ref.bib

@string{proc-osdi =  "Proc. of {USENIX} {OSDI}"}
@string{proc-sosp = "Proc. of {ACM} {SOSP}"}
@string{proc-ccs = "Proc. of {ACM} {CCS}"}
@string{proc-asia-ccs = "Proc. of {ACM} {ASIA CCS}"}
@string{proc-vee = "Proc. of {ACM} {VEE}"}
@string{proc-asplos = "Proc. of {ACM} {ASPLOS}"}
@string{proc-hpdc = "Proc. of {IEEE} {HPDC}"}
@string{proc-hpca = "Proc. of {IEEE} {HPCA}"}
@string{proc-nsdi = "Proc. of {USENIX} {NSDI}"}
@string{proc-ndss = "Proc. of {NDSS}"}
@string{proc-sigmetrics = "Proc. of {ACM} {SIGMETRICS}"}
@string{proc-micro = "Proc of {IEEE/ACM} {MICRO}"}
@string{proc-usenix = "Proc. of {USENIX} Annual Technical Conf."}
@string{proc-usenix-security = "Proc. of {USENIX} Security"}
@string{proc-usenix-freenix = "Proc. of {USENIX} Annual Technical Conf. ({FREENIX} Track)"}
@string{proc-ieee-sp = "Proc. of {IEEE} Security and Privacy"}
@string{proc-ieee-euro-sp = "Proc. of {IEEE} European Security and Privacy"}
@string{proc-cset = "Proc. of {USENIX} {CSET}"}
@string{proc-mlics = "Proc. of {USENIX} {MLICS}"}
@string{proc-usits = "Proc. of {USENIX} {USITS}"}
@string{proc-isca = "Proc. of {ISCA}"}
@string{proc-hotos = "Proc. of {USENIX} {HotOS}"}
@string{proc-hotice = "Proc. of {USENIX} {HotICE}"}
@string{proc-hotstorage = "Proc. of {USENIX} {HotStorage}"}
@string{proc-hotsdn = "Proc. of {ACM} {HotSDN}"}
@string{proc-vtdc = "Proc. of {IEEE} {VTDC}"}
@string{proc-ispass = "Proc. of {IEEE} {ISPASS}"}
@string{proc-europar = "Proc. of {Euro-Par}"}
@string{proc-cluster = "Proc. of {IEEE} {CLUSTER}"}
@string{proc-ottawa_linux = "Proc. of {Ottawa Linux Symposium}"}
@string{proc-wmcsa = "Proc. of {IEEE} {WMCSA}"}
@string{proc-noms = "Proc. of {IEEE/IFIP} {NOMS}"}
@string{proc-dsom = "Proc. of {IEEE/IFIP} {DSOM}"}
@string{proc-cloudcom = "Proc. of {IEEE} {CloudCom}"}
@string{proc-cloudcomp = "Proc. of {ICST} {CLOUDCOMP}"}
@string{proc-infocom-mini = "Proc. of {IEEE} {INFOCOM Mini-conference}"}
@string{proc-infocom = "Proc. of {IEEE} {INFOCOM}"}
@string{proc-mobicom = "Proc. of {ACM} {MobiCom}"}

@string{proc-lisa = "Proc. of {USENIX} {LISA}"}
@string{proc-sigops = "Proc. of {ACM} {SIGOPS}"}
@string{proc-icfp = "Proc. of {ACM} {ICFP}"}
@string{proc-dsn = "Proc. of {DSN}"}
@string{proc-stc = "Proc. of {ACM} {STOC}"}
@string{proc-podc = "Proc. of {ACM} {PODC} Symp."}
@string{proc-fast = "Proc. of {USENIX} {FAST}"}
@string{proc-eurosys = "Proc. of {ACM} EuroSys"}
@string{proc-eurosec = "Proc. of {ACM} EuroSec"}
@string{proc-sigcomm = "Proc. of {ACM} {SIGCOMM}"}
@string{proc-sigcomm-presto = "Proc. of {ACM} {SIGCOMM} {PRESTO}"}
@string{proc-oopsla = "Proc. of {ACM} {OOPSLA} Conf."}
@string{proc-hotcloud ="Proc. of {USENIX} {HotCloud}"}
@string{proc-hotnets = "Proc. of {ACM} {HotNets}"}
@string{proc-gcc = "Proc. of {ACM} Workshop of Grid and Cooperative Computing (GCC)"}
@string{proc-sc = "Proc. of {ACM/IEEE} {SC}"}
@string{proc-socc = "Proc. of {ACM} {SoCC}"}
@string{proc-mobiarch = "Proc. of {ACM/IEEE} {MobiArch}"}

@string{journal-sigcomm-ccr = "{ACM} {SIGCOMM} {CCR}"}
@string{journal-osr = "{SIGOPS} {OSR}"}
@string{journal-cacm = "Communications of the {ACM}"}
@string{journal-ppl = "Parallel Processing Letters"}
@string{journal-tocs = "{ACM} Transactions on Compuer Systems"}
@string{journal-computer = "{IEEE} Computer"}
@string{journal-popets = "Proceedings on Privacy Enhancing Technologies"}

%%%%%%%%%%%%%%%%%%%%%%%%%%   JOURNAL-POPETS %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@article{selfrando,
  author={Mauro Conti and Stephen Crane and Tommaso Frassetto and Andrei Homescu and Georg Koppen and Per Larsen and Christopher Liebchen and Mike Perry and Ahmad-Reza Sadeghi},
  title={Selfrando: Securing the Tor Browser against De-anonymization Exploits},
  journal=journal-popets,
  publisher={Sciendo},
  volume={2016},
  number={4},
  pages={454--469},
  year={2016},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   LWN %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@misc{seccomp,
  title={{A seccomp overview}},
  howpublished={\url{https://lwn.net/Articles/656307/}},
  author={Jake Edge},
  month=sep,
  year=2015,
}
@misc{clear-containers,
  title={{An introduction to Clear Containers}},
  author={Arjan van de Ven},
  howpublished={\url{https://lwn.net/Articles/644675/}},
  month=may,
  year={2015},
}
@misc{kaslr-lwn,
  title={{Kernel address randomization}},
  author={Jonathan Corbet},
  howpublished={\url{https://lwn.net/Articles/444503/}},
  month=may,
  year={2011},
}
@misc{rand-kernel-lwn,
  title={{Randomizing the kernel}},
  author={Jake Edge},
  howpublished={\url{https://lwn.net/Articles/546686/}},
  month=apr,
  year={2013},
}
@misc{virt-phys-rand-lwn,
  title={randomize kernel physical address and virtual address separately},
  author={Baoquan He},
  howpublished={\url{https://lwn.net/Articles/635901/}},
  month=mar,
  year=2015,
}
@misc{kptr_restrict,
  title={{kptr\_restrict for hiding kernel pointers}},
  howpublished={\url{https://lwn.net/Articles/420403/}},
  author={Dan Rosenberg},
  month=dec,
  year=2010,
}
@misc{cpushare,
  title={{Securely renting out your CPU with Linux}},
  howpublished={\url{https://lwn.net/Articles/120647/}},
  author={Jonathan Corbet},
  month=jan,
  year=2005,
}

@misc{prevailComments,
  title={{Should verification be done in the kernel?}},
  howpublished={\url{https://lwn.net/Articles/795361/}},
  author={ecree},
  month=aug,
  year=2019,
}


@misc{xBPF,
  title={{Compiling to BPF with GCC}},
  howpublished={\url{https://lwn.net/Articles/800606/}},
  author={Jonathan Corbet},
  month=sept,
  year=2019,
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   JOURNAL-COMPUTER %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@article{rochwerger-reservoir,
  author={Rochwerger, B. and Breitgand, D. and Epstein, A. and Hadas, D. and Loy, I. and Nagin, K. and Tordsson, J. and Ragusa, C. and Villari, M. and Clayman, S. and Levy, E. and Maraschini, A. and Massonet, P. and Mu\~{n}oz, H. and Tofetti, G.},
  title={Reservoir - When One Cloud Is Not Enough},
  journal=journal-computer,
  publisher={IEEE},
  volume={44},
  number={3},
  pages={44--51},
  year={2011},
}

%%%%%%%%%%%%%%%%%%%%%%%%%% PROC-NDSS   %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{isomeron,
  author={Lucas Davi and Christopher Liebchen and Ahamd-Reza Sadegi and Kevin Z. Snow and Fabian Monrose},
  title={Isomeron: Code Randomization Resilient to (Just-in-time) Return Oriented Programming},
  booktitle = proc-ndss,
  address = {San Diego, CA},
  month = feb,
  year=2015,
}
@inproceedings{kurmus2013attack,
  title={Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring.},
  author={Kurmus, Anil and Tartler, Reinhard and Dorneanu, Daniela and Heinloth, Bernhard and Rothberg, Valentin and Ruprecht, Andreas and Schr{\"o}der-Preikschat, Wolfgang and Lohmann, Daniel and Kapitza, R{\"u}diger},
  booktitle = proc-ndss,
  address = {San Diego, CA},
  month = feb,
  year={2013}
}
@inproceedings{Wu2013TamingHH,
  title={Taming Hosted Hypervisors with (Mostly) Deprivileged Execution},
  author={Chiachih Wu and Zhigang Wang and Xuxian Jiang},
  booktitle = proc-ndss,
  address = {San Diego, CA},
  month = feb,
  year={2013}
}



%%%%%%%%%%%%%%%%%%%%%%%%%% PROC-SIGCOMM   %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

@inproceedings{ballani11,
 author = {Ballani, Hitesh and Costa, Paolo and Karagiannis, Thomas and Rowstron, Ant},
 title = {{Towards Predictable Datacenter Networks}},
 booktitle = proc-sigcomm,
 address = {Toronto, Canada},
 month=aug,
 year = {2011},
}
@inproceedings{netlord,
  author = {Jayaram Mudigonda and Praveen Yalagandula and Jeff Mogul
                  and Bryan Stiekes and Yanick Pouffary},
  title = {{NetLord: A Scalable Multi-Tenant Network Architecture for Virtualized Datacenters}},
  booktitle=proc-sigcomm,
  address = {Toronto, Canada},
  month=aug,
  year = {2011},
}
@inproceedings{vl2,
 author = {Albert Greenberg and James R. Hamilton and Navendu Jain and
                  Srikanth Kandula and Changhoon Kim and Parantap
                  Lahiri and David A. Maltz and Parveen Patel and
                  Sudipta Sengupta},
 title = {{VL2: A Scalable and Flexible Data Center Network}},
 booktitle=proc-sigcomm,
 address={Spain},
 month=aug,
 year = {2009},
}
% address={Barcelona, Spain},

@INPROCEEDINGS{bcube,
    author = {Chuanxiong Guo and Guohan Lu and Dan Li and Haitao Wu
                  and Xuan Zhang and Yunfeng Shi and Chen Tian and
                  Yongguang Zhang and Songwu Lu},
    title = {{BCube: A High Performance, Server-centric Network Architecture for Modular Data Centers}},
 booktitle=proc-sigcomm,
 address={Spain},
 month=aug,
 year = {2009},
}

@INPROCEEDINGS{plug-n-serve,
    author = {Nikhil Handigol and Srinivasan Seetharaman and Nick McKeown and Ramesh Johari},
    title = {{Plug-n-Serve: Load-Balancing Web Traffic using OpenFlow}},
 booktitle=proc-sigcomm,
 address={Spain},
 month=aug,
 year = {2009},
note={(Demo)}
}


@inproceedings{portland,
 author = {Radhika Niranjan Mysore and Andreas Pamboris and Nathan
                  Farrington and Nelson Huang and Pardis Miri and
                  Sivasankar Radhakrishnan and Vikram Subramanya and
                  Amin Vahdat},
title = {{PortLand: A Scalable Fault-Tolerant Layer 2 Data Center Network Fabric}},
 booktitle = proc-sigcomm,
 month=aug,
 year = {2008},
 }
 address = {Seattle, WA},


@inproceedings{vroom,
 author = {Wang, Yi and Keller, Eric and Biskeborn, Brian and van der Merwe, Jacobus and Rexford, Jennifer},
 title = {{Virtual Routers on the Move: Live Router Migration as a Network-Management Primitive}},
 booktitle = proc-sigcomm,
 address = {Seattle, WA},
 month=aug,
 year = {2008},
 }

@inproceedings{seattle,
 author = {Kim, Changhoon and Caesar, Matthew and Rexford, Jennifer},
 title = {{Floodless in Seattle: A Scalable Ethernet Architecture for Large Enterprises}},
 booktitle = proc-sigcomm,
 address = {Seattle, WA},
 month=aug,
 year = {2008},
 }

@inproceedings{dcell,
 author = {Guo, Chuanxiong and Wu, Haitao and Tan, Kun and Shi, Lei
                  and Zhang, Yongguang and Lu, Songwu},
 title = {{DCell: A Scalable and Fault-tolerant Network Structure for Data Centers}},
 booktitle = proc-sigcomm,
 address = {Seattle, WA},
 month=aug,
 year = {2008},
}

@inproceedings{chord,
 author = {Ion Stoica and Robert Morris and David Karger and M. Frans Kaashoek and Hari Balakrishnan},
 title = {{Chord: A Scalable Peer-to-peer Lookup Service for Internet Applications}},
 booktitle = proc-sigcomm,
 address = {San Diego, CA},
 month=aug,
 year = {2001},
}

@inproceedings{xu2021synthesizing,
  title={Synthesizing safe and efficient kernel extensions for packet processing},
  author={Xu, Qiongwen and Wong, Michael D and Wagle, Tanvi and Narayana, Srinivas and Sivaraman, Anirudh},
  booktitle={Proceedings of the 2021 ACM SIGCOMM 2021 Conference},
  pages={50--64},
  year={2021}
}


%%%%%%%%%%%%%%%%%%%%%%%%%% JOURNAL-SIGCOMM-CCR   %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

@article{nox,
  author={Natasha Gude and Teemu Koponen and Justin Pettit and Ben Pfaff and Mart\'{i}n Casado and Nick {McKeown} and Scott Shenker},
  title={{NOX: Towards an Operating System for Networks}},
  journal=journal-sigcomm-ccr,
  publisher={ACM},
  address={New York, NY},
  volume={38},
  number={3},
  month=jul,
  year={2008},
}
@article{openflow,
  author={Nick {McKeown} and Tom Anderson and Hari Balakrishnan and Guru Parulkar and Larry Peterson and Jennifer Rexford and Scott Shenker and Jonathan Turner},
  title={{OpenFlow: Enabling Innovation in Campus Networks}},
  journal=journal-sigcomm-ccr,
  publisher={ACM},
  address={New York, NY},
  volume={38},
  number={2},
  month=apr,
  year={2008},
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   JOURNAL-CACM %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

@article{popek_goldberg-requirements,
  author={Gerald J. Popek and Robert P. Goldberg},
  title={Formal Requirements for Virtualizable Third Generation Architectures},
  journal=journal-cacm,
  publisher={ACM},
  address={New York, NY},
  volume={17},
  number={7},
  pages={412--421},
  year={1974},
}

@article{the-os,
  author={Edsger W. Dijkstra},
  title={The structure of the `{THE}'-multiprogramming system},
  journal=journal-cacm,
  publisher={ACM},
  address={New York, NY},
  volume=11,
  number=5,
  pages={341--346},
  year={1968},
}
@article{working_set,
  author={Denning, Peter J.},
  title={The working set model for program behavior},
  journal=journal-cacm,
  publisher={ACM},
  address={New York, NY},
  volume = {11},
  number = {5},
  pages = {323--333},
  year = {1968},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   JOURNAL-OSR %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@article{tartler-config_cov,
  author={Reinhard Tartler and Daniel Lohmann and Christian Dietrich and Christoph Egger and Julio Sincero},
  title={Configuration Coverage in the Analysis of Large-Scale System Software},
  journal=journal-osr,
  publisher={ACM},
  address={New York, NY},
  volume={45},
  number={3},
  pages={10--14},
  year={2012},
}
@article{virtio,
  author={Rusty Russell},
  title={{\tt virtio}: {T}owards a de-facto standard for virtual {I/O} devices},
  journal=journal-osr,
  publisher={ACM},
  address={New York, NY},
  volume={42},
  number={5},
  pages={95--103},
  year={2008},
}
@article{dynamo,
  author={Giuseppe DeCandia and Deniz Hastorun and Madan Jampani and Gunavardhan Kakulapati and Avinash Lakshman and Alex Pilchin and Swaminathan Sivasubramanian and Peter Vosshall and Werner Vogels},
  title={Dynamo: {A}mazon's highly available key-value store},
  journal=journal-osr,
  publisher={ACM},
  address={New York, NY},
  volume={41},
  number={6},
  pages={205--220},
  year={2007},
}
@article{merkel-balancing_power_consumption,
  author={Andreas Merkel and Frank Bellosa},
  title={Balancing power consumption in multiprocessor systems},
  journal=journal-osr,
  publisher={ACM},
  address={New York, NY},
  volume={40},
  number={4},
  pages={403--414},
  year={2006},
}
@article{weissel-cooperative_io,
  author={Andreas Weissel and Bj\"{o}rn Beutel and Frank Bellosa},
  title={Cooperative {I/O}: a novel {I/O} semantics for energy-aware applications},
  journal=journal-osr,
  publisher={ACM},
  address={New York, NY},
  volume={36},
  number={SI},
  pages={117--129},
  year={2002},
}
@article{l3,
  author={Jochen Liedtke and Ulrich Bartling and Uwe Beyer and Dietmar Heinrichs and Rudolf Ruland and Gyula Szalay},
  title={Two Years of Experience with a $\mu$-Kernel Based {OS}},
  journal=journal-osr,
  publisher={ACM},
  address={New York, NY},
  volume={25},
  number={2},
  pages={51--62},
  year={1991},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-MOBILE %%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{kozuch-isr,
  author={Michael Kozuch and M. Satyanarayanan},
  title={Internet Suspend/Resume},
  booktitle=proc-wmcsa,
  address={Calicoon, NY},
  month=jun,
  year=2002,
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-CLUSTER %%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{nswap_reliability,
  author={B. Mitchell and J. Rosse and T. Newhall},
  title={Reliability algorithms for network swapping systems with page migration},
  booktitle=proc-cluster,
  address={San Diego, CA},
  month=sep,
  year=2004,
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-VTDC %%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{ghost_vms,
  author={Hangwei Qian and Elliot Miller and Wei Zhang and Michael Rabinovich and Craig E. Wills},
  title={Agility in virtualized utility computing},
  booktitle=proc-vtdc,
  address={Reno, NV},
  month=nov,
  year={2007},
}
@inproceedings{memx,
  author={Michael R. Hines and Kartik Gopalan},
  title={Mem{X}: supporting large memory workloads in {X}en virtual machines},
  booktitle=proc-vtdc,
  address={Reno, NV},
  month=nov,
  year={2007},
}
@inproceedings{grit-orchestration,
  author={Laura Grit and David Irwin and Aydan Yumerefendi and Jeff Chase},
  title={Virtual Machine Hosting for Networked Clusters: Building the Foundations for "Autonomic" Orchestration},
  booktitle=proc-vtdc,
  address={Tampa, FL},
  month=nov,
  year={2006},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-EUROSEC %%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{suzaki-effects,
  author={Kuniyasu Suzaki and Kengo Iijima and Toshiki Yagi and Cyrille Artho},
  title={{Effects of Memory Randomization, Sanitation and Page Cache on Memory Deduplication}},
  booktitle=proc-eurosec,
  address={Bern, Switzerland},
  month=apr,
  year={2012},
}
@inproceedings{strackx-breaking_mem_secrecy,
  author = {Strackx, Raoul and Younan, Yves and Philippaerts, Pieter and Piessens, Frank and Lachmund, Sven and Walter, Thomas},
  title = {Breaking the Memory Secrecy Assumption},
  addres={Nuremburg, Germany},
  booktitle = proc-eurosec,
  month=apr,
  year = {2009},
}

%%%%%%%%%%%%%%%%%%%%%%%%%% PROC-IEEE-EURO-SP %%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{PIROP,
  title={Position-Independent Code Reuse: On the Effectiveness of ASLR in the Absence of Information Disclosure},
  author={Enes Goktas and Benjamin Kollenda and Philipp Koppe and Erik Bosman and Georgios Portokalidis and Thorsten Holz and Herbert Bos and Cristiano Giuffrida},
  booktitle=proc-ieee-euro-sp,
  address={London, UK},
  month=apr,
  year=2018,
}
%%%%%%%%%%%%%%%%%%%%%%%%%% PROC-IEEE-SP %%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{morula,
  author={Byoungyoung Lee and Long Lu and Tielei Wang and Taesoo Kim and Wenke Lee},
  title={From Zygote to Morula: Fortifying Weakened {ASLR} on {Android}},
  booktitle=proc-ieee-sp,
  address={San Jose, CA},
  month=may,
  year={2014},
}
@inproceedings{JIT-ROP,
  author = {Snow, Kevin Z. and Monrose, Fabian and Davi, Lucas and Dmitrienko, Alexandra and Liebchen, Christopher and Sadeghi, Ahmad-Reza},
  title = {Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization},
  booktitle=proc-ieee-sp,
  address={San Francisco, CA},
  month=may,
  year={2013},
}
@INPROCEEDINGS{hund-kaslr-attacks,
  author={R. {Hund} and C. {Willems} and T. {Holz}},
  title={Practical Timing Side Channel Attacks against Kernel Space {ASLR}},
  booktitle=proc-ieee-sp,
  address={San Francisco, CA},
  month=may,
  year={2013},
}
@inproceedings{smashing-gadgets,
  author = {Pappas, Vasilis and Polychronakis, Michalis and Keromytis, Angelos D.},
  title = {Smashing the Gadgets: Hindering Return-Oriented Programming Using In-Place Code Randomization},
  booktitle = proc-ieee-sp,
  address={San Francisco, CA},
  month=may,
  year = {2012},
}



%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-EUROSYS %%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{lupine,
  author = {Kuo, Hsuan-Chi and Williams, Dan and Koller, Ricardo and Mohan, Sibin},
  title = {{A Linux in Unikernel Clothing}},
  booktitle = proc-eurosys,
  address = {Heraklion, Greece},
  month=apr,
  year = {2020},
}
@inproceedings{seuss,
  author = {Cadden, James and Unger, Thomas and Awad, Yara and Dong, Han and Krieger, Orran and Appavoo, Jonathan},
  title = {SEUSS: Skip Redundant Paths to Make Serverless Fast},
  booktitle = proc-eurosys,
  address = {Heraklion, Greece},
  month=apr,
  year = {2020},
}
@inproceedings{replayable-execution,
  author = {Wang, Kai-Ting Amy and Ho, Rayson and Wu, Peng},
  title = {Replayable Execution Optimized for Page Sharing for a Managed Runtime Environment},
  booktitle=proc-eurosys,
  address = {Dresden, Germany},
  month=mar,
  year = {2019},
}
@inproceedings{xen-blanket,
  author={Dan Williams and Hani Jamjoom and Hakim Weatherspoon},
  title={{The Xen-Blanket: Virtualize Once, Run Everywhere}},
  booktitle=proc-eurosys,
  address={Bern, Switzerland},
  month=apr,
  year={2012},
}
@inproceedings{kaleidoscope,
  author = {Bryant, Roy and Tumanov, Alexey and Irzak, Olga and Scannell, Adin and Joshi, Kaustubh and Hiltunen, Matti and Lagar-Cavilla, H. Andrés and de Lara, Eyal},
  title = {Kaleidoscope: Cloud Micro-Elasticity via VM State Coloring},
  booktitle=proc-eurosys,
  address={Salzburg, Austria},
  month=apr,
  year={2011},
}
@inproceedings{tartler-undertaker,
  author={Reinhard Tartler and Daniel Lohmann and Julio Sincero and Wolfgang Schr\"oder-Preikschat},
  title={Feature Consistency in Compile-Time-Configurable System Software: Facing the Linux 10,000 Feature Problem},
  booktitle=proc-eurosys,
  address={Salzburg, Austria},
  month=apr,
  year={2011},
}
@inproceedings{snowflock,
  author={H. Andres Lagar-Cavilla and Joseph Whitney and Adin Scannell and Philip Patchin and Stephen M. Rumble and Eyal de Lara and Michael Brudno and M. Satyanarayanan},
  title={Snow{F}lock: Rapid Virtual Machine Cloning for Cloud Computing},
  booktitle=proc-eurosys,
  address={Nuremberg, Germany},
  month=apr,
  year=2009,
}
@inproceedings{ksplice,
  author={Jeff Arnold and M. Frans Kaashoek},
  title={Ksplice: Automatic Rebootless Kernel Updates},
  booktitle=proc-eurosys,
  address={Nuremberg, Germany},
  month=apr,
  year=2009,
}
@inproceedings{mccune-flicker_eurosys,
  author={Jonathan M. Mc{C}une and Bryan Parno and Adrian Perrig and Michael K. Reiter and Hiroshi Isozaki},
  title={Flicker: An Execution Infrastructure for {TCB} Minimization},
  booktitle=proc-eurosys,
  address={Glasgow, Scotland},
  month=mar,
  year=2008,
}

@book{gregg2013systems,
  title={Systems performance: enterprise and the cloud},
  author={Gregg, Brendan},
  year={2014},
   pages = {582},
  edition =      {1},
  publisher={Prentice Hall}
}

