yusuke1997/dblp-id-title huggingface dataset:
Role Classification of Hosts Within Enterprise Networks Based on Connection Patterns
Improving Scalability and Fault Tolerance in an Application Management Infrastructure
Integrating Real-Time Video with Sun Workstations
FastCDC: a Fast and Efficient Content-Defined Chunking Approach for Data Deduplication
Introduction to the Shadow Password Suite
Data Sharing or Resource Contention: Toward Performance Transparency on Multicore Systems
Practical and Effective Sandboxing for Non-root Users
Reclaiming Network-wide Visibility Using Ubiquitous Endsystem Monitors
Scalable NUMA-aware Blocking Synchronization Primitives
Request-Oriented Durable Write Caching for Application Performance
Asynchronous I/O Stack: A Low-latency Kernel I/O Stack for Ultra-Low Latency SSDs
Modulo: Finding Convergence Failure Bugs in Distributed Systems with Divergence Resync Models
A Process Migration Implementation for a Unix System
Reliability and Security in the CoDeeN Content Distribution Network
GLIST: Towards In-Storage Graph Learning
Titan: Fair Packet Scheduling for Commodity Multiqueue NICs
Power Budgeting for Virtualized Data Centers
FwdLLM: Efficient Federated Finetuning of Large Language Models with Perturbed Inferences
Removing Obstacles before Breaking Through the Memory Wall: A Close Look at HBM Errors in the Field
Proceedings of the Summer 1991 USENIX Conference, Nashville, TE, USA, June 1991
Reducing File System Latency using a Predictive Approach
Granola: Low-Overhead Distributed Transaction Coordination
Opening Up Kernel-Bypass TCP Stacks
Resilient Connections for SSH and TLS
TRON: Process-Specific File Protection for the UNIX Operating System
Implementing Lightweight Threads
CUP: Controlled Update Propagation in Peer-to-Peer Networks
FastCommit: resource-efficient, performant and cost-effective file system journaling
FlexPipe: Maximizing Training Efficiency for Transformer-based Models with Variable-Length Inputs
A Real-Time Electronic Conferencing System based on Distributed UNIX
Energy Efficient Prefetching and Caching (Awarded Best Paper!)
An Implementation of User-level Restartable Atomic Sequences on the NetBSD Operating System
Design and Implementation of a Predictive File Prefetching Algorithm
VideoChef: Efficient Approximation for Streaming Video Processing Pipelines
Emulating Space Computing Networks with RHONE
ZeRO-Offload: Democratizing Billion-Scale Model Training
LPD: Low Power Display Mechanism for Mobile and Wearable Devices
MTS: Bringing Multi-Tenancy to Virtual Networking
CDE: Using System Call Interposition to Automatically Create Portable Software Packages
OSCA: An Online-Model Based Cache Allocation Scheme in Cloud Block Storage Systems
An Environment for SGML Document Preparation
Composable Reliability for Asynchronous Systems
UnFaaSener: Latency and Cost Aware Offloading of Functions from Serverless Platforms
Models on the Move: Towards Feasible Embedded AI for Intrusion Detection on Vehicular CAN Bus
Multi-Hypervisor Virtual Machines: Enabling an Ecosystem of Hypervisor-level Services
E3: Energy-Efficient Microservices on SmartNIC-Accelerated Servers
Organizing Tools in a Uniform Environment Framework
SplitJoin: A Scalable, Low-latency Stream Join Architecture with Adjustable Ordering Precision
Litz: Elastic Framework for High-Performance Distributed Machine Learning
Crash Consistency in Block-Level Caching Systems: An Open CAS Case Study
vIC: Interrupt Coalescing for Virtual Machine Storage Device IO
Experiences with Client-based Speculative Remote Display
NFS Version 3: Design and Implementation
A New Exception Handling Mechanism for the UNIX Kernel
Linking Programs in a Single Address Space
Insight: In-situ Online Service Failure Path Inference in Production Computing Infrastructures
Elastic Memory Management for Cloud Data Analytics
Offload Annotations: Bringing Heterogeneous Computing to Existing Libraries and Workloads
IASO: A Fail-Slow Detection and Mitigation Framework for Distributed Storage Services
Network Subsystems Reloaded: A High-Performance, Defensible Network Subsystem
Panel: Is University Systems Teaching and Research Relevant to Industry?
