{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T15:53:51Z","timestamp":1776354831645,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":30,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,27]]},"DOI":"10.1145\/3803525.3804989","type":"proceedings-article","created":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T14:54:47Z","timestamp":1776351287000},"page":"39-45","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["H\n                    <scp>ypo<\/scp>\n                    V\n                    <scp>isor<\/scp>\n                    : Multi-Tenant POSIX Process Virtualization in Userspace for Untrusted Native Code"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-3728-6531","authenticated-orcid":false,"given":"Matthias","family":"Neugschwandtner","sequence":"first","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6164-2208","authenticated-orcid":false,"given":"Rudi","family":"Horn","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2596-9399","authenticated-orcid":false,"given":"Tom\u00e1\u0161","family":"Fiedor","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-3156-2475","authenticated-orcid":false,"given":"Lukas","family":"Stadler","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0260-2729","authenticated-orcid":false,"given":"Aleksandar","family":"Prokopec","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5918-2983","authenticated-orcid":false,"given":"William","family":"Blair","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-1135-0056","authenticated-orcid":false,"given":"Zbyn\u011bk","family":"Slajchrt","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-5294-8479","authenticated-orcid":false,"given":"Andrija","family":"Kolic","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-5510-5155","authenticated-orcid":false,"given":"Keith","family":"Lucas","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1337-8024","authenticated-orcid":false,"given":"Francois","family":"Farquet","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-8073-681X","authenticated-orcid":false,"given":"Andrew","family":"Brownsword","sequence":"additional","affiliation":[{"name":"Oracle America, Inc., Redwood Shores, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,4,26]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n. d.]. How Cloudflare Workers Work. https:\/\/developers.cloudflare.com\/workers\/reference\/how-workers-works\/. Accessed: 2026-02-27."},{"key":"e_1_3_2_1_2_1","unstructured":"[n.d.]. musl C library. https:\/\/musl.libc.org\/. Accessed: 2026-02-27."},{"key":"e_1_3_2_1_3_1","unstructured":"[n. d.]. WebAssembly Core Specification. https:\/\/www.w3.org\/TR\/wasm-core-1\/ Accessed: 2026-02-27."},{"key":"e_1_3_2_1_4_1","volume-title":"Firecracker: Lightweight Virtualization for Serverless Applications. In USENIX Symposium on Networked Systems Design and Implementation.","author":"Agache Alexandru","year":"2020","unstructured":"Alexandru Agache, Marc Brooker, Alexandra Iordache, Anthony Liguori, Rolf Neugebauer, Phil Piwonka, and Diana-Maria Popa. 2020. Firecracker: Lightweight Virtualization for Serverless Applications. In USENIX Symposium on Networked Systems Design and Implementation."},{"key":"e_1_3_2_1_5_1","volume-title":"ACM SIGPLAN\/SIGOPS International Conference on Virtual Execution Environments.","author":"Caraza-Harter Tyler","unstructured":"Anjali, Tyler Caraza-Harter, and Michael M. Swift. 2020. Blending containers and virtual machines: a study of firecracker and gVisor. In ACM SIGPLAN\/SIGOPS International Conference on Virtual Execution Environments."},{"key":"e_1_3_2_1_6_1","unstructured":"Konstantin Bogomolov. [n. d.]. Releasing Systrap - A high-performance gVisor platform. https:\/\/gvisor.dev\/blog\/2023\/04\/28\/systrap-release\/. Accessed: 2026-02-27."},{"key":"e_1_3_2_1_7_1","volume-title":"Michael Schwarz, Moritz Lipp, Benjamin von","author":"Canella Claudio","year":"2019","unstructured":"Claudio Canella, Jo Van Bulck, Michael Schwarz, Moritz Lipp, Benjamin von Berg, Philipp Ortner, Frank Piessens, Dmitry Evtyushkin, and Daniel Gruss. 