@inproceedings{parallax,
  author={Dutch T. Meyer and Gitika Aggarwal and Brendan Cully and Geoffrey Lefebvre and Michael J. Feeley and Norman C. Hutchinson and Andrew Warfield},
  title={Parallax: Virtual Disks for Virtual Machines},
  booktitle=proc-eurosys,
  address={Glasgow, Scotland},
  month=mar,
  year=2008,
}
@inproceedings{singularity-drivers,
  author={Michael Spear and Tom Roeder and Orion Hodson and Galen C. Hunt and Steven Levi},
  title={Solving the Starting Problem: Device Drivers as Self-Describing Artifacts},
  booktitle=proc-eurosys,
  address={Leuven, Belgium},
  month=apr,
  year=2006,
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-VEE %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{hermitux,
  author = {Olivier, Pierre and Chiba, Daniel and Lankes, Stefan and Min, Changwoo and Ravindran, Binoy},
  title = {A Binary-compatible Unikernel},
  booktitle = proc-vee,
  location = {Providence, RI},
  month = apr,
  year = {2019},
}
@inproceedings{secondsite,
  author = {Rajagopalan, Shriram and Cully, Brendan and O'Connor, Ryan and Warfield, Andrew},
  title = {{SecondSite: disaster tolerance as a service}},
  booktitle = proc-vee,
  location = {London, England, UK},
  month = mar,
  year = {2012},
}
@inproceedings{cloudnet,
  author = {Wood, Timothy and Ramakrishnan, K. K. and Shenoy, Prashant and {Van der Merwe}, Jacobus},
  title = {{CloudNet : Dynamic Pooling of Cloud Resources by Live WAN Migration of Virtual Machines}},
  booktitle = proc-vee,
  address={Newport Beach, CA},
  month=mar,
  year = {2011},
}
@inproceedings{wood-memory_buddies,
  author={Timothy Wood and Gabriel Tarasuk-Levin and Prashant Shenoy and Peter Desnoyers and Emmanuel Cecchet and Mark D. Corner},
  title={Memory buddies: Exploiting page sharing for smart colocation in virtualized data centers},
  booktitle=proc-vee,
  address={Washington, DC},
  month=mar,
  year={2009},
}
@inproceedings{hines-post_copy,
  author={Michael Hines and Kartik Gopalan},
  title={Post-Copy Based Live Virtual Machine Migration Using Adaptive Pre-Paging and Dynamic Self-Ballooning},
  booktitle=proc-vee,
  address={Washington, DC},
  month=mar,
  year={2009},
}

@inproceedings{hermenier-entropy,
  author={Fabien Hermenier and Xavier Lorca and Jean-Marc Menaud and Gilles Muller and Julia Lawall},
  title={Entropy: a Consolidation Manager for Clusters},
  booktitle=proc-vee,
  address={Washington, DC},
  month=mar,
  year={2009},
}

@inproceedings{bradford-wide_area,
  author={Robert Bradford and Evangelos Kotsovinos and Anja Feldmann and Harald Schi\"oberg},
  title={Live wide-area migration of virtual machines including local persistent state},
  booktitle=proc-vee,
  address={San Diego, CA},
  month=jun,
  year={2007},
}
@inproceedings{live_update_os,
  title={Live updating operating systems using virtualization},
  author={Chen, H. and Chen, R. and Zhang, F. and Zang, B. and Yew, P.C.},
  booktitle=proc-vee,
  address={Ottawa, Canada},
  month=jun,
  year={2006},
}
%%%%%%%%%%%%%%%%%%%%%%%%%% PROC-SIGMETRICS   %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{scribe-rr,
 author = {Laadan, Oren and Viennot, Nicolas and Nieh, Jason},
 title = {Transparent, Lightweight Application Execution Replay on Commodity Multiprocessor Operating Systems},
 booktitle = proc-sigmetrics,
 address = {New York, NY},
 month = jun,
 year = {2010},
}
@inproceedings{chen-managing_server_energy,
 author = {Chen,, Yiyu and Das,, Amitayu and Qin,, Wubi and Sivasubramaniam,, Anand and Wang,, Qian and Gautam,, Natarajan},
 title = {{Managing server energy and operational costs in hosting centers}},
 booktitle=proc-sigmetrics,
 address = {Banff, Alberta, Canada},
 month = jun,
 year = {2005},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-HPCA %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{brooks-dynamic_thermal_mgmt,
  author={David Brooks and Margaret Martonosi},
  title={Dynamic Thermal Management for High-Performance Microprocessors},
  booktitle=proc-hpca,
  address={Nuevo Leone, Mexico},
  month=jan,
  year={2001},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-HPDC %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{vpm_tokens,
  author={Ripal Nathuji and Karsten Schwan},
  title={{VPM Tokens: Virtual Machine-aware Power Budgeting in Datacenters}},
  booktitle=proc-hpdc,
  address={Boston, MA},
  month=jun,
  year={2008},
}
@inproceedings{xiao-job_mig_net_ram,
  author={Li Xiao and Xiaodong Zhang and Stefan A. Kubricht},
  title={{Incorporating Job Migration and Network {RAM} to Share Cluster Memory Resources}},
  booktitle=proc-hpdc,
  address={Pittsburgh, PA},
  month=aug,
  year={2000},
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-ASPLOS %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{live_os_update,
  author = {Cristiano Giuffrida and Anton Kuijsten and Andrew S. Tanenbaum},
  title = {Safe and Automatic Live Update for Operating Systems},
  booktitle=proc-asplos,
  address={Houston, TX},
  month=mar,
  year={2013},
}
@inproceedings{iago,
  author = {Checkoway, Stephen and Shacham, Hovav},
  title = {{Iago attacks: Why the system call API is a bad untrusted RPC interface}},
  booktitle=proc-asplos,
  address={Houston, TX},
  month=mar,
  year={2013},
}
@inproceedings{mirage,
  author={Anil Madhavapeddy and Richard Mortier and Charalampos Rotsos and David Scott and Balraj Singh and Thomas Gazagnaire and Steven Smith and Steven Hand and Jon Crowcroft},
  title={Unikernels: Library Operating Systems for the Cloud},
  booktitle=proc-asplos,
  address={Houston, TX},
  month=mar,
  year={2013},
}
@inproceedings{microdrivers-asplos,
  author={Vinod Ganapathy and Matthew J. Renzelmann and Arini Balakrishnan and Michael M. Swift and Somesh Jha},
  title={The Design and Implementation of Microdrivers},
  booktitle=proc-asplos,
  address={Seattle, WA},
  month=mar,
  year={2008},
}
@inproceedings{mccune-flicker_asplos,
  author={Jonathan M. McCune and Bryan Parno and Adrian Perrig and Michael K. Reiter and Arvind Seshadri},
  title={How Low Can You Go? Recommendations for Hardware-Supported Minimal {TCB} Code Execution},
  booktitle=proc-asplos,
  address={Seattle, WA},
  month=mar,
  year={2008},
}
@inproceedings{adams_agesen-sw_hw_vm_comparison,
  author={Keith Adams and Ole Agesen},
  title={A Comparison of Software and Hardware Techniques for x86 Virtualization},
  booktitle=proc-asplos,
  address={San Jose, CA},
  month=oct,
  year={2006},
}
@inproceedings{heath-mercury,
  author={Taliver Heath and Ana Paula Centeno and Pradeep George and Luiz Ramos and Yogesh Jaluria and Ricardo Bianchini},
  title={Mercury and {F}reon: temperature emulation and management for server systems},
  booktitle=proc-asplos,
  address={San Jose, CA},
  month=oct,
  year={2006},
}
@inproceedings{heat-and-run,
  author={Mohamed Gomaa and Michael D. Powell and T. N. Vijaykumar},
  title={Heat-and-run: leveraging {SMT} and {CMP} to manage power density through the operating system},
  booktitle=proc-asplos,
  address={Boston, MA},
  month=oct,
  year={2004},
}
@inproceedings{lowell-microvisor,
  author = {Lowell, David E. and Saito, Yasushi and Samberg, Eileen J.},
  title = {Devirtualizable virtual machines enabling general, single-node, online maintenance},
  booktitle=proc-asplos,
  address={Boston, MA},
  month=oct,
  year={2004},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-USENIX-SECURITY %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings {xu-automatic_hot_patch,
  author= {Zhengzi Xu and Yulong Zhang and Longri Zheng and Liangzhao Xia and Chenfu Bao and Zhi Wang and Yang Liu},
  title = {Automatic Hot Patch Generation for Android Kernels},
  booktitle = proc-usenix-security,
  address = {Boston, MA},
  month = aug,
  year = {2020},
}
@inproceedings {klein-ipid,
  author = {Amit Klein and Benny Pinkas},
  title = {From {IP} {ID} to Device {ID} and {KASLR} Bypass},
  booktitle = proc-usenix-security,
  address = {Santa Clara, CA},
  month = aug,
  year = {2019},
}
@inproceedings {drama_attacks,
  author = {Peter Pessl and Daniel Gruss and Cl{\'e}mentine Maurice and Michael Schwarz and Stefan Mangard},
  title = {{DRAMA}: Exploiting {DRAM} Addressing for Cross-CPU Attacks},
  booktitle = proc-usenix-security,
  address = {Austin, TX},
  month = aug,
  year = {2016},
}
@inproceedings {flush_reload,
  author = {Yuval Yarom and Katrina Falkner},
  title = {{FLUSH+RELOAD: A High Resolution, Low Noise, L3 Cache Side-Channel Attack}},
  booktitle = proc-usenix-security,
  address = {San Diego, CA},
  month = aug,
  year = {2014},
}
@inproceedings {oxymoron,
  author = {Michael Backes and Stefan N{\"u}rnberger},
  title = {Oxymoron: Making Fine-Grained Memory Randomization Practical by Allowing Code Sharing},
  booktitle = proc-usenix-security,
  address = {San Diego, CA},
  month = aug,
  year = {2014},
}
@inproceedings {giuffrida-rerand,
  author = {Cristiano Giuffrida and Anton Kuijsten and Andrew S. Tanenbaum},
  title = {Enhanced Operating System Security Through Efficient and Fine-grained Address Space Randomization},
  booktitle = proc-usenix-security,
  address = {Bellevue, WA},
  month = aug,
  year = {2012},
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-USENIX %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings {lxd,
  author = {Vikram Narayanan and Abhiram Balasubramanian and Charlie Jacobsen and Sarah Spall and Scott Bauer and Michael Quigley and Aftab Hussain and Abdullah Younis and Junjie Shen and Moinak Bhattacharyya and Anton Burtsev},
  title = {{LXD}s: Towards Isolation of Kernel Subsystems},
  booktitle = proc-usenix,
  address = {Renton, WA},
  month = jul,
  year = {2019},
}
@inproceedings {sock,
  author = {Edward Oakes and Leon Yang and Dennis Zhou and Kevin Houck and Tyler Harter and Andrea Arpaci-Dusseau and Remzi Arpaci-Dusseau},
  title = {{SOCK}: Rapid Task Provisioning with Serverless-Optimized Containers},
  booktitle = proc-usenix,
  address = {Boston, MA},
  month = jul,
  year = {2018},
}
@inproceedings {sand,
  author = {Istemi Ekin Akkus and Ruichuan Chen and Ivica Rimac and Manuel Stein and Klaus Satzke and Andre Beck and Paarijaat Aditya and Volker Hilt},
  title = {{SAND}: Towards High-Performance Serverless Computing},
  booktitle = proc-usenix,
  address = {Boston, MA},
  month = jul,
  year = {2018},
}
@inproceedings {lockinpop,
  author = {Yiwen Li and Brendan Dolan-Gavitt and Sam Weber and Justin Cappos},
  title = {Lock-in-Pop: Securing Privileged Operating System Kernels by Keeping on the Beaten Path},
  booktitle=proc-usenix,
  address={Santa Clara, CA},
  month=jul,
  year={2017},
}
@inproceedings{mozilla-rr,
  author={Robert O'Callahan and Chris Jones and Nathan Froyd and Kyle Huey and Albert Noll and Nimrod Partush},
  title={{Engineering Record And Replay For Deployability}},
  booktitle=proc-usenix,
  address={Santa Clara, CA},
  month=jul,
  year={2017},
}
@inproceedings{criu-update,
  author = {Sanidhya Kashyap and Changwoo Min and Byoungyoung Lee and Taesoo Kim and Pavel Emelyanov},
  title = {Instant {OS} Updates via Userspace Checkpoint-and-Restart},
  booktitle = proc-usenix,
  address = {Denver, CO},
  month = jun,
  year = {2016},
}
@inproceedings{osv,
  author={Kivity, Avi and Laor, Dor and Costa, Glauber and Enberg, Pekka and Har’El, Nadav and Marti, Don and Zolotarov, Vlad},
  title={{OSv}: optimizing the operating system for virtual machines},
  booktitle=proc-usenix,
  address={Philadelphia, PA},
  month=jun,
  year={2014}
}
@inproceedings{tartler-vampyr,
  author={Reinhard Tartler and Christian Dietrich and Julio Sincero and Wolfgang Schr\"oder-Preikschat and Daniel Lohmann},
  title={Static Analysis of Variability in System Software: The 90,000 \#ifdefs Issue},
  booktitle=proc-usenix,
  address={Philadelphia, PA},
  month=jun,
  year={2014}
}
@inproceedings{ofrewind,
  author={Andreas Wundsam and Dan Levin and Srini Seetharaman and Anja Feldmann},
  title={{OFRewind: Enabling Record and Replay Troubleshooting for Networks}},
  booktitle=proc-usenix,
  address={Portland, OR},
  month=jun,
  year={2011},
}
@inproceedings{milos-satori,
  author={Grzegorz Mi{\l{}}o{\'{s}} and Derek G. Murray and Steven Hand and Michael A. Fetterman},
  title={Satori: Enlightened page sharing},
  booktitle=proc-usenix,
  address={San Diego, CA},
  month=jun,
  year={2009},
}
@inproceedings{chow-aftersight,
  author={Jim Chow and Tal Garfinkel and Peter M. Chen},
  title={Decoupling Dynamic Program Analysis from Execution in Virtual Environments},
  booktitle=proc-usenix,
  address={Boston, MA},
  month=jun,
  year={2008},
}
@inproceedings{elson-flash_crowds,
  author={Jeremy Elson and Jon Howell},
  title={Handling Flash Crowds from Your Garage},
  booktitle=proc-usenix,
  address={Boston, MA},
  month=jun,
  year={2008},
}
@inproceedings{stoess-energy_hypervisor,
  author={Jan Stoess and Christian Lang and Frank Bellosa},
  title={Energy management for hypervisor-based virtual machines},
  booktitle=proc-usenix,
  address={Santa Clara, CA},
  month=jun,
  year = {2007},
}
@inproceedings{baumann-reboots,
  author={Andrew Baumann and Jonathan Appavoo and Robert W. Wisniewski and Dilma Da Silva and Orran Krieger and Gernot Heiser},
  title={Reboots are for Hardware: Challenges and Solutions to Updating an Operating System on the Fly},
  booktitle=proc-usenix,
  address={Santa Clara, CA},
  month=jun,
  year = {2007},
}
@inproceedings{liblog-rr,
  author = {Geels, Dennis and Altekar, Gautam and Shenker, Scott and Stoica, Ion},
  title = {Replay Debugging for Distributed Applications},
  booktitle = proc-usenix,
  address={Boston, MA},
  month=jun,
  year={2006},
}
@inproceedings{cherkasova-cpu_overhead,
  author = {Ludmila Cherkasova and Rob Gardner},
  title = {{Measuring {CPU} overhead for {I/O} processing in the {X}en virtual machine monitor}},
  booktitle=proc-usenix,
  address={Anaheim, CA},
  month=apr,
  year={2005},
}
@inproceedings{qemu,
  author = {Fabrice Bellard},
  title = {{QEMU}, a Fast and Portable Dynamic Translator},
  booktitle=proc-usenix-freenix,
  address={Anaheim, CA},
  month=apr,
  year={2005},
}
@inproceedings{nelson-vmotion,
  author = {Michael Nelson and Beng-Hong Lim and Greg Hutchins},
  title = {{Fast Transparent Migration for Virtual Machines}},
  booktitle=proc-usenix,
  address={Anaheim, CA},
  month=apr,
  year={2005},
}
@inproceedings{moore-cool_scheduling,
  author={Justin Moore and Jeff Chase and Parthasarathy Ranganathan and Ratnesh Sharma},
  title={Making scheduling {"cool"}: temperature-aware workload placement in data centers},
  booktitle=proc-usenix,
  address={Anaheim, CA},
  month=apr,
  year={2005},
}
@inproceedings{xen-soft_devices,
  author={Andrew Warfield and Steven Hand and Keir Fraser and Tim Deegan},
  title={Facilitating the development of soft devices},
  booktitle=proc-usenix,
  address={Anaheim, CA},
  month=apr,
  year={2005},
}
@inproceedings{srinivasan-flashback,
  author={S. Srinivasan and S. Kandula and C. Andrews and Y. Zhou},
  title={Flashback: A Light-weight Rollback and Deterministic Replay Extension for Software Debugging},
  booktitle=proc-usenix,
  address={Boston, MA},
  month=jun,
  year={2004},
}
@inproceedings{kilpatrick-privman,
  author={Douglas Kilpatrick},
  title={Privman: A Library for Partitioning Applications},
  booktitle=proc-usenix,
  address={San Antonio, TX},
  month=jun,
  year={2003},
}
@inproceedings{vmware,
  author={Jeremey Sugerman and Ganesh Venkitachalam and Beng-Hong Lim},
  title={Virtualizing {I/O} Devices on {VM}ware Workstation's Hosted Virtual Machine Monitor},
  booktitle=proc-usenix,
  address = {Boston, MA},
  month=jun,
  year={2001},
}
@inproceedings{reliable,
  author={Evangelos P. Markatos and George Dramitinos},
  title={Implementation of a reliable remote memory pager},
  booktitle=proc-usenix,
  address={San Diego, CA},
  month=jan,
  year={1996},
}
@inproceedings{lmbench,
  author={Larry Mcvoy and Carl Staelin},
  title={{lmbench: Portable Tools for Performance Analysis}},
  booktitle=proc-usenix,
  address={San Diego, CA},
  month=jan,
  year={1996},
}
@inproceedings{nfs,
  author={Russel Sandberg and David Goldberg and Steve Kleiman and Dan Walsh and Bob Lyon},
  title={Design and Implementation of the Sun Network File System},
  booktitle=proc-usenix,
  year={1985},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-NSDI %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings {firecracker,
  author = {Alexandru Agache and Marc Brooker and Alexandra Iordache and Anthony Liguori and Rolf Neugebauer and Phil Piwonka and Diana-Maria Popa},
  title = {Firecracker: Lightweight Virtualization for Serverless Applications },
  booktitle = proc-nsdi,
  address = {Santa Clara, CA},
  month = feb,
  year = {2020},
}
@inproceedings{jitsu,
  author={Anil Madhavapeddy and Thomas Leonard and Magnus Skjegstad and Thomas Gazagnaire and David Sheets and Dave Scott and Richard Mortier and Amir Chaudhry and Balraj Singh and Jon Ludlam and Jon Crowcroft and Ian Leslie},
  title={Jitsu: Just-In-Time Summoning of Unikernels},
  booktitle=proc-nsdi,
  address={Oakland, CA},
  month=may,
  year={2015},
}
@inproceedings{clickos,
  author={Joao Martins and Mohamed Ahmed and Costin Raiciu and Vladimir Olteanu and Michio Honda and Roberto Bifulco and Felipe Huici},
  title={{ClickOS} and the Art of Network Function Virtualization},
  booktitle=proc-nsdi,
  address={Seattle, WA},
  month=apr,
  year={2014},
}
@inproceedings{pyretic,
  author={Christopher Monsanto and Joshua Reich and Nate Foster and Jennifer Rexford and David Walker},
  title={{Composing Software Defined Networks}},
  booktitle=proc-nsdi,
  address={Lombard, IL},
  month=apr,
  year={2013},
}
@inproceedings{split-merge,
  author={Shriram Rajagopalan and Dan Williams and Hani Jamjoom and Andrew Warfield},
  title={{Split/Merge: System Support for Elastic Execution in Virtual Middleboxes}},
  booktitle=proc-nsdi,
  address={Lombard, IL},
  month=apr,
  year={2013},
}

@inproceedings{comb,
  author={Vyas Sekar and Norbert Egi and Sylvia Ratnasamy and Michael K. Reiter and Guangyu Shi},
  title={{Design and Implementation of a Consolidated Middlebox Architecture}},
  booktitle=proc-nsdi,
  address={San Jose, CA},
  month=apr,
  year={2012},
}

@inproceedings{nice,
  author={Marco Canini and Daniele Venzano and Peter Peresini and Dejan Kostic and Jennifer Rexford},
  title={{A NICE Way to Test OpenFlow Applications}},
  booktitle=proc-nsdi,
  address={San Jose, CA},
  month=apr,
  year={2012},
}

@inproceedings{chen-long_lived,
  author={Gong Chen and Wenbo He and Jie Liu and Suman Nath and Leonidas Rigas and Lin Xiao and Feng Zhao},
  title={Energy-aware server provisioning and load dispatching for connection-intensive {I}nternet services},
  booktitle=proc-nsdi,
  address={San Francisco, CA},
  month=apr,
  year={2008},
}
@inproceedings{remus,
  author={Brendan Cully and Geoffrey Lefebvre and Dutch Meyer and Mike Feeley and Norm Hutchinson and Andrew Warfield},
  title={Remus: high availability via asynchronous virtual machine replication},
  booktitle=proc-nsdi,
  address={San Francisco, CA},
  month=apr,
  year={2008},
}
@inproceedings{sandpiper,
  author={Timothy Wood and Prashant Shenoy and Arun Venkataramani},
  title={Black-box and Gray-box Strategies for Virtual Machine Migration},
  booktitle=proc-nsdi,
  address={Cambridge, MA},
  month=apr,
  year={2007},
}
@inproceedings{open_vs_closed,
  author={Bianca Schroeder and Adam Wierman and Mor Harchol-Balter},
  title={Open Versus Closed: A Cautionary Tale},
  booktitle=proc-nsdi,
  address={San Jose, CA},
  month=may,
  year={2006},
}
@inproceedings{xorp,
 author = {Handley, Mark and Kohler, Eddie and Ghosh, Atanu and Hodson, Orion and Radoslavov, Pavlin},
 title = {{Designing Extensible IP Router Software}},
  booktitle=proc-nsdi,
  address={Boston, MA},
  month=may,
  year={2005},
}
@inproceedings{xen-live_migration,
  author={Christopher Clark and Keir Fraser and Steven Hand and Jacob Gorm Hansen and Eric Jul and Christian Limpach and Ian Pratt and Andrew Warfield},
  title={{Live Migration of Virtual Machines}},
  booktitle=proc-nsdi,
  address={Boston, MA},
  month=may,
  year={2005},
}

@inproceedings{annapureddy-shark,
  author={Siddhartha Annapureddy and Michael J. Freedman and David Mazi{{\`}e}res},
  title={Shark: Scaling File Servers via Cooperative Caching},
  booktitle=proc-nsdi,
  address={Boston, MA},
  month=may,
  year={2005},
}
@inproceedings{whitaker-udenali,
  author={Andrew Whitaker and Richard S. Cox and  Marianne Shaw and Steven D. Gribble},
  title={Constructing Services with Interposable Virtual Hardware},
  booktitle=proc-nsdi,
  address={San Francisco, CA},
  month=mar,
  year={2004},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-CSET %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings {brown-less_really_more,
  author = {Michael D. Brown and Santosh Pande},
  title = {Is Less Really More? {T}owards Better Metrics for Measuring Security Improvements Realized Through Software Debloating},
  booktitle = proc-cset,
  address = {Santa Clara, CA},
  month = aug,
  year = {2019},
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-ASIA-CCS %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{canella-echoload,
  author = {Claudio Canella and Michael Schwarz and Martin Haubenwallner and Martin Schwarzl and Daniel Gruss},
  title = {{KASLR}: Break it, Fix it, Repeat},
  booktitle = proc-asia-ccs,
  address = {Taipei, Taiwan},
  month = jun,
  year = {2020},
}
@inproceedings{juggling-gadgets,
  author = {Koo, Hyungjoon and Polychronakis, Michalis},
  title = {Juggling the Gadgets: Binary-Level Code Randomization Using Instruction Displacement},
  booktitle = proc-asia-ccs,
  address = {Xi'an, China},
  month = may,
  year = {2016},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-CCS %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{quantifying-rerand,
  author = {Ahmed, Salman and Xiao, Ya and Snow, Kevin Z. and Tan, Gang and Monrose, Fabian and Yao, Danfeng (Daphne)},
  title = {Methodologies for Quantifying (Re-)Randomization Security and Timing under JIT-ROP},
  booktitle = proc-ccs,
  address = {Virtual Event, USA},
  month =nov,
  year = 2020,
}
@inproceedings{canella-fallout,
  author = {Canella, Claudio and Genkin, Daniel and Giner, Lukas and Gruss, Daniel and Lipp, Moritz and Minkin, Marina and Moghimi, Daniel and Piessens, Frank and Schwarz, Michael and Sunar, Berk and Van Bulck, Jo and Yarom, Yuval},
  title = {Fallout: Leaking Data on Meltdown-Resistant CPUs},
  booktitle=proc-ccs,
  address = {London, United Kingdom},
  month=nov,
  year = {2019},
}
@inproceedings{gruss-prefetch,
  author = {Daniel Gruss and Clémentine Maurice and Andreas Fogh and Moritz Lipp and Stefan Mangard},
  title = {Prefetch Side-Channel Attacks: Bypassing {SMAP} and Kernel {ASLR}},
  booktitle = proc-ccs,
  address = {Vienna, Austria},
  month = oct,
  year = {2016},
}
@inproceedings{jang-kaslr-tsx,
  author = {Yeongjin Jang and Sangho Lee and Taesoo Kim},
  title = {Breaking Kernel Address Space Layout Randomization with {Intel} {TSX}},
  booktitle = proc-ccs,
  address = {Vienna, Austria},
  month = oct,
  year = {2016},
}
@inproceedings{splitkernel,
  author = {Kurmus, Anil and Zippel, Robby},
  title = {A Tale of Two Kernels: Towards Ending Kernel Hardening Wars with Split Kernel},
  booktitle = proc-ccs,
  address = {Scottsdale, AZ},
  month = nov,
  year = {2014},
}
@inproceedings{binary-stirring,
  author = {Wartell, Richard and Mohan, Vishwath and Hamlen, Kevin W. and Lin, Zhiqiang},
  title = {Binary Stirring: Self-Randomizing Instruction Addresses of Legacy X86 Binary Code},
  booktitle = proc-ccs,
  address = {Raleigh, North Carolina, USA},
  month=oct,
  year = {2012},
}

