MultiK: A Framework for Orchestrating Multiple Specialized Kernels Article Swipe

PDF

Hsuan-Chi Kuo , Akshith Gunasekaran , Yeongjin Jang , Sibin Mohan , Rakesh B. Bobba , David Lie , Jesse Walker ·

YOU? · · 2019 · Open Access · · DOI: https://doi.org/10.48550/arxiv.1903.06889

We present, MultiK, a Linux-based framework 1 that reduces the attack surface for operating system kernels by reducing code bloat. MultiK "orchestrates" multiple kernels that are specialized for individual applications in a transparent manner. This framework is flexible to accommodate different kernel code reduction techniques and, most importantly, run the specialized kernels with near-zero additional runtime overheads. MultiK avoids the overheads of virtualization and runs natively on the system. For instance, an Apache instance is shown to run on a kernel that has (a) 93.68% of its code reduced, (b) 19 of 23 known kernel vulnerabilities eliminated and (c) with negligible performance overheads (0.19%). MultiK is a framework that can integrate with existing code reduction and OS security techniques. We demonstrate this by using D-KUT and S-KUT -- two methods to profile and eliminate unwanted kernel code. The whole process is transparent to the user applications because MultiK does not require a recompilation of the application.

Related Topics

Concepts

Computer science Kernel (algebra) Code (set theory) Virtualization Operating system Reduction (mathematics) Linux kernel Parallel computing Process (computing) Attack surface Source code Programming language Distributed computing Cloud computing Set (abstract data type) Mathematics Combinatorics Geometry

Metadata

Type: preprint
Language: en
Landing Page: http://arxiv.org/abs/1903.06889
PDF: https://arxiv.org/pdf/1903.06889
OA Status: green
Cited By: 8
References: 20
Related Works: 10
OpenAlex ID: https://openalex.org/W2922177954

All OpenAlex metadata

Raw OpenAlex JSON

OpenAlex ID: https://openalex.org/W2922177954

Canonical identifier for this work in OpenAlex
DOI: https://doi.org/10.48550/arxiv.1903.06889

Digital Object Identifier
Title: MultiK: A Framework for Orchestrating Multiple Specialized Kernels

Work title
Type: preprint

OpenAlex work type
Language: en

Primary language
Publication year: 2019

Year of publication
Publication date: 2019-03-16

Full publication date if available
Authors: Hsuan-Chi Kuo, Akshith Gunasekaran, Yeongjin Jang, Sibin Mohan, Rakesh B. Bobba, David Lie, Jesse Walker

List of authors in order
Landing page: https://arxiv.org/abs/1903.06889

Publisher landing page
PDF URL: https://arxiv.org/pdf/1903.06889

Direct link to full text PDF
Open access: Yes

Whether a free full text is available
OA status: green

Open access status per OpenAlex
OA URL: https://arxiv.org/pdf/1903.06889

Direct OA link when available
Concepts: Computer science, Kernel (algebra), Code (set theory), Virtualization, Operating system, Reduction (mathematics), Linux kernel, Parallel computing, Process (computing), Attack surface, Source code, Programming language, Distributed computing, Cloud computing, Set (abstract data type), Mathematics, Combinatorics, Geometry

Top concepts (fields/topics) attached by OpenAlex
Cited by: 8

Total citation count in OpenAlex
Citations by year (recent): 2024: 1, 2021: 4, 2020: 3