Palleon: A Runtime System for Efficient Video Processing toward Dynamic Class Skew
Proceedings of the 2013 USENIX Annual Technical Conference, USENIX ATC 2013, San Jose, CA, USA, June 26-28, 2013
MEANTIME: Achieving Both Minimal Energy and Timeliness with Approximate Computing
In-Place Rsync: File Synchronization for Mobile and Wireless Devices
Fast, Scalable Disk Imaging with Frisbee
Software Techniques for Avoiding Hardware Virtualization Exits
The Region Trap Library: Handling Traps on Application-Defined Regions of Memory
HiKV: A Hybrid Index Key-Value Store for DRAM-NVM Memory Systems
gVulkan: Scalable GPU Pooling for Pixel-Grained Rendering in Ray Tracing
Lightweight Application-Level Crash Consistency on Transactional Flash Storage
Kernel-Supported Cost-Effective Audit Logging for Causality Tracking
Track-based Translation Layers for Interlaced Magnetic Recording
Making the "Box" Transparent: System Call Performance as a First-Class Result
Software and Intellectual Property - Who Owns Your Work?
Limitations of the Kerberos Authentication System
LADDIS: The Next Generation in NFS File Server Benchmarking
Proceedings of the Usenix Winter 1993 Technical Conference, San Diego, California, USA, January 1993
Turning the AIX Operating System into an MP-capable OS
Transparent Contribution of Memory
Config-Snob: Tuning for the Best Configurations of Networking Protocol Stack
Metis: Robustly Tuning Tail Latencies of Cloud Systems
UNIX Disk Access Patterns
The OSF/1 UNIX Filesystem (UFS)
Application Memory Isolation on Ultra-Low-Power MCUs
Dalek: A GNU, Improved Programmable Debugger
Reboots Are for Hardware: Challenges and Solutions to Updating an Operating System on the Fly
Context-Aware Mechanisms for Reducing Interactive Delays of Energy Management in Disks
SmartMoE: Efficiently Training Sparsely-Activated Models through Combining Offline and Online Parallelization
LiteGreen: Saving Energy in Networked Desktops Using Virtualization
Model Governance: Reducing the Anarchy of Production ML
Cooperative Task Management Without Manual Stack Management
Hashing Design in Modern Networks: Challenges and Mitigation Techniques
The Enterprise Distributed White-pages Service
Fast and Precise Retrieval of Forward and Back Porting Information for Linux Device Drivers
Securing Web Service by Automatic Robot Detection
Analysis and Evolution of Journaling File Systems
Swarm: A Log-Structured Storage System for Linux
Systematically Exploring the Behavior of Control Programs
HACK: Hierarchical ACKs for Efficient Wireless Medium Utilization
U-root: A Go-based, Firmware Embeddable Root File System with On-demand Compilation
Decentralized Application-Level Adaptive Scheduling for Multi-Instance DNNs on Open Mobile Devices
FreeVGA: Architecture Independent Video Graphics Initialization for LinuxBIOS
Argus: Debugging Performance Issues in Modern Desktop Applications with Annotated Causal Tracing
Pre-Select Static Caching and Neighborhood Ordering for BFS-like Algorithms on Disk-based Graph Engines
Why does file system prefetching work?
SAGE: Software-based Attestation for GPU Execution
Apps with Hardware: Enabling Run-time Architectural Customization in Smart Phones
Gscope: A Visualization Tool for Time-Sensitive Software
An Internet Gatekeeper
World Wide Web Cache Consistency
Probing TCP Implementations
Pragmatic Nonblocking Synchronization for Real-Time Systems
Increasing Effective Link Bandwidth by Supressing Replicated Data
HotRAP: Hot Record Retention and Promotion for LSM-trees with Tiered Storage
Redesigning LSMs for Nonvolatile Memory with NoveLSM
Reducing Seek Overhead with Application-Directed Prefetching
Tcl: An Embeddable Command Language
Adaptive Main Memory Compression
Secure Short-Cut Routing for Mobile IP
Design Considerations for JPEG Video and Synchronized Audio in a UNIX Workstation Environment
Adaptive Placement for In-memory Storage Functions
The Desktop File System
Design and Performance of the OpenBSD Stateful Packet Filter (pf)
Execution Templates: Caching Control Plane Decisions for Strong Scaling of Data Analytics
MetaSync: File Synchronization Across Multiple Untrusted Storage Services
RubbleDB: CPU-Efficient Replication with NVMe-oF
Efficient Kernel Memory Allocation on Shared-Memory Multiprocessors
Selecta: Heterogeneous Cloud Storage Configuration for Data Analytics
A Workstation-based Multi-media Environment for Broadcast Television