@inproceedings{shacham-rop,
  author = {Shacham, Hovav},
  title = {The Geometry of Innocent Flesh on the Bone: Return-into-Libc without Function Calls (on the X86)},
  booktitle = proc-ccs,
  address = {Alexandria, VA},
  month = oct,
  year = {2007},
}
@inproceedings{cfi,
  author = {Abadi, Mart\'{\i}n and Budiu, Mihai and Erlingsson, \'{U}lfar and Ligatti, Jay},
  title = {Control-Flow Integrity},
  booktitle = proc-ccs,
  address = {Alexandria, VA},
  month = nov,
  year = {2005},
}
@inproceedings{shacham-effectiveness_of_aslr,
  author = {Shacham, Hovav and Page, Matthew and Pfaff, Ben and Goh, Eu-Jin and Modadugu, Nagendra and Boneh, Dan},
  title = {On the Effectiveness of Address-Space Randomization},
  booktitle = proc-ccs,
  address = {Washington DC, USA},
  month = oct,
  year = {2004},
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-OSDI %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings {ksplit,
  author = {Yongzhe Huang and Vikram Narayanan and David Detweiler and Kaiming Huang and Gang Tan and Trent Jaeger and Anton Burtsev},
  title = {{KSplit}: Automating Device Driver Isolation},
  booktitle = proc-osdi,
  year = {2022},
  address = {Carlsbad, CA},
  month = nov,
}

@inproceedings {scone,
  author = {Sergei Arnautov and Bohdan Trach and Franz Gregor and Thomas Knauth and Andre Martin and Christian Priebe and Joshua Lind and Divya Muthukumaran and Dan O{\textquoteright}Keeffe and Mark L. Stillwell and David Goltzsche and Dave Eyers and R{\"u}diger Kapitza and Peter Pietzuch and Christof Fetzer},
  title = {{SCONE}: Secure Linux Containers with Intel {SGX}},
  booktitle=proc-osdi,
  address={Savannah, GA},
  month=nov,
  year={2016},
}
@inproceedings{ebbrt,
  author={Dan Schatzberg and James Cadden and Han Dong and Orran Krieger and Jonathan Appavoo},
  title={{EbbRT}: A Framework for Building Per-Application Library Operating Systems},
  booktitle=proc-osdi,
  address={Savannah, GA},
  month=nov,
  year={2016},
}
@inproceedings {haven,
  author = {Andrew Baumann and Marcus Peinado and Galen Hunt},
  title = {Shielding Applications from an Untrusted Cloud with Haven},
  booktitle=proc-osdi,
  address={Broomfield, CO},
  month=oct,
  year={2014},
}
@inproceedings {arnold-rr,
  author={David Devecsery and MIchael Chow and Xianzheng Dou and Jason Flinn and Peter M. Chen},
  title={Eidetic Systems},
  booktitle=proc-osdi,
  address={Broomfield, CO},
  month=oct,
  year={2014},
}
@inproceedings{dune,
 author = {Adam Belay and Andrea Bittau and Ali Mashtizadeh and David Terei and David Mazi\`eres and Christos Kozyrakis},
 title = {Dune: Safe User-level Access to Privileged {CPU} Features},
 booktitle = proc-osdi,
 address = {Hollywood, CA},
 month=oct,
 year = {2012},
}
@inproceedings{onix,
 author = {Teemu Koponen and Martin Casado and Natasha Gude and Jeremy
                  Stribling and Leon Poutievski and Min Zhu and Rajiv
                  Ramanathan and Yuichiro Iwata and Hiroaki Inoue and
                  and Takayuki Hama and Scott Shenker},
 title = {{Onix: A Distributed Control Platform for Large-scale Production Networks}},
 booktitle = proc-osdi,
 address = {Vancouver, Canada},
 month=oct,
 year = {2010},
}
@inproceedings{gupta-difference_engine,
  author={Diwaker Gupta and Sangmin Lee and Michael Vrable and Stefan Savage and Alex  C. Snoeren and George Varghese and Geoffrey  M. Voelker and Amin Vahdat},
  title={Difference Engine: Harnessing Memory Redundancy in Virtual Machines},
  booktitle=proc-osdi,
  address={San Diego, CA},
  month=dec,
  year={2008},
}
@inproceedings{histar,
  author={Nickolai Zeldovich and Silas Boyd-Wickizer and Eddie Kohler and and David Mazi\`eres},
  title={Making information flow explicit in {HiStar}},
  booktitle=proc-osdi,
  address={Seattle, WA},
  month=nov,
  year={2006},
}
@inproceedings{xfi,
  author={{\'{U}}lfar Erlingsson and Mart{\'\i}n Abadi and Michael Vrable and Mihai Budiu and George C. Necula},
  title={{XFI}: Software Guards for System Address Spaces},
  booktitle=proc-osdi,
  address={Seattle, WA},
  month=nov,
  year={2006},
}
@inproceedings{ta-min-proxos,
  author={Richard Ta-Min and Lionel Litty and David Lie},
  title={Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable},
  booktitle=proc-osdi,
  address={Seattle, WA},
  month=nov,
  year={2006},
}
@inproceedings{whitaker-needle,
 author = {A. Whitaker and R. S. Cox and S. D. Gribble},
 title = {Configuration Debugging as Search: Finding the Needle in the Haystack},
 booktitle = proc-osdi,
 address = {San Francisco, CA},
 month=dec,
 year = {2004},
}
@inproceedings{middleboxes,
 author = {Michael Walfish and Jeremy Stribling and Maxwell Krohn
                  and Hari Balakrishnan and Robert Morris and
                  Scott Shenker},
 title = {{Middleboxes No Longer Considered Harmful}},
 booktitle = proc-osdi,
 address = {San Francisco, CA},
 month=dec,
 year = {2004},
}
@inproceedings{urgoankar-overbooking,
  author={Bhuvan Urgaonkar and Prashant Shenoy and Timothy Roscoe},
  title={Resource overbooking and application profiling in shared hosting platforms},
  booktitle=proc-osdi,
  address={Boston, MA},
  month=dec,
  year={2002},
}
@inproceedings{emulab,
  author={Brian White and Jay Lepreau and Leigh Stoller and Robert Ricci and Shashi Guruprasad and Mac Newbold and Mike Hibler and Chad Barb and Abhijeet Joglekar},
  title={An Integrated Experimental Environment for Distributed Systems and Networks},
  booktitle=proc-osdi,
  address={Boston, MA},
  month=dec,
  year={2002},
}
@inproceedings{whitaker-denali,
  author={Andrew Whitaker and Marianne Shaw and Steven D. Gribble},
  title={Scale and Performance in the {D}enali Isolation Kernel},
  booktitle=proc-osdi,
  address={Boston, MA},
  month=dec,
  year={2002},
}
@inproceedings{waldspurger-vmware_esx,
  author={Carl A. Waldspurger},
  title={Memory Resource Management in {VM}ware {ESX} Server},
  booktitle=proc-osdi,
  address={Boston, MA},
  month=dec,
  year={2002},
}
@inproceedings{dunlap-revirt,
  author={George W. Dunlap and Samuel T. King and Sukru Cinar and Murtaza A. Basrai and Peter M. Chen},
  title={Re{V}irt: Enabling Intrusion Analysis through Virtual-Machine Logging and Replay},
  booktitle=proc-osdi,
  address={Boston, MA},
  month=dec,
  year={2002},
}

@inproceedings{sapuntzakis-collective,
  author={Constantine P. Sapuntzakis and Ramesh Chandra and Ben Pfaff and Jim Chow and Monica S. Lam and Mendel Rosenblum},
  title={Optimizing the Migration of Virtual Computers},
  booktitle=proc-osdi,
  address={Boston, MA},
  month=dec,
  year={2002},
}

@inproceedings{devil,
  title = {{Devil: An IDL for Hardware Programming}},
  author = {Fabrice M\'erillon and Laurent R\'eveill\`ere and Charles Consel and Renaud Marlet and Gilles Muller},
  booktitle=proc-osdi,
  address={San Diego, CA},
  month=oct,
  year={2000},
}

@inproceedings{cooperative_caching_hints,
  author={Prasenjit Sarkar and John Hartman},
  title={Efficient Cooperative Caching using Hints},
  booktitle=proc-osdi,
  address={Seattle, WA},
  month=oct,
  year={1996},
}

@inproceedings{cooperative_caching,
  author={Michael D. Dahlin and Randolph Y. Wang and Thomas E. Anderson and David A. Patterson},
  title={Cooperative Caching: Using Remote Client Memory to Improve File System Performance},
  booktitle=proc-osdi,
  address={Monterey, CA},
  month=nov,
  year={1994},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-SOSP %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{lebench-paper,
  author = {Ren, Xiang (Jenny) and Rodrigues, Kirk and Chen, Luyuan and Vega, Camilo and Stumm, Michael and Yuan, Ding},
  title = {An Analysis of Performance Evolution of Linux's Core Operations},
  booktitle	= proc-sosp,
  address = {Huntsville, Ontario, Canada},
  year	= {2019},
  month = oct,
}
@inproceedings{google-snap,
  title	= {Snap: a Microkernel Approach to Host Networking},
  author	= {Michael Marty and Marc de Kruijf and Jacob Adriaens and Christopher Alfeld and Sean Bauer and Carlo Contavalli and Mike Dalton and Nandita Dukkipati and William C. Evans and Steve Gribble and Nicholas Kidd and Roman Kononov and Gautam Kumar and Carl Mauer and Emily Musick and Lena Olson and Mike Ryan and Erik Rubow and Kevin Springborn and Paul Turner and Valas Valancius and Xi Wang and Amin Vahdat},
  booktitle	= proc-sosp,
  address = {Huntsville, Ontario, Canada},
  year	= {2019},
  month = oct,
}
@inproceedings{lightvm,
  author={Manco, Filipe and Lupu, Costin and Schmidt, Florian and Mendes, Jose and Kuenzer, Simon and Sati, Sumit and Yasukata, Kenichi and Raiciu, Costin and Huici, Felipe},
  title={My {VM} is Lighter (and Safer) than your Container},
  booktitle=proc-sosp,
  address={Shanghai, China},
  month=oct,
  year={2017},
}
@inproceedings{cloudvisor,
  author={Fengzhe Zhang and Jin Chen and Haibo Chen and Binyu Zang},
  title={{CloudVisor}: Retrofitting Protection of Virtual Machines in Multi-tenant Cloud with Nested Virtualization},
  booktitle=proc-sosp,
  address={Cascais, Portugal},
  month=oct,
  year={2011},
}
@inproceedings{sel4,
 author = {Gerwin Klein and Kevin Elphinstone and Gernot Heiser and June Andronick and David Cock and Philip Derrin and Dhammika Elkaduwe and Kai Engelhardt and Rafal Kolanski and Michael Norrish and Thomas Sewell and Harvey Tuch and Simon Winwood},
 title = {{seL4:} {F}ormal Verification of an {OS} Kernel},
 booktitle = proc-sosp,
 address = {Big Sky, MT},
 month=oct,
 year = {2009},
}
@inproceedings{routebricks,
 author = {Dobrescu, Mihai and Egi, Norbert and Argyraki, Katerina and
                  Chun, Byung-Gon and Fall, Kevin and Iannaccone,
                  Gianluca and Knies, Allan and Manesh, Maziar and
                  Ratnasamy, Sylvia},
 title = {{RouteBricks: Exploiting Parallelism to Scale Software Routers}},
 booktitle = proc-sosp,
 address = {Big Sky, MT},
 month=oct,
 year = {2009},
}
@inproceedings{virtual_power,
  author={Ripal Nathuji and Karsten Schwan},
  title={Virtual{P}ower: coordinated power management in virtualized enterprise systems},
  booktitle=proc-sosp,
  address={Stevenson, WA},
  month=oct,
  year={2007},
}
@inproceedings{nexus,
  author={Alan Shieh and Dan Williams and Emin G\"un Sirer and Fred B. Schneider},
  title={Nexus: A New Operating System for Trustworthy Computing (extended abstract)},
  booktitle=proc-sosp,
  address={Brighton, UK},
  month=oct,
  year={2005},
}
@inproceedings{xen,
  author={Paul Barham and Boris Dragovic and Keir Fraser and Steven Hand and Tim Harris and Alex Ho and Rolf Neugebauer and Ian Pratt and Andrew Warfield},
  title={{Xen and the Art of Virtualization}},
  booktitle=proc-sosp,
  address={Bolton Landing, NY},
  month=oct,
  year={2003},
}
@inproceedings{garfinkel-terra,
  author={Tal Garfinkel and Ben Pfaff and Jim Chow and Mendel Rosenblum and Dan Boneh},
  title={Terra: A Virtual Machine-Based Platform for Trusted Computing},
  booktitle=proc-sosp,
  address={Bolton Landing, NY},
  month=oct,
  year={2003},
}
@inproceedings{engler2001,
  author={Andy Chou and Jun-Feng Yang and Ben Chelf and Seth Hallem and Dawson Engler},
  title={An Empirical Study of Operating System Errors},
  booktitle = proc-sosp,
  address={Banff, Canada},
  month=oct,
  year={2001},
}
@inproceedings{chase-energy,
  author={Jeffrey S. Chase and Darrell C. Anderson and Prachi N. Thakar and Amin M. Vahdat},
  title={Managing Energy and Server Resources in Hosting Centers},
  booktitle = proc-sosp,
  address={Banff, Canada},
  month=oct,
  year={2001},
}
@inproceedings{govil-cellular_disco,
  author={Kinshuk Govil and Dan Teodosiu and Yongqiang Huang and Mendel Rosenblum},
  title={Cellular Disco: Resource Management Using Virtual Clusters on Shared-Memory Multiprocessors},
  booktitle = proc-sosp,
  address={Charleston, SC},
  month=dec,
  year={1999},
}
@inproceedings{flinn-energy_aware,
  author={Jason Flinn and M. Satyanarayanan},
  title={Energy-aware adaptation for mobile applications},
  booktitle=proc-sosp,
  address={Charleston, SC},
  month=dec,
  year={1999},
}
@inproceedings{krieger2006k42,
  title={K42: building a complete operating system},
  author={Krieger, Orran and Auslander, Marc and Rosenburg, Bryan and Wisniewski, Robert W and Xenidis, Jimi and Da Silva, Dilma and Ostrowski, Michal and Appavoo, Jonathan and Butrico, Maria and Mergen, Mark and others},
  booktitle={ACM SIGOPS Operating Systems Review},
  volume={40},
  number={4},
  pages={133--145},
  year={2006},
  organization={ACM}
}

@inproceedings{exokernel,
  author={Dawson R. Engler and M. Frans Kaashoek and James W. O'Toole},
  title={Exokernel: An Operating System Architecture for Application-Level Resource Management},
  booktitle = proc-sosp,
  address={Copper Mountain, CO},
  month=dec,
  year={1995},
}
@inproceedings{feeley_global_mm,
  author={M. J. Feeley and W. E. Morgan and E. P. Pighin and A. R. Karlin and H. M. Levy and C. A. Thekkath},
  title={Implementing Global Memory Management in a Workstation Cluster},
  booktitle = proc-sosp,
  address={Copper Mountain, CO},
  month=dec,
  year={1995},
}
@inproceedings{Bershad-SPIN,
  author = {Bershad, B. N. and Savage, S. and Pardyak, P. and Sirer, E. G. and Fiuczynski, M. E. and Becker, D. and Chambers, C. and Eggers, S.},
  title = {{Extensibility, safety and performance in the {SPIN} operating system}},
  booktitle = proc-sosp,
  address={Copper Mountain, CO},
  month=dec,
  year={1995},
}
@inproceedings{hypervisor-based-ft,
  author = {Bressoud, T. C. and Schneider, F. B.},
  title = {Hypervisor-based Fault Tolerance},
  booktitle = proc-sosp,
  address={Copper Mountain, CO},
  month=dec,
  year={1995},
}
@inproceedings{maeda-decomposition,
  author={Chris Maeda and Brian N. Bershad},
  title= {Protocol Service Decomposition for High-Performance Networking},
  booktitle=proc-sosp,
  address={Asheville, NC},
  month=dec,
  year={1993},
}
@inproceedings{theimer-v_system,
  author = {Marvin M. Theimer and Keith A. Lantz and David R. Cheriton},
  title= {Preemptable Remote Execution Facilities for the {V}-system},
  booktitle = proc-sosp,
  address={Orcas Island, WA},
  month=dec,
  year={1985},
}
@inproceedings{powell-demos_mp,
  author={Michael L. Powell and Barton P. Miller},
  title= {Process Migration in {DEMOS/MP}},
  booktitle=proc-sosp,
  address={Bretton Woods, NH},
  month=oct,
  year={1983},
}
@inproceedings{separationkernel,
  author={John Rushby},
  title={The Design and Verification of Secure Systems},
  booktitle=proc-sosp,
  address={Asilomar, CA},
  month=dec,
  year={1981}
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-SOCC %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{unikernels_as_processes,
 author = {Williams, Dan and Koller, Ricardo and Lucina, Martin and Prakash, Nikhil},
 title = {Unikernels As Processes},
 booktitle = proc-socc,
 address = {Carlsbad, CA},
 month = oct,
 year = {2018},
}
@inproceedings{pipecloud,
  author = {Wood, Timothy and Lagar-Cavilla, H. Andr{\'e}s and Ramakrishnan, K. K. and Shenoy, Prashant and Van der Merwe, Jacobus},
  title = {PipeCloud: using causality to overcome speed-of-light delays in cloud-based disaster recovery},
  booktitle = proc-socc,
  address = {Cascais, Portugal},
  month = oct,
  year = {2011},
}
@inproceedings{Benson:2011,
  author = {Benson, Theophilus and Akella, Aditya and Shaikh, Anees and Sahu, Sambit},
  title = {CloudNaaS: A Cloud Networking Platform for Enterprise Applications},
  booktitle = proc-socc,
  address = {Cascais, Portugal},
  month = oct,
  year = {2011},
}

@inproceedings{multicoreOS,
  author = {Wentzlaff, David and Gruenwald,III, Charles and Beckmann, Nathan and Modzelewski, Kevin and Belay, Adam and Youseff, Lamia and Miller, Jason and Agarwal, Anant},
  title = {An operating system for multicore and clouds: mechanisms and implementation},
  booktitle = proc-socc,
  address={Indianapolis, IN},
  month=jun,
  year={2010},
}

@inproceedings{hakim-RACS,
  author = {Abu-Libdeh, Hussam and Princehouse, Lonnie and Weatherspoon, Hakim},
  title = {{RACS: A Case for Cloud Storage Diversity}},
  booktitle = proc-socc,
  address={Indianapolis, IN},
  month=jun,
  year={2010},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-HOTOS %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{fork_in_road,
  author = {Baumann, Andrew and Appavoo, Jonathan and Krieger, Orran and Roscoe, Timothy},
  title = {A Fork() in the Road},
  booktitle = proc-hotos,
  address = {Bertinoro, Italy},
  month = may,
  year = {2019},
}
@inproceedings{ukl,
  author = {Raza, Ali and Sohal, Parul and Cadden, James and Appavoo, Jonathan and Drepper, Ulrich and Jones, Richard and Krieger, Orran and Mancuso, Renato and Woodman, Larry},
  title = {Unikernels: The Next Stage of Linux's Dominance},
  booktitle = proc-hotos,
  address = {Bertinoro, Italy},
  month = may,
  year = {2019},
}
@inproceedings{hotos-serverless,
  author = {Ricardo Koller and Dan Williams},
  title = {Will Serverless End the Dominance of Linux in the Cloud?},
  booktitle = proc-hotos,
  address = {Whistler, BC, Canada},
  month = may,
  year = {2017},
}
@inproceedings{swift-on_demand_virt,
  author = {Kooburat, Thawan and Swift, Michael},
  title = {The best of both worlds with on-demand virtualization},
  booktitle = proc-hotos,
  address = {Napa, CA},
  month = may,
  year = {2011},
}
@inproceedings{dixon-ettm,
  author = {Dixon, Colin and Krishnamurthy, Arvind and Anderson, Thomas},
  title = {An End to the Middle},
  booktitle = proc-hotos,
  address = {Monte Verit\`{a}, Switzerland},
  month = may,
  year = {2009},
}
@inproceedings{microdrivers-hotos,
  title = {{Microdrivers: A New Architecture for Device Drivers}},
  author = {Vinod Ganapathy and Arini Balakrishnan and Michael M. Swift and Somesh Jha},
  booktitle=proc-hotos,
  address = {San Diego, CA},
  month = may,
  year = 2007,
}
@inproceedings{lakshmi-logfs,
  author = {Ganesh,, Lakshmi and Weatherspoon,, Hakim and Balakrishnan,, Mahesh and Birman,, Ken},
  title = {{Optimizing Power Consumption in Large Scale Storage Systems}},
  booktitle=proc-hotos,
  address = {San Diego, CA},
  month = may,
  year = 2007,
}
@inproceedings{microkernels-done-right,
  author = {Hand, Steven and Warfield, Andrew and Fraser, Keir and Kotsovinos, Evangelos and Magenheimer, Daniel},
  title = {Are Virtual Machine Monitors Microkernels Done Right?},
  booktitle=proc-hotos,
  address = {Santa Fe, NM},
  month = jun,
  year = 2005,
}
@inproceedings{parallax-hotos,
  title = {Parallax: Managing Storage for a Million Machines},
  author = {Andrew Warfield and Russ Ross and Keir Fraser and Christian Limpach and Steven Hand},
  booktitle=proc-hotos,
  address = {Santa Fe, NM},
  month = jun,
  year = 2005,
}
@inproceedings{exokernel-hotos,
  author = {Engler, D. R. and Kaashoek, M. F.},
  title = {Exterminate all operating system abstractions},
  booktitle = proc-hotos,
  address={Orcas Island, WA},
  month=may,
  year={1995},
}
@inproceedings{amit2017hypercallbacks,
  title={Hypercallbacks: Decoupling policy decisions and execution},
  author={Amit, Nadav and Wei, Michael and Tu, Cheng-Chun},
  booktitle={Proceedings of the 16th Workshop on Hot Topics in Operating Systems},
  pages={37--41},
  year={2017}
}

@inproceedings{rustSystems,
  title="{System Programming in Rust: Beyond Safety}",
  author={Balasubramanian, Abhiram and Baranowski, Marek S and Burtsev, Anton and Panda, Aurojit and Rakamari{\'c}, Zvonimir and Ryzhyk, Leonid},
  booktitle={Proceedings of the 16th Workshop on Hot Topics in Operating Systems (HotOS'17)},
  year={2017},
  month = MAY,
}

@inproceedings{untenableVerification,
    author = {Jia, Jinghao and Sahu, Raj and Oswald, Adam and Williams, Dan and Le, Michael V. and Xu, Tianyin},
    title = {Kernel extension verification is untenable},
    year = {2023},
    isbn = {9798400701955},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    url = {https://doi.org/10.1145/3593856.3595892},
    doi = {10.1145/3593856.3595892},
    abstract = {The emergence of verified eBPF bytecode is ushering in a new era of safe kernel extensions. In this paper, we argue that eBPF's verifier---the source of its safety guarantees---has become a liability. In addition to the well-known bugs and vulnerabilities stemming from the complexity and ad hoc nature of the in-kernel verifier, we highlight a concerning trend in which escape hatches to unsafe kernel functions (in the form of helper functions) are being introduced to bypass verifier-imposed limitations on expressiveness, unfortunately also bypassing its safety guarantees. We propose safe kernel extension frameworks using a balance of not just static but also lightweight runtime techniques. We describe a design centered around kernel extensions in safe Rust that will eliminate the need of the in-kernel verifier, improve expressiveness, allow for reduced escape hatches, and ultimately improve the safety of kernel extensions.},
    booktitle = {Proceedings of the 19th Workshop on Hot Topics in Operating Systems},
    pages = {150–157},
    numpages = {8},
    keywords = {operating system, kernel extension, eBPF, verification, safety},
    location = {Providence, RI, USA},
    series = {HOTOS '23}
}





%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-HOTSDN %%%%%%%%%%%%%%%%%%%%%%%%%

@inproceedings{hp-sdn,
  author = {Andrew D. Ferguson and Arjun Guha and Chen Liang and Rodrigo Fonseca and Shriram Krishnamurthi},
  title = {{Hierarchical Policies for Software Defined Networks}},
  booktitle = proc-hotsdn,
  address = {Helsinki, Finland},
  month = aug,
  year = {2012},
}

@inproceedings{outsourcing-sdn,
  author = {Glen Gibb and Hongyi Zeng and Nick McKeown},
  title = {{Outsourcing Network Functionality}},
  booktitle = proc-hotsdn,
  address = {Helsinki, Finland},
  month = aug,
  year = {2012},
}