Per-year citation counts (last 5 years)
References (count): 20

Number of works referenced by this work
Related works (count): 10

Other works algorithmically related by OpenAlex

Full payload

id	https://openalex.org/W2922177954
doi	https://doi.org/10.48550/arxiv.1903.06889
ids.doi	https://doi.org/10.48550/arxiv.1903.06889
ids.mag	2922177954
ids.openalex	https://openalex.org/W2922177954
fwci
type	preprint
title	MultiK: A Framework for Orchestrating Multiple Specialized Kernels
biblio.issue
biblio.volume
biblio.last_page
biblio.first_page
topics[0].id	https://openalex.org/T11424
topics[0].field.id	https://openalex.org/fields/17
topics[0].field.display_name	Computer Science
topics[0].score	1.0
topics[0].domain.id	https://openalex.org/domains/3
topics[0].domain.display_name	Physical Sciences
topics[0].subfield.id	https://openalex.org/subfields/1702
topics[0].subfield.display_name	Artificial Intelligence
topics[0].display_name	Security and Verification in Computing
topics[1].id	https://openalex.org/T11241
topics[1].field.id	https://openalex.org/fields/17
topics[1].field.display_name	Computer Science
topics[1].score	0.995199978351593
topics[1].domain.id	https://openalex.org/domains/3
topics[1].domain.display_name	Physical Sciences
topics[1].subfield.id	https://openalex.org/subfields/1711
topics[1].subfield.display_name	Signal Processing
topics[1].display_name	Advanced Malware Detection Techniques
topics[2].id	https://openalex.org/T10054
topics[2].field.id	https://openalex.org/fields/17
topics[2].field.display_name	Computer Science
topics[2].score	0.9883999824523926
topics[2].domain.id	https://openalex.org/domains/3
topics[2].domain.display_name	Physical Sciences
topics[2].subfield.id	https://openalex.org/subfields/1708
topics[2].subfield.display_name	Hardware and Architecture
topics[2].display_name	Parallel Computing and Optimization Techniques
is_xpac	False
apc_list
apc_paid
concepts[0].id	https://openalex.org/C41008148
concepts[0].level	0
concepts[0].score	0.8282939195632935
concepts[0].wikidata	https://www.wikidata.org/wiki/Q21198
concepts[0].display_name	Computer science
concepts[1].id	https://openalex.org/C74193536
concepts[1].level	2
concepts[1].score	0.73552405834198
concepts[1].wikidata	https://www.wikidata.org/wiki/Q574844
concepts[1].display_name	Kernel (algebra)
concepts[2].id	https://openalex.org/C2776760102
concepts[2].level	3
concepts[2].score	0.716837465763092
concepts[2].wikidata	https://www.wikidata.org/wiki/Q5139990
concepts[2].display_name	Code (set theory)
concepts[3].id	https://openalex.org/C513985346
concepts[3].level	3
concepts[3].score	0.6359851360321045
concepts[3].wikidata	https://www.wikidata.org/wiki/Q270471
concepts[3].display_name	Virtualization
concepts[4].id	https://openalex.org/C111919701
concepts[4].level	1
concepts[4].score	0.6091711521148682
concepts[4].wikidata	https://www.wikidata.org/wiki/Q9135
concepts[4].display_name	Operating system
concepts[5].id	https://openalex.org/C111335779
concepts[5].level	2
concepts[5].score	0.5653789043426514
concepts[5].wikidata	https://www.wikidata.org/wiki/Q3454686
concepts[5].display_name	Reduction (mathematics)
concepts[6].id	https://openalex.org/C553261973
concepts[6].level	2
concepts[6].score	0.518182098865509
concepts[6].wikidata	https://www.wikidata.org/wiki/Q14579
concepts[6].display_name	Linux kernel
concepts[7].id	https://openalex.org/C173608175
concepts[7].level	1
concepts[7].score	0.4443003535270691
concepts[7].wikidata	https://www.wikidata.org/wiki/Q232661
concepts[7].display_name	Parallel computing
concepts[8].id	https://openalex.org/C98045186
concepts[8].level	2
concepts[8].score	0.44343307614326477
concepts[8].wikidata	https://www.wikidata.org/wiki/Q205663
concepts[8].display_name	Process (computing)
concepts[9].id	https://openalex.org/C2776576444
concepts[9].level	2
concepts[9].score	0.4421469271183014
concepts[9].wikidata	https://www.wikidata.org/wiki/Q303569
concepts[9].display_name	Attack surface
concepts[10].id	https://openalex.org/C43126263
