cloud Computing (HotCloud 19)","author":"Young Ethan G.","unstructured":"Ethan G. Young, Pengfei Zhu, Tyler Caraza-Harter, Andrea C. Arpaci-Dusseau, and Remzi H. Arpaci-Dusseau. 2019. The True Cost of Containing: A gVisor Case Study. In 11th USENIX Workshop on Hot Topics in Cloud Computing (HotCloud 19). USENIX Association, Renton, WA. https:\/\/www.usenix.org\/conference\/hotcloud19\/presentation\/young"},{"key":"e_1_3_2_1_104_1","doi-asserted-by":"publisher","DOI":"10.1145\/3617232.3624871"},{"key":"e_1_3_2_1_105_1","volume-title":"Elasticlave: An Efficient Memory Model for Enclaves. In 31st USENIX Security Symposium (USENIX Security 22)","author":"Yu Jason Zhijingcheng","year":"2022","unstructured":"Jason Zhijingcheng Yu, Shweta Shinde, Trevor E. Carlson, and Prateek Saxena. 2022. Elasticlave: An Efficient Memory Model for Enclaves. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 4111--4128. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/yu-jason"},{"key":"e_1_3_2_1_106_1","volume-title":"Not the Function: Rethinking Function Orchestration in Serverless Computing. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23)","author":"Yu Minchen","year":"2023","unstructured":"Minchen Yu, Tingjia Cao, Wei Wang, and Ruichuan Chen. 2023. Following the Data, Not the Function: Rethinking Function Orchestration in Serverless Computing. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23). USENIX Association, Boston, MA, 1489--1504. https:\/\/www.usenix.org\/conference\/nsdi23\/presentation\/yu"},{"key":"e_1_3_2_1_107_1","doi-asserted-by":"publisher","DOI":"10.1145\/3477132.3483569"},{"key":"e_1_3_2_1_108_1","volume-title":"KylinX: A Dynamic Library Operating System for Simplified and Efficient Cloud Virtualization. In 2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Zhang Yiming","year":"2018","unstructured":"Yiming Zhang, Jon Crowcroft, Dongsheng Li, Chengfen Zhang, Huiba Li, Yaozheng Wang, Kai Yu, Yongqiang Xiong, and Guihai Chen. 2018. KylinX: A Dynamic Library Operating System for Simplified and Efficient Cloud Virtualization. In 2018 USENIX Annual Technical Conference (USENIX ATC 18). USENIX Association, Boston, MA, 173--186. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/zhang-yiming"},{"key":"e_1_3_2_1_109_1","volume-title":"20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23)","author":"Zhou Yang","year":"2023","unstructured":"Yang Zhou, Zezhou Wang, Sowmya Dharanipragada, and Minlan Yu. 2023. Electrode: Accelerating Distributed Protocols with eBPF. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23). USENIX Association, Boston, MA, 1391--1407. https:\/\/www.usenix.org\/conference\/nsdi23\/presentation\/zhou"},{"key":"e_1_3_2_1_110_1","volume-title":"Xiongchun Duan, Peng He, Arvind Krishnamurthy, Matthew Lentz, Danyang Zhuo, and Ratul Mahajan.","author":"Zhu Xiangfeng","year":"2022","unstructured":"Xiangfeng Zhu, Guozhen She, Bowen Xue, Yu Zhang, Yongsu Zhang, Xuan Kelvin Zou, Xiongchun Duan, Peng He, Arvind Krishnamurthy, Matthew Lentz, Danyang Zhuo, and Ratul Mahajan. 2022. Dissecting Service Mesh Overheads. arXiv:2207.00592 [cs.DC]"}],"event":{"name":"SoCC '24: ACM Symposium on Cloud Computing","location":"Redmond WA USA","acronym":"SoCC '24","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the ACM Symposium on Cloud Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3698038.3698558","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3698038.3698558","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T19:01:27Z","timestamp":1755889287000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3698038.3698558"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,20]]},"references-count":110,"alternative-id":["10.1145\/3698038.3698558","10.1145\/3698038"],"URL":"https:\/\/doi.org\/10.1145\/3698038.3698558","relation":{},"subject":[],"published":{"date-parts":[[2024,11,20]]},"assertion":[{"value":"2024-11-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}