Cover Image

Tyche: Composable Isolation as a Foundation to Manage Trust in the Cloud

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Ghosn, Adrien, Castes, Charly, Kalani, Neelu S., Qian, Yuchen, Kogias, Marios, Bugnion, Edouard
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security Operating Systems
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Sharing is caring: Attestable and Trusted Workflows out of Distrustful Components
by: Sadi, Amir Al, et al.
Published: (2026)

Automatic ISA analysis for Secure Context Switching
by: Kalani, Neelu S., et al.
Published: (2025)

CAEC: Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA
by: Abdollahi, Sina, et al.
Published: (2025)

AgenTEE: Confidential LLM Agent Execution on Edge Devices
by: Abdollahi, Sina, et al.
Published: (2026)

Securing Cloud File Systems with Trusted Execution
by: Burke, Quinn, et al.
Published: (2023)

Goldilocks Isolation: High Performance VMs with Edera
by: Moore, Marina, et al.
Published: (2025)

Ringmaster: How to juggle high-throughput host OS system calls from TrustZone TEEs
by: Habeeb, Richard, et al.
Published: (2026)

CRISP: Confidentiality, Rollback, and Integrity Storage Protection for Confidential Cloud-Native Computing
by: Hartono, Ardhi Putra Pratama, et al.
Published: (2024)

Physical Memory Attacks and a Memory Safe Management System for Memory Defense
by: Hillel-Tuch, Alon, et al.
Published: (2024)

Adaptive and Efficient Dynamic Memory Management for Hardware Enclaves
by: Dhanraj, Vijay, et al.
Published: (2025)

Blindfold: Confidential Memory Management by Untrusted Operating System
by: Li, Caihua, et al.
Published: (2024)

Beyond Control: Exploring Novel File System Objects for Data-Only Attacks on Linux Systems
by: Zhou, Jinmeng, et al.
Published: (2024)

Guillotine: Hypervisors for Isolating Malicious AIs
by: Mickens, James, et al.
Published: (2025)

Rethinking Provenance Completeness with a Learning-Based Linux Scheduler
by: Mao, Jinsong, et al.
Published: (2025)

UPSS: a User-centric Private Storage System with its applications
by: Bozorgi, Arastoo, et al.
Published: (2024)

Plug. Play. Persist. Inside a Ready-to-Go Havoc C2 Infrastructure
by: Di Santo, Alessio
Published: (2025)

FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolation
by: Wu, Yinpeng, et al.
Published: (2026)

HAL 9000: a Risk Manager for ITSs
by: Freitas, Tadeu, et al.
Published: (2023)

Fast Networks for High-Performance Distributed Trust
by: Liu, Yicheng, et al.
Published: (2025)

To Unpack or Not to Unpack: Living with Packers to Enable Dynamic Analysis of Android Apps
by: Asghari, Mohammad Hossein, et al.
Published: (2025)

Lazarus Group Targets Crypto-Wallets and Financial Data while employing new Tradecrafts
by: Di Santo, Alessio
Published: (2025)

Exploiting Page Faults for Covert Communication
by: Swaminathan, Sathvik
Published: (2025)

NecoFuzz: Effective Fuzzing of Nested Virtualization via Fuzz-Harness Virtual Machines
by: Ishii, Reima, et al.
Published: (2025)

pokiSEC: A Multi-Architecture, Containerized Ephemeral Malware Detonation Sandbox
by: Avina, Alejandro, et al.
Published: (2025)

ZeroOS: A Universal Modular Library OS for zkVMs
by: Zou, Guangxian, et al.
Published: (2025)

Confidential Serverless Computing
by: Sabanic, Patrick, et al.
Published: (2025)

eBPF-PATROL: Protective Agent for Threat Recognition and Overreach Limitation using eBPF in Containerized and Virtualized Environments
by: Ghimire, Sangam, et al.
Published: (2025)

SyzParam: Introducing Runtime Parameters into Kernel Driver Fuzzing
by: Sun, Yue, et al.
Published: (2025)

Safe Sharing of Fast Kernel-Bypass I/O Among Nontrusting Applications
by: Beadle, Alan, et al.
Published: (2025)

Analysis of Security in OS-Level Virtualization
by: Ketha, Krishna Sai, et al.
Published: (2025)

WebAssembly Based Portable and Secure Sensor Interface for Internet of Things
by: Ou, Botong, et al.
Published: (2026)

Contextualizing Security and Privacy of Software-Defined Vehicles: A Literature Review and Industry Perspectives
by: De Vincenzi, Marco, et al.
Published: (2024)

Securing Monolithic Kernels using Compartmentalization
by: Lim, Soo Yee, et al.
Published: (2024)

SoK: Software Compartmentalization
by: Lefeuvre, Hugo, et al.
Published: (2024)

B-Side: Binary-Level Static System Call Identification
by: Thévenon, Gaspard, et al.
Published: (2024)

BULKHEAD: Secure, Scalable, and Efficient Kernel Compartmentalization with PKS
by: Guo, Yinggang, et al.
Published: (2024)

The Android Platform Security Model (2023)
by: Mayrhofer, René, et al.
Published: (2019)

Case Study: Securing MMU-less Linux Using CHERI
by: Almatary, Hesham, et al.
Published: (2023)

Retrofitting XoM for Stripped Binaries without Embedded Data Relocation
by: Luo, Chenke, et al.
Published: (2024)

The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches
by: Zhang, Chuqi, et al.
Published: (2024)