A Dynamic File System Inode Allocation and Reclaim Policy
Flexibility in ROM: A Stackable Open Source BIOS
A Tool for Automated iptables Firewall Analysis
DEFCON: High-Performance Event Processing with Information Security
Effectively Prefetching Remote Memory with Leap
Redundancy Elimination Within Large Collections of Files
MSRL: Distributed Reinforcement Learning with Dataflow Fragments
StRAID: Stripe-threaded Architecture for Parity-based RAIDs with Ultra-fast SSDs
EnvPipe: Performance-preserving DNN Training Framework for Saving Energy
STRADS-AP: Simplifying Distributed Machine Learning Programming without Introducing a New Programming Model
Congestion Control in Linux TCP
AutoARTS: Taxonomy, Insights and Tools for Root Cause Labelling of Incidents in Microsoft Azure
Software Persistent Memory
Isolation with Flexibility: A Resource Management Framework for Central Servers
A Transport Layer Approach for Improving End-to-End Performance and Robustness Using Redundant Paths
RRC: Responsive Replicated Containers
Building a Power-Proportional Software Router
Proceedings of the 2025 USENIX Annual Technical Conference, USENIX ATC 2025, Boston, MA, USA, July 7-9, 2025
Bringing the C Libraries With Us into a Multi-Threaded Future
Robust, Portable I/O Scheduling with the Disk Mimic
LOMAC: MAC You Can Live With
Scalable Billion-point Approximate Nearest Neighbor Search Using SmartSSDs
ScalaCache: Scalable User-Space Page Cache Management with Software-Hardware Coordination
Dynamic Reconfiguration of Primary/Backup Clusters
Trapeze/IP: TCP/IP at Near-Gigabit Speeds
Interactive Performance Measurement with VNCPlay
Sure, You Can Archive Data, But Will You Be Able to Retrieve It in 20 Years?
TidyFS: A Simple and Small Distributed File System
XCL: An Xlib Compatibility Layer for XCB
Configuration Management at Massive Scale: System Design and Experience
Improving the FreeBSD SMP Implementation
The Multi-Queue Replacement Algorithm for Second Level Buffer Caches
A Comparison of File System Workloads
Protego: Cloud-Scale Multitenant IPsec Gateway
Checkpoints of GUI-based Applications
Acclaim: Adaptive Memory Reclaim to Improve User Experience in Android Systems
Don't share, Don't lock: Large-scale Software Connection Tracking with Krononat
Thwarting the Power-Hungry Disk
Design Tradeoffs for SSD Performance
Integrating Handwriting Recognition into UNIX
Exploiting In-Kernel Data Paths to Improve I/O Throughput and CPU Availability
Generating Realistic Datasets for Deduplication Analysis
Adaptive Modem Connection Lifetimes
GraphWalker: An I/O-Efficient and Resource-Friendly Graph Analytic System for Fast and Scalable Random Walks
Apiary: Easy-to-Use Desktop Application Fault Containment on Commodity Operating Systems
Unsafe Time Handling in Smartphones
The Hesiod Name Server
PYLIVE: On-the-Fly Code Change for Python-based Online Services
Trickle: A Userland Bandwidth Shaper for UNIX-like Systems
A Fast Transaction Oriented Protocol for Distributed Applications
Predictable Management of System Resources for Linux
Fault Tolerance in a Distributed CHORUS/MiX System
Boosting GPU Virtualization Performance with Hybrid Shadow Page Tables
Proceedings of the USENIX Annual Technical Conference, San Diego, California, USA, January 22-26, 1996
Building a Reactive Immune System for Software Services
Proceedings of the 2005 USENIX Annual Technical Conference, April 10-15, 2005, Anaheim, CA, USA
Mining Invariants from Console Logs for System Problem Detection
Confidential Computing within an AI Accelerator
UNIX Services for Multilevel Storage and Communications Over a Secure LAN
Auto-Diagnosis of Field Problems in an Appliance Operating System
Lessons Learned from the Chameleon Testbed
Accelerating Distributed MoE Training and Inference with Lina
Lazy Asynchronous I/O for Event-Driven Servers
Faith: An Efficient Framework for Transformer Verification on GPUs
Evolving Mach 3.0 to A Migrating Thread Model
High Performance VMM-Bypass I/O in Virtual Machines
ASK: Active Spam Killer
Deploying User-space TCP at Cloud Scale with LUNA
A Flash-Memory Based File System
AWARE: Automate Workload Autoscaling with Reinforcement Learning in Production Cloud Systems
How DNS Misnaming Distorts Internet Topology Mapping
Telescope: Telemetry for Gargantuan Memory Footprint Applications
StackMap: Low-Latency Networking with the OS Stack and Dedicated NICs
Jump-Starting Multivariate Time Series Anomaly Detection for Online Service Systems
