{"id":"https://openalex.org/W4394586008","doi":"https://doi.org/10.1109/tc.2024.3383988","title":"vKernel: Enhancing Container Isolation via Private Code and Data","display_name":"vKernel: Enhancing Container Isolation via Private Code and Data","publication_year":2024,"publication_date":"2024-04-08","ids":{"openalex":"https://openalex.org/W4394586008","doi":"https://doi.org/10.1109/tc.2024.3383988"},"language":"en","primary_location":{"id":"doi:10.1109/tc.2024.3383988","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tc.2024.3383988","pdf_url":"https://ieeexplore.ieee.org/ielx7/12/4358213/10494778.pdf","source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://ieeexplore.ieee.org/ielx7/12/4358213/10494778.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101764423","display_name":"Hang Huang","orcid":"https://orcid.org/0009-0001-2107-7686"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hang Huang","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0001-2107-7686","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100447131","display_name":"Honglei Wang","orcid":"https://orcid.org/0009-0005-2320-182X"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Honglei Wang","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0005-2320-182X","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073224556","display_name":"Jia Rao","orcid":"https://orcid.org/0000-0002-2133-4363"},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jia Rao","raw_affiliation_strings":["Department of Computer Science, University of Texas, Arlington, TX, USA"],"raw_orcid":"https://orcid.org/0000-0002-2133-4363","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Texas, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003766128","display_name":"Song Wu","orcid":"https://orcid.org/0000-0001-8690-127X"},"institutions":[{"id":"https://openalex.org/I3020662980","display_name":"Jinyintan Hospital","ror":"https://ror.org/038p1ty61","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I3020662980"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Song Wu","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","Jinyinhu Laboratory, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-8690-127X","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Jinyinhu Laboratory, Wuhan, China","institution_ids":["https://openalex.org/I3020662980"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114246845","display_name":"Hao Fan","orcid":"https://orcid.org/0000-0002-6741-0448"},"institutions":[{"id":"https://openalex.org/I3020662980","display_name":"Jinyintan Hospital","ror":"https://ror.org/038p1ty61","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I3020662980"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Fan","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","Jinyinhu Laboratory, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-6741-0448","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Jinyinhu Laboratory, Wuhan, China","institution_ids":["https://openalex.org/I3020662980"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chen Yu","orcid":"https://orcid.org/0000-0002-4173-0822"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Yu","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-4173-0822","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022262922","display_name":"Hai Jin","orcid":"https://orcid.org/0000-0002-3934-7605"},"institutions":[{"id":"https://openalex.org/I3020662980","display_name":"Jinyintan Hospital","ror":"https://ror.org/038p1ty61","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I3020662980"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hai Jin","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","Jinyinhu Laboratory, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-3934-7605","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Jinyinhu Laboratory, Wuhan, China","institution_ids":["https://openalex.org/I3020662980"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054721271","display_name":"Kun Suo","orcid":"https://orcid.org/0000-0001-8562-0492"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kun Suo","raw_affiliation_strings":["Department of Computer Science, Kennesaw State University, Kennesaw, GA, USA"],"raw_orcid":"https://orcid.org/0000-0001-8562-0492","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Kennesaw State University, Kennesaw, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090954759","display_name":"Lisong Pan","orcid":"https://orcid.org/0009-0008-0720-2867"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lisong Pan","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0008-0720-2867","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2187,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.81207406,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"73","issue":"7","first_page":"1711","last_page":"1723"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7009416222572327},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.6390117406845093},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.5962814092636108},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5913183689117432},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.5739946365356445},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5450835227966309},{"id":"https://openalex.org/keywords/bijection","display_name":"Bijection","score":0.433709055185318},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.42737293243408203},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.4208243489265442},{"id":"https://openalex.org/keywords/personalization","display_name":"Personalization","score":0.41374292969703674},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.37698638439178467},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.20703774690628052},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.18368110060691833},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.15674921870231628},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.11143064498901367},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.09829539060592651},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09026426076889038},{"id":"https://openalex.org/keywords/bioinformatics","display_name":"Bioinformatics","score":0.07431775331497192}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7009416222572327},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.6390117406845093},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.5962814092636108},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5913183689117432},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