{"id":"https://openalex.org/W4401991707","doi":"https://doi.org/10.1145/3678015.3680492","title":"Framekernel: A Safe and Efficient Kernel Architecture via Rust-based Intra-kernel Privilege Separation","display_name":"Framekernel: A Safe and Efficient Kernel Architecture via Rust-based Intra-kernel Privilege Separation","publication_year":2024,"publication_date":"2024-08-29","ids":{"openalex":"https://openalex.org/W4401991707","doi":"https://doi.org/10.1145/3678015.3680492"},"language":"en","primary_location":{"id":"doi:10.1145/3678015.3680492","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3678015.3680492","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM SIGOPS Asia-Pacific Workshop on Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3678015.3680492","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111306275","display_name":"Yuke Peng","orcid":"https://orcid.org/0009-0005-4987-7799"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuke Peng","raw_affiliation_strings":["Southern University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0009-0005-4987-7799","affiliations":[{"raw_affiliation_string":"Southern University of Science and Technology, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100563445","display_name":"Hongliang Tian","orcid":"https://orcid.org/0009-0005-1248-4078"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hongliang Tian","raw_affiliation_strings":["Ant Group, China"],"raw_orcid":"https://orcid.org/0009-0005-1248-4078","affiliations":[{"raw_affiliation_string":"Ant Group, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111306276","display_name":"Jinyi Xian","orcid":null},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinyi Xian","raw_affiliation_strings":["Southern University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0009-0007-1359-1232","affiliations":[{"raw_affiliation_string":"Southern University of Science and Technology, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113355201","display_name":"Shuai Zhou","orcid":"https://orcid.org/0009-0006-7478-3548"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuai Zhou","raw_affiliation_strings":["Southern University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0009-0006-7478-3548","affiliations":[{"raw_affiliation_string":"Southern University of Science and Technology, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049135681","display_name":"Shoumeng Yan","orcid":"https://orcid.org/0009-0007-9580-5395"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shoumeng Yan","raw_affiliation_strings":["Ant Group, China"],"raw_orcid":"https://orcid.org/0009-0007-9580-5395","affiliations":[{"raw_affiliation_string":"Ant Group, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070946957","display_name":"Yinqian Zhang","orcid":"https://orcid.org/0000-0002-7585-1075"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yinqian Zhang","raw_affiliation_strings":["Southern University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0000-0002-7585-1075","affiliations":[{"raw_affiliation_string":"Southern University of Science and Technology, China","institution_ids":["https://openalex.org/I3045169105"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"31","last_page":"37"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.7260228991508484},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6353189945220947},{"id":"https://openalex.org/keywords/rust","display_name":"Rust (programming language)","score":0.5123113393783569},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.4352075457572937},{"id":"https://openalex.org/keywords/separation","display_name":"Separation (statistics)","score":0.4210489094257355},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.17273744940757751},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16181114315986633},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.11717456579208374},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.10993614792823792},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.07636496424674988}],"concepts":[{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.7260228991508484},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6353189945220947},{"id":"https://openalex.org/C197781089","wikidata":"https://www.wikidata.org/wiki/Q575650","display_name":"Rust (programming language)","level":2,"score":0.5123113393783569},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.4352075457572937},{"id":"https://openalex.org/C2776061190","wikidata":"https://www.wikidata.org/wiki/Q7451805","display_name":"Separation (statistics)","level":2,"score":0.4210489094257355},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.17273744940757751},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16181114315986633},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.11717456579208374},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.10993614792823792},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.07636496424674988}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3678015.3680492","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3678015.3680492","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM SIGOPS Asia-Pacific Workshop on Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3678015.3680492","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3678015.3680492","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM SIGOPS Asia-Pacific Workshop on Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W2136310957","https://openalex.org/W2762171171"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2374400535","https://openalex.org/W1603110617","https://openalex.org/W2108239983","https://openalex.org/W2892079901","https://openalex.org/W2940342784","https://openalex.org/W2390279801","https://openalex.org/W2134261832","https://openalex.org/W2358668433"],"abstract_inverted_index":{"This":[0,21,95],"paper":[1,96],"introduces":[2],"the":[3,24,30,62,98,113],"framekernel":[4,37,109,114],"architecture,":[5],"a":[6,41,66,72,84,124,135],"novel":[7],"approach":[8],"to":[9,64],"operating":[10],"system":[11,121],"(OS)":[12],"design":[13,99],"that":[14,103],"utilizes":[15],"safe":[16,58,73],"language-based,":[17],"intra-kernel":[18],"privilege":[19],"separation.":[20],"architecture":[22],"combines":[23],"security":[25],"advantages":[26],"of":[27,33,40,69,127],"microkernels":[28],"with":[29],"performance":[31],"efficiencies":[32],"monolithic":[34],"kernels.":[35],"A":[36],"is":[38],"composed":[39],"privileged":[42],"OS":[43,47,128],"Framework":[44,50],"and":[45,101,123,130],"de-privileged":[46],"Services.":[48],"The":[49,75],"encapsulates":[51],"all":[52],"low-level,":[53],"unsafe":[54],"operations":[55],"into":[56],"high-level,":[57],"abstractions,":[59],"thereby":[60],"enabling":[61],"Services":[63],"implement":[65],"wide":[67],"array":[68],"functionalities":[70],"in":[71,78,82],"language.":[74],"primary":[76],"challenge":[77],"designing":[79],"framekernels":[80],"lies":[81],"maintaining":[83],"minimal":[85],"Trusted":[86],"Computing":[87],"Base":[88],"(TCB)-the":[89],"Framework-":[90],"while":[91],"supporting":[92,117],"extensive":[93],"functionalities.":[94],"outlines":[97],"principle":[100],"rules":[102],"facilitate":[104],"this":[105],"balance.":[106],"Our":[107],"Rust-based":[108],"prototype,":[110],"Asterinas,":[111],"validates":[112],"concept":[115],"by":[116],"over":[118],"130":[119],"Linux":[120],"calls":[122],"broad":[125],"range":[126],"features":[129],"device":[131],"drivers,":[132],"based":[133],"on":[134],"significantly":[136],"reduced":[137],"TCB.":[138]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