concepts[10].level	2
concepts[10].score	0.4168015122413635
concepts[10].wikidata	https://www.wikidata.org/wiki/Q128751
concepts[10].display_name	Source code
concepts[11].id	https://openalex.org/C199360897
concepts[11].level	1
concepts[11].score	0.3697185516357422
concepts[11].wikidata	https://www.wikidata.org/wiki/Q9143
concepts[11].display_name	Programming language
concepts[12].id	https://openalex.org/C120314980
concepts[12].level	1
concepts[12].score	0.3479399085044861
concepts[12].wikidata	https://www.wikidata.org/wiki/Q180634
concepts[12].display_name	Distributed computing
concepts[13].id	https://openalex.org/C79974875
concepts[13].level	2
concepts[13].score	0.12146908044815063
concepts[13].wikidata	https://www.wikidata.org/wiki/Q483639
concepts[13].display_name	Cloud computing
concepts[14].id	https://openalex.org/C177264268
concepts[14].level	2
concepts[14].score	0.06309780478477478
concepts[14].wikidata	https://www.wikidata.org/wiki/Q1514741
concepts[14].display_name	Set (abstract data type)
concepts[15].id	https://openalex.org/C33923547
concepts[15].level	0
concepts[15].score	0.05761125683784485
concepts[15].wikidata	https://www.wikidata.org/wiki/Q395
concepts[15].display_name	Mathematics
concepts[16].id	https://openalex.org/C114614502
concepts[16].level	1
concepts[16].score	0.0
concepts[16].wikidata	https://www.wikidata.org/wiki/Q76592
concepts[16].display_name	Combinatorics
concepts[17].id	https://openalex.org/C2524010
concepts[17].level	1
concepts[17].score	0.0
concepts[17].wikidata	https://www.wikidata.org/wiki/Q8087
concepts[17].display_name	Geometry
keywords[0].id	https://openalex.org/keywords/computer-science
keywords[0].score	0.8282939195632935
keywords[0].display_name	Computer science
keywords[1].id	https://openalex.org/keywords/kernel
keywords[1].score	0.73552405834198
keywords[1].display_name	Kernel (algebra)
keywords[2].id	https://openalex.org/keywords/code
keywords[2].score	0.716837465763092
keywords[2].display_name	Code (set theory)
keywords[3].id	https://openalex.org/keywords/virtualization
keywords[3].score	0.6359851360321045
keywords[3].display_name	Virtualization
keywords[4].id	https://openalex.org/keywords/operating-system
keywords[4].score	0.6091711521148682
keywords[4].display_name	Operating system
keywords[5].id	https://openalex.org/keywords/reduction
keywords[5].score	0.5653789043426514
keywords[5].display_name	Reduction (mathematics)
keywords[6].id	https://openalex.org/keywords/linux-kernel
keywords[6].score	0.518182098865509
keywords[6].display_name	Linux kernel
keywords[7].id	https://openalex.org/keywords/parallel-computing
keywords[7].score	0.4443003535270691
keywords[7].display_name	Parallel computing
keywords[8].id	https://openalex.org/keywords/process
keywords[8].score	0.44343307614326477
keywords[8].display_name	Process (computing)
keywords[9].id	https://openalex.org/keywords/attack-surface
keywords[9].score	0.4421469271183014
keywords[9].display_name	Attack surface
keywords[10].id	https://openalex.org/keywords/source-code
keywords[10].score	0.4168015122413635
keywords[10].display_name	Source code
keywords[11].id	https://openalex.org/keywords/programming-language
keywords[11].score	0.3697185516357422
keywords[11].display_name	Programming language
keywords[12].id	https://openalex.org/keywords/distributed-computing
keywords[12].score	0.3479399085044861
keywords[12].display_name	Distributed computing
keywords[13].id	https://openalex.org/keywords/cloud-computing
keywords[13].score	0.12146908044815063
keywords[13].display_name	Cloud computing
keywords[14].id	https://openalex.org/keywords/set
keywords[14].score	0.06309780478477478
keywords[14].display_name	Set (abstract data type)
keywords[15].id	https://openalex.org/keywords/mathematics
keywords[15].score	0.05761125683784485
keywords[15].display_name	Mathematics
language	en
locations[0].id	pmh:oai:arXiv.org:1903.06889
locations[0].is_oa	True
locations[0].source.id	https://openalex.org/S4306400194
locations[0].source.issn
