Proceedings of the 50th ACM Technical Symposium on Computer Science Education 2019
DOI: 10.1145/3287324.3287507
|View full text |Cite
|
Sign up to set email alerts
|

Comparing Jailed Sandboxes vs Containers Within an Autograding System

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1
1
1

Citation Types

0
4
0

Year Published

2019
2019
2023
2023

Publication Types

Select...
5
4

Relationship

0
9

Authors

Journals

citations
Cited by 16 publications
(4 citation statements)
references
References 12 publications
0
4
0
Order By: Relevance
“…Although most tools still rely on user permissions [2,60], jails [40,164,203], and JVM [115,172,242] security mechanisms, several new tools [156,180,226] are adopting containerization, particularly through Docker containers, to perform the dynamic analysis of students' programs. Docker reduces the entry barrier to using containers, which enables their fast-growing popularization lately, as containers also ofer a similar level of isolation to that of a VM while keeping a much lower overhead, slightly above other solutions depending on the image [178]. In addition to that, being able to run the code in a clean environment with only the speciic version of the language compiler and libraries needed allows great lexibility and reduces compatibility issues.…”
Section: Code Execution (Rq3)mentioning
confidence: 99%
“…Although most tools still rely on user permissions [2,60], jails [40,164,203], and JVM [115,172,242] security mechanisms, several new tools [156,180,226] are adopting containerization, particularly through Docker containers, to perform the dynamic analysis of students' programs. Docker reduces the entry barrier to using containers, which enables their fast-growing popularization lately, as containers also ofer a similar level of isolation to that of a VM while keeping a much lower overhead, slightly above other solutions depending on the image [178]. In addition to that, being able to run the code in a clean environment with only the speciic version of the language compiler and libraries needed allows great lexibility and reduces compatibility issues.…”
Section: Code Execution (Rq3)mentioning
confidence: 99%
“…Dynamic source code analysis is carried out afterward in order to verify the correctness of the submitted code on both open and hidden tests. The code is executed in a jailed Docker-based sandbox [31] with the gVisor secure runtime [32]. If an error has occurred while performing the tests, the DTA system only demonstrates the input data of only one erroneous test case.…”
Section: Digital Teaching Assistant Corementioning
confidence: 99%
“…To cope with this diversity, Dodona uses a generic infrastructure for automated assessment, consisting of three loosely coupled components: a container, a judge, and an assignment-specific assessment configuration. A Docker container [21] is used for proper virtualization. It defines the runtime environment in which all data and executables are provided.…”
Section: Automated Assessmentmentioning
confidence: 99%