Publications related to Midas: Systematic Kernel TOCTTOU Protection

PoLPer: Process-Aware Restriction of Over-Privileged Setuid Calls in Legacy Applications

setuid system calls enable critical functions such as user authentications and modular privileged components. Such operations must only be executed after careful validation. However, current systems do not perform rigorous checks, allowing exploitation of ...

ASSOC COMPUTING MACHINERY2019

Advancing the State of Network Switch ASIC Offloading in the Linux Kernel

Andy Roulin

Modern data-center network operating systems rely on proprietary user-space daemons wrapping SDKs from switch vendors. Linux-based variants of these operating systems have benefited from increasing and simplified dataplane offloading support in recent year ...

2018

A Formally Verified NAT Stack

George Candea, Solal Vincenzo Pirelli, Arseniy Zaostrovnykh

Prior work proved a stateful NAT network function to be semantically correct, crash-free, and memory safe. Their toolchain verifies the network function code while assuming the underlying kernel-bypass framework, drivers, operating system, and hardware to ...

2018

A Formally Verified NAT Stack

George Candea, Solal Vincenzo Pirelli, Arseniy Zaostrovnykh

Prior work proved a stateful NAT network function to be, crash-free, memory safe and semantically correct [29]. Their toolchain verifies the network function code while assuming the underlying kernel-bypass framework, drivers, operating system, and hardwar ...

ASSOC COMPUTING MACHINERY2018

The Battle of the Schedulers: FreeBSD ULE vs. Linux CFS

Willy Zwaenepoel, Baptiste Joseph Eustache Lepers, Sébastien Chevalley, Justinien Gérard Alain Bouron

This paper analyzes the impact on application performance of the design and implementation choices made in two widely used open-source schedulers: ULE, the default FreeBSD scheduler, and CFS, the default Linux scheduler. We compare ULE and CFS in otherwise ...

2018

The Battle of the Schedulers: FreeBSD ULE vs. Linux CFS

Willy Zwaenepoel, Baptiste Joseph Eustache Lepers, Sébastien Chevalley, Justinien Gérard Alain Bouron

This paper analyzes the impact on application performance of the design and implementation choices made in two widely used open-source schedulers: ULE, the default FreeBSD scheduler, and CFS, the default Linux scheduler. We compare ULE and CFS in otherwise ...

USENIX ASSOC2018

A kernel compression scheme for fractional differential equations

Jan Sickmann Hesthaven, Daniel Henri Baffet

The nonlocal nature of the fractional integral makes the numerical treatment of fractional dierential equations expensive in terms of computational eort and memory requirements. In this paper we propose a method to reduce these costs while controlling the ...

Society for Industrial and Applied Mathematics2017

Lower Bounds on Regret for Noisy Gaussian Process Bandit Optimization

Volkan Cevher, Jonathan Mark Scarlett, Ilija Bogunovic

In this paper, we consider the problem of sequentially optimizing a black-box function

f

based on noisy samples and bandit feedback. We assume that

f

is smooth in the sense of having a bounded norm in some reproducing kernel Hilbert space (RKHS), yield ...

2017

The Linux Scheduler: A Decade of Wasted Cores

Baptiste Joseph Eustache Lepers

As a central part of resource management, the OS thread scheduler must maintain the following, simple, invariant: make sure that ready threads are scheduled on available cores. As simple as it may seem, we found that this invari- ant is often broken in Lin ...

Assoc Computing Machinery2016

Deconvolution of Gaussian Random Fields using the Graph Fourier Transform

Matthieu Martin Jean-André Simeoni

Real-life acquisition systems are fundamentally limited in their ability to reproduce point sources. For example, a point source object, a star say, observed with an optical telescope is blurred by the imperfect lenses composing the system. Mathematically, ...

2016

Midas: Systematic Kernel TOCTTOU Protection

Graph Chatbot

Chat with Graph Search

PoLPer: Process-Aware Restriction of Over-Privileged Setuid Calls in Legacy Applications

Advancing the State of Network Switch ASIC Offloading in the Linux Kernel

A Formally Verified NAT Stack

A Formally Verified NAT Stack

The Battle of the Schedulers: FreeBSD ULE vs. Linux CFS

The Battle of the Schedulers: FreeBSD ULE vs. Linux CFS

A kernel compression scheme for fractional differential equations

Lower Bounds on Regret for Noisy Gaussian Process Bandit Optimization

The Linux Scheduler: A Decade of Wasted Cores

Deconvolution of Gaussian Random Fields using the Graph Fourier Transform

PoLPer: Process-Aware Restriction of Over-Privileged Setuid Calls in Legacy Applications

A Formally Verified NAT Stack

Lower Bounds on Regret for Noisy Gaussian Process Bandit Optimization

Deconvolution of Gaussian Random Fields using the Graph Fourier Transform

The Linux Scheduler: A Decade of Wasted Cores

Advancing the State of Network Switch ASIC Offloading in the Linux Kernel

The Battle of the Schedulers: FreeBSD ULE vs. Linux CFS

The Battle of the Schedulers: FreeBSD ULE vs. Linux CFS

A kernel compression scheme for fractional differential equations

A Formally Verified NAT Stack