locations[0].source.type	repository
locations[0].source.is_oa	True
locations[0].source.issn_l
locations[0].source.is_core	False
locations[0].source.is_in_doaj	False
locations[0].source.display_name	arXiv (Cornell University)
locations[0].source.host_organization	https://openalex.org/I205783295
locations[0].source.host_organization_name	Cornell University
locations[0].source.host_organization_lineage	https://openalex.org/I205783295
locations[0].license
locations[0].pdf_url	https://arxiv.org/pdf/1903.06889
locations[0].version	submittedVersion
locations[0].raw_type
locations[0].license_id
locations[0].is_accepted	False
locations[0].is_published	False
locations[0].raw_source_name
locations[0].landing_page_url	http://arxiv.org/abs/1903.06889
locations[1].id	doi:10.48550/arxiv.1903.06889
locations[1].is_oa	True
locations[1].source.id	https://openalex.org/S4306400194
locations[1].source.issn
locations[1].source.type	repository
locations[1].source.is_oa	True
locations[1].source.issn_l
locations[1].source.is_core	False
locations[1].source.is_in_doaj	False
locations[1].source.display_name	arXiv (Cornell University)
locations[1].source.host_organization	https://openalex.org/I205783295
locations[1].source.host_organization_name	Cornell University
locations[1].source.host_organization_lineage	https://openalex.org/I205783295
locations[1].license
locations[1].pdf_url
locations[1].version
locations[1].raw_type	article
locations[1].license_id
locations[1].is_accepted	False
locations[1].is_published
locations[1].raw_source_name
locations[1].landing_page_url	https://doi.org/10.48550/arxiv.1903.06889
indexed_in	arxiv, datacite
authorships[0].author.id	https://openalex.org/A5003772269
authorships[0].author.orcid
authorships[0].author.display_name	Hsuan-Chi Kuo
authorships[0].author_position	first
authorships[0].raw_author_name	Hsuan-Chi Kuo
authorships[0].is_corresponding	False
authorships[1].author.id	https://openalex.org/A5091838903
authorships[1].author.orcid
authorships[1].author.display_name	Akshith Gunasekaran
authorships[1].author_position	middle
authorships[1].raw_author_name	Akshith Gunasekaran
authorships[1].is_corresponding	False
authorships[2].author.id	https://openalex.org/A5081925472
authorships[2].author.orcid	https://orcid.org/0000-0003-4368-9736
authorships[2].author.display_name	Yeongjin Jang
authorships[2].author_position	middle
authorships[2].raw_author_name	Yeongjin Jang
authorships[2].is_corresponding	False
authorships[3].author.id	https://openalex.org/A5081803093
authorships[3].author.orcid	https://orcid.org/0000-0002-3295-0233
authorships[3].author.display_name	Sibin Mohan
authorships[3].author_position	middle
authorships[3].raw_author_name	Sibin Mohan
authorships[3].is_corresponding	False
authorships[4].author.id	https://openalex.org/A5062173431
authorships[4].author.orcid	https://orcid.org/0000-0002-5440-0785
authorships[4].author.display_name	Rakesh B. Bobba
authorships[4].author_position	middle
authorships[4].raw_author_name	Rakesh B. Bobba
authorships[4].is_corresponding	False
authorships[5].author.id	https://openalex.org/A5049933072
authorships[5].author.orcid	https://orcid.org/0000-0002-2000-6827
authorships[5].author.display_name	David Lie
authorships[5].author_position	middle
authorships[5].raw_author_name	David Lie
authorships[5].is_corresponding	False
authorships[6].author.id	https://openalex.org/A5070605597
authorships[6].author.orcid
authorships[6].author.display_name	Jesse Walker
authorships[6].author_position	last
authorships[6].raw_author_name	Jesse Walker
authorships[6].is_corresponding	False
has_content.pdf	False
has_content.grobid_xml	False
is_paratext	False
open_access.is_oa	True
open_access.oa_url	https://arxiv.org/pdf/1903.06889
open_access.oa_status	green
open_access.any_repository_has_fulltext	False
created_date	2025-10-10T00:00:00
display_name	MultiK: A Framework for Orchestrating Multiple Specialized Kernels
has_fulltext	False
is_retracted	False
updated_date	2025-11-06T06:51:31.235846