@inproceedings{programming-sdn,
  author = {Guohui Wang and T. S. Eugene Ng and Anees Shaikh},
  title = {{Programming Your Network at Run-time for Big Data Applications}},
  booktitle = proc-hotsdn,
  address = {Helsinki, Finland},
  month = aug,
  year = {2012},
}

@inproceedings{mutation-sdn,
  author = {Jafar Haadi Jafarian and Ehab Al-Shaer and Qi Duan},
  title = {{OpenFlow Random Host Mutation: Transparent Moving Target Defense using Software Defined Networking}},
  booktitle = proc-hotsdn,
  address = {Helsinki, Finland},
  month = aug,
  year = {2012},
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-HOTICE %%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{openflow-wild,
  author = {Wang, Richard and Butnariu, Dana and Rexford, Jennifer},
  title = {{OpenFlow-based Server Load Balancing Gone Wild}},
  booktitle = proc-hotice,
  address = {Boston, MA},
  month = mar,
  year = {2011},
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-OTTAWA_LINUX %%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{kivity-kvm,
  author={Kivity, A. and Kamay, Y. and Laor, D.},
  title={{KVM: The Kernel-Based Virtual Machine for Linux}},
  booktitle=proc-ottawa_linux,
  address={Ottawa, Canada},
  month=jun,
  year={2007},
}
@inproceedings{ondemand_governor,
  author={Venkatesh Pallipadi and Alexey Starikovskiy},
  title={The {O}ndemand {G}overnor: Past, Present, and Future},
  booktitle=proc-ottawa_linux,
  address={Ottawa, Canada},
  month=jul,
  year={2006},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-NOMS %%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{khanna-app_perf_mgmt,
  author={Gunjan Khanna and Kirk Beaty and Gautam Kar and Andrzej Kochut},
  title={Application Performace Management in Virtualized Server Environments},
  booktitle=proc-noms,
  address={Vancouver, Canada},
  month=apr,
  year={2006},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-CLOUDCOM %%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{includeos,
  author={Bratterud, Alfred and Walla, Alf-Andre and Haugerud, H{\aa}rek and Engelstad, Paal E and Begnum, Kyrre},
  title={IncludeOS: A minimal, resource efficient unikernel for cloud services},
  booktitle=proc-cloudcom,
  address={Vancouver,Canada},
  month=nov,
  year={2015},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-CLOUDCOMP %%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{andreolini-dyn_load_mgmt,
  author={Mauro Andreolini and Sara Casolari and Michele Colajanni and Michele Messori},
  title={Dynamic Load Management of Virtual Machines in a Cloud Architecture},
  booktitle=proc-cloudcomp,
  address={Munich, Germany},
  month=oct,
  year={2009},
}
@inproceedings{chohan-appscale,
  author={Navraj Chohan and Chris Bunch and Sydney Pang and Chandra Krintz and Nagy Mostafa and Sunil Soman and Rich Wolski},
  title={AppScale: Scalable and Open AppEngine Application Development and Deployment},
  booktitle=proc-cloudcomp,
  address={Munich, Germany},
  month=oct,
  year={2009},
}


%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-ISPASS %%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{weber-specweb2009,
  author={Steven Weber and Rema Hariharan},
  title={A New Synthetic Web Server Trace Generation Methodology},
  booktitle=proc-ispass,
  address={Austin, TX},
  month=mar,
  year={2003}
}
@inproceedings{rajamani-request_dist_for_saving_energy,
  author={Karthick Rajamani and Charles Lefurgy},
  title={On Evaluating Request-Distribution Schemes for Saving Energy in Server Clusters},
  booktitle=proc-ispass,
  address={Austin, TX},
  month=mar,
  year={2003}
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-HOTCLOUD %%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{say_goodbye,
  author={Dan Williams and Ricardo Koller and Brandon Lum},
  title={Say Goodbye to Virtualization for a Safer Cloud},
  booktitle=proc-hotcloud,
  address={Boston, MA},
  month=jul,
  year=2018,
}
@inproceedings{container_patterns,
  author={Brendan Burns and David Oppenheimer},
  title={Design patterns for container-based distributed systems},
  booktitle=proc-hotcloud,
  address={Denver, CO},
  month=jun,
  year=2016,
}
@inproceedings{unikernel_monitors,
  author={Dan Williams and Ricardo Koller},
  title={Unikernel Monitors: Extending Minimalism Outside of the Box},
  booktitle=proc-hotcloud,
  address={Denver, CO},
  month=jun,
  year=2016,
}
@inproceedings {crawler-va,
  author = {Ricardo Koller and Canturk Isci and Sahil Suneja and Eyal de Lara},
  title = {Unified Monitoring and Analytics in the Cloud},
  booktitle = proc-hotcloud,
  address = {Santa Clara, CA},
  month=jul,
  year = {2015},
}
@inproceedings{a_way_forward,
  author={Dan Schatzberg and James Cadden and Orran Krieger and Jonathan Appavoo},
  title={A Way Forward: {E}nabling Operating System Innovation in the Cloud},
  booktitle=proc-hotcloud,
  address={Philadelphia, PA},
  month=jun,
  year=2014,
}
@inproceedings{unshackle,
  author={Dan Williams and Eslam Elnikety and Mohamed Eldehiry and Hani Jamjoom and Hai Huang and Hakim Weatherspoon},
  title={{Unshackle the Cloud!}},
  booktitle=proc-hotcloud,
  address={Portland, OR},
  month=jun,
  year={2011},
}
@inproceedings{Campbell-Cirrus,
   author = {Campbell, Roy and Gupta, Indranil and Heath, Michael and Ko, Steven Y. and Kozuch, Michael and Kunze, Marcel and Kwan, Thomas and Lai, Kevin and Lee, Hing Yan and Lyons, Martha and Milojicic, Dejan and O'Hallaron, David and Soh, Yeng Chai},
  title = {{Open Cirrus$^{TM}$cloud computing testbed: federated data centers for open source systems and services research}},
  booktitle=proc-hotcloud,
  address={San Diego, CA},
  month=jun,
  year={2009},
  }

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-HOTNETS %%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings{open_vswitch,
  author={Ben Pfaff and Justin Pettit and Teemu Koponen and Keith Amidon and Mart\'{i}n Casado and Scott Shenker},
  title={{Extending Networking Into the Virtualization Layer}},
  booktitle=proc-hotnets,
  address={New York, NY},
  month=oct,
  year={2009},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   PROC-HOTSTORAGE %%%%%%%%%%%%%%%%%%%%%%%%%%%%
@inproceedings {aotprep,
  author = {Ricardo Koller and Dan Williams},
  title = {An Ounce of Prevention is Worth a Pound of Cure: Ahead-of-time Preparation for Safe High-level Container Interfaces},
  booktitle = proc-hotstorage,
  address = {Renton, WA},
  month = jul,
  year = {2019},
}

%%%%%%%%%%%%%%%%%%%%%%%%%%   UNCLASSIFIED %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

@inproceedings{offline_patching,
 author = {Zhou, Wu and Ning, Peng and Zhang, Xiaolan and Ammons, Glenn and Wang, Ruowen and Bala, Vasanth},
 title = {Always up-to-date: scalable offline patching of VM images in a compute cloud},
 booktitle = {Proc. of {ACM} {ACSAC}},
 year = {2010},
 month = dec,
 address = {Austin, Texas},
}
odity software, which is the major source of exploited vulnerabilities on the Internet. We propose Address Space Layout Permutation (ASLP) that introduces high degree of randomness (or high entropy) with minimal performance overhead. Essential to ASLP is a novel binary rewriting tool that can place the static code and data segments of a compiled executable to a randomly specified location and performs fine-grained permutation of procedure bodies in the code segment as well as static data objects in the data segment. We have also modified the Linux operating system kernel to permute stack, heap, and memory mapped regions. Together, ASLP completely permutes memory regions in an application. Our security and performance evaluation shows minimal performance overhead with orders of magnitude improvement in randomness (e.g., up to 29 bits of randomness on a 32-bit architecture).},
booktitle = {Proceedings of the 22nd Annual Computer Security Applications Conference},
pages = {339–348},
numpages = {10},
series = {ACSAC '06}
}



~
@inproceedings{kil-aslp,
  author = {Kil, Chongkyung and Jun, Jinsuk and Bookholt, Christopher and Xu, Jun and Ning, Peng},
  title = {Address Space Layout Permutation (ASLP): Towards Fine-Grained Randomization of Commodity Software},
  booktitle = {Proc. of ACSAC},
  address = {Miami Beach, FL},
  month = dec,
  year = {2006},
}

@inproceedings{proof-carrying-verifier,
  author={Luke Nelson and Xi Wang and Emina Torlak},
  title={A proof-carrying approach to building correct and flexible in-kernel verifiers},
  booktitle= {Linux Plumbers Conference},
  month=sep,
  year={2021},
}

@inproceedings{linux-rust,
  author={John Baublitz and Nick Desaulniers and Alex Gaynor and Geoffrey Thomas and Josh Triplett and Miguel Ojeda},
  title="{Barriers to in-tree Rust}",
  booktitle= {Linux Plumbers Conference},
  month=aug,
  year={2020},
}

@inproceedings{virtio_xen,
  author = {Anthony PERARD and Stefano Stabellini},
  title = {Virtio on Xen},
  booktitle= {Linux Plumbers Conference},
  address= {Santa Rosa, CA},
  month=sep,
  year={2011},
}
@inproceedings{graf_nesting,
  author = {Alexander Graf and Joerg Roedel},
  title = {Nesting the virtualized world},
  booktitle= {Linux Plumbers Conference},
  address= {Portland, OR},
  month=sep,
  year={2009},
}


@inproceedings{stage-net_aware_mig,
  author={Alexander Stage and Thomas Setzer},
  title={Network-aware migration control and scheduling of differentiated virtual machine workloads},
  booktitle="Proc. of {ICSE} Workshop on Software Engineering Challenges of Cloud Computing",
  address={Vancouver, Canada},
  month=may,
  year={2009},
}

@inproceedings{van-autonomic,
  author={Hien Nguyen Van and Frederic Dang Tran and Jean-Marc Menaud},
  title={Autonomic virtual resource management for service hosting platforms},
  booktitle="Proc. of {ICSE} Workshop on Software Engineering Challenges of Cloud Computing",
  address={Vancouver, Canada},
  month=may,
  year={2009},
}




@article{httperf,
  author={David Mosberger and Tai Jin},
  title={{httperf: A Tool for Measuring Web Server Performance}},
  journal={Performance Evaluation Review},
  publisher={ACM},
  address={New York, NY},
  volume={26},
  number={3},
  pages={31--37},
  year={1998},
}


@misc{filani,
author= {David Filani and Jackson He and Sam Gao and Murali Rajappa and Anil Kumar and Pinkesh Shah and Ram Nagappan},
title={Dynamic Data Center Power Management: Trends, Issues, and Solutions},
booktitle={Intel Technology Journal},
month=feb,
year=2008,
url={http://www.intel.com/technology/itj/2008/v12i1/6-datacenter/1-abstract.htm}
}





@inproceedings{remusdb,
  author = {Umar Farooq Minhas and Shriram Rajagopalan and Brendan Cully and Ashraf Aboulnaga and Kenneth Salem and Andrew Warfield},
  title = {{RemusDB: Transparent High Availability for Database Systems}},
  booktitle = {"Proc. of {VLDB}"},
  month = aug,
  address = {Seattle, WA},
  year = 2011,
}

@techreport{too_much_pie,
  title={Too much PIE is bad for performance},
  author={Mathias Payer},
  institution = "ETH Zurich",
  number = "766",
  address = "Zurich, Switzerland",
  year = 2012,
}

@techreport{acher-learning_config,
  TITLE = {{Learning Very Large Configuration Spaces: What Matters for Linux Kernel Sizes}},
  AUTHOR = {Acher, Mathieu and Martin, Hugo and Pereira, Juliana Alves and Blouin, Arnaud and J{\'e}z{\'e}quel, Jean-Marc and Khelladi, Djamel Eddine and Lesoil, Luc and Barais, Olivier},
  URL = {https://hal.inria.fr/hal-02314830},
  TYPE = {Research Report},
  INSTITUTION = {{Inria Rennes - Bretagne Atlantique}},
  YEAR = {2019},
  MONTH = Oct,
  PDF = {https://hal.inria.fr/hal-02314830/file/LinuxSizePrediction.pdf},
  HAL_ID = {hal-02314830},
  HAL_VERSION = {v1},
}

@techreport{lakshmi-rack_packer,
  author = "Lakshmi Ganesh and Jie Liu and Suman Nath and Galen Reeves and Feng Zhao",
  title = "Unleash Stranded Power in Data Centers with Rack Packing",
  institution = "Microsoft Research",
  number = "MSR-TR-2009-21",
  address = "Redmond, WA",
  year = 2009
}

@article{lefurgy-power_capping,
 author = {Lefurgy,, Charles and Wang,, Xiaorui and Ware,, Malcolm},
 title = {{Power Capping: A Prelude to Power Shifting}},
 journal = {Cluster Computing},
 volume = {11},
 number = {2},
 year = {2008},
 issn = {1386-7857},
 pages = {183--195},
 doi = {http://dx.doi.org/10.1007/s10586-007-0045-4},
 publisher = {Kluwer Academic Publishers},
 address = {Hingham, MA, USA},
 }
@inproceedings{heath-energy_heterogeneous,
 author = {Heath,, Taliver and Diniz,, Bruno and Carrera,, Enrique V. and Jr.,, Wagner Meira and Bianchini,, Ricardo},
 title = {{Energy conservation in heterogeneous server clusters}},
 booktitle = {PPoPP '05: Proceedings of the tenth ACM SIGPLAN symposium on Principles and practice of parallel programming},
 year = {2005},
 isbn = {1-59593-080-9},
 pages = {186--195},
 location = {Chicago, IL, USA},
 doi = {http://doi.acm.org/10.1145/1065944.1065969},
 publisher = {ACM},
 address = {New York, NY, USA},
 }
@inproceedings{choi-java_replay,
 author={J. D. Choi and H. Srinivasan},
 title={Deterministic Replay of Java Multithreaded Applications},
 booktitle={In Proc. {SIGMETRICS} {SPDT}},
 address={Welches, OR},
 month=aug,
 year=1998,
}

@inproceedings{prevail,
  title="{Simple and Precise Static Analysis of Untrusted Linux Kernel Extensions}",
  author={Gershuni, Elazar and Amit, Nadav and Gurfinkel, Arie and Narodytska, Nina and Navas, Jorge A and Rinetzky, Noam and Ryzhyk, Leonid and Sagiv, Mooly},
  booktitle={Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI'19)},
  year={2019},
  month = JUN,
}

@inproceedings{fan-warehouse,
 author = {Fan,, Xiaobo and Weber,, Wolf-Dietrich and Barroso,, Luiz Andre},
 title = {{Power provisioning for a warehouse-sized computer}},
booktitle=proc-isca,
 year = {2007},
 isbn = {978-1-59593-706-3},
 pages = {13--23},
 location = {San Diego, California, USA},
 doi = {http://doi.acm.org/10.1145/1250662.1250665},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@inproceedings{fixer,
 author = {Williams,, Dan and Marian,, Tudor and Weatherspoon,, Hakim},
 title = {{The Fixer: Minimizing the Damage of Memory Oversubscription on Virtual Machines}},
 booktitle = {in submission},
 year = {2009},
 }


@inproceedings{elnozahy-request_batching,
 author = {Elnozahy,, Mootaz and Kistler,, Michael and Rajamony,, Ramakrishnan},
 title = {{Energy conservation policies for web servers}},
booktitle=proc-usits,
 year = {2003},
 pages = {8--8},
 location = {Seattle, WA},
 publisher = {USENIX Association},
 address = {Berkeley, CA, USA},
 }





@inproceedings{pmapper,
 author = {Verma,, Akshat and Ahuja,, Puneet and Neogi,, Anindya},
 title = {{pMapper: power and migration cost aware application placement in virtualized systems}},
 booktitle = {Middleware '08: Proceedings of the 9th ACM/IFIP/USENIX International Conference on Middleware},
 year = {2008},
 isbn = {3-540-89855-7},
 pages = {243--264},
 location = {Leuven, Belgium},
 publisher = {Springer-Verlag New York, Inc.},
 address = {New York, NY, USA},
 }


@article{pinheiro,
 author = {Pinheiro,, Eduardo and Bianchini,, Ricardo and Carrera,, Enrique V. and Heath,, Taliver},
 title = {{Dynamic cluster reconfiguration for power and performance}},
 journal = {Compilers and operating systems for low power},
 year = {2003},
 isbn = {1-4020-7573-1},
 pages = {75--93},
 publisher = {Kluwer Academic Publishers},
 address = {Norwell, MA, USA},
 }


@article{ranganathan-ensemble_pm,
 author = {Ranganathan,, Parthasarathy and Leech,, Phil and Irwin,, David and Chase,, Jeffrey},
 title = {{Ensemble-level Power Management for Dense Blade Servers}},
 journal = {SIGARCH Comput. Archit. News},
 volume = {34},
 number = {2},
 year = {2006},
 issn = {0163-5964},
 pages = {66--77},
 doi = {http://doi.acm.org/10.1145/1150019.1136492},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@inproceedings{femal-safe_overprovisioning,
  author = {Mark E. Femal and Vincent W. Freeh},
  booktitle = {{PACS}},
  editor = {Babak Falsafi and T. N. Vijaykumar},
  interHash = {f5ce7db3711008457309079cc4803b0b},
  intraHash = {bd4bb943a17ff282261086bfc7eec37b},
  pages = {150-164},
  publisher = {Springer},
  series = {Lecture Notes in Computer Science},
  title = {{Safe Overprovisioning: Using Power Limits to Increase Aggregate Throughput}},
  url = {http://dblp.uni-trier.de/db/conf/pacs/pacs2004.html#FemalF04},
  volume = {3471},
  year = {2004},
  ee = {http://dx.doi.org/10.1007/11574859_11},
  isbn = {3-540-29790-1},
  date = {2006-10-30}
}

@article{gurumurthi-drpm,
 author = {Gurumurthi,, Sudhanva and Sivasubramaniam,, Anand and Kandemir,, Mahmut and Franke,, Hubertus},
 title = {{DRPM: dynamic speed control for power management in server class disks}},
 journal = {SIGARCH Comput. Archit. News},
 volume = {31},
 number = {2},
 year = {2003},
 issn = {0163-5964},
 pages = {169--181},
 doi = {http://doi.acm.org/10.1145/871656.859638},
 publisher = {ACM},
 address = {New York, NY, USA},
 }

@inproceedings{douglis-adaptive_disk_spin_down,
 author = {Douglis, Fred and Krishnan,, P. and Bershad,, Brian N.},
 title = {{Adaptive Disk Spin-down Policies for Mobile Computers}},
booktitle=proc-mlics,
 year = {1995},
 isbn = {1-880446-69-3},
 pages = {121--137},
 publisher = {USENIX Association},
 address = {Berkeley, CA, USA},
 }

@article{bohrer,
 author = {Bohrer,, Pat and Elnozahy,, Elmootazbellah N. and Keller,, Tom and Kistler,, Michael and Lefurgy,, Charles and McDowell,, Chandler and Rajamony,, Ram},
 title = {{The Case for Power Management in Web Servers}},
 journal = {Power aware computing},
 year = {2002},
 isbn = {0-306-46786-0},
 pages = {261--289},
 publisher = {Kluwer Academic Publishers},
 address = {Norwell, MA, USA},
 }














@inproceedings{nswap,
author = {Newhall, Tia   and Finney, Sean   and Ganchev, Kuzman   and Spiegel, Michael  },
title = {{Nswap: A Network Swapping Module for Linux Clusters}},
booktitle=proc-europar,
address={Klagenfurt, Austria},
month=aug,
year = {2003}
}






@inproceedings{xen-drivers,
title = "Safe Hardware Access with the {Xen} Virtual Machine Monitor",
author = {Keir Fraser and Steven Hand and Rolf Neugebauer and Ian Pratt and
     Andrew Warfield and Mark Williamson},
booktitle = {Proceedings of The 1st
     Workshop on Operating System and Architectural
     Support for the On-Demand IT Infrastructure},
year = 2004
}

@misc{katz-titans,
title = {{ Tech Titans Building Boom}},
author = " Randy H. Katz",
month = feb,
journal = {{IEEE Spectrum Online}},
year = 2009,
howpublished = {\url{http://www.spectrum.ieee.org/feb09/7327}}
}

@inproceedings{unilinux,
  title={{Unikernelized Real Time Linux \& IoT}},
  author={Tiejun Chen},
  howpublished={\url{https://wiki.linuxfoundation.org/_media/realtime/events/rt-summit2017/unikernelized-real-time-linux-and-iot_tiejun-chen.pdf}},
  booktitle={Linux Foundation RT-Summit},
  address={Prague, Czech Republic},
  month=oct,
  year=2017,
}

@inproceedings{nist-cloud_computing,
  author={Peter Mell and Timothy Grance},
  title={The {NIST} Definition of Cloud Computing},
  booktitle={National Institute of Standards and Technology Special Publication 800-145},
  month=sep,
  year={2011},
}

@misc{runtimejs,
title={JavaScript library operating system for the cloud},
howpublished={{http://runtimejs.org/}},
month=apr,
year=2015,
}

@misc{kaslr-perf,
  author={Lizzie Dixon},
  title={Breaking KASLR with perf},
  howpublished={{https://blog.lizzie.io/kaslr-and-perf.html}},
  month=mar,
  year=2017,
}

@misc{clive,
title={Clive: Removing (most of) the software stack from the cloud},
howpublished={{http://lsub.org/ls/clive.html}},
month=apr,
year=2015,
}

@misc{estimating_wss,
title={Working Set Size Estimation},
author={Brendan Gregg},
howpublished={{http://www.brendangregg.com/wss.html}},
month=may,
year=2018,
}

@misc{rumprun,
title={The Rumprun unikernel and toolchain for various platforms},
howpublished={{https://github.com/rumpkernel/rumprun}},
month=apr,
year=2015,
}

@misc{zerovm,
title={ZeroVM},
howpublished={{http://www.zerovm.org/}},
month=may,
year=2018,
}

@misc{specweb2009-design,
  title={SPECweb2009 Release 1.10 Banking Workload Design Document},
  author={{Standard Performance Evaluation Corporation}},
  month=apr,
  year=2009,
  howpublished = {\url{http://www.spec.org/web2009/docs/design/BankingDesign.html}}
}
@misc{cisco-vtp,
title={Understanding {VLAN Trunk Protocol (VTP)}},
author={{Cisco Systems, Inc}},
howpublished={\url{http://www.cisco.com/application/pdf/-paws/10558/21.pdf}},
month=jul,
year=2007,
}

@misc{cisco-1000v,
title={Cisco Nexus 1000V Series Switches Data Sheet},
author={{Cisco Systems, Inc}},
howpublished={\url{http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9902/data_sheet_c78-492971.html}},
month=apr,
year=2012,
}

@misc{ovf,
  title={Open Virtualization Format White Paper Version 1.00},
  author={{Distributed Management Task Force, Inc. (DMTF)}},
  month=feb,
  year=2009,
  howpublished = {\url{http://http://www.dmtf.org/sites/default/files/standards/documents/DSP2017_1.0.0.pdf}}
}

@misc{vsphere_networking_guide,
  title={{vSphere Networking}},
  author={{VMware, Inc.}},
  howpublished={\url{http://pubs.vmware.com/vsphere-50/topic/com.vmware.ICbase/PDF/vsphere-esxi-vcenter-server-50-networking-guide.pdf}},
  year=2011,
}
@misc{vmware-v2p,
  title={{Virtual Machine to Physical Machine Migration}},
  author={{VMware, Inc.}},
  howpublished={\url{http://www.vmware.com/support/v2p/doc/V2P_TechNote.pdf}},
  year=2004,
}
@misc{vmware-converter,
  title={{VMware Converter User’s Manual}},
  author={{VMware, Inc.}},
  howpublished={\url{http://www.vmware.com/pdf/VMware_Converter_manual.pdf}},
  year=2006,
}

@misc{brctl,
  author={Lennert Buytenhek},
  title={{{\tt brctl} Linux man page}},
}

@misc{openbsd-pledge,
  author={OpenBSD},
  title={{{\tt PLEDGE(2) - restrict system operations} OpenBSD man page}},
}

@misc{vmware-white_paper,
  title={{Virtualization Overview}},
  author={{VMware, Inc.}},
  howpublished={\url{http://www.vmware.com/pdf/virtualization.pdf}},
  year=2006,
}

@misc{apparmor,
  title={{AppArmor}},
  howpublished={\url{http://wiki.apparmor.net/index.php/Main_Page}},
  note={(Accessed on 2016-03-04)},
}

@misc{vmware-overcommit,
title = {{ Memory Overcommit – Real life examples from VMware customers }},
author = "Alberto Farronato",
month = oct,
journal = {{VMware: Virtual Reality}},
year = 2008,
howpublished = {\url{http://http://blogs.vmware.com/virtualreality/2008/10/memory-overcomm.html}}
}

@misc{integrity-vm,
title = "Introducing {HP Integrity Virtual Machines}",
author = "Hewlett-Packard White Paper",
month = sep,
year = 2005,
howpublished = {\url{http://h20331.www2.hp.com/enterprise/downloads/Intro_VM_WP_12_Sept%2005.pdf}}
}


@misc{ baker-cluster,
  author = "M. Baker",
  title = "Cluster Computing White Paper",
  text = "Mark Baker, Cluster Computing White Paper,
http://www.dcs.port.ac.uk/~mab/tfcc/WhitePaper/WhitePa
    per.htm",
  url = "citeseer.ist.psu.edu/baker00cluster.html" }

