Dune: Safe User-level Access to Privileged CPU Features

No abstract is available for this paper.

• Publication year

  2012

• Venue

  USENIX Symposium on Operating Systems Design and Implementation

• Publication date

  2012-10-08

• Fields of study

  Computer Science, Engineering

• Identifiers

  No identifiers available.

• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Revisiting hardware-assisted page walks for virtualized systems

  2012cited by this paper
• Hardware-supported virtualization on ARM

  2011cited by this paper
• C4: the continuously concurrent compacting collector

  2011cited by this paper
• Tolerating Malicious Device Drivers in Linux

  2010cited by this paper
• The Turtles Project: Design and Implementation of Nested Virtualization

  2010influential reference
• Trust and Protection in the Illinois Browser Operating System

  2010cited by this paper
• Toward least-privilege isolation for software

  2009cited by this paper
• Native Client: A Sandbox for Portable, Untrusted x86 Native Code

  2009cited by this paper
• Accelerating two-dimensional page walks for virtualized systems

  2008cited by this paper
• Vx32: Lightweight User-level Sandboxing on the x86

  2008cited by this paper
• Leveraging Legacy Code to Deploy Desktop Applications on the Web

  2008cited by this paper
• Wedge: Splitting Applications into Reduced-Privilege Compartments

  2008cited by this paper
• kvm : the Linux Virtual Machine Monitor

  2007influential reference
• Libra: a library operating system for a jvm in a virtualized execution environment

  2007cited by this paper
• The Compressor: concurrent, incremental, and parallel compaction

  2006cited by this paper
• SubVirt: implementing malware with virtual machines

  2006cited by this paper
• Intel virtualization technology

  2005cited by this paper
• The pauseless GC algorithm

  2005cited by this paper
• Improving Host Security with System Call Policies

  2003cited by this paper
• Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools

  2003cited by this paper
• The design and implementation of Zap: a system for migrating computing environments

  2002cited by this paper
• ESN390 interpretive= execution architecture, foundation for VM/ESA

  2002cited by this paper
• Disco: running commodity operating systems on scalable multiprocessors

  1997cited by this paper
• Microkernels meet recursive virtual machines

  1996cited by this paper
• AVM: application-level virtual memory

  1995cited by this paper
• Exokernel: an operating system architecture for application-level resource management

  1995cited by this paper
• Extensibility safety and performance in the SPIN operating system

  1995cited by this paper
• Mostly parallel garbage collection

  1991cited by this paper
• Virtual memory primitives for user programs

  1991cited by this paper
• Attacking the process migration bottleneck

  1987cited by this paper
• Architectural Principles for Virtual Computer Systems

  1973cited by this paper

• uCache: A Customizable Unikernel-based IO Cache

  2026cites this paper
• WaSC: Hardening WebAssembly Sandboxes via System Interface Decoupling

  2026cites this paper
• Fork, Explore, Commit: OS Primitives for Agentic Exploration

  2026cites this paper
• Beyond address spaces: In-process memory isolation for RISC-V

  2026cites this paper
• DataHook: An Efficient and Lightweight System Call Hooking Technique without Instruction Modification

  2025cites this paper
• Practical DB-OS Co-Design with Privileged Kernel Bypass

  2025influential citation
• Tai Chi: A General High-Efficiency Scheduling Framework for SmartNICs in Hyperscale Clouds

  2025cites this paper
• Extended User Interrupts (xUI): Fast and Flexible Notification without Polling

  2025cites this paper
• Pegasus: Transparent and Unified Kernel-Bypass Networking for Fast Local and Remote Communication

  2025cites this paper
• RegVault II: Achieving Hardware-Assisted Selective Kernel Data Randomization for Multiple Architectures

  2025cites this paper
• SwiftSweeper: Defeating Use-After-Free Bugs Using Memory Sweeper Without Stop-the-World

  2025cites this paper
• Rakis: Secure Fast I/O Primitives Across Trust Boundaries on Intel SGX

  2025cites this paper
• Object-Aware Memory Compression for Smartphones

  2025cites this paper
• Adios to Busy-Waiting for Microsecond-scale Memory Disaggregation

  2025cites this paper
• Honey, I Shrunk the Guests: Page Access Tracking using a Minimal Virtualisation Layer

