1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
| | <!doctype html>
<!-- SPDX-FileCopyrightText: 2019-2023 Alyssa Ross <hi@alyssa.is> -->
<!-- SPDX-License-Identifier: CC-BY-SA-4.0 OR GFDL-1.3-no-invariants-or-later -->
<!-- SPDX-License-Identifier: GPL-3.0-or-later -->
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<link rel="icon" href="logo/logo_html.svg">
<link rel="stylesheet" href="style.css">
<title>Spectrum Bibliography</title>
<body>
<nav>
<a href=".">Spectrum</a>
</nav>
<h1>Bibliography</h1>
<p>If you'd like to find out when new links are posted, subscribe to
the <a href="https://spectrum-os.org/git/www/atom/bibliography.html">cgit
atom feed for this page</a>.
<ul>
<li><cite><a href="https://flatkill.org/">Flatpak — a security
nightmare</a></cite>
<li><cite><a href="https://blog.invisiblethings.org/papers/2015/x86_harmful.pdf">Intel
x86 Considered Harmful</a></cite>
<li><cite><a href="https://mjg59.dreamwidth.org/57199.html">Producing
a trustworthy x86-based Linux appliance</a></cite>
<li><cite><a href="https://lwn.net/Articles/459420/">dm-verity</a></cite>
<li><cite><a href="https://eprint.iacr.org/2023/1529.pdf">Shufflecake:
Plausible Deniability for Multiple Hidden Filesystems on Linux</a></cite>
<li><cite><a href="https://www.qubes-os.org/">Qubes OS</a></cite>
<li><cite><a href="https://doi.org/10.1145/3132747.3132763">My VM is
Lighter (and Safer) than your Container</a></cite>
<li><cite><a href="https://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html">An
EPYC escape: Case-study of a KVM breakout</a></cite>
<li><cite><a href="https://invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf">Following
the White Rabbit: Software attacks against Intel® VT-d
technology</a></cite>
<li><cite><a href="https://doi.org/10.1145/3342195.3387526">A Linux
in Unikernel Clothing</a></cite>
<li><cite><a href="https://arxiv.org/abs/2112.06566">FlexOS: Towards
Flexible OS Isolation</a></cite>
<li><cite><a href="https://www.ozlabs.org/~rusty/virtio-spec/virtio-paper.pdf">virtio:
Towards a De-Facto Standard For Virtual I/O Devices</a></cite>
<li><cite><a href="https://docs.oasis-open.org/virtio/virtio/v1.1/virtio-v1.1.html">Virtual
I/O Device (VIRTIO) Version 1.1</a></cite>
<li><cite><a href="https://lwn.net/Articles/474088/">Safe device
assignment with VFIO</a></cite>
<li><cite><a href="https://lists.ozlabs.org/pipermail/lguest/2008-March/001064.html">Inter-guest
virtio I/O example with lguest</a></cite>
<li><cite><a href="https://lwn.net/Articles/610174/">Supporting
filesystems in persistent memory</a></cite>
<li><cite><a href="https://lwn.net/Articles/788333/">A filesystem
for virtualization</a></cite>
<li><cite><a href="https://archive.fosdem.org/2020/schedule/event/vai_virtio_fs/">virtio-fs:
Shared File System for Virtual Machines</a></cite>
<li><cite><a href="https://lwn.net/Articles/755593/">Unprivileged
filesystem mounts, 2018 edition</a></cite>
<li><cite><a href="https://www.phoronix.com/scan.php?page=news_item&px=VirtIO-DRM-Window-Server">VirtIO
DRM Window Server Support: Letting Guest VMs Interface With Host's
Compositor</a></cite>
<li><cite><a href="https://www.qemu.org/docs/master/interop/vhost-user.html">Vhost-user
Protocol</a></cite>
<li><cite><a href="https://wiki.qemu.org/Features/VirtioVhostUser">Features/VirtioVhostUser
— QEMU</a></cite>
<li><cite><a href="https://chromium.googlesource.com/chromiumos/third_party/kernel/+/refs/heads/chromeos-5.4/drivers/virtio/virtio_wl.c">Wayland
Virtio Driver</a></cite>
<li><cite><a href="https://roscidus.com/blog/blog/2021/03/07/qubes-lite-with-kvm-and-wayland/">Qubes-lite
With KVM and Wayland</a></cite>
<li><cite><a href="https://lwn.net/Articles/694291/">An initial
release of Flatpak portals for GNOME</a></cite>
<li><cite><a href="https://users.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf">Reflections
on Trusting Trust</a></cite>
<li><cite><a href="https://dwheeler.com/trusting-trust/dissertation/wheeler-trusting-trust-ddc.pdf">Fully
Countering Trusting Trust through Diverse Double-Compiling</a></cite>
<li><cite><a href="https://reproducible-builds.org/docs/buy-in/">Reproducible
Builds — Buy-in</a></cite>
<li><cite><a href="https://edolstra.github.io/pubs/phd-thesis.pdf">The
Purely Functional Software Deployment Model</a></cite>
<li><cite><a href="https://nixos.org/features.html">NixOS —
Features</a></cite>
<li><cite><a href="https://hal.inria.fr/hal-00824004/document">Functional
Package Management with Guix</a></cite>
<li><cite><a href="https://chromium.googlesource.com/chromiumos/platform/crosvm">Chrome
OS Virtual Machine Monitor</a></cite>
<li><cite><a href="https://prilik.com/blog/2019/05/16/crosvm-paravirt.html">Paravirtualized
Devices in crosvm — a Performance Panacea for Modern Virtual
Machines</a></cite>
<li><cite><a href="https://assets.amazon.science/96/c6/302e527240a3b1f86c86c3e8fc3d/firecracker-lightweight-virtualization-for-serverless-applications.pdf">Firecracker:
Lightweight Virtualization for Serverless Applications</a></cite>
<li><cite><a href="https://github.com/firecracker-microvm/firecracker/blob/master/docs/vsock.md#firecracker-virtio-vsock-design">Firecracker
Virtio-vsock Design</a></cite>
<li><cite><a href="https://github.com/cloud-hypervisor/cloud-hypervisor">cloud-hypervisor</a></cite>
</ul>
<p>
<small>Permission is granted to copy, distribute and/or modify this
document under either the terms of the
<a href="https://creativecommons.org/licenses/by-sa/4.0/">Creative
Commons Attribution-ShareAlike 4.0 International License</a>, or the
<a href="https://www.gnu.org/licenses/fdl-1.3.html">GNU Free
Documentation License, Version 1.3</a> or any later version published
by the Free Software Foundation; with no Invariant Sections, no
Front-Cover Texts, and no Back-Cover Texts.</small>
<p>
<a href="impressum.html" lang="de"><small>Impressum</small></a>
|