@techreport{singularity,
  author = "Galen C. Hunt and James R. Larus and Martín Abadi and Mark Aiken and Paul Barham and Manuel Fahndrich and Chris Hawblitzel and Orion Hodson and Steven Levi and Nick Murphy and Bjarne Steensgaard and David Tarditi and Ted Wobber and Brian Zill",
  title = "{An Overview of the Singularity Project}",
  institution = "Microsoft Research",
  number = "MSR-TR-2005-135",
  month = oct,
  year = 2005
}

@misc{tia942,
  title={TIA-942: Data Center Standards Overview},
  author={{ADC Telecommunications, Inc.}},
  month=jan,
  year=2006,
  howpublished = {\url{http://www.adc.com/us/en/Library/Literature/102264AE.pdf}}
}


@techreport{Anderson1972,
	author = {James P. Anderson},
	title = {{Computer Security Technology Planning Study---Vol. II}},
	month = sep,
	year = 1972,
	number = "ESD-TR-73-51 Vol. II",
	institution = "Electronic Systems Division, AFSC",
	address = "L. G. Hanscom Field, Bedford, MA"
}

@article{michigan-terminal-system,
	author = {Donald W. Boettner and Michael T. Alexander},
	title = {{The Michigan Terminal System}},
	journal = {Proceedings of the IEEE},
	volume = 63,
	number = 6,
	month = jun,
	year = 1975,
	pages = "912--918"
}


@book{linux-drivers,
	title = {{Linux Device Drivers, Third Edition}},
	author = {Jonathan Corbet and Alessandro Rubini and Greg Kroah-Hartman},
	publisher = {O'Reilly Media, Inc.},
	address = {1005 Gravenstein Highway North, Sebastopol, CA},
	year = 2005,
}

@book{windows-drivers,
	title = {{Microsoft Windows Internals (4th Edition): Microsoft Windows
Server 2003, Windows XP, and Windows 2000}},
	author = {Mark E. Russinovich and David A. Solomon},
	publisher = {Microsoft Press},
	address = {One Microsoft Way, Redmond, WA},
	year = 2005
}

@book{fall2011tcp,
  title={TCP/IP illustrated, volume 1: The protocols},
  author={Fall, Kevin R and Stevens, W Richard},
  year={2011},
  publisher={addison-Wesley}
}



@article{shadowdrivers,
	author = {Michael Swift and Muthukaruppan Annamalai and Brian N. Bershad and Henry M. Levy},
	title = {{Recovering Device Drivers}},
	journal = {ACM Transactions on Computer Systems},
	volume = 24,
	number = 4,
	month = nov,
	year = 2006,
	pages = "333--360"
}


@article{nooks,
	author = {Michael M. Swift and Brian N. Bershad and Henry M. Levy},
	title = {{Improving the Reliability of Commodity Operating Systems}},
	journal = {ACM Transactions on Computer Systems},
	volume = 23,
	number = 1,
	month = feb,
	year = 2005,
	pages = "77--110"
}

@article{intel-vtd,
	title = {{Intel Virtualization Technology for Directed I/O}},
	author = {Darren Abramson and Jeff Jackson and Sridhar Muthrasanallur and Gil Neiger and Greg Regnier and Rajesh Sankaran and Ioannis Schoinas and Rich Uhlig and Balaji Vembu and John Wiegert},
	volume = 10,
	number = 3,
	month = aug,
	year = 2006,
	journal = {Intel Technology Journal}
}

@article{berghmans,
  title={Nesting virtual machines in virtualization test frameworks},
  author={Berghmans, O},
  journal={Master’s thesis, University of Antwerp},
  month=may,
  year={2010},
}

@article{chaingo,
  title={Complexity of the BPF Verifier},
  author={Paul Chaignon},
  month=jul,
  year={2019},
  note={(Accessed on 2023-01-27)},
}
@misc{memcached,
	title = {{memcached}},
	howpublished = {\url{http://www.danga.com/memcached/}},
	month = may,
	year = 2003,
}
@misc{openstack,
   title={{OpenStack}},
   howpublished={\url{http://www.openstack.org/}},
   month=oct,
   year=2010,
}

@misc{venom,
   title={{The VENOM vulnerability}},
   howpublished={\url{http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456}},
   year=2015,
}


@inproceedings{capsicum,
  title={Capsicum: Practical Capabilities for UNIX.},
  author={Watson, Robert NM and Anderson, Jonathan and Laurie, Ben and Kennaway, Kris},
  booktitle={USENIX Security Symposium},
  volume={46},
  pages={2},
  year={2010}
}

@misc{rubbos,
	title = {{RUBBoS}},
	howpublished = {\url{http://jmob.objectweb.org/rubbos.html}},
}
@misc{netperf,
  title = {netperf},
  howpublished = {\url{http://www.netperf.org/netperf/}},
  author = {Rick Jones},
}
@misc{xentop,
  title = {xentop},
  howpublished = {\url{http://www.xen.org/}},
}

@misc{amd-iovt,
	title = {{I/O Virtualization and AMD's IOMMU}},
	author = {Steve Apiki},
	howpublished = {\url{http://developer.amd.com/articlex.jsp?id=101}},
	month = aug,
	year = 2006
}

@misc{sun_n1,
  title={Sun imagines world of virtual servers},
  author ={Stephen Shankland},
  howpublished = {\url{http://news.cnet.com/2100-1001-832442.html}},
  month = feb,
  year = 2002,
}

@misc{amd-v,
	title = {Processor-Based Virtualization, {AMD64} Style, Part {I,II}},
	author = {Alan Zeichick},
	howpublished = {\url{http://developer.amd.com/documentation/articles/pages/630200614.aspx}},
	month = jun,
	year = 2006
}


@inproceedings{bpf,
	title = {The {BSD} Packet Filter: A New Architecture for User-level Packet Capture},
	author = {Steven McCanne and Van Jacobson},
	booktitle = {Proceedings of Winter USENIX Conference},
	year = 1993,
	address = {San Diego, CA}
}

@misc{flex,
	key = {flex},
	title = {{flex: The Fast Lexical Analyzer}},
	howpublished = {\url{http://flex.sourceforge.net/}},
	month = dec,
	year = 2007,
}

@article{linux-udd,
	title = {{User-level Device Drivers: Achieved Performance}},
	author = {Ben Leslie and Peter Chubb and Nicholas Fitzroy-Dale and Stefan
	G\"otz and Charles Gray and Luke Macpherson and Daniel Potts and Yueting
	Shen and Kevin Elphinstone and Gernot Heiser},
	journal = {Journal of Computer Science \& Technology},
	volume = 20,
	number = 5,
	month = sep,
	year = 2005,
	pages = "654--664"
}



@inproceedings{peter2001integrating,
  title={Integrating flexible support for security policies into the Linux operating system},
  author={Peter Loscocco, NSA},
  booktitle={Proceedings of the FREENIX track: USENIX Annual Technical Conference},
  year={2001}
}

@article{vtun,
  author = {Ryan Breen},
  title = {VTun},
  journal = {Linux Journal},
  volume = 112,
  month = aug,
  year = 2003,
}
@article{vmware_virtual_platform,
  author = {Brian Walters},
  title ={{VMware Virtual Platform}},
  journal = {Linux Journal},
  volume = 63,
  month = jul,
  year = 1999,
}

@article{amazon_ec2_launch,
  author = {Barr, Jeff},
  title = {"Amazon EC2 Beta"},
  month = aug,
  year = 2006,
  howpublished = {\url{http://aws.typepad.com/aws/2006/08/amazon_ec2_beta.html}}
}



@misc{taptun,
  title={{Universal TUN/TAP device driver}},
  author = {Maxim Krasnyansky},
  year = 1999,
}

@misc{openvpn,
  author = {{OpenVPN Technologies, Inc.}},
  howpublished = {\url{http://openvpn.net/}}
}
@misc{tinc,
  title={{tinc}},
  howpublished = {\url{http://www.tinc-vpn.org/}}
}
@misc{ebtables,
  title={{ebtables}},
  howpublished = {\url{http://ebtables.sourceforge.net/}},
}

@inproceedings{specsharp,
	title = {{Checking the Hardware-Software Interface in Spec\#}},
	author = {Kevin Bierhoff and Chris Hawblitzel},
	booktitle = {Proceedings of PLOS},
	month = oct,
	year = 2007,
	address = {Stevenson, WA}
}

@inproceedings{adelstein,
 author = {Frank Adelstein and Matt Stillerman and Dexter Kozen},
 title = {Malicious Code Detection for {Open Firmware}},
 booktitle = {Proceedings of the 18th Annual Computer Security
Applications Conference},
 year = {2002},
	month = dec,
 ignore_pages = {403--412},
 address = {Las Vegas, NV},
 }

@misc{iperf,
	title = {Iperf: {The TCP/UDP} bandwidth measurement tool},
	author = {Ajay Tirumala and Feng Qin and Jon Dugan and Jim Ferguson and Kevin Gibbs},
	howpublished = {\url{http://dast.nlanr.net/Projects/Iperf}},
	year = 2005,
	month = may
}



@techreport{mungi-drivers,
	title = {Towards Untrusted Device Drivers},
	author = {Ben Leslie and Gernot Heise},
  number = {UNSW-CSE-TR-0303},
	month = mar,
	year = 2003,
	institution = {University of New South Wales},
	address = {Sydney, Australia}
}

@inproceedings{jeannie,
	title = {Jeannie: Granting {Java Native Interface} Developers Their Wishes},
	author = {Martin Hirzel and Robert Grimm},
	booktitle = {Proceedings of OOPSLA},
	year = 2007,
	month = oct,
	address = {Montr\'eal, Canada},
}



@inproceedings{rio-fc,
	author = {Wee Teck Ng and Peter M. Chen},
	year = 1999,
	title = {The systematic improvement of fault tolerance in the {Rio}
 file cache},
	booktitle = {Proceedings of the IEEE Symposium on Fault-Tolerant
Computing (FTCS)},
	ignore_pages = "76--83",
	address = "Madison, WI",
	month = jun
}



@article{scomp,
 author = {Lester J. Fraim},
 title = {Scomp: A Solution to the Multilevel Security Problem},
 journal = {Computer},
 volume = {16},
 number = {7},
 year = {1983},
 issn = {0018-9162},
 pages = {26--34},
 doi = {http://dx.doi.org/10.1109/MC.1983.1654440},
 publisher = {IEEE Computer Society Press},
 address = {Los Alamitos, CA},
}


@inproceedings{leendert-firmware,
	author={James Hendricks and Leendert van Doorn},
	title={Secure Bootstrap is Not Enough: Shoring up the Trusted Computing
Base},
	booktitle={Proc. of the Eleventh SIGOPS European Workshop, ACM SIGOPS},
	address={Leuven, Belgium},
	month=sep,
	year=2004,
}

@inproceedings{mach-io,
	author={Alessandro Forin, David Golub, Brian Bershad},
	title={An {I/O} System for {Mach}},
	booktitle={Proceedings of the USENIX Mach Symposium},
	month=nov,
	year=1991,
	address={Monterey, CA}
}


@techreport{minix3-reliability,
	title={A Lightweight Method for Building Reliable Operating Systems Despite
Unreliable Device Drivers},
	month = jan,
	year = 2006,
	author = {Jorrit N. Herder and Herbert Bos and Andrew S. Tanenbaum},
	institution = {Vrije Universiteit},
	number = {IR-CS-018},
	address = {Amsterdam, The Netherlands}
}

@article{lampson-authentication,
	author = {Butler Lampson and Mart{\'\i}n Abadi and Michael Burrows and Edward Wobber},
	title = {Authentication in Distributed Systems: Theory and Practice},
	journal = {ACM Transactions on Computer Systems},
	volume = 10,
	number = 4,
	month = nov,
	year = 1992,
	pages = "265--310"
}

@misc{dod-tcb,
author = "{Department of Defense}",
title = "Trusted Computer System Evaluation Criteria",
month = dec,
year = 1985,
howpublished = "DOD 5200.28-STD",
}





@inproceedings{singaravelu-appcore,
  author = {Lenin Singaravelu and Calton Pu and Hermann H\"artig and Christian Helmuth},
  title = "{Reducing TCB Complexity for Security-Sensitive Applications: Three Case Studies}",
  booktitle = {Proc. of European Systems Conference},
  year = 2006,
  month = apr,
  address = "Leuven, Belgium",
}




@inproceedings{brumley-privtrans,
      title = {Privtrans: Automatic Privilege Separation},
      author = "David Brumley and Dawn Song",
      booktitle = "Proc. of USENIX Security Symposium",
      address = "San Diego, CA",
      month = aug,
      year = "2004",
}

@inproceedings{provos-privsep,
      title = {Preventing Privilege Escalation},
      author = "Niels Provos and Markus Friedl and Peter Honeyman",
      booktitle = "Proc. of USENIX Security Symposium",
      address = "Washington DC",
      month = aug,
      year = "2003",
}


@article{zdancewic-secure_partitioning,
	author = {Steve Zdancewic and Lantian Zheng and Nathaniel Nystrom and Andrew C. Myers},
	title = {Secure Program Partitioning},
	journal = {ACM Transactions on Computer Systems},
	volume = 20,
	number = 3,
	month = aug,
	year = 2002,
	pages = "283--328"
}

@inproceedings{sherwood-optack,
	author = {Rob Sherwood and Bobby Bhattacharjee and Ryan Braud},
	title = {Misbehaving TCP Receivers Can Cause Internet-Wide Congestion Collapse},
	journal = {Proc. of ACM Computer and Communications Security},
      address = {Alexandria, VA},
      month = nov,
      year = 2005,
}

@article{kohno-fingerprinting,
	author = {Tadayoshi Kohno and Andre Broido and K.C. Claffy},
	title = {Remote Physical Device Fingerprinting},
	journal = {IEEE Transactions on Dependable and Secure Computing},
	volume = 2,
	number = 2,
	month = apr,
	year = 2005,
	pages = "93--108"
}


@article{ thekkath-user_network,
    author = "Chandramohan A. Thekkath and Thu D. Nguyen and Evelyn Moy and Edward D. Lazowska",
    title = "Implementing network protocols at user level",
    journal = "IEEE\slash ACM Transactions on Networking",
    volume = "1",
    number = "5",
    pages = "554--565",
    year = "1993",
}








@article{now,
	title = "A Case for {NOW} ({N}etworks of {W}orkstations)",
	author = {Thomas E. Anderson and David E. Culler and David A. Patterson and {the NOW team}},
	volume = 15,
	number = 1,
	month = feb,
	year = 1995,
	pages = "54--64",
	journal = {IEEE Micro}
}

@article{xFS,
	author = {Thomas E. Anderson and Michael D. Dahlin and Jeanna M. Neefe and David A. Patterson and Drew S. Roselli and Randolph Y. Wang},
	title = {Serverless Network File Systems},
	journal = {ACM Transactions on Computer Systems},
	volume = 14,
	number = 1,
	month = feb,
	year = 1996,
	pages = "41--79"
}





@article{goldberg-vm_research_1974,
 author = {Robert P. Goldberg},
 title = {Survey of Virtual Machine Research},
 journal = {Computer},
 volume = {7},
 number = {6},
 year = {1974},
 pages = {34--45},
}

@article{creasy-ibm_vm370,
 author = {R.J. Creasy},
 title = {The Origin of the VM/370 Time-Sharing System},
 journal = {IBM Journal of Research and Development},
 volume = {25},
 number = {5},
 year = {1981},
 pages = {483--490},
}







@article{bugnion-disco,
	author = {Edouard Bugnion and Scott Devine and Kinshuk Govil and Mendel Rosenblum},
	title = {Disco: Running Commodity Operating Systems on Scalable Multiprocessors},
	journal = {ACM Transactions on Computer Systems},
	volume = 25,
	number = 4,
	month = nov,
	year = 1997,
	pages = "412--447"
}


@inproceedings{robin-pentium_vm_ability,
      title = {Analysis of the Intel Pentium's Ability to Support a Secure Virtual Machine Monitor},
      author = {John Scott Robin and Cynthia E. Irvine},
      booktitle = {Proc. of USENIX Security Symposium},
      year = 2000,
}


@article{intel-vt,
	title = {Intel Virtualization Technology: Hardware Support for Efficient Processor Virtualzation},
	author = {Felix Leung and Gil Neiger and Dion Rodgers and Amy Santoni and Rich Uhlig},
	volume = 10,
	number = 3,
	month = aug,
	year = 2006,
	journal = {Intel Technology Journal}
}
@article{hyperthreading,
  title={{Hyper-Threading Technology Architecture and Microarchitecture}},
  author={Deborah T. Marr and Frank Binns and David L. Hill and Glenn Hinton and David A. Koufaty and J. Alan Miller and Michael Upton},
  volume=6,
  number=1,
  month = 2002,
  year = {Intel Technology Journal}
}

@article{jul-emerald,
	author = {Eric Jul and Henry Levy and Norman Hutchinson and Andrew Black},
	title = {Fine-grained Mobility in the Emerald System},
	journal = {ACM Transactions on Computer Systems},
	volume = 6,
	number = 1,
	month = feb,
	year = 1988,
	pages = "109--133"
}

@article{barak-mosix,
	author = {Amnon Barak and Oren La\'adan},
	title = {The MOSIX Multicomputer Operating System for High Performance Cluster Computing},
	journal = {Journal of Future Generation Computer Systems},
	volume = 13,
	number = {4--5},
	month = mar,
	year = 1998,
	pages = "361--372"
}

@article{douglis-sprite,
	author = {Fred Douglis and John K. Ousterhout},
	title = {Transparent Process Migration: Design Alternatives and the Sprite Implementation},
	journal = {Software - Practice and Experience},
	volume = 21,
	number = 8,
	month = aug,
	year = 1991,
	pages = "757--785"
}

@article{milojicic-process_migration,
	author = {Dejan S. Milojicic and Fred Douglis and Yves Paindaveine and Songnian Zhou},
	title = {{Process Migration}},
	journal = {ACM Computing Surveys},
	volume = 32,
	number = 3,
	month = sep,
	year = 2000,
	pages = "241--299"
}

@misc{amazon_outage,
   title = {Summary of the Amazon EC2 and Amazon RDS Service Disruption in the US East Region},
   howpublished = {\url{http://aws.amazon.com/message/65648/}},
   month = apr,
   year = 2011,
}

@misc{appengine,
title = {{Google AppEngine}},
howpublished = {\url{https://developers.google.com/appengine/}},
month=nov,
year=2012,
}

@misc{rackspace,
        title = {Rackspace},
        howpublished = {\url{http://www.rackspace.com/}},
        month = sep,
        year = 2012,
}

@misc{amazon-ec2,
	title = {Amazon Elastic Compute Cloud (Amazon EC2)},
	howpublished = {\url{http://aws.amazon.com/ec2/}},
	month = oct,
	year = 2008,
}
@misc{lambda,
	title = {{AWS Lambda}},
	howpublished = {\url{https://aws.amazon.com/lambda/}},
    note={(Accessed on 2016-03-04)},
}
@misc{zero-footprint,
	title = {{Erlang on Xen}},
	howpublished = {\url{http://erlangonxen.org/case/a-zero-footprint-cloud}},
    note={(Accessed on 2016-03-04)},
}
@misc{whisk,
  title={{IBM OpenWhisk}},
  howpublished={\url{https://developer.ibm.com/open/openwhisk/}},
  note={(Accessed on 2016-03-04)},
}
@misc{openwhisk,
  title={{Apache OpenWhisk: Open Source Serverless Cloud Platform}},
  howpublished={\url{http://openwhisk.apache.org/}},
  note={(Accessed on 2021-01-04)},
}
@misc{azure-functions,
  title={{Azure Functions Serverless Compute}},
  howpublished={\url{https://azure.microsoft.com/en-us/services/functions/}},
  note={(Accessed on 2021-01-04)},
}
@misc{ibm-cloud-functions,
  title={{IBM Cloud Functions}},
  howpublished={\url{https://www.ibm.com/cloud/functions}},
  note={(Accessed on 2021-01-04)},
}
@misc{kata-containers,
  title={{Kata Containers: The speed of containers, the security of VMs}},
  howpublished={\url{https://katacontainers.io/}},
  note={(Accessed on 2021-01-04)},
}
@misc{nemu,
  title={Intel NEMU: Modern Hypervisor for the Cloud},
  howpublished={\url{https://github.com/intel/nemu}},
}
@misc{lxc,
  title={Linux Containers},
  howpublished={\url{https://linuxcontainers.org/}},
}
@misc{solo5,
  title={{The Solo5 Unikernel}},
  howpublished={\url{https://github.com/djwillia/solo5}},
  note={(Accessed on 2018-05-10)},
}

@misc{gvisor,
  title={{Container Runtime Sandbox}},
  howpublished={\url{https://github.com/google/gvisor}},
  note={(Accessed on 2018-05-10)},
}

@misc{amazon-s3,
	title = {Amazon Simple Storage Service (Amazon S3)},
	howpublished = {\url{http://aws.amazon.com/s3/}},
	month = oct,
	year = 2008,
}

@misc{amazon-aws,
	title = {Amazon Web Services},
	howpublished = {\url{http://aws.amazon.com/}},
	month = jun,
	year = 2009,
}


@misc{nirvanix-sdn,
title = {Accelerating Web Application Development with The Nirvanix Storage Delivery Network (SDN)},
author = {Nirvanix},
year = 2008,
howpublished = {\url{http://www.nirvanix.com/resources.aspx#whitePapers}}
}

@misc{nirvanix-cost,
title = {Total Cost of Ownership Analysis of Alternatives for Managing Media-Centric Content},
author = {Nirvanix},
year = 2008,
howpublished = {\url{http://www.nirvanix.com/resources.aspx#whitePapers}}
}

@misc{flexiscale,
title = {Flexiscale FAQ},
author = {Flexiscale},
year = 2008,
howpublished  = {\url{http://www.flexiscale.com/FlexiScale_FAQ.pdf}},
}


@inproceedings{chu-ram_grid,
author = {Rui Chu and Jiancong Xie and Nong Xiao and Xicheng Lu},
title={RAM Grid Middleware for Autonomic Cooperative Caching},
booktitle={Proceedings of Grid and Cooperative Computing},
year = 2007,
month= aug,
address= {Urumchi, Xinjiang, China},
}

@inproceedings{olaru-distribution_aware,
author={Vlad Olaru and Walter F. Tichy},
title={Request distribution-aware caching in cluster-based Web servers},
booktitle={Proceedings of Network Computing and Applications},
year=2004,
month=aug,
address={Cambridge,MA},
}

@article{ganglia,
title = "The ganglia distributed monitoring system: design, implementation, and experience",
journal = "Parallel Computing",
volume = "30",
number = "7",
pages = "817 - 840",
year = "2004",
note = "",
issn = "0167-8191",
doi = "10.1016/j.parco.2004.04.001",
url = "http://www.sciencedirect.com/science/article/pii/S0167819104000535",
author = "Matthew L Massie and Brent N Chun and David E Culler",
keywords = "Monitoring",
keywords = "Clusters",
keywords = "Distributed systems"
}

@article{leff-1ch,
author={Avraham Leff and Joel L. Wolf and Philip S. Yu},
title={Efficient LRU-Based Buffering in a LAN Remote Caching Architecture},
journal={IEEE Transactions on Parallel and Distributed Systems},
volume={7},
number={2},
month=feb,
year=1996,
pages={191--206},
}

@inproceedings{jiang-locality,
author={Song Jiang and Kei Davis and Fabrizio Petrini and Xiaoning Ding and Xiaodong Zhang},
title={A Locality-Aware Cooperative Cache Management Protocol to Improve Network File System Performance},
booktitle={Proceedings of the 26th IEEE International Conference on Distributed Computing Systems (ICDCS’06)},
year=2006,
month=jul,
address={Lisboa, Portugal},
}

@article{Armbrust-cloudview,
  author={Armbrust, Michael and Fox, Armando and Griffith, Rean and Joseph, Anthony D. and Katz, Randy and Konwinski, Andy and Lee, Gunho and Patterson, David and Rabkin, Ariel and Stoica, Ion and Zaharia, Matei},
 title = {A view of cloud computing},
  journal=journal-cacm,
  publisher={ACM},
  address={New York, NY},
  volume={53},
  number={4},
  pages={50--58},
  year={2010},
}

@inproceedings{Maximilien-cloud_agnostic_middleware,
author = {Maximilien, E. Michael and Ranabahu, Ajith and Engehausen, Roy and Anderson, Laura C.},
 title = {Toward cloud-agnostic middlewares},
booktitle = proc-oopsla,
  address={Orlando, FL},
  month=oct,
  year={2009},
  }

@inproceedings{Maximilien-altocumulus,
 author = {Maximilien, E. Michael and Ranabahu, Ajith and Engehausen, Roy and Anderson, Laura C.},
  title = {{IBM Altocumulus: A Cross-cloud Middleware and Platform}},
booktitle = proc-oopsla,
  address={Orlando, FL},
  month=oct,
  year={2009},
  }

@inproceedings{Elmroth-interfaces,
 author = {Elmroth, Erik and Larsson, Lars},
title = {Interfaces for Placement, Migration, and Monitoring of Virtual Machines in Federated Clouds},
booktitle = proc-gcc,
  address={Lanzhou, Gansu, China},
  month=aug,
  year={2009},
  }

@inproceedings{Pianese-cloudOS,
   author={Pianese, F. and Bosch, P. and Duminuco, A. and Janssens, N. and Stathopoulos, T. and Steiner, M.},
  title={Toward a Cloud Operating System},
booktitle=proc-noms,
  address={Osaka, Japan},
  month=apr,
  year={2010},
  }