2019. A Systematic Evaluation of Transient Execution Attacks and Defenses."},{"key":"e_1_3_2_1_8_1","unstructured":"Danilo Chiarlone and Pedro Henrique Penna. [n. d.]. Hyperlight Nanvix: POSIX support for Hyperlight Micro-VMs. https:\/\/opensource.microsoft.com\/blog\/2026\/01\/28\/hyperlight-nanvix-posix-support-for-hyperlight-micro-vms\/. Accessed: 2026-02-27."},{"key":"e_1_3_2_1_9_1","volume-title":"PKU Pitfalls: Attacks on PKU-based Memory Isolation Systems. In USENIX Security Symposium.","author":"Connor R. Joseph","year":"2020","unstructured":"R. Joseph Connor, Tyler McDaniel, Jared M. Smith, and Max Schuchard. 2020. PKU Pitfalls: Attacks on PKU-based Memory Isolation Systems. In USENIX Security Symposium."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378512"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3423211.3425680"},{"key":"e_1_3_2_1_12_1","volume-title":"Hodor: Intra-Process Isolation for High-Throughput Data Plane Libraries. In USENIX Annual Technical Conference.","author":"Hedayati Mohammad","year":"2019","unstructured":"Mohammad Hedayati, Spyridoula Gravani, Ethan Johnson, John Criswell, Michael L. Scott, Kai Shen, and Mike Marty. 2019. Hodor: Intra-Process Isolation for High-Throughput Data Plane Libraries. In USENIX Annual Technical Conference."},{"key":"e_1_3_2_1_13_1","volume-title":"Native Code. In USENIX Annual Technical Conference.","author":"Jangda Abhinav","year":"2019","unstructured":"Abhinav Jangda, Bobby Powers, Emery D. Berger, and Arjun Guha. 2019. Not So Fast: Analyzing the Performance of WebAssembly vs. Native Code. In USENIX Annual Technical Conference."},{"key":"e_1_3_2_1_14_1","volume-title":"Fast Core Scheduling with Userspace Process Abstraction. In ACM Symposium on Operating Systems Principles.","author":"Lin Jiazhen","year":"2024","unstructured":"Jiazhen Lin, Youmin Chen, Shiwei Gao, and Youyou Lu. 2024. Fast Core Scheduling with Userspace Process Abstraction. In ACM Symposium on Operating Systems Principles."},{"key":"e_1_3_2_1_15_1","volume-title":"Binsweep: Reliably Restricting Untrusted Instruction Streams with Static Binary Analysis and Control-Flow Integrity. In ACM SIGSAC Cloud Computing Security Workshop.","author":"Oldani Matteo","year":"2024","unstructured":"Matteo Oldani, William Blair, Lukas Stadler, Zbyn\u011bk Slajchrt, and Matthias Neugschwandtner. 2024. Binsweep: Reliably Restricting Untrusted Instruction Streams with Static Binary Analysis and Control-Flow Integrity. In ACM SIGSAC Cloud Computing Security Workshop."},{"key":"e_1_3_2_1_16_1","volume-title":"Key Extension Perspectives, and Discussions","author":"Park Soyeon","year":"2023","unstructured":"Soyeon Park, Sangho Lee, and Taesoo Kim. 2023. Memory Protection Keys: Facts, Key Extension Perspectives, and Discussions. IEEE Security and Privacy (2023)."},{"key":"e_1_3_2_1_17_1","volume-title":"IEEE Symposium on Security and Privacy.","author":"Peng Dinglan","year":"2023","unstructured":"Dinglan Peng, Congyu Liu, Tapti Palit, Pedro Fonseca, Anjo Vahldiek-Oberwagner, and Mona Vij. 2023. uSwitch: Fast Kernel Context Isolation with Implicit Context Switches. In IEEE Symposium on Security and Privacy."},{"key":"e_1_3_2_1_18_1","volume-title":"Pegasus: Transparent and Unified Kernel-Bypass Networking for Fast Local and Remote Communication. In European Conference on Computer systems.","author":"Peng Dinglan","year":"2025","unstructured":"Dinglan Peng, Congyu Liu, Tapti Palit, Anjo Vahldiek-Oberwagner, Mona Vij, and Pedro Fonseca. 2025. Pegasus: Transparent and Unified Kernel-Bypass Networking for Fast Local and Remote Communication. In European Conference on Computer systems."},{"key":"e_1_3_2_1_19_1","volume-title":"ACM Conference on Architectural Support for Progamming Languages and Operating Systems.","author":"Porter Donald E.","year":"2011","unstructured":"Donald E. Porter, Silas Boyd-Wickizer, Jon Howell, Reuben Olinsky, and Galen Hunt. 2011. Rethinking the Library OS from the Top Down. In ACM Conference on Architectural Support for Progamming Languages and Operating Systems."