Two papers accepted at IEEE ACDSA 2026
Two papers from my doctorate work have been accepted and published at IEEE ACDSA 2026. I have uploaded the preprints.
Per-Request Isolation in TinyKVM with Unmodified Applications
This paper describes how TinyKVM makes per-request isolation usable for the first time by nearly matching native performance when serving requests from an unmodified Deno (latest version from webpage). We show that a complex React page rendering has better p90 and p99 in TinyKVM compared to native, and p50 is nearly equal, which we attribute to TinyKVM acting like a flat arena similar to those used in game engines.
Emulator Remote Execution Using Merged Address Spaces
This paper presents a method for remote execution between emulator instances by merging their address spaces. It enables one sandboxed program to make transparent function calls into another by sharing memory regions, avoiding serialization overhead while preserving isolation boundaries (in one direction). Clever tricks also enable ABI-compatible function arguments like passing C++ classes or Rust structs directly.