Rust is the first practical programming language that has the potential to provide fine-
grained isolation of untrusted computations at the language level. A combination of zero …

Containers are widely used in multi-tenant cloud computing for their ease of deployment,
minimal overhead, and fast start-up. However, the intrinsic shared kernel model of …

In contrast to hardware-based isolation solutions, language-based systems support crossing
of isolation boundaries with an overhead of a function call. Moreover, the strong type system …

Our work explores the challenge of developing secure kernel-driver interfaces designed to
protect the kernel from isolated kernel extensions. We first analyze a range of possible attack …

We propose a new operating system architecture called W-kernel. Traditional commodity
operating systems are monolithic which is easy to design and offers decent performance …

General-purpose operating systems (OSes) rely on hardware-based isolation to confine
user processes to their own virtual address space. By doing so, they protect the system from …