@article{cloud-xtreemos,
  author={Christine Morin and Yvon Jegou and Jerome Gallard and Pierre Riteau},
 title = {CLOUDS: A NEW PLAYGROUND FOR THE XTREEMOS GRID OPERATING SYSTEM},
  journal=journal-ppl,
  publisher={World Scientific},
  address={Singapore},
  volume={19},
  number={3},
  pages={435--449},
  year={2009},
}

@misc{ vmware-vsphere,
title = {"{VM}ware vSphere, the First Cloud Operating System, Provides an Evolutionary,  Non-disruptive Path to Cloud Computing"},
author = "VMware",
year = 2009,
howpublished = {\url{http://www.vmware.com/files/pdf/cloud/VMW_09Q2_WP_Cloud_OS_P8_R1.pdf}}
}

@misc{hp_udc,
title = {{"Utility computing: What killed HP's UDC?"}},
author = {Dan Farber},
howpublished = {\url{http://www.zdnet.com/news/utility-computing-what-killed-hps-udc/138727}},
month = sep,
year = 2004,
}

@misc{ eucalyptus,
  title = {Eucalyptus Open-Source Cloud Computing Infrastructure - An Overview},
  author = "{Eucalyptus Systems, Inc.}",
  month=aug,
  year=2009,
  howpublished = {\url{http://www.eucalyptus.com/pdf/whitepapers/Eucalyptus_Overview.pdf}}
}






@inproceedings{turtles,
 author = {Muli Ben-Yehuda and Michael D. Day and Zvi Dubitzky and Michael Factor and Nadav Har'El and Abel Gordon and Anthony Liguori and Orit Wasserman and Ben-Ami Yassour},
 title = {The Turtles Project: Design and Implementation of Nested Virtualization},
 booktitle = proc-osdi,
  address={Vancouver, BC, Canada},
  month=oct,
  year={2010},
  }


  @inproceedings{vino,
 author = {Margo I. Seltzer and Yasuhiro Endo and Christopher Small and Keith A. Smith},
 title = {Dealing With Disaster: Surviving Misbehaved Kernel Extensions},
 booktitle = proc-osdi,
  address={Seattle, WA},
  month=oct,
  year={1996},
  }

  @inproceedings{overdriver,
  author={Dan Williams and Hani Jamjoom and Yew-Huey Liu and Hakim Weatherspoon},
  title={Overdriver: Handling Memory Overload in an Oversubscribed Cloud},
  booktitle=proc-vee,
  address={Newport Beach, CA},
  month=mar,
  year={2011},
}

@misc{ rightscale,
title = {RightScale},
author = "Tim Clark",
year = 2010,
howpublished = {http://www.rightscale.com}
}

@inproceedings{superpages,
  author={Navarro, Juan and Iyer, Sitararn and Druschel, Peter and Cox, Alan},
  title={Practical, transparent operating system support for superpages},
  booktitle= proc-osdi,
  address={Boston, MA},
  month=dec,
  year={2002},
}

@article{page_coloring,
	author = {Kessler, R. E. and Hill, Mark D.},
	title = {Page placement algorithms for large real-indexed caches},
	journal = {ACM Transactions on Computer Systems},
	volume = 10,
	number = 4,
	month = nov,
	year = 1992,
	pages = "338--359"
}

@misc{amazon_stuff,
	title = {Amazon Web Services},
	howpublished = {\url{http://aws.amazon.com/ec2/}},
}


@inproceedings{kangarlu-vsnoop,
 author = {Kangarlou, Ardalan and Gamage, Sahan and Kompella, Ramana Rao and Xu, Dongyan},
 title = {v{S}noop: Improving {TCP} Throughput in Virtualized Environments via Acknowledgement Offload},
 booktitle = proc-sc,
   address={New Orleans, LA},
  month=nov,
  year={2010},
}

@inproceedings{Menon-usenix,
author={Menon, Aravind and Zwaenepoel, Willy},
title={Optimizing Network Virtualization in {X}en},
booktitle={USENIX Annual Technical Conference},
address={Boston},
year={2006},
}

@inproceedings{exokernel-xn,
 author = {Kaashoek, M. Frans and Engler, Dawson R. and Ganger, Gregory R. and Brice\~{n}o, Hector M. and Hunt, Russell and Mazi\`{e}res, David and Pinckney, Thomas and Grimm, Robert and Jannotti, John and Mackenzie, Kenneth},
 title = {Application performance and flexibility on exokernel systems},
 booktitle = proc-sosp,
   address={St. Malo, France},
  month=oct,
  year={1997},
}

@inproceedings{zerfos-app_aware_mig,
  author={Vivek Shrivastava and Petros Zerfos and Kang-won Lee and Hani Jamjoom and Yew-Huey Liu and Suman Banerjee},
  title={{Application-aware Virtual Machine Migration in Data Centers}},
  booktitle=proc-infocom-mini,
  address={Shanghai, China},
  month=apr,
  year={2011}
}


@inproceedings{etherproxy,
  author={Elmeleegy, K. and Cox, A.L.},
  title={{EtherProxy: Scaling Ethernet By Suppressing Broadcast Traffic}},
  booktitle=proc-infocom,
  address={Rio de Janeiro, Brazil},
  month=apr,
  year={2009},
}


@article{vm370,
  author={R. J. Creasy},
  title={{The origin of the VM/370 time-sharing system}},
  journal={{IBM Journal of Research and Development}},
  publisher={{IBM}},
  volume={25},
  number={5},
  pages={483--490},
  month=sep,
  year=1981,
}

@article{mac-utility,
  author={Fano, R. M.},
  title={{The MAC system: the computer utility approach}},
  journal={{IEEE Spectrum}},
  volume={2},
  numer={1},
  pages={56--64},
  month=jan,
  year=1965,
}

@inproceedings{multics,
 author = {Corbat\'{o}, F. J. and Vyssotsky, V. A.},
 title = {{Introduction and overview of the multics system}},
 booktitle = {Proc. of  {AFIPS} Fall Joint Computer Conference, part I},
 month=nov,
 year = {1965},
}

@inproceedings{garfinkel2003terra,
  title={Terra: A virtual machine-based platform for trusted computing},
  author={Garfinkel, Tal and Pfaff, Ben and Chow, Jim and Rosenblum, Mendel and Boneh, Dan},
  booktitle={ACM SIGOPS Operating Systems Review},
  volume={37},
  number={5},
  pages={193--206},
  year={2003},
  organization={ACM}
}

@article{sunejavmi,
 author = {Suneja, Sahil and Isci, Canturk and de Lara, Eyal and Bala, Vasanth},
 title = {Exploring VM Introspection: Techniques and Trade-offs},
 journal = {SIGPLAN Not.},
 issue_date = {July 2015},
 volume = {50},
 number = {7},
 month = mar,
 year = {2015},
 issn = {0362-1340},
 pages = {133--146},
 numpages = {14},
 url = {http://doi.acm.org/10.1145/2817817.2731196},
 doi = {10.1145/2817817.2731196},
 acmid = {2731196},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {consistency, taxonomy, virtual machine, virtualization, vmi},
}


@article{gruenberger-utility,
 author = {F. Gruenberger},
 title = {Computers and Communications - Toward a Computer Utility},
 journal = {Prentice Hall},
 year={1968},
}

@inproceedings{rubis,
  title={{Performance and Scalability of EJB Applications}},
  author={{Emmanuel Cecchet and Julie Marguerite and Willy Zwaenepoel}},
  booktitle= {Proc. of OOPSLA},
  year = 2002,
  month = nov,
  address = {Seattle, WA}
}

@misc{middlebox_rfc,
  author = {Carpenter, B. and Brim, S.},
  title = {{Middleboxes: Taxonomy and Issues}},
  howpublished = {RFC 3234},
  number = 3234,
  organization = {Internet Engineering Task Force},
  publisher = {IETF},
  series = {Request for Comments},
  year = 2002,
  month = {February}
}
@misc{snmp_rfc,
  author = {D. Harrington and R. Presuhn and B. Wijnen},
  title = {{An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks}},
  howpublished = {RFC 3411},
  number = 3411,
  organization = {Internet Engineering Task Force},
  publisher = {IETF},
  series = {Request for Comments},
  year = 2002,
  month = {December}
}

@book{powerhistory,
   author = {Jill Jones},
   title = {Empires of Light: Edison, Tesla, Westinghouse, and the Race to Electrify the World},
   publisher = {Random House},
   year=2004
  }

@misc{powerhistory2,
	title = {History of the Energy System},
	howpublished = {\url{http://telstar.ote.cmu.edu/environ/m3/s3/01history.shtml}},
}


@inproceedings{netbench,
 author = {Memik, Gokhan and Mangione-Smith, William H. and Hu, Wendong},
 title = {{NetBench: a benchmarking suite for network processors}},
 booktitle = {Proceedings of the IEEE/ACM ICCAD},
 year = {2001},
 location = {San Jose, California},
}


@ARTICLE{bluegene,
author={{IBM Blue Gene team}},
title={{Overview of the IBM Blue Gene/P project}},
journal={IBM Journal of Research and Development},
year={2008},
month=jan,
volume={52},
number={1.2},
}

@inproceedings{corral,
  title={Powering the static driver verifier using corral},
  author={Lal, Akash and Qadeer, Shaz},
  booktitle={Proceedings of the 22nd ACM SIGSOFT International Symposium on Foundations of Software Engineering},
  pages={202--212},
  year={2014}
}


%%%%%% INCOMING

@inproceedings{frenetic,
 author = {Nate Foster and Rob Harrison and Michael J. Freedman and Christopher Monsanto and Jennifer Rexford and Alec Story and David Walker},
 title = {{Frenetic: A Network Programming Language}},
 booktitle = proc-icfp,
 year = {2011},
 month = sep,
 address = {Tokyo, Japan},
}

@misc{amazon_autoscale,
title={{Auto Scaling}},
organization={{Amazon Web Services}},
howpublished="\url{http://aws.amazon.com/autoscaling/}"
}


@inproceedings{mininet,
 author = {Lantz, Bob and Heller, Brandon and McKeown, Nick},
 title = {{A Network in a Laptop: Rapid Prototyping for Software-Defined Networks}},
 booktitle = proc-hotnets,
 year = {2010},
 address = {Monterey, California},
}


@inproceedings{cloudcmp,
 author = {Li, Ang and Yang, Xiaowei and Kandula, Srikanth and Zhang, Ming},
 title = {{CloudCmp: comparing public cloud providers}},
 booktitle = {Proc. of {ACM/USENIX} {IMC}},
 address={Melbourne, Australia},
 month=nov,
 year = {2010},
}
@article{runtimecloud,
 author = {Schad, J\"{o}rg and Dittrich, Jens and Quian\'{e}-Ruiz, Jorge-Arnulfo},
 title = {{Runtime measurements in the cloud: observing, analyzing, and reducing variance}},
 journal = {Proc. VLDB Endow.},
 issue_date = {September 2010},
 volume = {3},
 number = {1-2},
 month = {September},
 year = {2010},
 pages = {460--471},
 publisher = {ACM},
 address = {New York, NY},
}


@inproceedings{lisp,
 author = {Quoitin, Bruno and Iannone, Luigi and de Launois, C\'{e}dric and Bonaventure, Olivier},
 title = {{Evaluating the Benefits of the Locator/Identifier Separation}},
 booktitle = proc-mobiarch,
 year = {2007},
 location = {Kyoto, Japan},
}


@inproceedings{monsoon,
 author = {Greenberg, Albert and Lahiri, Parantap and Maltz, David
                  A. and Patel, Parveen and Sengupta, Sudipta},
 title = {{Towards a Next Generation Data Center Architecture:
                  Scalability and Commoditization}},
 booktitle = proc-sigcomm-presto,
 address = {Seattle, WA},
 month=aug,
 year = {2008},
 }

@article{ethane,
 author = {Casado, Martin and Freedman, Michael J. and Pettit, Justin and Luo, Jianying and McKeown, Nick and Shenker, Scott},
 title = {{Ethane: Taking Control of the Enterprise}},
 journal = journal-sigcomm-ccr,
 issue_date = {October 2007},
 volume = {37},
 issue = {4},
 month = Aug,
 year = {2007},
 pages = {1--12}
}

@inproceedings{cmdb,
    author = {Michael Brenner and Markus Garschhammer and Martin Sailer and Thomas Schaaf},
    title = {{CMDB - Yet Another MIB? On Reusing Management Model Concepts in ITIL Configuration Management}},
    booktitle = proc-dsom,
    address={Dublin, Ireland},
    month=oct,
    year = {2006},
}

@inproceedings{maelstrom,
 author = {Mahesh Balakrishnan and Tudor Marian and Ken Birman and Hakim Weatherspoon and Einar Vollset},
 title = {{Maelstrom: Transparent Error Correction for Lambda Networks}},
 booktitle=proc-nsdi,
 location = {San Francisco},
 month = {April},
 year = {2008},
}

@article{click,
 author = {Eddie Kohler and Robert Morris and Benjie Chen and John Jannotti and Frans M. Kaashoek},
 title = {{The Click Modular Router}},
 journal = journal-tocs,
 volume = {18},
 issue = {3},
 month = {August},
 year = {2000},
 pages = {263--297},
 numpages = {35}
}

@misc{suncluster,
title = {{Sun Cluster}},
howpublished = "\url{http://docs.oracle.com/cd/E19787-01/819-2993/index.html}",
}

@misc{hsrp,
 author={T. Li and B. Cole and P. Morton and D. Li},
 title={{Cisco Hot Standby Router Protocol (HSRP)}},
 series={Request for Comments},
 number={2281},
 publisher={IETF},
 organisation={Internet Engineering Task Force},
 year=1998,
 month=Mar,
 howpublished = {RFC 2281},
}

@misc{pseudowire,
  author={S. Bryant and P. Pate},
  title={Pseudo Wire Emulation Edge-to-Edge (PWE3) Architecture},
  howpublished = {RFC 3985},
  month=mar,
  year=2005,
}

@misc{vrrp,
 author={S. Nadas},
 title={{Virtual Router Redundancy Protocol (VRRP) Version 3 for IPv4 and IPv6}},
 series={Request for Comments},
 number={5798},
 publisher={IETF},
 organisation={Internet Engineering Task Force},
 year=2010,
 month=Mar,
 howpublished = {RFC 5798}
}

@misc{fcoe,
title={{Fiber Channel over Ethernet (FCoE)}},
organization={International Committee for Information Technology Standards},
number={T11 FC-BB-5},
howpublished = "\url{http://www.t11.org/fcoe}"
}

@misc{aoe,
author={S. Hopkins and B. Coile},
title={{AoE (ATA over Ethernet)}},
organisation={The Brantley Coile Company, Inc.},
month=Feb,
year =2009,
howpublished = "\url{http://support.coraid.com/documents/AoEr11.txt}"
}

@misc{vxlan,
author={M. Mahalingam and D. Dutt and K. Duda and P. Agarwal and L. Kreeger and T. Sridhar and M. Bursell and C. Wright},
title={{VXLAN: A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks}},
 publisher={IETF},
 organisation={Internet Engineering Task Force},
 number={Internet Draft},
 year=2011,
 month=Aug,
 howpublished = "\url{http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-00}"
}

@misc{nvgre,
author={M. Sridharan and K. Duda and I. Ganga and A. Greenberg and G. Lin and  M. Pearson and P. Thaler and C. Tumuluri and N. Venkataramiah and Y. Wang},
title={{NVGRE: Network Virtualization using Generic Routing Encapsulation}},
 publisher={IETF},
 organisation={Internet Engineering Task Force},
 number={Internet Draft},
 year=2011,
 month=Sep,
 howpublished = "\url{http://tools.ietf.org/html/-draft-sridharan-virtualization-nvgre-00}"
}

@misc{nlb,
title={{Network Load Balancing Technical Overview}},
organization={Microsodt},
howpublished = "\url{http://technet.microsoft.com/en-us/library/bb742455.aspx}"
}

@misc{riverbed,
title={Interceptor},
organization={Riverbed},
howpublished = "\url{http://www.riverbed.com}"
}

@misc{vsphere,
title={{vSphere}},
organization={VMware},
howpublished = "\url{http://www.vmware.com}"
}

@misc{bigip,
title={{BigIP}},
organization={F5},
howpublished = "\url{http://www.f5.com/products/big-ip}"
}

@misc{vpn_cubed,
title={{VPN-Cubed}},
organization={{CohesiveFT}},
howpublished="\url{http://www.cohesiveft.com/vpncubed/}"
}

@misc{amazon_vpc,
title={{Amazon Virtual Private Cloud}},
organization={{Amazon Web Services}},
howpublished="\url{http://aws.amazon.com/vpc/}"
}

@misc{vmware-gsx_announcement,
title={{VMware Launches Virtualization Software for Windows-Based Intel Servers}},
organization={{VMware}},
howpublished="\url{http://www.vmware.com/company/news/releases/gsx_win_release.html}"
}

@misc{iptables,
  title={{netfilter: firewalling, NAT and packet mangling for Linux}},
  orgnaization={{The netfilter.org project}},
  howpublished="\url{http://www.netfilter.org/}"
}

@misc{aws-case_studies,
title={{Amazon Web Services Case Studies}},
organization={{Amazon Web Services}},
howpublished="\url{http://aws.amazon.com/solutions/case-studies/}"
}

@misc{2011survey,
title={{Future of Cloud Computing Survey}},
organization={{North Bridge, GigaOM Pro and 451 Group}},
howpublished="\url{http://www.futurecloudcomputing.net/2011-future-cloud-computing-survey-results}"
}

@misc{linuxHA,
title={{Linux-HA}},
organization={The Linux-HA Project},
howpublished = "\url{http://www.linux-ha.org/wiki/Main_Page}"
}

@misc{linux,
title={{The Linux Kernel Archives}},
organization={Linux Kernel Organization, Inc.},
howpublished = "\url{http://www.kernel.org/}"
}

@misc{ksm,
title={{Kernel Samepage Merging}},
howpublished = "\url{https://www.linux-kvm.org/page/KSM}"
}

@misc{pacemaker,
title={{PaceMaker}},
howpublished = "\url{http://www.clusterlabs.org}"
}

@misc{cloudswitch,
title={{CloudSwitch}},
howpublished = "\url{http://www.cloudswitch.com}"
}

@misc{nicira,
title={{Nicira}},
howpublished = "\url{http://www.nicira.com}"
}

@misc{cisco-cli,
title={{Using the Cisco IOS Command-Line Interface}},
howpublished = "\url{http://www.cisco.com/en/US/docs/ios/fundamentals/configuration/guide/cf_cli-basics.pdf}"
}

@misc{cisco-netflow,
title={{Introduction to Cisco IOS Flexible NetFlow}},
howpublished = "\url{http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6601/ps6965/prod_white_paper0900aecd804be1cc.pdf}"
}

@misc{junos,
title={{Continuous Systems, Nonstop Operations with JUNOS Operating System}},
howpublished = "\url{http://www.juniper.net/us/en/local/pdf/whitepapers/2000317-en.pdf}"
}

@misc{cisco-erspan,
title={{Configuring ERSPAN}},
howpublished = "\url{http://www.cisco.com/en/US/docs/ios/ios_xe/lanswitch/configuration/guide/span_xe.pdf}"
}

@misc{boson-netsim,
title="{The Cisco Network Simulator {\&} Router Simulator}",
howpublished = "\url{http://www.boson.com/netsim-cisco-network-simulator}",
organization = "{{Boson}}",
}

@misc{vcider,
title={{vCider}},
howpublished = "\url{http://www.vcider.com}"
}

@misc{lldp,
title = {{Station and Media Access Control Connectivity Discovery (802.1AB)}},
organization = {{IEEE}},
year=2005,
}

@inproceedings{snoop,
 author = {Balakrishnan, Hari and Seshan, Srinivasan and Amir, Elan and Katz, Randy H.},
 title = {{Improving TCP/IP Performance Over Wireless Networks}},
 booktitle = proc-mobicom,
 address = {Berkeley, CA},
 month=nov,
 year = {1995},
}

@inproceedings{zones,
 author={Daniel Price and Andrew Tucker},
 title={Solaris {Zones}: Operating System Support for Consolidating Commercial Workloads},
 booktitle=proc-lisa,
 address={Atlanta, GA},
 month=nov,
 year={2004},
}


@inproceedings{snort,
 author = {Roesch, Martin},
 title = {{Snort - Lightweight Intrusion Detection for Networks}},
 booktitle = proc-lisa,
 month=nov,
 year = {1999},
}
 address = {Seattle, WA},

@misc{rfc3056,
  author = {Carpenter, B. and Moore, K.},
  title = {{Connection of IPv6 Domains via IPv4 Clouds}},
  howpublished = {RFC 3056},
  number = 3056,
  organization = {Internet Engineering Task Force},
  publisher = {IETF},
  series = {Request for Comments},
  year = 2001,
  month = {February}
}


@misc{virtualchassis,
title = {{Virtual Chassis Technology Best Practices}},
organization = {Juniper Networks},
howpublished = "\url{http://kb.juniper.net/InfoCenter/index?page=content&id=TN31}"
}




@article{fat-tree,
 author = {Al-Fares, Mohammad and Loukissas, Alexander and Vahdat, Amin},
 title = {{A Scalable, Commodity Data Center Network Architecture}},
 journal = journal-sigcomm-ccr,
 volume = {38},
 number = {4},
 year = {2008},
 pages = {63--74},
 }




@article{toldinas2009rootkit,
  title={Rootkit Detection Experiment within a Virtual Environment},
  author={Toldinas, J. and Rudzika, D. and {\v{S}}tuikys, V. and Ziberkas, G.},
  journal={Electronics and Electrical Engineering--Kaunas: Technologija},
  number={8},
  pages={104},
  year={2009}
}


%%%%%% NOT IN PAPER YET

@inproceedings{bro,
 author = {Mark Handley and Vern Paxson and Christian Kreibich},
 title = {{Network Intrusion Detection: Evasion, Traffic Normalization, and End-to-End Protocol Semantics}},
 booktitle = {Proceedings of the 10th conference on USENIX Security Symposium},
 year = {2001},
 location = {Washington, D.C.},
}

@article{kirzner2021analysis,
  title={An analysis of speculative type confusion vulnerabilities in the wild},
  author={Kirzner, Ofek and Morrison, Adam},
  journal={arXiv:2106.15601},
  year={2021}
}


%%%%% MiddlePipes %%%


@misc{windowsazure,
title={{Windows Azure Platform}},
howpublished = "\url{https://www.windowsazure.com/en-us/}"
}

@misc{aws,
title={{Amazon Web Services}},
howpublished = "\url{http://aws.amazon.com/}"
}

@misc{bluemix,
title={{IBM Codename: BlueMix}},
howpublished = "\url{https://ace.ng.bluemix.net/}"
}


@misc{cloudfoundry,
title={{Cloud Foundry}},
howpublished = "\url{http://docs.cloudfoundry.org}"
}

@misc{heroku,
title={{Heroku: Cloud Application Platform}},
howpublished = "\url{https://www.heroku.com/}"
}


@misc{frankenlibc,
title={{frankenlibc}},
howpublished = "\url{https://github.com/justincormack/frankenlibc}"
}

@misc{ling,
title={{LING}},
howpublished = "\url{http://erlangonxen.org}"
}

@misc{docker,
title={{Docker}},
howpublished = "\url{http://docs.docker.io/en/latest/}"
}

@misc{docker-seccomp-policy,
title={{Seccomp security profiles for Docker}},
howpublished = "\url{https://docs.docker.com/engine/security/seccomp/}"
}


@misc{bosh,
title={{BOSH: Bosh Outer SHell}},
howpublished = "\url{http://docs.cloudfoundry.org/bosh}"
}

@misc{netfilters,
title={{Netfilter}},
howpublished = "\url{http://www.netfilter.org/}"
}

@inproceedings{etsi-usecases,
 title = {{ETSI Network Function Virtualisation (NFV); Use Cases}},
 year = {2013},
}

@misc{netflixOSS,
title={{Netflix Open Source Software}},
howpublished = "\url{http://netflix.github.io/#repo}"
}

@misc{hystrix,
title={{Hystrix: Latency and Fault Tolerance for Distributed Systems}},
howpublished = "\url{https://github.com/Netflix/Hystrix}"
}

@misc{zuul,
title={{Zuul}},
howpublished = "\url{https://github.com/Netflix/zuul/wiki}"
}

@misc{graphite,
title={{Graphite - Scalable Realtime Graphing}},
howpublished = "\url{http://graphite.wikidot.com/}"
}

@misc{acmeair,
title={{A Node.js implementation of the Acme Air Sample Application.}},
howpublished = "\url{https://github.com/acmeair/acmeair-nodejs}"
}

@misc{ftrace,
title={{ftrace - Function Tracer}},
howpublished = "\url{https://www.kernel.org/doc/Documentation/trace/ftrace.txt}"
}

@misc{python-benchmark,
title={{The Python Performance Benchmark Suite}},
howpublished = "\url{http://pyperformance.readthedocs.io/}"
}

@misc{trinity,
title={{Trinity - A Linux System call fuzz tester.}},
howpublished = "\url{http://codemonkey.org.uk/projects/trinity/}"
}

@misc{kubernetes-single-pod,
title={{Pod Overview - Kubernetes}},
howpublished = "\url{https://kubernetes.io/docs/concepts/workloads/pods/pod-overview/}"
}

@misc{learning-kubernetes-pod,
title={{Learning Kubernetes on EKS by Doing Part 2 — Pods, ReplicaSets and Deployments}},
author={Haimo Zhang},
month=dec,
year=2018,
howpublished = "\url{https://medium.com/faun/learning-kubernetes-by-doing-part-2-pods-replicasets-and-deployments-f1187716f59a}"
}