primary_topic.id	https://openalex.org/T11424
primary_topic.field.id	https://openalex.org/fields/17
primary_topic.field.display_name	Computer Science
primary_topic.score	1.0
primary_topic.domain.id	https://openalex.org/domains/3
primary_topic.domain.display_name	Physical Sciences
primary_topic.subfield.id	https://openalex.org/subfields/1702
primary_topic.subfield.display_name	Artificial Intelligence
primary_topic.display_name	Security and Verification in Computing
related_works	https://openalex.org/W3169265188, https://openalex.org/W2267484144, https://openalex.org/W1907653724, https://openalex.org/W2614013133, https://openalex.org/W840375602, https://openalex.org/W4387446146, https://openalex.org/W2000179394, https://openalex.org/W2402520897, https://openalex.org/W2786854043, https://openalex.org/W2550269402
cited_by_count	8
counts_by_year[0].year	2024
counts_by_year[0].cited_by_count	1
counts_by_year[1].year	2021
counts_by_year[1].cited_by_count	4
counts_by_year[2].year	2020
counts_by_year[2].cited_by_count	3
locations_count	2
best_oa_location.id	pmh:oai:arXiv.org:1903.06889
best_oa_location.is_oa	True
best_oa_location.source.id	https://openalex.org/S4306400194
best_oa_location.source.issn
best_oa_location.source.type	repository
best_oa_location.source.is_oa	True
best_oa_location.source.issn_l
best_oa_location.source.is_core	False
best_oa_location.source.is_in_doaj	False
best_oa_location.source.display_name	arXiv (Cornell University)
best_oa_location.source.host_organization	https://openalex.org/I205783295
best_oa_location.source.host_organization_name	Cornell University
best_oa_location.source.host_organization_lineage	https://openalex.org/I205783295
best_oa_location.license
best_oa_location.pdf_url	https://arxiv.org/pdf/1903.06889
best_oa_location.version	submittedVersion
best_oa_location.raw_type
best_oa_location.license_id
best_oa_location.is_accepted	False
best_oa_location.is_published	False
best_oa_location.raw_source_name
best_oa_location.landing_page_url	http://arxiv.org/abs/1903.06889
primary_location.id	pmh:oai:arXiv.org:1903.06889
primary_location.is_oa	True
primary_location.source.id	https://openalex.org/S4306400194
primary_location.source.issn
primary_location.source.type	repository
primary_location.source.is_oa	True
primary_location.source.issn_l
primary_location.source.is_core	False
primary_location.source.is_in_doaj	False
primary_location.source.display_name	arXiv (Cornell University)
primary_location.source.host_organization	https://openalex.org/I205783295
primary_location.source.host_organization_name	Cornell University
primary_location.source.host_organization_lineage	https://openalex.org/I205783295
primary_location.license
primary_location.pdf_url	https://arxiv.org/pdf/1903.06889
primary_location.version	submittedVersion
primary_location.raw_type
primary_location.license_id
primary_location.is_accepted	False
primary_location.is_published	False
primary_location.raw_source_name
primary_location.landing_page_url	http://arxiv.org/abs/1903.06889
publication_date	2019-03-16
publication_year	2019
referenced_works	https://openalex.org/W1522250664, https://openalex.org/W2761578098, https://openalex.org/W2079029390, https://openalex.org/W2145287008, https://openalex.org/W2034101145, https://openalex.org/W2137756679, https://openalex.org/W2883613460, https://openalex.org/W26267215, https://openalex.org/W19830081, https://openalex.org/W1988143662, https://openalex.org/W1976166916, https://openalex.org/W2512784977, https://openalex.org/W2150858564, https://openalex.org/W2148686658, https://openalex.org/W2109219878, https://openalex.org/W2950545970, https://openalex.org/W2134939854, https://openalex.org/W2402520897, https://openalex.org/W1459231281, https://openalex.org/W2296251644
referenced_works_count	20
abstract_inverted_index.1	6
abstract_inverted_index.a	3, 31, 79, 106, 151
abstract_inverted_index.--	127
abstract_inverted_index.19	90
abstract_inverted_index.23	92
abstract_inverted_index.OS	116
abstract_inverted_index.We	0, 119
