Abstract Intel® Virtualization Technology< sup> Δ</sup> for Directed I/O (VT-d) is the next
important step toward comprehensive hardware support for the virtualization of Intel® …

The common perception in both academic literature and industry today is that virtual
machines offer better security, whereas containers offer better performance. However, a …

Containers are in great demand because they are lightweight when compared to virtual
machines. On the downside, containers offer weaker isolation than VMs, to the point where …

Over the years middleboxes have become a fundamental part of today's networks. Despite
their usefulness, they come with a number of problems, many of which arise from the fact …

Code review is a common software engineering practice employed both in open source and
industrial contexts. Review today is less formal and more “lightweight” than the code …

Complete formal verification is the only known way to guarantee that a system is free of
programming errors. We present our experience in performing the formal, machine-checked …

Numerous systems have been designed which use virtualization to subdivide the ample
resources of a modern computer. Some require specialized hardware, or cannot support …

We present an in-depth coverage of the comprehensive machine-checked formal verification
of seL4, a general-purpose operating system microkernel. We discuss the kernel design we …

This paper presents a system-level method for achieving the rapid deployment and high-
density caching of serverless functions in a FaaS environment. For reduced start times …

Due to the existence of multiple stakeholders with conflicting goals and policies, alterations
to the existing Internet architecture are now limited to simple incremental updates; …