.5739946365356445},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5450835227966309},{"id":"https://openalex.org/C24424167","wikidata":"https://www.wikidata.org/wiki/Q180907","display_name":"Bijection","level":2,"score":0.433709055185318},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.42737293243408203},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.4208243489265442},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.41374292969703674},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.37698638439178467},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.20703774690628052},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.18368110060691833},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.15674921870231628},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.11143064498901367},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.09829539060592651},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09026426076889038},{"id":"https://openalex.org/C60644358","wikidata":"https://www.wikidata.org/wiki/Q128570","display_name":"Bioinformatics","level":1,"score":0.07431775331497192},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tc.2024.3383988","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tc.2024.3383988","pdf_url":"https://ieeexplore.ieee.org/ielx7/12/4358213/10494778.pdf","source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tc.2024.3383988","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tc.2024.3383988","pdf_url":"https://ieeexplore.ieee.org/ielx7/12/4358213/10494778.pdf","source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.4099999964237213,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G2857700228","display_name":null,"funder_award_id":"62232011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5704946457","display_name":null,"funder_award_id":"62232012","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6188817956","display_name":null,"funder_award_id":"62032008","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4394586008.pdf","grobid_xml":"https://content.openalex.org/works/W4394586008.grobid-xml"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W1988143662","https://openalex.org/W2092423386","https://openalex.org/W2116730531","https://openalex.org/W2151725765","https://openalex.org/W2296335794","https://openalex.org/W2341399723","https://openalex.org/W2621197600","https://openalex.org/W2735574181","https://openalex.org/W2753365392","https://openalex.org/W2791964406","https://openalex.org/W2803261297","https://openalex.org/W2901693060","https://openalex.org/W2902436563","https://openalex.org/W2902718458","https://openalex.org/W2940365205","https://openalex.org/W2949562367","https://openalex.org/W2963940372","https://openalex.org/W2968031544","https://openalex.org/W2968675345","https://openalex.org/W3043023532","https://openalex.org/W3101105387","https://openalex.org/W3114816620","https://openalex.org/W3158610705","https://openalex.org/W3163483881","https://openalex.org/W3195032555","https://openalex.org/W3209537220","https://openalex.org/W4214701977","https://openalex.org/W4248680079","https://openalex.org/W4384154571","https://openalex.org/W6675903601","https://openalex.org/W6697144307","https://openalex.org/W6730426483","https://openalex.org/W6750766825","https://openalex.org/W6756096457","https://openalex.org/W6759743156","https://openalex.org/W6766193004","https://openalex.org/W6773725002","https://openalex.org/W6782203875","https://openalex.org/W6784165801","https://openalex.org/W6784834832","https://openalex.org/W6795455577"],"related_works":["https://openalex.org/W4288805235","https://openalex.org/W2952259524","https://openalex.org/W1508013399","https://openalex.org/W2995857455","https://openalex.org/W2027277382","https://openalex.org/W4287020903","https://openalex.org/W2998840281","https://openalex.org/W4283804497","https://openalex.org/W2160566290","https://openalex.org/W2279732055"],"abstract_inverted_index":{"Container":[0],"technology":[1],"is":[2,93],"increasingly":[3],"adopted":[4],"in":[5,13,30,133],"cloud":[6,194],"environments.":[7],"However,":[8],"the":[9,14,22,40,69,75,100,151],"lack":[10,68],"of":[11,25,102,120,190],"isolation":[12,44,81,113,176],"shared":[15],"kernel":[16,112,136,153,178],"becomes":[17],"a":[18,91,95,111,117,134,155,184],"significant":[19],"barrier":[20],"to":[21,32,131,144,150,154],"wide":[23],"adoption":[24],"containers.":[26],"The":[27],"challenges":[28],"lie":[29],"how":[31],"simultaneously":[33],"attain":[34],"high":[35,103],"performance":[36,63],"and":[37,56,79,86,122,146,162,177],"isolation.":[38],"On":[39,74],"one":[41],"hand,":[42,77],"kernel-level":[43],"mechanisms,":[45],"such":[46],"as":[47],"<italic":[48,52,57,107],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[49,53,58,108],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">seccomp</i>":[50],",":[51,55,60,110],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">capabilities</i>":[54],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">apparmor</i>":[59],"achieve":[61],"good":[62,202],"without":[64],"much":[65,207],"overhead,":[66],"but":[67,205],"support":[70],"for":[71,88],"per-container":[72],"customization.":[73],"other":[76],"user-level":[78],"VM-based":[80],"offer":[82],"superior":[83],"security":[84,159,203],"guarantees":[85],"allow":[87],"customization":[89,179],"since":[90],"container":[92],"assigned":[94],"dedicated":[96],"kernel,":[97],"however,":[98],"at":[99],"cost":[101],"overhead.":[104,209],"We":[105],"present":[106],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">vKernel</i>":[109],"framework.":[114],"It":[115],"maintains":[116],"minimal":[118],"set":[119],"code":[121],"data":[123,163,175],"that":[124,171,199],"are":[125,129,164],"either":[126],"sensitive":[127],"or":[128],"prone":[130],"interference":[132],"virtual":[135],"instance":[137],"(vKI).":[138],"vKernel":[139,173,191,200],"relies":[140],"on":[141],"inline":[142],"hooks":[143],"intercept":[145],"redirect":[147],"requests":[148],"sent":[149],"host":[152],"vKI,":[156],"where":[157],"container-specific":[158],"rules,":[160],"functions,":[161],"implemented.":[165],"Through":[166],"case":[167],"studies,":[168],"we":[169],"demonstrate":[170],"under":[172],"user-defined":[174],"can":[180],"be":[181],"supported":[182],"with":[183,192,206],"reasonable":[185],"engineering":[186],"effort.":[187],"An":[188],"evaluation":[189],"micro-benchmarks,":[193],"services,":[195],"real-world":[196],"applications":[197],"show":[198],"achieves":[201],"guarantees,":[204],"less":[208]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-10T00:00:00"}