{"id":"https://openalex.org/W4408848678","doi":"https://doi.org/10.1145/3689031.3696090","title":"Rakis: Secure Fast I/O Primitives Across Trust Boundaries on Intel SGX","display_name":"Rakis: Secure Fast I/O Primitives Across Trust Boundaries on Intel SGX","publication_year":2025,"publication_date":"2025-03-26","ids":{"openalex":"https://openalex.org/W4408848678","doi":"https://doi.org/10.1145/3689031.3696090"},"language":"en","primary_location":{"id":"doi:10.1145/3689031.3696090","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3689031.3696090","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twentieth European Conference on Computer Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027591580","display_name":"Mansour Alharthi","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mansour Alharthi","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, United States"],"raw_orcid":"https://orcid.org/0009-0006-2458-7995","affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, United States","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021528708","display_name":"Fan Sang","orcid":"https://orcid.org/0009-0002-0532-5798"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fan Sang","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, United States"],"raw_orcid":"https://orcid.org/0009-0002-0532-5798","affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, United States","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088191678","display_name":"Dmitrii Kuvaiskii","orcid":null},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dmitrii Kuvaiskii","raw_affiliation_strings":["Intel Corporation, Hillsboro, United States"],"raw_orcid":"https://orcid.org/0009-0002-3342-4494","affiliations":[{"raw_affiliation_string":"Intel Corporation, Hillsboro, United States","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090620720","display_name":"Mona Vij","orcid":"https://orcid.org/0000-0002-5309-0391"},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mona Vij","raw_affiliation_strings":["Intel Corporation, Hillsboro, United States"],"raw_orcid":"https://orcid.org/0000-0002-5309-0391","affiliations":[{"raw_affiliation_string":"Intel Corporation, Hillsboro, United States","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100743709","display_name":"Taesoo Kim","orcid":"https://orcid.org/0000-0002-7440-2067"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Taesoo Kim","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, United States"],"raw_orcid":"https://orcid.org/0000-0002-7440-2067","affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, United States","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1177","last_page":"1193"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7961200475692749},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4901193082332611},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.4007427394390106},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36767131090164185}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7961200475692749},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4901193082332611},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.4007427394390106},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36767131090164185}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3689031.3696090","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3689031.3696090","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twentieth European Conference on Computer Systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4866623828","display_name":null,"funder_award_id":"CNS-17499711","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1852007091","https://openalex.org/W2605470470","https://openalex.org/W2612012086","https://openalex.org/W2612102454","https://openalex.org/W2625154275","https://openalex.org/W2790063371","https://openalex.org/W2798786426","https://openalex.org/W2914209329","https://openalex.org/W2982003166","https://openalex.org/W3001001866","https://openalex.org/W3105175523","https://openalex.org/W3158187570","https://openalex.org/W4289038676","https://openalex.org/W4381611580"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0],"use":[1,36],"of":[2,37,66,111,167,182],"Intel\u00ae":[3],"Software":[4],"Guard":[5],"Extensions":[6],"(SGX)":[7],"offers":[8],"robust":[9],"security":[10,110],"measures":[11],"for":[12],"shielding":[13],"applications":[14,25],"in":[15,144,151],"untrusted":[16],"environments.":[17],"However,":[18,58],"the":[19,35,64,68,75,109,164],"performance":[20,130,172,180],"overhead":[21],"experienced":[22],"by":[23,115],"IO-intensive":[24],"within":[26],"SGX":[27,49,93,158],"limits":[28],"widespread":[29],"adoption.":[30],"Prior":[31],"approaches":[32],"have":[33],"proposed":[34],"userspace":[38],"kernel-bypass":[39],"libraries":[40],"such":[41],"as":[42],"Data":[43],"Plane":[44],"Development":[45],"Kit":[46],"(DPDK)":[47],"inside":[48],"enclaves":[50],"to":[51,55,96,156,185],"enable":[52],"direct":[53],"access":[54],"IO":[56,99],"devices.":[57],"these":[59],"solutions":[60],"often":[61],"come":[62],"at":[63],"cost":[65],"increasing":[67],"Trusted":[69],"Computing":[70],"Base":[71],"(TCB)":[72],"size,":[73],"expanding":[74],"attack":[76],"surface,":[77],"and":[78,120,140],"complicating":[79],"deployment.":[80],"In":[81],"this":[82],"paper,":[83],"we":[84,169],"introduce":[85],"Rakis,":[86,168],"a":[87,124,148],"comprehensive":[88],"system":[89],"that":[90],"securely":[91],"enables":[92],"enclave":[94,159],"programs":[95,176],"leverage":[97],"fast":[98],"Linux":[100],"kernel":[101],"primitives":[102],"without":[103,132],"modifying":[104],"user":[105],"applications.":[106],"Rakis":[107,128],"prioritizes":[108],"its":[112,171],"TCB":[113,134],"components":[114],"employing":[116],"rigorous":[117],"software":[118],"testing":[119],"verification":[121],"methods,":[122],"embodying":[123],"security-by-design":[125],"approach.":[126],"Importantly,":[127],"achieves":[129],"advantages":[131],"sacrificing":[133],"size":[135],"or":[136],"introducing":[137],"deployment":[138],"intricacies":[139],"demonstrates":[141],"significant":[142],"improvements":[143],"benchmark":[145],"tests":[146],"with":[147],"4.6x":[149],"increase":[150],"UDP":[152],"network":[153],"throughput":[154],"compared":[155,184],"state-of-the-art":[157],"LibOS":[160],"(Gramine-SGX).":[161],"To":[162],"demonstrate":[163],"practical":[165],"applicability":[166],"evaluate":[170],"on":[173],"four":[174],"real-world":[175],"showcasing":[177],"an":[178],"average":[179],"improvement":[181],"2.8x":[183],"Gramine-SGX":[186],"across":[187],"all":[188],"workloads.":[189]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}