109 citations · 124 across the 8 of their papers we have counts for
8 papers
Wayfinder: Automated Operating System Specialization
Alexander Jung, Cezar Crăciunoiu, Nikolaos Karaolidis +5
Specializing an OS to optimize the performance of a particular application is typically a manual process that requires great expertise. Specialization through configuration lends i…
μFork: Supporting POSIX fork Within a Single-Address-Space OS
John Alistair Kressel, Hugo Lefeuvre, Pierre Olivier
Single-address-space operating systems have well-known lightweightness benefits that result from their central design idea: the kernel and applications share a unique address space…
SoK: Software Compartmentalization
Hugo Lefeuvre, Nathan Dautenhahn, David Chisnall +1
Decomposing large systems into smaller components with limited privileges has long been recognized as an effective means to minimize the impact of exploits. Despite historical root…
Loupe: Driving the Development of OS Compatibility Layers
Hugo Lefeuvre, Gaulthier Gain, Vlad-Andrei Bădoiu +5
Supporting mainstream applications is fundamental for a new OS to have impact. It is generally achieved by developing a layer of compatibility allowing applications developed for a…
Software Compartmentalization Trade-Offs with Hardware Capabilities
John Alistair Kressel, Hugo Lefeuvre, Pierre Olivier
Compartmentalization is a form of defensive software design in which an application is broken down into isolated but communicating components. Retrofitting compartmentalization int…
Assessing the Impact of Interface Vulnerabilities in Compartmentalized Software
Hugo Lefeuvre, Vlad-Andrei Bădoiu, Yi Chien +3
Least-privilege separation decomposes applications into compartments limited to accessing only what they need. When compartmentalizing existing software, many approaches neglect se…
FlexOS: Towards Flexible OS Isolation
Hugo Lefeuvre, Vlad-Andrei Bădoiu, Alexander Jung +5
At design time, modern operating systems are locked in a specific safety and isolation strategy that mixes one or more hardware/software protection mechanisms (e.g. user/kernel sep…
Unikraft: Fast, Specialized Unikernels the Easy Way
Simon Kuenzer, Vlad-Andrei Bădoiu, Hugo Lefeuvre +12
Unikernels are famous for providing excellent performance in terms of boot times, throughput and memory consumption, to name a few metrics. However, they are infamous for making it…