diff --git a/content/schedule.md b/content/schedule.md index 8cc6f31..7f320c5 100644 --- a/content/schedule.md +++ b/content/schedule.md @@ -23,7 +23,7 @@ title: "Schedule" | JUN. 3: 5:00pm PST,
JUN. 4: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1)| LibraryOS | [Unikernels: Library Operating Systems for the Cloud (ASPLOS'13)](http://mort.io/publications/pdf/asplos13-unikernels.pdf) | 1. [Unikernels as Processes](https://dl.acm.org/doi/10.1145/3267809.3267845);
2. [Unikernels are unfit for production](https://www.joyent.com/blog/unikernels-are-unfit-for-production);
3. Rethinking the Library OS from the Top-Down;
4. [Mirage OS](https://mirage.io/);
5. [Nabla Containers](https://nabla-containers.github.io/);
6. [ClickOS and the Art of Network Function Virtualization](https://www.usenix.org/system/files/conference/nsdi14/nsdi14-paper-martins.pdf);
7. Libra: a library operating system for a JVM in a virtualized execution environment;
8. Exokernel: an operating system architecture for application-level resource management;
9. [Dune: Safe User-level Access to Privileged CPU Features (OSDI'12)](https://www.usenix.org/system/files/conference/osdi12/osdi12-final-117.pdf) | [Paper Reflection](https://docs.google.com/document/d/1eP5P6q3m6hLaUQoT7dHEqklZvfTYfOnGJ5jck5qiMAY/edit?usp=sharing) | Mossaka | [Mossaka's Note](https://scarlet-message-9c2.notion.site/Meetup-9-Unikernels-9c4d10ba349248129f667082b7db86ec?pvs=4) | [YouTube](https://youtu.be/PKYvQ9Z7JAM) | | JUN. 10: 5:00pm PST,
JUN. 11: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | Amazon Firecracker | [Firecracker: Lightweight Virtualization for Serverless Applications (NSDI'20)](https://www.usenix.org/system/files/nsdi20-paper-agache.pdf)| 1. [Amazon Firecracker Git repo](https://firecracker-microvm.github.io/);
2. [Kata Containers](https://katacontainers.io/)| [Paper Reflection](https://docs.google.com/document/d/1qZ31Rnoi53s57rmJNM_hWTzxoaKHjY2tiHh8mSKR7mk/edit?usp=sharing) | Mossaka | [Mossaka's Note](https://scarlet-message-9c2.notion.site/Meetup-10-Firecracker-fc103e9951bb4138aac6143145812ad0?pvs=4) | [YouTube](https://youtu.be/XfzKS58aaws) | | ~~JUN. 17: 5:00pm PST,
JUN. 18: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1)~~ | CANCELLED | N/A | N/A | N/A | N/A | N/A | N/A | -| JUN. 24: 5:00pm PST,
JUN. 25: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1)| Para-Virtualization | [Xen and the Art of Virtualization (SOSP'03)](https://www.cl.cam.ac.uk/research/srg/netos/papers/2003-xensosp.pdf) | 1. [Understanding Full Virtualization, Paravirtualization, and Hardware Assist](https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/VMware_paravirtualization.pdf);
2. [Safe Hardware Access with the Xen Virtual Machine Monitor](https://www.cl.cam.ac.uk/research/srg/netos/papers/2004-safehw-oasis.pdf);
3. [Optimizing Network Virtualization in Xen](https://www.usenix.org/legacy/event/usenix06/tech/menon/menon_html/paper.html);
4.[Measuring CPU Overhead for I/O Processing in the Xen Virtual Machine Monitor](https://www.usenix.org/legacy/publications/library/proceedings/usenix05/tech/general/full_papers/short_papers/cherkasova/cherkasova.pdf);
5. [Breaking Up is Hard to Do: Security and Functionality in a Commodity Hypervisor (SOSP'11)](https://tjd.phlegethon.org/words/sosp11-xoar.pdf) | [Paper Reflection](https://docs.google.com/document/d/1zprjjeDzgqQLwdKFOarmi-8I5kbr9c90yzeMLHxBDCY/edit?usp=sharing) | N/A | N/A | N/A | +| JUN. 24: 5:00pm PST,
JUN. 25: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1)| Para-Virtualization | [Xen and the Art of Virtualization (SOSP'03)](https://www.cl.cam.ac.uk/research/srg/netos/papers/2003-xensosp.pdf) | 1. [Understanding Full Virtualization, Paravirtualization, and Hardware Assist](https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/VMware_paravirtualization.pdf);
