Current Works

• eBPF and safe user code, including Rust, in the kernel
• New mechanisms for process sandboxing and isolation
• Lightweight computing abstractions in the cloud (e.g., serverless)
• Confidential computing: enclaves (Intel SGX, TDX, AMD SEV, etc.)