IncludeOS: A Minimal, Resource Efficient Unikernel for Cloud Services

Bratterud, Alfred; Walla, Alf-Andre; Haugerud, Hårek; Engelstad, Paal E.; Begnum, Kyrre

doi:10.1109/cloudcom.2015.89

Cited by 69 publications

(32 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The tests were run on an i7 Ubuntu 14.04 LTS machine with 8 GiB of RAM. An indepth report on IncludeOS performance is given in [9], as well as subsequent papers by the same authors. In this paper, we particularly focus on comparing PHP2Uni against other PHP deployment solutions.…”

Section: Discussionmentioning

confidence: 99%

“…• IncludeOS [9]; • Rump kernel [23]. The purpose of providing two targets is to 1) demonstrate that our proposed technique can easily be generalised, 2) to allow pros and cons of different unikernel environments to be evaluated.…”

Section: Methodsmentioning

confidence: 99%

“…There are a number of existing projects that focus on different aspects of unikernel technology: HaLVM 6 in Haskell, Mirage OS [19] in OCaml and IncludeOS [9] in C++ all take a clean-slate approach; ClickOS [20] emphases speed; and rump kernels [10] are built upon the rump kernel drivers, which provide compatibility with legacy POSIX software.…”

Section: B Unikernelsmentioning

confidence: 99%

“…Currently PHP2Uni is able to build IncludeOS [9] and rump kernel [10] unikernel images (see § III-A and § III-B) from standard PHP scripts.…”

mentioning

confidence: 99%

See 3 more Smart Citations

PHP2Uni: Building Unikernels Using Scripting Language Transpilation

Pasquier

Eyers

Bacon

2017

2017 IEEE International Conference on Cloud Engineering (IC2E)

View full text Add to dashboard Cite

Abstract-Unikernels are a rapidly emerging technology in the world of cloud computing. Unikernels build on research on library operating systems to deliver smaller, faster and more secure virtual machines, specifically optimised for a single application service. These features are especially useful in cost or resource constrained environments. However, as with any new technology, early adopters need to master many technical details, and understand many aspects of the mechanisms used to build and deploy unikernels. Both of these factors may slow adoption rates. In this paper, we present our initial experiments into the use of an approach for building unikernels that is accessible to those whose technical expertise is focused on web development. We present PHP2Uni: a tool chain that takes a website built from PHP files-PHP remains the most widely used web languageand builds a resource-efficient unikernel image from them, while requiring little knowledge of the underlying operating system software complexity.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Methodsmentioning

confidence: 99%

Section: B Unikernelsmentioning

confidence: 99%

“…Currently PHP2Uni is able to build IncludeOS [9] and rump kernel [10] unikernel images (see § III-A and § III-B) from standard PHP scripts.…”

mentioning

confidence: 99%

See 2 more Smart Citations

PHP2Uni: Building Unikernels Using Scripting Language Transpilation

Pasquier

Eyers

Bacon

2017

2017 IEEE International Conference on Cloud Engineering (IC2E)

View full text Add to dashboard Cite

show abstract

“…Eliminating the requirement to support multiple processes and/or multiple users simplifies the code base required to implement a unikernel and reduces the overhead required to complete a single unit of useful work. Several examples have been deployed alongside virtualization technologies in cloud applications [65]- [67]. Despite their proven usefulness for providing fast, highly focused applications, unikernels don't, in isolation, provide protection from most of the attack vectors discussed in this paper.…”

Section: Unikernelsmentioning

confidence: 99%

Containing a Confused Deputy on x86: A Survey of Privilege Escalation Mitigation Techniques

Brookes¹,

Taylor²

2016

ijacsa

View full text Add to dashboard Cite

Abstract-The weak separation between user-and kernelspace in modern operating systems facilitates several forms of privilege escalation. This paper provides a survey of protection techniques, both cutting-edge and time-tested, used to prevent common privilege escalation attacks. The techniques are compared against each other in terms of their effectiveness, their performance impact, the complexity of their implementation, and their impact on diversification techniques such as ASLR. Overall the literature provides a litany of disjoint techniques, each of which trades some performance cost for effectiveness against a particular isolated threat. No single technique was found to effectively mitigate all known and potential attack vectors with reasonable performance cost overhead.

show abstract