2. [Safe Hardware Access with the Xen Virtual Machine Monitor](https://www.cl.cam.ac.uk/research/srg/netos/papers/2004-safehw-oasis.pdf);
3. [Optimizing Network Virtualization in Xen](https://www.usenix.org/legacy/event/usenix06/tech/menon/menon_html/paper.html);
4.[Measuring CPU Overhead for I/O Processing in the Xen Virtual Machine Monitor](https://www.usenix.org/legacy/publications/library/proceedings/usenix05/tech/general/full_papers/short_papers/cherkasova/cherkasova.pdf);
5. [Breaking Up is Hard to Do: Security and Functionality in a Commodity Hypervisor (SOSP'11)](https://tjd.phlegethon.org/words/sosp11-xoar.pdf) | [Paper Reflection](https://docs.google.com/document/d/1zprjjeDzgqQLwdKFOarmi-8I5kbr9c90yzeMLHxBDCY/edit?usp=sharing) | Mossaka | [Mossaka's Note](https://scarlet-message-9c2.notion.site/Meetup-11-Xen-1b5fe593b65b41948f5157c4d30f52f8?pvs=4) | [YouTube](https://youtu.be/Z6gHtyYeJr0) | | JUL. 1: 5:00pm PST,
JUL. 2: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | KVM and QEMU | 1. [kvm: the Linux Virtual Machine Monitor](https://www.kernel.org/doc/ols/2007/ols2007v1-pages-225-230.pdf);
2. [QEMU, a Fast and Portable Dynamic Translator](https://www.usenix.org/legacy/event/usenix05/tech/freenix/full_papers/bellard/bellard.pdf) (It's OK to not fully understand Section 2) | [KVM Documentation](https://www.linux-kvm.org/page/Documents) | [Paper Reflection](https://docs.google.com/document/d/1FwzGZov7bYiYubWKsRsZ-RxHeBRqn7dJZnR3QZ-KcSo/edit?usp=sharing) | N/A | N/A | N/A | | JUL. 8: 5:00pm PST,
JUL. 9: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1) | GUEST SPEAKER SESSION: TBD | N/A | N/A | N/A | N/A | N/A | N/A | | JUL. 15: 5:00pm PST,
JUL. 16: 8:00am BJT,
[Zoom](https://us06web.zoom.us/j/87491153577?pwd=wwALFzPt4YLqs3V7TyUaHON6apmKoI.1)| Security | 1. [When Virtual is Harder than Real: Security Challenges in Virtual Machine Based Computing Environments (HotOS'05)](https://www.usenix.org/legacy/event/hotos05/final_papers/full_papers/garfinkel/garfinkel_old.pdf);
2. [Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds (CCS'09)](https://cseweb.ucsd.edu//~savage/papers/CCS09.pdf) | 1. [Secure Container Isolation: Problem Statement & Solution Space](https://goo.gl/eQHuqo);
2. [When Virtual Is Better Than Real (HotOS'01)](https://www2.cs.duke.edu/courses/cps210/spring06/papers/chen01.pdf);
3. [Secure Pods: Sandboxing workloads in Kubernetes](https://schd.ws/hosted_files/kccnceu18/96/Secure%20Pods%20-%20KubeCon%20EU%202018.pdf);
4. TrustVisor: Efficient TCB Reduction and Attestation;
5. [SecVisor: A Tiny Hypervisor to Provide Lifetime Kernel Code Integrity for Commodity OSes (SOSP'07)](https://www.cs.cmu.edu/~arvinds/pubs/secvisor.pdf);
6. [Breaking Up is Hard to Do: Security and Functionality in a Commodity Hypervisor (SOSP'11)](https://tjd.phlegethon.org/words/sosp11-xoar.pdf);
7. [InkTag: Secure Applications on an Untrusted Operating System (ASPLOS'13)](http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.435.4999&rep=rep1&type=pdf);
8. [Overshadow: A Virtualization-Based Approach to Retrofitting Protection in Commodity Operating Systems](https://www.cs.utexas.edu/~shmat/courses/cs380s/overshadow.pdf);
9. VirtuOS: An Operating System with Kernel Virtualization;
10. SCONE: Secure Linux Containers with Intel SGX;
11. [Understanding Security Implications of Using Containers in the Cloud (ASPLOS'08)](https://www.usenix.org/system/files/conference/atc17/atc17-tak-paper.pdf);
12. [Container Security: Issues, Challenges, and the Road Ahead](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8693491) | [Paper Reflection](https://docs.google.com/document/d/1mWfBJOVRD4AHhNMNUEcav_f-rl96n_9FQ4u_TZAgie0/edit?usp=sharing) | N/A | N/A | N/A |