33 citations · 80 across the 7 of their papers we have counts for
7 papers
Intel TDX Demystified: A Top-Down Approach
Pau-Chen Cheng, Wojciech Ozga, Enriquillo Valdez +5
Intel Trust Domain Extensions (TDX) is a new architectural extension in the 4th Generation Intel Xeon Scalable Processor that supports confidential computing. TDX allows the deploy…
Remote attestation of SEV-SNP confidential VMs using e-vTPMs
Vikram Narayanan, Claudio Carvalho, Angelo Ruocco +7
Trying to address the security challenges of a cloud-centric software deployment paradigm, silicon and cloud vendors are introducing confidential computing - an umbrella term aimed…
Programmable System Call Security with eBPF
Jinghao Jia, YiFei Zhu, Dan Williams +7
System call filtering is a widely used security mechanism for protecting a shared OS kernel against untrusted user applications. However, existing system call filtering techniques…
Partially Trusting the Service Mesh Control Plane
Constantin Adam, Abdulhamid Adebayo, Hubertus Franke +4
Zero Trust is a novel cybersecurity model that focuses on continually evaluating trust to prevent the initiation and horizontal spreading of attacks. A cloud-native Service Mesh is…
HetSched: Quality-of-Mission Aware Scheduling for Autonomous Vehicle SoCs
Aporva Amarnath, Subhankar Pal, Hiwot Kassa +6
Systems-on-Chips (SoCs) that power autonomous vehicles (AVs) must meet stringent performance and safety requirements prior to deployment. With increasing complexity in AV applicati…
STOMP: A Tool for Evaluation of Scheduling Policies in Heterogeneous Multi-Processors
Augusto Vega, Aporva Amarnath, John-David Wellman +6
The proliferation of heterogeneous chip multiprocessors in recent years has reached unprecedented levels. Traditional homogeneous platforms have shown fundamental limitations when…
Disaggregated and optically interconnected memory: when will it be cost effective?
Bulent Abali, Richard J. Eickemeyer, Hubertus Franke +2
The "Disaggregated Server" concept has been proposed for datacenters where the same type server resources are aggregated in their respective pools, for example a compute pool, memo…