{"id":"https://openalex.org/W7162766112","doi":"https://doi.org/10.1145/3745756.3809240","title":"Ringmaster: How to juggle high-throughput host OS system calls from TrustZone TEEs","display_name":"Ringmaster: How to juggle high-throughput host OS system calls from TrustZone TEEs","publication_year":2026,"publication_date":"2026-05-29","ids":{"openalex":"https://openalex.org/W7162766112","doi":"https://doi.org/10.1145/3745756.3809240"},"language":null,"primary_location":{"id":"doi:10.1145/3745756.3809240","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3745756.3809240","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3745756.3809240","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137335778","display_name":"Richard Thomas Habeeb","orcid":"https://orcid.org/0009-0000-2368-1177"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Richard Thomas Habeeb","raw_affiliation_strings":["Department of Computer Science, Yale University, New Haven, CT, USA"],"raw_orcid":"https://orcid.org/0009-0000-2368-1177","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Yale University, New Haven, CT, USA","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068072324","display_name":"Man-Ki Yoon","orcid":"https://orcid.org/0000-0001-7181-1730"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Man-Ki Yoon","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":"https://orcid.org/0000-0001-7181-1730","affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101897453","display_name":"Hao Chen","orcid":"https://orcid.org/0000-0002-1180-9433"},"institutions":[{"id":"https://openalex.org/I4210121433","display_name":"Certizen (China)","ror":"https://ror.org/02gbmxj61","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210121433"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Chen","raw_affiliation_strings":["CertiK, Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0002-1180-9433","affiliations":[{"raw_affiliation_string":"CertiK, Hong Kong, China","institution_ids":["https://openalex.org/I4210121433"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5137324120","display_name":"Zhong Shao","orcid":"https://orcid.org/0000-0001-8184-7649"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhong Shao","raw_affiliation_strings":["Yale University, New Haven, CT, USA"],"raw_orcid":"https://orcid.org/0000-0001-8184-7649","affiliations":[{"raw_affiliation_string":"Yale University, New Haven, CT, USA","institution_ids":["https://openalex.org/I32971472"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.87028083,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"808","last_page":"824"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7718999981880188,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7718999981880188,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.10170000046491623,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13248","display_name":"Healthcare Technology and Patient Monitoring","score":0.012799999676644802,"subfield":{"id":"https://openalex.org/subfields/2746","display_name":"Surgery"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.7321000099182129},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.4690999984741211},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.450300008058548},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.40849998593330383},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.3968999981880188},{"id":"https://openalex.org/keywords/legacy-system","display_name":"Legacy system","score":0.3928000032901764},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.36899998784065247}],"concepts":[{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.7321000099182129},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6743999719619751},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.4690999984741211},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.454800009727478},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.450300008058548},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4277999997138977},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.40849998593330383},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.3968999981880188},{"id":"https://openalex.org/C105446022","wikidata":"https://www.wikidata.org/wiki/Q445962","display_name":"Legacy system","level":3,"score":0.3928000032901764},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.36899998784065247},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3327000141143799},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.33239999413490295},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.2946999967098236},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29319998621940613},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2718000113964081},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C2779110517","wikidata":"https://www.wikidata.org/wiki/Q1240788","display_name":"Supervisor","level":2,"score":0.2612000107765198}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3745756.3809240","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3745756.3809240","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3745756.3809240","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3745756.3809240","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th