@misc{kube101-pod,
title={{Kubernetes 101: Pods, Nodes, Containers, and Clusters}},
author={Daniel Sanche},
month=jan,
year=2018,
howpublished = "\url{https://medium.com/google-cloud/kubernetes-101-pods-nodes-containers-and-clusters-c1509e409e16}"
}

@misc{kube-engine-pod,
title={{Pod | Kubernetes Engine Documentation | Google Cloud}},
howpublished = "\url{https://cloud.google.com/kubernetes-engine/docs/concepts/pod}"
}


@misc{libnetfilterqueue,
title={{netfilter: libnetfilter-queue}},
howpublished = "\url{http://www.iptables.org/projects/libnetfilter_queue/index.html}"
}

@article{joseph:2008,
author={Joseph, D. and Stoica, I.},
journal={Network, IEEE},
title={Modeling middleboxes},
year={2008},
month={September},
volume={22},
number={5},
pages={20-25},
doi={10.1109/MNET.2008.4626228},
ISSN={0890-8044},}



@article{Anand:2008,
 author = {Anand, Ashok and Gupta, Archit and Akella, Aditya and Seshan, Srinivasan and Shenker, Scott},
 title = {Packet Caches on Routers: The Implications of Universal Redundant Traffic Elimination},
 journal = {SIGCOMM Comput. Commun. Rev.},
 issue_date = {October 2008},
 volume = {38},
 number = {4},
 month = aug,
 year = {2008},
 issn = {0146-4833},
 pages = {219--230},
 numpages = {12},
 url = {http://doi.acm.org/10.1145/1402946.1402984},
 doi = {10.1145/1402946.1402984},
 acmid = {1402984},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {routing, traffic engineering, traffic redundancy},
}

@ARTICLE{mccabe,
author={T. J. McCabe},
journal={IEEE Transactions on Software Engineering},
title={A Complexity Measure},
year={1976},
volume={SE-2},
number={4},
pages={308-320},
keywords={Basis;complexity measure;control flow;decomposition;graph theory;independence;linear;modularization;programming;reduction;software;testing;Fluid flow measurement;Graph theory;Linear programming;National security;Software engineering;Software maintenance;Software measurement;Software systems;Software testing;System testing;Basis;complexity measure;control flow;decomposition;graph theory;independence;linear;modularization;programming;reduction;software;testing},
doi={10.1109/TSE.1976.233837},
ISSN={0098-5589},
month={Dec},}

@inproceedings{Sherry:2012,
 author = {Sherry, Justine and Hasan, Shaddi and Scott, Colin and Krishnamurthy, Arvind and Ratnasamy, Sylvia and Sekar, Vyas},
 title = {Making Middleboxes Someone else's Problem: Network Processing As a Cloud Service},
 booktitle = proc-sigcomm,
 series = {SIGCOMM '12},
 year = {2012},
 isbn = {978-1-4503-1419-0},
 location = {Helsinki, Finland},
 pages = {13--24},
 numpages = {12},
 url = {http://doi.acm.org/10.1145/2342356.2342359},
 doi = {10.1145/2342356.2342359},
 acmid = {2342359},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {cloud, middlebox, outsourcing},
}

@inproceedings{xu-retrace,
 author = {Min Xu and Vyacheslav Malyugin and Jeffrey Sheldon and Ganesh Venkitachalam and Boris Weissman},
 title = {{ReTrace}: Collecting Execution Trace with Virtual Machine Deterministic Replay},
 booktitle={Proc. of Workshop on Modeling, Benchmarking and Simulation {(MoBS)}},
 address={San Diego, CA},
 month=jun,
 year={2007},
}

@inproceedings{qemu-reverse_debug,
 author={Dovgalyuk, Pavel and Dmitriev, Denis and Makarov, Vladimir},
 title={{Don't Panic: Reverse Debugging of Kernel Drivers}},
 booktitle={Proc. of Foundations of Software Engineering},
 address={Bergamo, Italy},
 month=sep,
 year={2015},
}
@inproceedings{qemu-rr,
  author = {Pavel Dovgalyuk},
  title = {Deterministic Replay of System's Execution with Multi-target QEMU Simulator for Dynamic Analysis and Reverse Debugging},
  booktitle = {Proc. of European Conference on Software Maintenance and Reengineering},
  address = {Szeged, Hungary},
  month=mar,
  year={2012},
}

@Book{ArpaciDusseau14-Book,
  author =       {Remzi H. Arpaci-Dusseau and Andrea C. Arpaci-Dusseau},
  title =        "{Operating Systems: Three Easy Pieces}",
  publisher =    {Arpaci-Dusseau Books},
  month =        "May",
  year =         {2015},
  edition =      {0.91},
}

@Inbook{Dragoni2017,
author="Dragoni, Nicola
and Giallorenzo, Saverio
and Lafuente, Alberto Lluch
and Mazzara, Manuel
and Montesi, Fabrizio
and Mustafin, Ruslan
and Safina, Larisa",
editor="Mazzara, Manuel
and Meyer, Bertrand",
title="Microservices: Yesterday, Today, and Tomorrow",
bookTitle="Present and Ulterior Software Engineering",
year="2017",
publisher="Springer International Publishing",
address="Cham",
pages="195--216",
abstract="Microservices is an architectural style inspired by service-oriented computing that has recently started gaining popularity. Before presenting the current state of the art in the field, this chapter reviews the history of software architecture, the reasons that led to the diffusion of objects and services first, and microservices later. Finally, open problems and future challenges are introduced. This survey primarily addresses newcomers to the discipline, while offering an academic viewpoint on the topic. In addition, we investigate some practical issues and point out a few potential solutions.",
isbn="978-3-319-67425-4",
doi="10.1007/978-3-319-67425-4_12",
url="https://doi.org/10.1007/978-3-319-67425-4_12"
}

@ARTICLE{7030212,
author={J. Thönes},
journal={IEEE Software},
title={Microservices},
year={2015},
volume={32},
number={1},
pages={116-116},
keywords={Interviews;Service oriented architecture;Software architecture;Software engineering;SE Radio;architecture;enterprise service bus;http;microservice;service-oriented architecture;software engineering},
doi={10.1109/MS.2015.11},
ISSN={0740-7459},
month={Jan},}

@book{fall2011tcpp654,
  title={TCP/IP Illustrated, Volume 1: The Protocols},
  author={Fall, K.R. and Stevens, W.R.},
  isbn={9780132808187},
  series={Addison-Wesley Professional Computing Series},
  url={https://books.google.com/books?id=a23OAn5i8R0C},
  pages={654--654},
  year={2011},
  publisher={Pearson Education}
}


@inproceedings{jockey-rr,
 author = {Saito, Yasushi},
 title = {Jockey: A User-space Library for Record-replay Debugging},
 booktitle = {Proceedings of the Sixth International Symposium on Automated Analysis-driven Debugging},
 series = {AADEBUG'05},
 year = {2005},
 isbn = {1-59593-050-7},
 location = {Monterey, California, USA},
 pages = {69--76},
 numpages = {8},
 url = {http://doi.acm.org/10.1145/1085130.1085139},
 doi = {10.1145/1085130.1085139},
 acmid = {1085139},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Linux, checkpointing, debugging, execution record and replay, jockey, keywords, x86},
}


@inproceedings{pinplay-rr,
 author = {Patil, Harish and Pereira, Cristiano and Stallcup, Mack and Lueck, Gregory and Cownie, James},
 title = {PinPlay: A Framework for Deterministic Replay and Reproducible Analysis of Parallel Programs},
 booktitle = {Proceedings of the 8th Annual IEEE/ACM International Symposium on Code Generation and Optimization},
 series = {CGO '10},
 year = {2010},
 isbn = {978-1-60558-635-9},
 location = {Toronto, Ontario, Canada},
 pages = {2--11},
 numpages = {10},
 url = {http://doi.acm.org/10.1145/1772954.1772958},
 doi = {10.1145/1772954.1772958},
 acmid = {1772958},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {deterministic replay, dynamic program analysis, repeatable simulation point selection, reproducible debugging},
}

@phdthesis{kiefer2010kvm,
  title={A kvm-based logging and replay system for debugging non-deterministic executions},
  author={Kiefer, Kurt E and Moser, Louise E},
  year={2010},
  school={University of California, Santa Barbara}
}

@inproceedings{choi2001perturbation,
  title={A perturbation-free replay platform for cross-optimized multithreaded applications},
  author={Choi, Jong-Deok and Alpern, Bowen and Ngo, Ton and Sridharan, Manu and Vlissides, John},
  booktitle={Parallel and Distributed Processing Symposium., Proceedings 15th International},
  pages={10--pp},
  year={2001},
  organization={IEEE}
}

@misc{chronon-rr,
author= {Prashant Deva},
title={Design and Architecture of the Chronon Recorder},
month=dec,
year=2010,
url={http://chrononsystems.com/blog/design-and-architecture-of-the-chronon-record-0}
}

@misc{cantrill_unfit,
author= {Bryan Cantrill},
title={Unikernels are unfit for production},
month=may,
year=2018,
url={https://www.joyent.com/blog/unikernels-are-unfit-for-production}
}

@misc{intellitrace,
author= {Microsoft},
title={IntelliTrace},
month=jul,
year=2017,
url={https://docs.microsoft.com/en-us/visualstudio/debugger/intellitrace}
}

@misc{undodb-rr,
author= {Undo Software},
title={Reversible debugging tools for C/C++ on Linux \& Android},
month=sep,
year=2017,
url={https://undo.io/}
}

@misc{redux,
author= {Redux},
title={Redux},
month=sep,
year=2017,
url={http://redux.js.org}
}

@article{nestedkernel,
 author = {Dautenhahn, Nathan and Kasampalis, Theodoros and Dietz, Will and Criswell, John and Adve, Vikram},
 title = {Nested Kernel: An Operating System Architecture for Intra-Kernel Privilege Separation},
 journal = {SIGARCH Comput. Archit. News},
 issue_date = {March 2015},
 volume = {43},
 number = {1},
 month = mar,
 year = {2015},
 issn = {0163-5964},
 pages = {191--206},
 numpages = {16},
 url = {http://doi.acm.org/10.1145/2786763.2694386},
 doi = {10.1145/2786763.2694386},
 acmid = {2694386},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {intra-kernel isolation, malicious operating systems, operating system architecture, virtual memory},
}

@inproceedings{Castro2009,
 author = {Castro, Miguel and Costa, Manuel and Martin, Jean-Philippe and Peinado, Marcus and Akritidis, Periklis and Donnelly, Austin and Barham, Paul and Black, Richard},
 title = {Fast Byte-granularity Software Fault Isolation},
 booktitle = {Proceedings of the ACM SIGOPS 22Nd Symposium on Operating Systems Principles},
 series = {SOSP '09},
 year = {2009},
 isbn = {978-1-60558-752-3},
 location = {Big Sky, Montana, USA},
 pages = {45--58},
 numpages = {14},
 url = {http://doi.acm.org/10.1145/1629575.1629581},
 doi = {10.1145/1629575.1629581},
 acmid = {1629581},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {device drivers, isolation},
}



@inproceedings{nacl,
 author = {Yee, Bennet and Sehr, David and Dardyk, Gregory and Chen, J. Bradley and Muth, Robert and Ormandy, Tavis and Okasaka, Shiki and Narula, Neha and Fullagar, Nicholas},
 title = {Native Client: A Sandbox for Portable, Untrusted x86 Native Code},
 booktitle = {Proceedings of the 2009 30th IEEE Symposium on Security and Privacy},
 series = {SP '09},
 year = {2009},
 isbn = {978-0-7695-3633-0},
 pages = {79--93},
 numpages = {15},
 url = {https://doi.org/10.1109/SP.2009.25},
 doi = {10.1109/SP.2009.25},
 acmid = {1608126},
 publisher = {IEEE Computer Society},
 address = {Washington, DC, USA},
 keywords = {Security, World Wide Web},
}


@inproceedings{dietrich-roubust_kbuild_extract,
 author = {Dietrich, Christian and Tartler, Reinhard and Schr\"{o}der-Preikschat, Wolfgang and Lohmann, Daniel},
 title = {A Robust Approach for Variability Extraction from the Linux Build System},
 booktitle = {Proc. of ACM SPLC},
 address = {Salvador, Brazil},
 month=sep,
 year = {2012},
}

@inproceedings{CAIN,
  author = {Barresi, Antonio and Razavi, Kaveh and Payer, Mathias and Gross, Thomas R.},
  title = {{CAIN}: Silently Breaking {ASLR} in the Cloud},
  booktitle = {Proc. of {USENIX WOOT}},
  address = {Washington, D.C.},
  month=aug,
  year={2015},
}
@inproceedings{homescu-microgadgets,
  author = {Homescu, Andrei and Stewart, Michael and Larsen, Per and Brunthaler, Stefan and Franz, Michael},
  title = {Microgadgets: size does matter in turing-complete return-oriented programming},
  booktitle = {Proc. of {USENIX WOOT}},
  address = {Bellevue, WA},
  month = aug,
  year = {2012},
}


@misc{clair,
    title={{Clair: Automatic container vulnerability and security scanning for appc and Docker}},
    howpublished = "\url{https://coreos.com/clair/docs/latest/}"
}

@misc{anchore,
title={{Anchore: Automated Container Security and Compliance for the Enterprise}},
howpublished = "\url{https://anchore.com/}"
}

@misc{aqua,
title={{Aqua microscanner}},
howpublished = "\url{https://github.com/aquasecurity/microscanner}"
}

@inproceedings{mtd,
  title={An MTD-Based Self-Adaptive Resilience Approach for Cloud Systems},
  author={Miguel Villarreal-Vasquez and Bharat Bhargava and Pelin Angin and Noor Ahmed and Daniel Goodwin and Kory Brin and Jason Kobes},
  booktitle={IEEE 10th International Conference on Cloud Computing (CLOUD)},
  address = {Honolulu, HI},
  year={2017}
}

@inproceedings{dsvmi,
  title={Agentless cloud-wide streaming of guest file system updates},
  author={Richter, Wolfgang and Isci, Canturk and Gilbert, Benjamin and Harkes, Jan and Bala, Vasanth and Satyanarayanan, Mahadev},
  booktitle={2014 IEEE International Conference on Cloud Engineering},
  pages={7--16},
  year={2014},
  organization={IEEE}
}

@inproceedings{face-change,
  title={Face-Change: Application-driven Dynamic Kernel View Switching in a Virtual Machine},
  author={Gu, Zhongshu and Saltaformaggio, Brendan and Zhang, Xiangyu and Xu, Dongyan},
  year={2014},
  pages={491–502},
  booktitle=proc-dsn
}

@inproceedings{liveos-update,
  author = {Chen, Haibo and Chen, Rong and Zhang, Fengzhe and Zang, Binyu and Yew, Pen-Chung},
  title = {Live Updating Operating Systems Using Virtualization},
  year = {2006},
  address = {New York, NY, USA},
  booktitle = proc-vee,
  pages = {35–44},
  location = {Ottawa, Ontario, Canada}
}


@inproceedings{garcia-kaslr_cancel,
  author={F. {Vañó-García} and H. {Marco-Gisbert}},
  title={{How Kernel Randomization is Canceling Memory Deduplication in Cloud Computing Systems}},
  booktitle={Proc. of {IEEE} {NCA}"},
  address={Cambridge, MA},
  month=nov,
  year={2018},
}


@inproceedings{gruss-long-live-kaslr,
  title = "{KASLR} is Dead: Long Live {KASLR}",
  author = "Daniel Gruss and Moritz Lipp and Michael Schwarz and Richard Fellner and Cl{\'e}mentine Maurice and Stefan Mangard",
  booktitle = "Proc. of ESSoS",
  address = "Bonn, Germany",
  month = jul,
  year = "2017",
}


@misc{kaslr-cargo-cult,
  title = "{KASLR}: An Exercise in Cargo Cult Security",
  author = "The {PaX} team",
  month = mar,
  year = 2013,
  howpublished = {\url{https://grsecurity.net/kaslr_an_exercise_in_cargo_cult_security}},
}

@misc{lkml-fg-kaslr,
  title= "Function Granular {KASLR}",
  author = "Kristen Carlson Accardi",
  month= jul,
  year= 2020,
  howpublished = {\url{https://lkml.org/lkml/2020/7/17/947}},
}

@misc{linux-boot-protocol,
  title= "THE LINUX/x86 BOOT PROTOCOL",
  month= "Accessed: September",
  year= 2020,
  howpublished = {\url{https://www.kernel.org/doc/Documentation/x86/boot.rst}},
}

@misc{pvh-boot-protocol,
  title= "pvh",
  month= "Accessed: September",
  year=2020,
  howpublished= {\url{https://xenbits.xen.org/docs/unstable/misc/pvh.html}},
}

@article{drawbridge,
  title={Rethinking the library OS from the top down},
  author={Porter, Donald E and Boyd-Wickizer, Silas and Howell, Jon and Olinsky, Reuben and Hunt, Galen C},
  journal={ACM SIGPLAN Notices},
  volume={46},
  number={3},
  pages={291--304},
  year={2011},
  publisher={ACM}
}
@inproceedings{graphene,
  title={Cooperation and security isolation of library OSes for multi-process applications},
  author={Tsai, Chia-Che and Arora, Kumar Saurabh and Bandi, Nehal and Jain, Bhushan and Jannen, William and John, Jitin and Kalodner, Harry A and Kulkarni, Vrushali and Oliveira, Daniela and Porter, Donald E},
  booktitle={Proceedings of the Ninth European Conference on Computer Systems},
  pages={9},
  year={2014},
  organization={ACM}
}
@inproceedings{halvm,
 author = {Stengel, Klaus and Schmaus, Florian and Kapitza, R\"{u}diger},
 title = {EsseOS: Haskell-based Tailored Services for the Cloud},
 booktitle = {Proceedings of the 12th International Workshop on Adaptive and Reflective Middleware},
 series = {ARM '13},
 year = {2013},
 isbn = {978-1-4503-2553-0},
 location = {Beijing, China},
 pages = {4:1--4:6},
 articleno = {4},
 numpages = {6},
 url = {http://doi.acm.org/10.1145/2541583.2541587},
 doi = {10.1145/2541583.2541587},
 acmid = {2541587},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {Haskell, cloud computing, functional programming, operating systems, security, software tailoring},
}

@article{kim2014flipping,
  title={Flipping bits in memory without accessing them: An experimental study of DRAM disturbance errors},
  author={Kim, Yoongu and Daly, Ross and Kim, Jeremie and Fallin, Chris and Lee, Ji Hye and Lee, Donghyuk and Wilkerson, Chris and Lai, Konrad and Mutlu, Onur},
  journal={ACM SIGARCH Computer Architecture News},
  volume={42},
  number={3},
  pages={361--372},
  year={2014},
  publisher={ACM New York, NY, USA}
}

@inproceedings {meltdown,
author = {Moritz Lipp and Michael Schwarz and Daniel Gruss and Thomas Prescher and Werner Haas and Anders Fogh and Jann Horn and Stefan Mangard and Paul Kocher and Daniel Genkin and Yuval Yarom and Mike Hamburg},
title = {Meltdown: Reading Kernel Memory from User Space},
booktitle = {27th {USENIX} Security Symposium ({USENIX} Security 18)},
year = {2018},
isbn = {978-1-939133-04-5},
address = {Baltimore, MD},
pages = {973--990},
url = {https://www.usenix.org/conference/usenixsecurity18/presentation/lipp},
publisher = {{USENIX} Association},
month = aug,
}

@inproceedings {ret2dir,
author = {Vasileios P. Kemerlis and Michalis Polychronakis and Angelos D. Keromytis},
title = {ret2dir: Rethinking Kernel Isolation},
booktitle = {23rd {USENIX} Security Symposium ({USENIX} Security 14)},
year = {2014},
isbn = {978-1-931971-15-7},
address = {San Diego, CA},
pages = {957--972},
url = {https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/kemerlis},
publisher = {{USENIX} Association},
month = aug,
}


@inproceedings{jump_over_aslr,
  author={Dmitry Evtyushkin and Dmitry Ponomarev and Nael Abu-Ghazaleh},
  title={Jump over {ASLR}: Attacking branch predictors to bypass {ASLR}},
  booktitle=proc-micro,
  address={Taipei, Taiwan},
  month=oct,
  year={2016},
}



@inproceedings{lazarus,
  author = {Gens, David and Arias, Orlando and Sullivan, Dean and Liebchen, Christopher and Jin, Yier and Sadeghi, Ahmad-Reza},
  title = {LAZARUS: Practical Side-Channel Resilient Kernel-Space Randomization},
  booktitle={Proc. of {RAID}},
  address={Atlanta, GA},
  month = sep,
  year = {2017},
}

@article{kaslr-mt,
title = "{KASLR-MT}: Kernel Address Space Layout Randomization for Multi-Tenant cloud systems",
author = "Fernando Vano-Garcia and Hector Marco-Gisbert",
journal = "Journal of Parallel and Distributed Computing",
volume = "137",
pages = "77 - 90",
year = "2020",
}

@INPROCEEDINGS{vm-startup,
  author={Mao, Ming and Humphrey, Marty},
  booktitle={2012 IEEE Fifth International Conference on Cloud Computing},
  title={A Performance Study on the VM Startup Time in the Cloud},
  year={2012},
  volume={},
  number={},
  pages={423-430},
  doi={10.1109/CLOUD.2012.103}
}

@inproceedings{catalyzer,
author = {Du, Dong and Yu, Tianyi and Xia, Yubin and Zang, Binyu and Yan, Guanglu and Qin, Chenggang and Wu, Qixuan and Chen, Haibo},
title = {Catalyzer: Sub-Millisecond Startup for Serverless Computing with Initialization-Less Booting},
year = {2020},
pages = {467–481},
numpages = {15},
location = {Lausanne, Switzerland},
series = {ASPLOS '20}
}

@misc{greg-kh-cve,
  author = {Greg Kroah-Hartman},
  title = {CVEs are dead, long live the CVE!},
  year = {2019},
  month = sep,
  howpublished = {\url{https://kernel-recipes.org/en/2019/talks/cves-are-dead-long-live-the-cve/}}
}

@inproceedings{kuo:eurosys:22,
   author = {Hsuan-Chi Kuo and Kai-Hsun Chen and Yicheng Lu and Dan Williams and Sibin Mohan and Tianyin Xu},
   title = "{Verified Programs Can Party: Optimizing Kernel Extensions via Post-Verification Merging}",
   booktitle = "Proceedings of the 17th European Conference on Computer Systems (EuroSys'22)",
   month = APR,
   year =  2022,
}

@inproceedings{tnum,
   author = {Harishankar Vishwanathan and Matan Shachnai and Srinivas Narayana and Santosh Nagarakatte},
   title = "{Sound, Precise, and Fast Abstract Interpretation with Tristate Numbers}",
   booktitle = "Proceedings of the 2022 IEEE Symposium on Code Generation and Optimization (CGO'22)",
   month = APR,
   year =  2022,
}

@misc{helper-bug-jinghao,
  author = {Jinghao Jia},
  year = {2022},
  month = aug,
  title = "{BPF: Fix potential bad pointer dereference in bpf\_sys\_bpf()}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e2dcac2f58f5a95ab092d1da237ffdc0da1832cf}}
}

@inproceedings{theseus,
  author = {Boos, Kevin and Liyanage, Namitha and Ijaz, Ramla and Zhong, Lin},
  title = "{Theseus: An Experiment in Operating System Structure and State Management}",
  year = {2020},
  month = NOV,
  booktitle = {Proceedings of the 14th USENIX Conference on Operating Systems Design and Implementation (OSDI'20)},
}

@inproceedings{ebpf-jit-formal,
  author = {Nelson, Luke and Van Geffen, Jacob and Torlak, Emina and Wang, Xi},
  title = "{Specification and Verification in the Field: Applying Formal Methods to BPF Just-in-Time Compilers in the Linux Kernel}",
  year = {2020},
  month = NOV,
  booktitle = {Proceedings of the 14th USENIX Conference on Operating Systems Design and Implementation (OSDI'20)},
}

@inproceedings{redleaf,
  author = {Narayanan, Vikram and Huang, Tianjiao and Detweiler, David and Appel, Dan and Li, Zhaofeng and Zellweger, Gerd and Burtsev, Anton},
  title = "{RedLeaf: Isolation and Communication in a Safe Operating System}",
  year = {2020},
  booktitle = {Proceedings of the 14th USENIX Conference on Operating Systems Design and Implementation},
  year = {2020},
  month = NOV,
  booktitle = {Proceedings of the 14th USENIX Conference on Operating Systems Design and Implementation (OSDI'20)},
}

@misc{formal-verifier-ebpf,
  author = {Sanjit Bhat and Hovav Shacham},
  title = "{Formal Verification of the Linux Kernel eBPF Verifier Range Analysis}",
  year = {2022},
  month = may,
  howpublished = {\url{https://sanjit-bhat.github.io/assets/pdf/ebpf-verifier-range-analysis22.pdf}}
}

@misc{fuzzing-ebpf,
  author = {Simon Scannell},
  title = {Fuzzing for eBPF JIT bugs in the Linux kernel},
  year = {2021},
  month = april,
  howpublished = {\url{https://scannell.io/posts/ebpf-fuzzing/}}
}

@misc{verifier-uaf,
  author = {Eduard Zingerman},
  year = {2022},
  month = jun,
  title = "{bpf: Fix for use-after-free bug in inline\_bpf\_loop}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=fb4e3b33e3e7f13befdf9ee232e34818c6cc5fb9}}
}

@misc{kfuncs,
  author = {Jonathan Corbet},
  title = "{Calling kernel functions from BPF}",
  year = {2021},
  month = may,
  howpublished = {\url{https://lwn.net/Articles/856005/}}
}

