3 रिपॉजिटरी
Binds each task to its own controlled view of the system through virtual, mapped, and isolated contexts, ensuring predictable behavior under concurrency and preemption.
Distinct from Execution Isolation: Distinct from Execution Isolation: focuses on kernel-level task isolation with virtual and mapped contexts, not general runtime security boundaries.
Explore 3 awesome GitHub repositories matching security & cryptography · Kernel Task Execution Isolations. Refine with filters or upvote what's useful.
CppGuide is a curated collection of educational resources and practical guides focused on C++ server development, Linux kernel internals, concurrent programming, network protocols, and security exploitation. It provides structured learning paths for backend developers, covering everything from interview preparation to building high-performance network servers and understanding operating system fundamentals. The guide distinguishes itself by offering in-depth, hands-on tutorials that walk through real-world implementations, including building a Redis-like server from scratch, designing custom
Explains kernel task execution isolation using virtual and mapped contexts.
Asterinas is a memory-safe operating system kernel designed to prevent data races and memory corruption. It functions as a Linux-ABI compatible kernel, enabling the execution of existing Linux binaries and container workloads while providing a declarative operating system distribution model. The project distinguishes itself by acting as a virtual machine container host and a confidential computing guest OS, allowing it to run within hardware-isolated Trusted Execution Environments such as Intel TDX. It implements a minimal trusted computing base by isolating unsafe low-level operations and se
Creates isolated environments by disassociating processes from shared system resources.
The sandbox-sdk is a development kit designed for building secure, isolated execution environments on a global edge network. It provides a framework for creating ephemeral, containerized workspaces that allow developers to run untrusted code, manage build tasks, and host automated scripts without compromising host system security. By leveraging a serverless runtime, the platform enables the deployment of these environments directly at the network edge to ensure low-latency performance. The platform distinguishes itself by integrating language models with sandboxed execution, facilitating the
Runs automated scripts and long-running computational tasks within secure, isolated containers to maintain system stability.