abstract_inverted_index.an	71
abstract_inverted_index.by	16, 122
abstract_inverted_index.in	30
abstract_inverted_index.is	36, 74, 105, 140
abstract_inverted_index.of	61, 85, 91, 153
abstract_inverted_index.on	66, 78
abstract_inverted_index.to	38, 76, 130, 142
abstract_inverted_index.(a)	83
abstract_inverted_index.(b)	89
abstract_inverted_index.(c)	98
abstract_inverted_index.For	69
abstract_inverted_index.The	137
abstract_inverted_index.and	63, 97, 115, 125, 132
abstract_inverted_index.are	25
abstract_inverted_index.can	109
abstract_inverted_index.for	12, 27
abstract_inverted_index.has	82
abstract_inverted_index.its	86
abstract_inverted_index.not	149
abstract_inverted_index.run	48, 77
abstract_inverted_index.the	9, 49, 59, 67, 143, 154
abstract_inverted_index.two	128
abstract_inverted_index.This	34
abstract_inverted_index.and,	45
abstract_inverted_index.code	18, 42, 87, 113
abstract_inverted_index.does	148
abstract_inverted_index.most	46
abstract_inverted_index.runs	64
abstract_inverted_index.that	7, 24, 81, 108
abstract_inverted_index.this	121
abstract_inverted_index.user	144
abstract_inverted_index.with	52, 99, 111
abstract_inverted_index.D-KUT	124
abstract_inverted_index.S-KUT	126
abstract_inverted_index.code.	136
abstract_inverted_index.known	93
abstract_inverted_index.shown	75
abstract_inverted_index.using	123
abstract_inverted_index.whole	138
abstract_inverted_index.93.68%	84
abstract_inverted_index.Apache	72
abstract_inverted_index.MultiK	20, 57, 104, 147
abstract_inverted_index.attack	10
abstract_inverted_index.avoids	58
abstract_inverted_index.bloat.	19
abstract_inverted_index.kernel	41, 80, 94, 135
abstract_inverted_index.system	14
abstract_inverted_index.MultiK,	2
abstract_inverted_index.because	146
abstract_inverted_index.kernels	15, 23, 51
abstract_inverted_index.manner.	33
abstract_inverted_index.methods	129
abstract_inverted_index.process	139
abstract_inverted_index.profile	131
abstract_inverted_index.reduces	8
abstract_inverted_index.require	150
abstract_inverted_index.runtime	55
abstract_inverted_index.surface	11
abstract_inverted_index.system.	68
abstract_inverted_index.(0.19%).	103
abstract_inverted_index.existing	112
abstract_inverted_index.flexible	37
abstract_inverted_index.instance	73
abstract_inverted_index.multiple	22
abstract_inverted_index.natively	65
abstract_inverted_index.present,	1
abstract_inverted_index.reduced,	88
abstract_inverted_index.reducing	17
abstract_inverted_index.security	117
abstract_inverted_index.unwanted	134
abstract_inverted_index.different	40
abstract_inverted_index.eliminate	133
abstract_inverted_index.framework	5, 35, 107
abstract_inverted_index.instance,	70
abstract_inverted_index.integrate	110
abstract_inverted_index.near-zero	53
abstract_inverted_index.operating	13
abstract_inverted_index.overheads	60, 102
abstract_inverted_index.reduction	43, 114
abstract_inverted_index.additional	54
abstract_inverted_index.eliminated	96
abstract_inverted_index.individual	28
abstract_inverted_index.negligible	100
abstract_inverted_index.overheads.	56
abstract_inverted_index.techniques	44
abstract_inverted_index.Linux-based	4
abstract_inverted_index.accommodate	39
abstract_inverted_index.demonstrate	120
abstract_inverted_index.performance	101
abstract_inverted_index.specialized	26, 50
abstract_inverted_index.techniques.	118
abstract_inverted_index.transparent	32, 141
abstract_inverted_index.application.	155
abstract_inverted_index.applications	29, 145
abstract_inverted_index.importantly,	47
abstract_inverted_index.recompilation	152
abstract_inverted_index."orchestrates"	21
abstract_inverted_index.virtualization	62
abstract_inverted_index.vulnerabilities	95
cited_by_percentile_year
countries_distinct_count	0
institutions_distinct_count	7
sustainable_development_goals[0].id	https://metadata.un.org/sdg/16
sustainable_development_goals[0].score	0.5199999809265137
sustainable_development_goals[0].display_name	Peace, Justice and strong institutions
citation_normalized_percentile