一句话：CubicleOS通过软件组件化在库操作系统中实现组件间隔离，防止第三方组件的安全威胁。
库操作系统常被用于在容器、虚拟机或可信执行环境中部署应用，采用高度模块化设计组合第三方组件提供所需OS功能，并在编译和部署时定制。但其单块式设计缺乏组件间隔离：当应用和OS组件包含安全敏感数据（如密钥或用户数据）时，恶意或有漏洞的第三方组件可造成安全泄露。CubicleOS提出为库操作系统引入软件组件化，实现组件间的实用隔离，以限制第三方组件对安全敏感数据的访问。摘要未报告具体评估结果。
Library OSs have been proposed to deploy applications isolated inside containers, VMs, or trusted execution environments. They often follow a highly modular design in which third-party components are combined to offer the OS functionality needed by an application, and they are customised at compilation and deployment time to fit application requirements. Yet their monolithic design lacks isolation across components: when applications and OS components contain security-sensitive data (e.g., cryptographic keys or user data), the lack of isolation renders library OSs open to security breaches via malicious or vulnerable third-party components.
DOI 原文 ·
@inproceedings{paperbot6105,
title = {CubicleOS: a library OS with software componentisation for practical isolation},
author = {Vasily A. Sartakov and Lluís Vilanova and Peter Pietzuch},
booktitle = {ASPLOS},
year = {2021},
doi = {10.1145/3445814.3446731}
}