  2025cites this paper
• Clair Obscur: The Light and Shadow of System Call Interposition – From Pitfalls to Solutions with K23

  2025cites this paper
• INCOGNITOS: A Practical Unikernel Design for Full-System Obfuscation in Confidential Virtual Machines

  2025cites this paper
• Segue & ColorGuard: Optimizing SFI Performance and Scalability on Modern Architectures

  2025cites this paper
• Leash: A Transparent Capability-Based Sandboxing Supervisor for Unix

  2025cites this paper
• VMem: Enabling Application Management of Physical Memory Resources

  2025cites this paper
• Draconis: Network-Accelerated Scheduling for Microsecond-Scale Workloads

  2024cites this paper
• I’ll Be There for You! Perpetual Availability in the A8 MVX System

  2024cites this paper
• BUDAlloc: Defeating Use-After-Free Bugs by Decoupling Virtual Address Management from Kernel

  2024cites this paper
• iip: An Integratable TCP/IP Stack

  2024cites this paper
• Securing Monolithic Kernels using Compartmentalization

  2024cites this paper
• Ataru: A Lightweight VMM + Runtime for Low Latency Serverless Functions

  2024cites this paper
• When eBPF Meets Machine Learning: On-the-fly OS Kernel Compartmentalization

  2024cites this paper
• Skyloft: A General High-Efficient Scheduling Framework in User Space

  2024cites this paper
• Enoki: High Velocity Linux Kernel Scheduler Development

  2024cites this paper
• Making 'syscall' a Privilege not a Right

  2024cites this paper
• Wave: Offloading Resource Management to SmartNIC Cores

  2024cites this paper
• One System Call Hook to Rule All TEE OSes in the Cloud

  2024cites this paper
• ESem: To Harden Process Synchronization for Servers

  2024cites this paper
• LightZone: Lightweight Hardware-Assisted In-Process Isolation for ARM64

  2024cites this paper
• System Call Interposition Without Compromise

  2024cites this paper
• GhostRace: Exploiting and Mitigating Speculative Race Conditions

  2024cites this paper
• Going beyond the Limits of SFI: Flexible and Secure Hardware-Assisted In-Process Isolation with HFI

  2023cites this paper
• The Opportunities and Limitations of Extended Page Table Switching for Fine-Grained Isolation

  2023cites this paper
• VDom: Fast and Unlimited Virtual Domains on Multiple Architectures

  2023cites this paper
• Protected Data Plane OS Using Memory Protection Keys and Lightweight Activation

  2023cites this paper
• DiLOS: Do Not Trade Compatibility for Performance in Memory Disaggregation

  2023cites this paper
• Viability of Unikernels for Phones

  2023cites this paper
• SysXCHG: Refining Privilege with Adaptive System Call Filters

  2023cites this paper
• μSwitch: Fast Kernel Context Isolation with Implicit Context Switches

  2023cites this paper
• ISA-Grid: Architecture of Fine-grained Privilege Control for Instructions and Registers

  2023cites this paper
• Harnessing the x86 Intermediate Rings for Intra-Process Isolation

  2023cites this paper
• Enabling Lightweight Privilege Separation in Applications with MicroGuards

  2023cites this paper
• Dancing With Wolves: An Intra-Process Isolation Technique With Privileged Hardware

  2023cites this paper
• Isolating Shared Resources for Time-Triggered Networking of Containerized Applications

  2023influential citation
• GuaNary: Efficient Buffer Overflow Detection In Virtualized Clouds Using Intel EPT-based Sub-Page Write Protection Support

  2023cites this paper
• Trust Beyond Border: Lightweight, Verifiable User Isolation for Protecting In-Enclave Services

  2023cites this paper
• CAUSEC: Cache-Based Secure Key Computation with (Mostly) Deprivileged Execution

  2023influential citation
• Dynamic Linkers Are the Narrow Waist of Operating Systems

  2023cites this paper
• Rethinking System Audit Architectures for High Event Coverage and Synchronous Log Availability

  2023cites this paper
• Function as a Function

  2023cites this paper
• Agile Development of Linux Schedulers with Ekiben

  2023influential citation
• Zpoline: a System Call Hook Mechanism Based on Binary Rewriting