Annual International Conference on Mobile Systems, Applications and Services","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G422597058","display_name":null,"funder_award_id":"2313433","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8480989668","display_name":null,"funder_award_id":"N66001-21-C-4018","funder_id":"https://openalex.org/F4320337531","funder_display_name":"Defense Sciences Office, DARPA"},{"id":"https://openalex.org/G8557257388","display_name":null,"funder_award_id":"2019285","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337531","display_name":"Defense Sciences Office, DARPA","ror":"https://ror.org/0447fe631"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W316935178","https://openalex.org/W1852007091","https://openalex.org/W1921864689","https://openalex.org/W1971181882","https://openalex.org/W1971739358","https://openalex.org/W2001738739","https://openalex.org/W2005302181","https://openalex.org/W2007395635","https://openalex.org/W2010459485","https://openalex.org/W2015827499","https://openalex.org/W2061643296","https://openalex.org/W2070090222","https://openalex.org/W2112735498","https://openalex.org/W2130694829","https://openalex.org/W2131726714","https://openalex.org/W2134955305","https://openalex.org/W2136310957","https://openalex.org/W2149075075","https://openalex.org/W2150615820","https://openalex.org/W2156093990","https://openalex.org/W2166592660","https://openalex.org/W2175377689","https://openalex.org/W2402811135","https://openalex.org/W2604623598","https://openalex.org/W2605470470","https://openalex.org/W2605883969","https://openalex.org/W2607252733","https://openalex.org/W2690287028","https://openalex.org/W2725814501","https://openalex.org/W2727477526","https://openalex.org/W2767174522","https://openalex.org/W2794064023","https://openalex.org/W2875475762","https://openalex.org/W2886560311","https://openalex.org/W2898400109","https://openalex.org/W2908929484","https://openalex.org/W2913096406","https://openalex.org/W2920103512","https://openalex.org/W2963513677","https://openalex.org/W2986001276","https://openalex.org/W2987486320","https://openalex.org/W2990623250","https://openalex.org/W3001001866","https://openalex.org/W3021475380","https://openalex.org/W3138943459","https://openalex.org/W3155402977","https://openalex.org/W3213643831","https://openalex.org/W4200539379","https://openalex.org/W4213202073","https://openalex.org/W4231646949","https://openalex.org/W4252985811","https://openalex.org/W4281705700","https://openalex.org/W4288057753","https://openalex.org/W4368408265","https://openalex.org/W4381894591","https://openalex.org/W4392168453"],"related_works":[],"abstract_inverted_index":{"Many":[0,57],"safety-critical":[1],"systems":[2,22],"require":[3],"the":[4,32,73,107,132,139],"timely":[5],"processing":[6,137],"of":[7,34,141,187],"sensor":[8],"inputs":[9],"to":[10,16,54,60,94,114,124,157,199],"avoid":[11],"potential":[12,35],"safety":[13],"hazards.":[14],"Additionally,":[15,145],"support":[17],"useful":[18,77],"application":[19],"features,":[20],"such":[21],"increasingly":[23],"have":[24],"a":[25,40,68,83,167,192],"large,":[26],"rich":[27,142],"operating":[28],"system":[29,171],"(OS)":[30],"at":[31],"cost":[33],"security":[36],"bugs.":[37],"Thus,":[38],"if":[39],"malicious":[41],"party":[42],"gains":[43],"supervisor":[44],"privileges,":[45],"they":[46],"could":[47],"cause":[48],"real-world":[49],"damage":[50],"by":[51],"denying":[52],"service":[53],"time-sensitive":[55,65,136],"programs.":[56],"past":[58],"approaches":[59],"this":[61,71],"problem":[62],"completely":[63],"isolate":[64],"programs":[66,74,150],"with":[67,122,138,172,178],"hypervisor;":[69],"however,":[70],"prevents":[72],"from":[75],"accessing":[76],"OS":[78,101,109,143],"services.":[79,144],"We":[80,160],"introduce":[81],"Ringmaster,":[82],"novel":[84],"framework":[85],"that":[86],"enables":[87],"enclaves":[88,112,190],"or":[89],"TEEs":[90],"(Trusted":[91],"Execution":[92],"Environments)":[93],"asynchronously":[95],"access":[96,123],"rich,":[97],"but":[98],"potentially":[99],"untrusted,":[100],"services":[102],"via":[103],"Linux's":[104],"io_uring.":[105],"When":[106],"untrusted":[108],"denies":[110],"service,":[111],"continue":[113],"operate":[115],"on":[116,191],"Ringmaster's":[117],"minimal":[118,173],"ARM":[119],"TrustZone":[120],"kernel":[121],"small,":[125],"critical":[126],"device":[127],"drivers.":[128],"This":[129],"approach":[130],"balances":[131],"need":[133],"for":[134],"secure,":[135],"convenience":[140],"Ringmaster":[146,163,183],"supports":[147],"large":[148],"unmodified":[149],"as":[151],"enclaves,":[152],"offering":[153],"lower":[154],"overhead":[155,197],"compared":[156,198],"existing":[158],"systems.":[159],"demonstrate":[161],"how":[162],"helps":[164],"us":[165],"build":[166],"working,":[168],"highly":[169],"secure":[170],"engineering.":[174],"In":[175],"our":[176],"experiments":[177],"an":[179],"unmanned":[180],"aerial":[181],"vehicle,":[182],"achieved":[184],"nearly":[185],"1GiB/sec":[186],"data":[188],"into":[189],"Raspberry":[193],"Pi4B,":[194],"0-3%":[195],"throughput":[196],"non-enclave":[200],"tasks.":[201]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-05-30T00:00:00"}