一句话：提出 VDom，旨在多种架构上实现快速且数量不受限的虚拟内存域，以解决硬件内存域受限与现有虚拟化高开销问题。
硬件内存域原语（如 Intel MPK 和 ARM Memory Domain）能够高效支持进程内内存隔离，但只能提供有限数量的内存域（16 个），难以满足进程地址空间中需要更多隔离域的场景。现有虚拟化内存域方案存在两难：要么需要修改现有硬件，具有侵入性；要么带来较大的性能开销。针对这些问题，论文提出 VDom，目标是在多种架构上提供快速且数量不受限的虚拟内存域，从而在避免侵入式硬件修改和较大性能开销的同时扩展进程内隔离能力。摘要未给出具体实现机制与定量评估结果；标题表明该工作面向多种体系结构。
Hardware memory domain primitives, such as Intel MPK and ARM Memory Domain, have been used for efficient in-process memory isolation. However, they can only provide a limited number of memory domains (16 domains), which cannot satisfy the compelling need for more isolated domains inside the address space of a process. Existing solutions to virtualize memory domains are either intrusive (need the modification to existing hardware), or incur a large performance overhead.
@inproceedings{paperbot10012,
title = {VDom: Fast and Unlimited Virtual Domains on Multiple Architectures},
author = {Ziqi Yuan and Siyu Hong and Rui Chang and Yajin Zhou and Wenbo Shen and Kui Ren},
booktitle = {ASPLOS},
year = {2023},
doi = {10.1145/3575693.3575735}
}