},{"key":"e_1_3_2_1_20_1","volume-title":"Jenny: Securing Syscalls for PKU-based Memory Isolation Systems. In USENIX Security Symposium.","author":"Schrammel David","year":"2022","unstructured":"David Schrammel, Samuel Weiser, Richard Sadek, and Stefan Mangard. 2022. Jenny: Securing Syscalls for PKU-based Memory Isolation Systems. In USENIX Security Symposium."},{"key":"e_1_3_2_1_21_1","volume-title":"Faasm: Lightweight Isolation for Efficient Stateful Serverless Computing. In USENIX Annual Technical Conference.","author":"Shillaker Simon","year":"2020","unstructured":"Simon Shillaker and Peter Pietzuch. 2020. Faasm: Lightweight Isolation for Efficient Stateful Serverless Computing. In USENIX Annual Technical Conference."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3445814.3446714"},{"key":"e_1_3_2_1_23_1","volume-title":"USENIX Security Symposium.","author":"Vahldiek-Oberwagner Anjo","year":"2019","unstructured":"Anjo Vahldiek-Oberwagner, Eslam Elnikety, Nuno O. Duarte, Michael Sammler, Peter Druschel, and Deepak Garg. 2019. ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK). In USENIX Security Symposium."},{"key":"e_1_3_2_1_24_1","volume-title":"European Conference on Computer systems.","author":"Voulimeneas Alexios","year":"2022","unstructured":"Alexios Voulimeneas, Jonas Vinck, Ruben Mechelinck, and Stijn Volckaert. 2022. You Shall Not (by)Pass! Practical, Secure, and Fast PKU-based Sandboxing. In European Conference on Computer systems."},{"key":"e_1_3_2_1_25_1","volume-title":"ACM Symposium on Operating Systems Principles.","author":"Wahbe Robert","unstructured":"Robert Wahbe, Steven Lucco, Thomas E. Anderson, and Susan L. Graham. 1993. Efficient software-based fault isolation. In ACM Symposium on Operating Systems Principles."},{"key":"e_1_3_2_1_26_1","volume-title":"European Conference on Computer systems.","author":"Wanninger Nicholas C.","unstructured":"Nicholas C. Wanninger, Joshua J. Bowden, Kirtankumar Shetty, Ayush Garg, and Kyle C. Hale. 2022. Isolating Functions at the Hardware Limit with Virtines. In European Conference on Computer systems."},{"key":"e_1_3_2_1_27_1","unstructured":"Yosh Wuyts and Lucy Menon. [n. d.]. Hyperlight Wasm: Fast secure and OS-free. https:\/\/opensource.microsoft.com\/blog\/2025\/03\/26\/hyperlight-wasm-fast-secure-and-os-free\/. Accessed: 2026-02-27."},{"key":"e_1_3_2_1_28_1","volume-title":"Endokernel: A Thread Safe Monitor for Lightweight Subprocess Isolation. In USENIX Security Symposium.","author":"Yang Fangfei","year":"2024","unstructured":"Fangfei Yang, Bumjin Im, Weijie Huang, Kelly Kaoudis, Anjo Vahldiek-Oberwagner, Chia che Tsai, and Nathan Dautenhahn. 2024. Endokernel: A Thread Safe Monitor for Lightweight Subprocess Isolation. In USENIX Security Symposium."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.25"},{"key":"e_1_3_2_1_30_1","volume-title":"AlloyStack: A Library Operating System for Serverless Workflow Applications. In European Conference on Computer systems.","author":"You Jianing","year":"2025","unstructured":"Jianing You, Kang Chen, Laiping Zhao, Yiming Li, Yichi Chen, Yuxuan Du, Yanjie Wang, Luhang Wen, Keyang Hu, and Keqiu Li. 2025. AlloyStack: A Library Operating System for Serverless Workflow Applications. In European Conference on Computer systems."}],"event":{"name":"EuroSys '26: 21st European Conference on Computer Systems","location":"Edinburgh Scotland Uk","acronym":"EuroSec '26","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the 19th European Workshop on Systems Security"],"original-title":[],"deposited":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T14:55:40Z","timestamp":1776351340000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3803525.3804989"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,26]]},"references-count":30,"alternative-id":["10.1145\/3803525.3804989","10.1145\/3803525"],"URL":"https:\/\/doi.org\/10.1145\/3803525.3804989","relation":{},"subject":[],"published":{"date-parts":[[2026,4,26]]},"assertion":[{"value":"2026-04-26","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}