@misc{CVE-2022-23222,
  title = "{CVE-2022-23222}",
  howpublished = {\url{https://nvd.nist.gov/vuln/detail/CVE-2022-23222}},
}

@misc{CVE-2022-23222-exploit,
  author = {Tr3e Wang},
  year = {2022},
  month = jun,
  title = "{CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation}",
  howpublished = {\url{https://github.com/tr3ee/CVE-2022-23222}}
}

@misc{CVE-2021-45402,
  title = "{CVE-2021-45402}",
  howpublished = {\url{https://nvd.nist.gov/vuln/detail/CVE-2021-45402}},
}

@misc{CVE-2021-45402-patch,
  author = {Daniel Borkmann},
  year = {2021},
  month = dec,
  title = "{bpf: Fix signed bounds propagation after mov32}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3cf2b61eb06765e27fec6799292d9fb46d0b7e60}}
}

@misc{CVE-2021-29154,
  title = "{CVE-2021-29154}",
  howpublished = {\url{https://nvd.nist.gov/vuln/detail/CVE-2021-29154}},
}

@misc{CVE-2021-29154-advisory,
  author = {Piotr Krysiuk},
  year = {2021},
  month = {apr},
  title = "{[CVE-2021-29154] Linux kernel incorrect computation of branch displacements in BPF JIT compiler can be abused to execute arbitrary code in Kernel mode}",
  howpublished = {\url{https://www.openwall.com/lists/oss-security/2021/04/08/1}},
}

@misc{CVE-2022-2785,
  title = "{CVE-2022-2785}",
  howpublished = {\url{https://nvd.nist.gov/vuln/detail/CVE-2022-2785}},
}

@misc{kp-1a9c72ad4c26,
  author = {KP Singh},
  year = {2021},
  month = jan,
  title = "{bpf: Local storage helpers should check nullness of owner ptr passed}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1a9c72ad4c26821e215a396167c14959cf24a7f1}}
}

@misc{jon-3046a827316c,
  author = {Jon Maxwell},
  year = {2022},
  month = jun,
  title = "{bpf: Fix request\_sock leak in sk lookup helpers}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3046a827316c0e55fc563b4fb78c93b9ca5c7c37}}
}

@misc{andrii-87ac0d600943,
  author = {Andrii Nakryiko},
  year = {2022},
  month = jul,
  title = "{bpf: fix potential 32-bit overflow when accessing ARRAY map element}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=87ac0d600943994444e24382a87aa19acc4cd3d4}}
}

@misc{dave-06ab134ce8ec,
  author = {Dave Marchevsky},
  year = {2021},
  month = mar,
  title = "{bpf: Refcount task stack in bpf\_get\_task\_stack}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df}}
}

@misc{rust-raii,
  title = "{RAII - Rust By Example}",
  howpublished = {\url{https://doc.rust-lang.org/rust-by-example/scope/raii.html}},
}

@misc{alexei-d83525ca62cf,
  author = {Alexei Starovoitov},
  year = {2019},
  month = jan,
  title = "{bpf: introduce bpf\_spin\_lock}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d83525ca62cf8ebe3271d14c36fb900c294274a2}}
}

@misc{alexei-f4d7e40a5b71,
  author = {Alexei Starovoitov},
  year = {2017},
  month = dec,
  title = "{bpf: introduce function calls (verification)}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f4d7e40a5b7157e1329c3c5b10f60d8289fc2941}}
}

@misc{alexei-b5dc0163d8fd,
  author = {Alexei Starovoitov},
  year = {2019},
  month = jun,
  title = "{bpf: precise scalar\_value tracking}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b5dc0163d8fd78e64a7e21f309cf932fda34353e}}
}

@misc{daniel-a82fe085f344,
  author = {Daniel Borkmann},
  year = {2021},
  month = dec,
  title = "{bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=a82fe085f344ef20b452cd5f481010ff96b5c4cd}}
}

@misc{daniel-7d3baf0afa3a,
  author = {Daniel Borkmann},
  year = {2021},
  month = dec,
  title = "{bpf: Fix kernel address leakage in atomic fetch}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=7d3baf0afa3aa9102d6a521a8e4c41888bb79882}}
}

@misc{daniel-3844d153a41a,
  author = {Daniel Borkmann},
  year = {2022},
  month = jul,
  title = "{bpf: Fix insufficient bounds propagation from adjust\_scalar\_min\_max\_vals}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3844d153a41adea718202c10ae91dc96b37453b5}}
}

@misc{youlin-f1db20814af5,
  author = {Youlin Li},
  year = {2022},
  month = nov,
  title = "{bpf: Fix wrong reg type conversion in release\_reference()}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f1db20814af532f85e091231223e5e4818e8464b}}
}

@misc{CVE-2021-31440,
  title = "{CVE-2021-31440}",
  howpublished = {\url{https://nvd.nist.gov/vuln/detail/CVE-2021-31440}},
}

@misc{pawan-8a03e56b253e,
  author = {Pawan Gupta},
  year = {2021},
  month = oct,
  title = "{bpf: Disallow unprivileged bpf by default}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=8a03e56b253e9691c90bc52ca199323d71b96204}}
}

@inproceedings{tock,
  author = {Levy, Amit and Andersen, Michael P. and Campbell, Bradford and Culler, David and Dutta, Prabal and Ghena, Branden and Levis, Philip and Pannuto, Pat},
  title = {Ownership is Theft: Experiences Building an Embedded OS in Rust},
  year = {2015},
  isbn = {9781450339421},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/2818302.2818306},
  doi = {10.1145/2818302.2818306},
  abstract = {Rust, a new systems programming language, provides compile-time memory safety checks to help eliminate runtime bugs that manifest from improper memory management. This feature is advantageous for operating system development, and especially for embedded OS development, where recovery and debugging are particularly challenging. However, embedded platforms are highly event-based, and Rust's memory safety mechanisms largely presume threads. In our experience developing an operating system for embedded systems in Rust, we have found that Rust's ownership model prevents otherwise safe resource sharing common in the embedded domain, conflicts with the reality of hardware resources, and hinders using closures for programming asynchronously. We describe these experiences and how they relate to memory safety as well as illustrate our workarounds that preserve the safety guarantees to the largest extent possible. In addition, we draw from our experience to propose a new language extension to Rust that would enable it to provide better memory safety tools for event-driven platforms.},
  booktitle = {Proceedings of the 8th Workshop on Programming Languages and Operating Systems},
  pages = {21-26},
  numpages = {6},
  keywords = {rust, embedded operating systems, ownership, linear types},
  location = {Monterey, California},
  series = {PLOS '15}
}

@misc{rust-for-linux,
  title = "{Rust for Linux - GitHub}",
  howpublished = {\url{https://github.com/Rust-for-Linux}},
}

@misc{rust-6.1-kernel-lwn,
  author = {Jonathan Corbet},
  year = {2022},
  month = oct,
  title = "{A first look at Rust in the 6.1 kernel}",
  howpublished = {\url{https://lwn.net/Articles/910762/}}
}

@misc{rust-verification,
  author = {Alastair Reid},
  year = {2021},
  month = jun,
  title = "{Automatic Rust verification tools (2021)}",
  howpublished = {\url{https://alastairreid.github.io/automatic-rust-verification-tools-2021/}}
}

@inproceedings{Wang:2014,
    author = {Xi Wang and David Lazar and Nickolai Zeldovich and Adam Chlipala and Zachary Tatlock.},
    title = "{Jitk: A trustworthy in-kernel interpreter infrastructure}",
    year = {2014},
    booktitle = {Proceedings of the 11th USENIX Symposium on Operating Systems
        Design and Implementation (OSDI'14)},
    month = OCT,
}

@inproceedings{Li:hotos:2021,
  author = {Li, Jialin and Miller, Samantha and Zhuo, Danyang and Chen, Ang and Howell, Jon and Anderson, Thomas},
  title = "{An Incremental Path towards a Safer OS Kernel}",
  year = {2021},
  month = JUN,
  isbn = {9781450384384},
  url = {https://doi.org/10.1145/3458336.3465277},
  booktitle = {Proceedings of the 18th Workshop on Hot Topics in Operating Systems (HotOS'21)},
}

@inproceedings {Zhong:osdi:2022,
author = {Yuhong Zhong and Haoyu Li and Yu Jian Wu and Ioannis Zarkadas and Jeffrey Tao and Evan Mesterhazy and Michael Makris and Junfeng Yang and Amy Tai and Ryan Stutsman and Asaf Cidon},
title = {{XRP}: {In-Kernel} Storage Functions with {eBPF}},
booktitle = {Proceedings of 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI'22)},
year = {2022},
month = jul,
}

@misc {bpf_tracing,
    author = {Brendan Gregg},
    title = "{Linux Extended BPF (eBPF) Tracing Tools}",
    howpublished = {\url{https://www.brendangregg.com/ebpf.html}},
}

@inproceedings{Hoiland-Jorgensen:conext:2018,
  author = {H\o{}iland-J\o{}rgensen, Toke and Brouer, Jesper Dangaard and Borkmann, Daniel and Fastabend, John and Herbert, Tom and Ahern, David and Miller, David},
  title = "{The EXpress Data Path: Fast Programmable Packet Processing in the Operating System Kernel}",
  year = {2018},
  month = DEC,
  isbn = {9781450360807},
  url = {https://doi.org/10.1145/3281411.3281443},
  doi = {10.1145/3281411.3281443},
  booktitle = {Proceedings of the 14th International Conference on Emerging Networking EXperiments and Technologies (CoNEXT '18)},
}

@inproceedings{ebpf-pks,
  title="{Memory Isolation Mechanism of eBPF Based on PKS Hardware Feature}",
  author={Hao Li and Jinyu Gu and Yubin Xia and Binyu Zang and Haibo Chen},
  booktitle={Journal of Software (China)},
  pages={1--18},
  year={2022}
}

@inproceedings{BMC,
  title="{BMC: Accelerating Memcached using Safe In-kernel Caching and Pre-stack Processing}",
  author={Yoann Ghigoff and Julien Sopena and Kahina Lazri and Antoine Blin and Gilles Muller},
  booktitle={Proceedings of the 18th USENIX Symposium on Networked Systems Design and Implementation (NSDI'21)},
  year=2021,
  month = APR,
}

@inproceedings{Electrode,
  title="{Electrode: Accelerating Distributed Protocols with eBPF}",
  author={Yang Zhou and Zezhou Wang and Sowmya Dharanipragada and Minlan Yu},
  booktitle={Proceedings of the 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI'23)},
  year=2023,
  month = APR,
}

@misc{lpc-22-bpf-ima,
  title = "{BPF Signing and IMA integration}",
  author = {KP Singh},
  year = {2022},
  month = sep,
  howpublished = {\url{https://lpc.events/event/16/contributions/1357/}}
}

@misc{alexei-b2157399cc98,
  author = {Alexei Starovoitov},
  year = {2018},
  month = jan,
  title = "{bpf: prevent out-of-bounds speculation}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b2157399cc9898260d6031c5bfe45fe137c1fbe7}}
}

@misc{alexei-af86ca4e3088,
  author = {Alexei Starovoitov},
  year = {2018},
  month = may,
  title = "{bpf: Prevent memory disambiguation attack}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=af86ca4e3088fe5eacf2f7e58c01fa68ca067672}}
}

@misc{rust-belt,
  title = "{ERC Project "RustBelt"}",
  howpublished = {\url{https://plv.mpi-sws.org/rustbelt/}},
}

@inproceedings{pkru-safe,
  author = {Kirth, Paul and Dickerson, Mitchel and Crane, Stephen and Larsen, Per and Dabrowski, Adrian and Gens, David and Na, Yeoul and Volckaert, Stijn and Franz, Michael},
  title = "{PKRU-Safe: Automatically Locking down the Heap between Safe and Unsafe Languages}",
  year = {2022},
  booktitle = {Proceedings of the 17th European Conference on Computer Systems (EuroSys'22)},
  month = APR,
}

@misc{bpf-kptr-lwn,
  author = {David Vernet},
  year = {2022},
  month = jul,
  title = "{Long-lived kernel pointers in BPF}",
  howpublished = {\url{https://lwn.net/Articles/900749/}}
}

@misc{bpf-panic-lwn,
  author = {Jonathan Corbet},
  year = {2022},
  month = jul,
  title = "{The BPF panic function}",
  howpublished = {\url{https://lwn.net/Articles/901284/}}
}

@misc{alexei-04fd61ab36ec,
  author = {Alexei Starovoitov},
  year = {2015},
  month = may,
  title = "{bpf: allow bpf programs to tail-call other bpf programs}",
  howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=04fd61ab36ec065e194ab5e74ae34a5240d992bb}}
}

@misc{bpf-mempool-lwn,
  author = {Jonathan Corbet},
  year = {2022},
  month = jun,
  title = "{A BPF-specific memory allocator}",
  howpublished = {\url{https://lwn.net/Articles/899274/}}
}

@article{lu2023moat,
  title="{MOAT: Towards Safe BPF Kernel Extension}",
  author={Hongyi Lu and Shuai Wang and Yechang Wu and Wanning He and Fengwei Zhang},
  journal={arXiv:2301.13421},
  year={2023},
  month = MAR,
}

@article{jia2023,
  title="{Programmable System Call Security with eBPF}",
  author={Jinghao Jia and YiFei Zhu and Dan Williams and Andrea Arcangeli and Claudio Canella and Hubertus Franke and
    Tobin Feldman-Fitzthum and Dimitrios Skarlatos and Daniel Gruss and Tianyin Xu},
  journal={arXiv:2302.10366},
  year={2023},
  month = FEB,
}

@inproceedings{embassies,
  author = {Jon Howell and Bryan Parno and John R. Douceur},
  title = "{Embassies: Radically Refactoring the Web}",
  booktitle = {Proceedings of the 10th USENIX Symposium on Networked Systems Design and Implementation (NSDI'13)},
  year = {2013},
  month = apr,
}

@inproceedings{spin,
  author = {Bershad, B. N. and Savage, S. and Pardyak, P. and Sirer, E. G. and Fiuczynski, M. E. and Becker, D. and Chambers, C. and Eggers, S.},
  title = "{Extensibility, Safety and Performance in the SPIN Operating System}",
  year = {1995},
  booktitle = {Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP'15)},
  month = dec,
}

@misc{bindgen,
  title={{bindgen}},
  howpublished={\url{https://github.com/rust-lang/rust-bindgen}},
  note={(Accessed on 2024-03-07)},
}

@inproceedings{slic,
  author = {Douglas P. Ghormley and David Petrou and Steven H. Rodrigues and Thomas E. Anderson},
  title = {{SLIC}: An Extensibility System for Commodity Operating Systems},
  booktitle = {1998 USENIX Annual Technical Conference (USENIX ATC 98)},
  year = {1998},
  month = jun
}

@inproceedings{sandbpf,
author = {Lim, Soo Yee and Han, Xueyuan and Pasquier, Thomas},
title = {Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing},
year = {2023},
booktitle = {Proceedings of the 1st Workshop on EBPF and Kernel Extensions},
}

@inproceedings {bpfxrp,
author = {Yuhong Zhong and Haoyu Li and Yu Jian Wu and Ioannis Zarkadas and Jeffrey Tao and Evan Mesterhazy and Michael Makris and Junfeng Yang and Amy Tai and Ryan Stutsman and Asaf Cidon},
title = {{XRP}: {In-Kernel} Storage Functions with {eBPF}},
booktitle = {16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22)},
year = {2022},
month = jul
}

% FIXME: Likely not misc and missing information
@misc{rustc-monomorphize,
title = {Monomorphization},
booktitle = {Rust Compiler Development Guide},
howpublished = {\url{https://rustc-dev-guide.rust-lang.org/backend/monomorph.html}},
note={(Accessed on 2024-04-11)},
}

@inproceedings{ebpf-stackoverflow,
  author={Sai Roop Somaraju and Siddharth Chintamaneni and Dan Williams},
  title={Overflowing the kernel stack with BPF},
  booktitle= {Linux Plumbers Conference},
  month=nov,
  year={2023},
}

@misc{rust-option,
title = {Option in core::option - Rust},
howpublished = {\url{https://doc.rust-lang.org/core/option/enum.Option.html}},
note={(Accessed on 2024-04-12)},
}

@misc{rust-build-script,
title = {Build Scripts},
howpublished = {\url{https://doc.rust-lang.org/cargo/reference/build-scripts.html}},
note={(Accessed on 2024-04-12)},
}

@misc{nomicon-reprc,
title = {Alternative representations},
howpublished = {\url{https://doc.rust-lang.org/nomicon/other-reprs.html}},
note={(Accessed on 2024-04-13)},
}

@inproceedings{ebpf-termination,
  author={Raj Sahu and Dan Williams},
  title={When BPF programs need to die: exploring the design space for early BPF termination},
  booktitle= {Linux Plumbers Conference},
  month=nov,
  year={2023},
}

@article{verus,
author = {Lattuada, Andrea and Hance, Travis and Cho, Chanhee and Brun, Matthias and Subasinghe, Isitha and Zhou, Yi and Howell, Jon and Parno, Bryan and Hawblitzel, Chris},
title = {Verus: Verifying Rust Programs using Linear Ghost Types},
year = {2023},
issue_date = {April 2023},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {7},
number = {OOPSLA1},
url = {https://doi.org/10.1145/3586037},
doi = {10.1145/3586037},
abstract = {The Rust programming language provides a powerful type system that checks linearity and borrowing, allowing code to safely manipulate memory without garbage collection and making Rust ideal for developing low-level, high-assurance systems. For such systems, formal verification can be useful to prove functional correctness properties beyond type safety. This paper presents Verus, an SMT-based tool for formally verifying Rust programs.
With Verus, programmers express proofs and specifications using the Rust language, allowing proofs to take advantage of Rust's linear types and borrow checking. We show how this allows proofs to manipulate linearly typed permissions that let Rust code safely manipulate memory, pointers, and concurrent resources. Verus organizes proofs and specifications using a novel mode system that distinguishes specifications, which are not checked for linearity and borrowing, from executable code and proofs, which are checked for linearity and borrowing.
We formalize Verus' linearity, borrowing, and modes in a small lambda calculus, for which we prove type safety and termination of specifications and proofs. We demonstrate Verus on a series of examples, including pointer-manipulating code (an xor-based doubly linked list), code with interior mutability, and concurrent code.},
journal = {Proc. ACM Program. Lang.},
month = apr,
articleno = {85},
numpages = {30},
keywords = {systems verification, linear types, Rust}
}

@misc{bpf-packed-alloc,
  author = {Jonathan Corbet},
  year = {2022},
  month = feb,
  title = "{A memory allocator for BPF code}",
  howpublished = {\url{https://lwn.net/Articles/883454/}}
}

@misc{Dwivedi-958cf2e273f0,
author = {Kumar Kartikeya Dwivedi},
year = {2022},
month = nov,
title = "{bpf: Introduce bpf\_obj\_new}",
howpublished = {\url{https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=958cf2e273f0929c66169e0788031310e8118722}}
}

@misc{bpf-core,
author = {Andrii Nakryiko},
year = {2021},
month = oct,
title = "{BPF CO-RE reference guide}",
howpublished = {\url{https://nakryiko.com/posts/bpf-core-reference-guide/}}
}

@inproceedings{ebpf-kcfi,
author = {Jia, Jinghao and Le, Michael V. and Ahmed, Salman and Williams, Dan and Jamjoom, Hani},
title = {Practical and Flexible Kernel CFI Enforcement using eBPF},
year = {2023},
booktitle = {Proceedings of the 1st Workshop on EBPF and Kernel Extensions},
month = sep
}

@misc{cilium,
title = "{Cilium - Cloud Native, eBPF-based Networking, Observability, and Security}",
howpublished = {\url{https://cilium.io/}},
}

@misc{aya-rs,
title = "{Aya-rs}",
howpublished = {\url{https://aya-rs.dev/}},
}

@misc{katran,
    title = "{Katran - A high performance layer 4 load balancer}",
    howpublished = {\url{https://github.com/facebookincubator/katran}},
}

@misc{itanium-abi,
title = "{Itanium C++ ABI: Exception Handling (\$Revision: 1.22 \$)}",
howpublished = {\url{http://itanium-cxx-abi.github.io/cxx-abi/abi-eh.html}},
note={(Accessed on 2024-04-15)},
}

@misc{dafny,
title = "{The Dafny Programming and Verification Language}",
howpublished = {\url{https://dafny.org/}},
}

@misc{coq,
title = "{The Coq Proof Assistant}",
howpublished = {\url{https://coq.inria.fr/}},
}

@misc{llvm,
title = "{The LLVM Compiler Infrastructure}",
howpublished = {\url{https://llvm.org/}},
}

@misc{rustc,
title = "{The rustc book}",
howpublished = {\url{https://doc.rust-lang.org/stable/rustc/}},
}

@misc{reconsider-unpriv-ebpf-lwn,
author = {Jonathan Corbet},
year = {2019},
month = aug,
title = "{Reconsidering unprivileged BPF}",
howpublished = {\url{https://lwn.net/Articles/796328/}}
}

@misc{seccomp-ebpf-lwn,
author = {Jonathan Corbet},
year = {2021},
month = may,
title = "{eBPF seccomp() filters}",
howpublished = {\url{https://lwn.net/Articles/857228/}}
}

@misc{ebpf-sec-lwn,
author = {Jake Edge},
year = {2023},
month = oct,
title = "{BPF and security}",
howpublished = {\url{https://lwn.net/Articles/946389/}}
}

@misc{rust-for-linux-lwn,
author = {Jonathan Corbet},
year = {2022},
month = oct,
title = "{A first look at Rust in the 6.1 kernel}",
howpublished = {\url{https://lwn.net/Articles/910762/}}
}

@misc{rust-drop,
title="{Drop in core::ops - Rust}",
howpublished = {\url{https://doc.rust-lang.org/core/ops/trait.Drop.html}},
note={(Accessed on 2024-04-18)},
}

@inproceedings {DINT,
author = {Yang Zhou and Xingyu Xiang and Matthew Kiley and Sowmya Dharanipragada and Minlan Yu},
title = {{DINT}: Fast {In-Kernel} Distributed Transactions with {eBPF}},
booktitle = {21st USENIX Symposium on Networked Systems Design and Implementation (NSDI 24)},
year = {2024},
isbn = {978-1-939133-39-7},
address = {Santa Clara, CA},
pages = {401--417},
url = {https://www.usenix.org/conference/nsdi24/presentation/zhou-yang},
publisher = {USENIX Association},
month = apr
}

@inproceedings {EPF,
author = {Di Jin and Vaggelis Atlidakis and Vasileios P. Kemerlis},
title = {{EPF}: Evil Packet Filter},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {735--751},
url = {https://www.usenix.org/conference/atc23/presentation/jin},
publisher = {USENIX Association},
month = jul
}

@article{jia2023,
  title="{Programmable System Call Security with eBPF}",
  author={Jinghao Jia and YiFei Zhu and Dan Williams and Andrea Arcangeli and Claudio Canella and Hubertus Franke and
    Tobin Feldman-Fitzthum and Dimitrios Skarlatos and Daniel Gruss and Tianyin Xu},
  journal={arXiv:2302.10366},
  year={2023},
  month = FEB,
}

@article{hung2023brf,
title={BRF: eBPF Runtime Fuzzer},
author={Hsin-Wei Hung and Ardalan Amiri Sani},
year={2023},
journal={arXiv:2305.08782},
month=may
}

@inproceedings{theseus-kisv23,
author = {Ijaz, Ramla and Boos, Kevin and Zhong, Lin},
title = {Leveraging Rust for Lightweight OS Correctness},
year = {2023},
isbn = {9798400704116},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3625275.3625398},
doi = {10.1145/3625275.3625398},
abstract = {This paper reports our experience of providing lightweight correctness guarantees to an open-source Rust-based OS, Theseus. First, we report new developments in intralingual design that leverage Rust's type system to enforce invariants at compile time, trusting the Rust compiler. Second, we develop a hybrid proof approach that combines formal verification, type checking, and informal reasoning. By lessening the strength of correctness guarantees, this hybrid approach substantially lowers the proof burden. We share our experience of applying this approach to the memory subsystem of Theseus, demonstrate its utility, and quantify its reduced proof effort.},
booktitle = {Proceedings of the 1st Workshop on Kernel Isolation, Safety and Verification},
pages = {1–8},
numpages = {8},
location = {Koblenz, Germany},
series = {KISV '23}
}

@inproceedings{Burtsev-hotos23,
author = {Burtsev, Anton and Narayanan, Vikram and Huang, Yongzhe and Huang, Kaiming and Tan, Gang and Jaeger, Trent},
title = {Evolving Operating System Kernels Towards Secure Kernel-Driver Interfaces},
year = {2023},
isbn = {9798400701955},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3593856.3595914},
doi = {10.1145/3593856.3595914},
abstract = {Our work explores the challenge of developing secure kernel-driver interfaces designed to protect the kernel from isolated kernel extensions. We first analyze a range of possible attack vectors that exist in current isolation frameworks. Then, we suggest a new approach to building secure isolation boundaries centered around ideas that originate in safe operating systems: isolation of heaps and single ownership.},
booktitle = {Proceedings of the 19th Workshop on Hot Topics in Operating Systems},
pages = {166–173},
numpages = {8},
location = {Providence, RI, USA},
series = {HOTOS '23}
}

@misc{rust-for-linux-doc,
title="{Rust for Linux}",
howpublished = {\url{https://rust-for-linux.com/}},
note={(Accessed on 2024-04-19)},
}

@misc{rust-for-windows,
title="{Rust for Windows, and the windows crate}",
howpublished = {\url{https://learn.microsoft.com/en-us/windows/dev-environment/rust/rust-for-windows}},
year={2023},
month=aug,
}