4 citations · 8 across the 7 of their papers we have counts for
8 papers
safeL4: Rethinking Safe-Language-Based Single Address Space Microkernels
Zheyuan Xu, Xiaobei Zhang, Zihan Li +7
Microkernels provide good features such as high security, safety, and flexibility, but their reliance on hardware-based isolation leads to heavy performance overhead, limiting thei…
NACRE: Rethinking Confidential Containers through Native Architectural Support
Linke Song, Wenhao Wang, Weijie Liu +1
Linux containers achieve high density and fast lifecycle operations by sharing the host kernel, but this design also lets a compromised host inspect or modify container state. Exis…
MemLineage: Lineage-Guided Enforcement for LLM Agent Memory
Ciyan Ouyang, Rui Hou
We introduce MemLineage, a defense for LLM agent memory that attaches both cryptographic provenance and LLM-mediated derivation lineage to every entry. Recent and concurrent work s…
Janus: Compiler-Based Defense Against Transient Execution Attacks Using ARM Hardware Primitives
Ciyan Ouyang, Peinan Li, Yubiao Huang +2
We present Janus, a compiler-based security framework that mitigates transient execution attacks like Spectre and control-flow hijacking on ARM64 platforms. Janus integrates specul…
Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsity
Guang Yan, Yuhui Zhang, Zimu Guo +6
With the growing use of large language models (LLMs) hosted on cloud platforms to offer inference services, privacy concerns about the potential leakage of sensitive information ar…
The Early Bird Catches the Leak: Unveiling Timing Side Channels in LLM Serving Systems
Linke Song, Zixuan Pang, Wenhao Wang +7
The wide deployment of Large Language Models (LLMs) has given rise to strong demands for optimizing their inference performance. Today's techniques serving this purpose primarily f…
The Road to Trust: Building Enclaves within Confidential VMs
Wenhao Wang, Linke Song, Benshan Mei +6
Integrity is critical for maintaining system security, as it ensures that only genuine software is loaded onto a machine. Although confidential virtual machines (CVMs) function wit…
virtCCA: Virtualized Arm Confidential Compute Architecture with TrustZone
Xiangyi Xu, Wenhao Wang, Yongzheng Wu +7
Arm introduced the Confidential Compute Architecture (CCA) in the upcoming Armv9-A architecture, enabling the support of confidential virtual machines (CVMs) in a separate world ca…