{"id":"https://openalex.org/W7165024303","doi":"https://doi.org/10.48550/arxiv.2606.17533","title":"SNAS: A Multi-Layer Defense-in-Depth Architecture for Secure Egress in Sandboxed Workloads","display_name":"SNAS: A Multi-Layer Defense-in-Depth Architecture for Secure Egress in Sandboxed Workloads","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7165024303","doi":"https://doi.org/10.48550/arxiv.2606.17533"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.17533","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.17533","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.17533","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138773795","display_name":"Niranjan Kumar Sharma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sharma, Niranjan Kumar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138766758","display_name":"S Muralidhar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Muralidhar, S","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046181556","display_name":"Samy Boshra-riad","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Boshra-Riad, Samy","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119892973","display_name":"Mike Halcrow","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Halcrow, Mike","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121999607","display_name":"Y He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Yuxiong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138797763","display_name":"Nitya Kumar Sharma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sharma, Nitya Kumar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138786550","display_name":"Shawn Xia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xia, Shawn","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138790058","display_name":"Haowei Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Haowei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119892975","display_name":"Elliott Brossard","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Brossard, Elliott","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119892974","display_name":"Derek Denny-Brown","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Denny-Brown, Derek","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104987393","display_name":"Choden Konigsmark","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Konigsmark, Choden","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138790547","display_name":"Bhanu Prakash","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Prakash, Bhanu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138784613","display_name":"Brandon Baker","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Baker, Brandon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5027799221","display_name":"Andong Zhan","orcid":"https://orcid.org/0000-0003-4403-2891"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhan, Andong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.6729999780654907,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.6729999780654907,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.18330000340938568,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.03720000013709068,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5550000071525574},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5519999861717224},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5152000188827515},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.4880000054836273},{"id":"https://openalex.org/keywords/dependability","display_name":"Dependability","score":0.47380000352859497},{"id":"https://openalex.org/keywords/overlay-network","display_name":"Overlay network","score":0.4058000147342682},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.391400009393692},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.38659998774528503},{"id":"https://openalex.org/keywords/encapsulation","display_name":"Encapsulation (networking)","score":0.3431999981403351},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.3314000070095062}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8123000264167786},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7346000075340271},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5550000071525574},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5519999861717224},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5152000188827515},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4884999990463257},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.4880000054836273},{"id":"https://openalex.org/C77019957","wikidata":"https://www.wikidata.org/wiki/Q2689057","display_name":"Dependability","level":2,"score":0.47380000352859497},{"id":"https://openalex.org/C169851745","wikidata":"https://www.wikidata.org/wiki/Q1331985","display_name":"Overlay network","level":3,"score":0.4058000147342682},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.391400009393692},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.38659998774528503},{"id":"https://openalex.org/C81147070","wikidata":"https://www.wikidata.org/wiki/Q1172449","display_name":"Encapsulation (networking)","level":2,"score":0.3431999981403351},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3314000070095062},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3294999897480011},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.3246000111103058},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.3206000030040741},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3098999857902527},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.30809998512268066},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.2922999858856201},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C63540848","wikidata":"https://www.wikidata.org/wiki/Q3140932","display_name":"Fault tolerance","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.27549999952316284},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.27160000801086426},{"id":"https://openalex.org/C187691185","wikidata":"https://www.wikidata.org/wiki/Q2020720","display_name":"Grid","level":2,"score":0.27079999446868896},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.26589998602867126},{"id":"https://openalex.org/C62793504","wikidata":"https://www.wikidata.org/wiki/Q228327","display_name":"Access network","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C2779581428","wikidata":"https://www.wikidata.org/wiki/Q7122997","display_name":"Packet processing","level":3,"score":0.2648000121116638},{"id":"https://openalex.org/C22684755","wikidata":"https://www.wikidata.org/wiki/Q847526","display_name":"Queueing theory","level":2,"score":0.2606000006198883},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.2590000033378601},{"id":"https://openalex.org/C557945733","wikidata":"https://www.wikidata.org/wiki/Q389772","display_name":"Data transmission","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2563000023365021},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.17533","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.17533","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.17533","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.17533","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Snowpark":[0,57],"enables":[1],"data":[2,144],"engineering":[3],"and":[4,47,85,101,122,127,137,146],"AI/ML":[5],"workloads":[6,19,141],"in":[7,13,56],"Snowflake":[8,135],"by":[9],"executing":[10],"user-defined":[11],"functions":[12],"secure":[14,63],"sandboxes.":[15],"Many":[16],"of":[17,105],"these":[18],"require":[20],"external":[21,27,64,148],"connectivity":[22],"to":[23,37],"access":[24,41],"cloud":[25],"APIs,":[26],"databases,":[28],"or":[29],"feature":[30],"stores,":[31],"creating":[32],"a":[33,59],"dependability":[34],"challenge:":[35],"how":[36],"provide":[38],"transparent":[39],"network":[40],"while":[42],"preserving":[43],"strict":[44],"multi-tenant":[45],"isolation":[46],"resource":[48],"fairness.":[49],"This":[50],"paper":[51],"presents":[52],"Secure":[53],"Network":[54,79],"Access":[55],"(SNAS),":[58],"production":[60,103,140],"architecture":[61],"for":[62,89,124],"communication":[65],"from":[66],"sandboxed":[67],"workloads.":[68],"SNAS":[69,130],"combines":[70],"Extended":[71],"Berkeley":[72],"Packet":[73],"Filter":[74],"(eBPF)":[75],"packet":[76],"filtering,":[77],"Generic":[78],"Virtualization":[80],"Encapsulation":[81],"(GENEVE)":[82],"overlay":[83],"networks,":[84],"distributed":[86],"egress":[87,91],"proxies":[88],"policy-driven":[90],"control":[92],"with":[93],"low":[94],"overhead.":[95],"We":[96],"describe":[97],"the":[98,113],"design,":[99],"deployment,":[100],"measured":[102],"behavior":[104],"SNAS,":[106],"including":[107,142],"an":[108],"eBPF-based":[109],"bandwidth":[110],"limiter":[111],"using":[112],"Earliest":[114],"Departure":[115],"Time":[116],"(EDT)":[117],"algorithm,":[118],"dual-tier":[119],"policy":[120],"enforcement,":[121],"safeguards":[123],"connection":[125],"limiting":[126],"port":[128],"exhaustion.":[129],"is":[131],"deployed":[132],"across":[133],"all":[134],"regions":[136],"supports":[138],"large-scale":[139],"petabyte-scale":[143],"transfer":[145],"latency-sensitive":[147],"integrations.":[149]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-18T00:00:00"}