  2023cites this paper
• Software-Defined CPU Modes

  2023cites this paper
• xOS: The End Of The Process-Thread Duo Reign

  2023cites this paper
• PANIC: PAN-assisted Intra-process Memory Isolation on ARM

  2023cites this paper
• Segue & ColorGuard: Optimizing SFI Performance and Scalability on Modern x86

  2022cites this paper
• Jenny: Securing Syscalls for PKU-based Memory Isolation Systems

  2022cites this paper
• From Dynamic Loading to Extensible Transformation: An Infrastructure for Dynamic Library Transformation

  2022cites this paper
• DangZero: Efficient Use-After-Free Detection via Direct Page Table Access

  2022influential citation
• MeSHwA: The case for a Memory-Safe Software and Hardware Architecture for Serverless Computing

  2022cites this paper
• HyperEnclave: An Open and Cross-platform Trusted Execution Environment

  2022cites this paper
• VMSH: hypervisor-agnostic guest overlays for VMs

  2022influential citation
• PKRU-safe: automatically locking down the heap between safe and unsafe languages

  2022cites this paper
• Out of Hypervisor (OoH): When Nested Virtualization Becomes Practical

  2022cites this paper
• Polytope: Practical Memory Access Control for C++ Applications

  2022cites this paper
• You shall not (by)pass!: practical, secure, and fast PKU-based sandboxing

  2022cites this paper
• A Syscall-Level Binary-Compatible Unikernel

  2022cites this paper
• XRP: In-Kernel Storage Functions with eBPF

  2022cites this paper
• The Next-Generation OS Process Abstraction

  2022cites this paper
• Memory-mapped I/O on steroids

  2021influential citation
• Benchmarking, analysis, and optimization of serverless function snapshots

  2021cites this paper
• Isolation without taxation: near-zero-cost transitions for WebAssembly and SFI

  2021cites this paper
• Enclosure: language-based restriction of untrusted libraries

  2021influential citation
• Isolating functions at the hardware limit with virtines

  2021influential citation
• Danian: Redução da latência de calda de aplicações em rede através de um escalonador O(1)

  2021cites this paper
• Domain Page-Table Isolation

  2021cites this paper
• The Case for an Interwoven Parallel Hardware/Software Stack

  2021cites this paper
• FlexFilt: Towards Flexible Instruction Filtering for Security

  2021cites this paper
• Online Application Guidance for Heterogeneous Memory Systems

  2021cites this paper
• DiLOS: adding performance to paging-based memory disaggregation

  2021cites this paper
• When Idling is Ideal: Optimizing Tail-Latency for Heavy-Tailed Datacenter Workloads with Perséphone

  2021influential citation
• ghOSt: Fast & Flexible User-Space Delegation of Linux Scheduling

  2021influential citation
• Isolation Without Taxation: Near Zero Cost Transitions for SFI

  2021cites this paper
• The Endokernel: Fast, Secure, and Programmable Subprocess Virtualization

  2021cites this paper
• A case against (most) context switches

  2021cites this paper
• Evaluating Network Stacks for the Virtualized Mobile Packet Core

  2021cites this paper
• KylinX: Simplified Virtualization Architecture for Specialized Virtual Appliances with Strong Isolation

  2021cites this paper
• SERVICE BOOSTERS: LIBRARY OPERATING SYSTEMS FOR THE DATACENTER

  2021cites this paper
• Data Compression Accelerator on IBM POWER9 and z15 Processors : Industrial Product

  2020cites this paper
• IMPULP: A Hardware Approach for In-Process Memory Protection via User-Level Partitioning

  2020cites this paper
• Hardware-Based Domain Virtualization for Intra-Process Isolation of Persistent Memory Objects

  2020cites this paper
• Automatic Core Specialization for AVX-512 Applications

  2020cites this paper
• Enclosures : language-based restriction of untrusted libraries Extended Abstract

  2020cites this paper
• Iso-UniK: lightweight multi-process unikernel through memory protection keys

  2020cites this paper
• RICE UNIVERSITY By A THESIS SUBMITTED IN PARTIAL FULFILLMENT OF THE REQUIREMENTS FOR THE DEGREE APPROVED, THESIS COMMITTEE HOUSTON, TEXAS

  2020cites this paper