{"id":"https://openalex.org/W7163395060","doi":"https://doi.org/10.48550/arxiv.2606.03323","title":"Implement Kubernetes Pod-Level Remote Attestation for Confidential Workloads on dstack","display_name":"Implement Kubernetes Pod-Level Remote Attestation for Confidential Workloads on dstack","publication_year":2026,"publication_date":"2026-06-02","ids":{"openalex":"https://openalex.org/W7163395060","doi":"https://doi.org/10.48550/arxiv.2606.03323"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.03323","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03323","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.03323","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137760263","display_name":"Yang Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100413965","display_name":"Kevin Wang","orcid":"https://orcid.org/0009-0003-4227-7745"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Kevin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012147143","display_name":"Luo Yuanhai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Yuanhai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137793795","display_name":"Hang Yin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yin, Hang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137755543","display_name":"Jie Cai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cai, Jie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120616382","display_name":"Shunfan Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Shunfan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137792051","display_name":"Wenfeng Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Wenfeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9872000217437744,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9872000217437744,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.002199999988079071,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.661300003528595},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.6212999820709229},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5694000124931335},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5406000018119812},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.4399000108242035},{"id":"https://openalex.org/keywords/direct-anonymous-attestation","display_name":"Direct Anonymous Attestation","score":0.4334999918937683},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4293000102043152},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.427700012922287},{"id":"https://openalex.org/keywords/sandbox","display_name":"Sandbox (software development)","score":0.4171000123023987}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7692000269889832},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.661300003528595},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.6212999820709229},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5694000124931335},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5406000018119812},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.451200008392334},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.4399000108242035},{"id":"https://openalex.org/C169796023","wikidata":"https://www.wikidata.org/wiki/Q3708936","display_name":"Direct Anonymous Attestation","level":3,"score":0.4334999918937683},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4293000102043152},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.427700012922287},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4269999861717224},{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.4171000123023987},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3937999904155731},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.3928999900817871},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3758000135421753},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.36660000681877136},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.36079999804496765},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.3587999939918518},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.322299987077713},{"id":"https://openalex.org/C48677424","wikidata":"https://www.wikidata.org/wiki/Q6888088","display_name":"Mode (computer interface)","level":2,"score":0.3206000030040741},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.29330000281333923},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.290800005197525},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.288100004196167},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.2870999872684479},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.28189998865127563},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C173259116","wikidata":"https://www.wikidata.org/wiki/Q864003","display_name":"Discrete logarithm","level":4,"score":0.27379998564720154},{"id":"https://openalex.org/C124978682","wikidata":"https://www.wikidata.org/wiki/Q1201019","display_name":"Proof of concept","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C2778565505","wikidata":"https://www.wikidata.org/wiki/Q2207566","display_name":"Spec#","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.25679999589920044}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.03323","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03323","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.03323","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03323","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"rise":[1],"of":[2,83,194,206],"LLM-as-a-Service":[3],"and":[4,47,120,166,170,182,191],"other":[5],"confidential":[6],"cloud":[7],"workloads":[8],"demands":[9],"cryptographic":[10],"proof":[11,82],"that":[12,36,59,146,197],"user":[13],"data":[14],"is":[15,88],"processed":[16],"in":[17,98,114],"a":[18,29,56,73,89,130,142,149,158,172],"trusted,":[19],"untampered":[20],"environment.":[21],"Existing":[22],"solutions,":[23],"notably":[24],"Confidential":[25,75],"Containers":[26],"(CoCo),":[27],"enforce":[28],"strict":[30],"\"one":[31],"Pod":[32,107,135],"per":[33],"VM\"":[34],"model":[35],"attests":[37],"only":[38],"the":[39,115,186,203],"Guest":[40],"OS":[41],"stack,":[42],"leaving":[43],"container-level":[44],"identity":[45],"unverified":[46],"incurring":[48],"prohibitive":[49],"per-VM":[50,207],"resource":[51,204],"overhead.":[52],"We":[53,184],"present":[54],"dstack-capsule,":[55,195],"Kubernetes":[57,178],"platform":[58,94],"enables":[60],"Pod-level":[61,131],"remote":[62],"attestation":[63,91,132,189],"on":[64,124,177],"Intel":[65,180],"TDX":[66,116],"by":[67,122],"allowing":[68],"multiple":[69],"Pods":[70],"to":[71,138,154],"share":[72],"single":[74],"VM":[76],"while":[77,105],"each":[78],"retains":[79],"independent,":[80],"hardware-backed":[81],"identity.":[84],"Our":[85],"key":[86],"insight":[87],"two-layer":[90],"architecture:":[92],"static":[93],"measurements":[95],"are":[96,112],"frozen":[97],"RTMR[3]":[99],"via":[100],"an":[101],"irreversible":[102],"privilege":[103,143],"fuse,":[104],"dynamic":[106],"identities":[108],"(pod_uid,":[109],"pod_spec_hash,":[110],"workload_id)":[111],"embedded":[113],"Quote's":[117],"report_data":[118],"field":[119],"signed":[121],"hardware":[123],"every":[125],"request.":[126],"dstack-capsule":[127],"introduces":[128],"(1)":[129],"protocol":[133],"binding":[134],"spec":[136],"digests":[137],"hardware-signed":[139],"Quotes;":[140],"(2)":[141],"fuse":[144],"mechanism":[145],"atomically":[147],"transitions":[148],"node":[150],"from":[151],"setup":[152],"mode":[153],"secure":[155],"mode;":[156],"(3)":[157],"multi-layer":[159],"sandbox":[160],"spanning":[161],"storage,":[162],"runtime,":[163],"admission,":[164],"API,":[165],"network":[167],"isolation":[168],"layers;":[169],"(4)":[171],"complete":[173],"open-source":[174],"implementation":[175],"based":[176],"1.32,":[179],"TDX,":[181],"Sysbox.":[183],"evaluate":[185],"security":[187],"properties,":[188],"correctness,":[190],"performance":[192],"characteristics":[193],"demonstrating":[196],"it":[198],"achieves":[199],"Pod-granularity":[200],"verification":[201],"without":[202],"overhead":[205],"isolation.":[208]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-04T00:00:00"}