Cntr: Lightweight OS Containers
Sift: Using Refinement-guided Automation to Verify Complex Distributed Systems
The Architecture of the IRCAM Musical Workstation
Proceedings of the 2023 USENIX Annual Technical Conference, USENIX ATC 2023, Boston, MA, USA, July 10-12, 2023
Scwm: An Extensible Constraint-Enabled Window Manager
Measuring CPU Overhead for I/O Processing in the Xen Virtual Machine Monitor
A Hierarchical Internet Object Cache
PIKACHU: How to Rebalance Load in Optimizing MapReduce On Heterogeneous Clusters
Optimus: Accelerating Large-Scale Multi-Modal LLM Training by Bubble Exploitation
KVIMR: Key-Value Store Aware Data Management Middleware for Interlaced Magnetic Recording Based Hard Disk Drive
Inferring Likely Counting-related Atomicity Program Properties for Persistent Memory
Interactive 3D Graphics Applications for Tcl
JITServer: Disaggregated Caching JIT Compiler for the JVM in the Cloud
SunOS Multi-thread Architecture
Daydream: Accurately Estimating the Efficacy of Optimizations for DNN Training
A New Object-Oriented Programming Language: sh
The MultiSpace: An Evolutionary Platform for Infrastructural Services
Adaptable Binary Programs
When Network File Systems Aren't Enough: Automatic Software Distribution Revisited
Sibylla: To Retry or Not To Retry on Deep Learning Job Failure
StreamBox: A Lightweight GPU SandBox for Serverless Inference Workflow
Glish: A User-Level Software Bus for Loosely-Coupled Distributed Systems
Fast (Trapless) Kernel Probes Everywhere
Evaluating Block-level Optimization Through the IO Path
Drive-Thru: Fast, Accurate Evaluation of Storage Power Management
Fast Distributed Transactions for RDMA-based Disaggregated Memory
Controlling Memory Footprint of Stateful Streaming Graph Processing
Using Provenance to Aid in Personal File Search
CoSMIX: A Compiler-based System for Secure Memory Instrumentation and Execution in Enclaves
Workstation Support for Real-Time Multimedia Communication
System Support for Online Reconfiguration
CSE - A C++ Servlet Environment for High-Performance Web Applications
Whale: Efficient Giant Model Training over Heterogeneous GPUs
Optimizing the TLB Shootdown Algorithm with Page Access Tracking
Universal Checkpointing: A Flexible and Efficient Distributed Checkpointing System for Large-Scale DNN Training with Reconfigurable Parallelism
Taming Hot Bloat Under Virtualization with HUGESCOPE
Seagull: Intelligent Cloud Bursting for Enterprise Applications
PMON: Graphical Performance Monitoring Tool
A Portable Run-time System for the Hermes Distributed Programming Language
Virtualizing Energy Storage Management Using RAIBA
Opportunistic Use of Content Addressable Storage for Distributed File Systems
An Embedded Error Recovery and Debugging Mechanism for Scripting Language Extensions
A Case Study of Processing-in-Memory in off-the-Shelf Systems
A Multi-Site Virtual Cluster System for Wide Area Networks
SILK: Preventing Latency Spikes in Log-Structured Merge Key-Value Stores
One-sided RDMA-Conscious Extendible Hashing for Disaggregated Memory
The Case for Compressed Caching in Virtual Memory Systems
#ifdef Considered Harmful, or Portability Experience with C News
DEFINED: Deterministic Execution for Interactive Control-Plane Debugging
PostMan: Rapidly Mitigating Bursty Traffic by Offloading Packet Processing
LAP: A Little Language for OS Emulation
PilotFish: Harvesting Free Cycles of Cloud Gaming with Deep Learning Training
Operating System Support for Distributed Multimedia
The Design and Implementation of Hyperupcalls
KRCORE: A Microsecond-scale RDMA Control Plane for Elastic Computing
gScale: Scaling up GPU Virtualization with Dynamic Sharing of Graphics Memory Space
Practical Erase Suspension for Modern Low-latency SSDs
Free Software and High-Power Rocketry: The Portland State Aerospace Society
ChunkStash: Speeding Up Inline Storage Deduplication Using Flash Memory
Alternatives for Detecting Redundancy in Storage Systems Data
On-demand Container Loading in AWS Lambda
The Design and Implementation of a Mobile Internetworking Architecture
Structured and Unstructured Overlays under the Microscope: A Measurement-based View of Two P2P Systems That People Use
An Implementation of Scheduler Activations on the NetBSD Operating System
TIPS: Making Volatile Index Structures Persistent with DRAM-NVMM Tiering
Permanent Web Publishing
Resizable, Scalable, Concurrent Hash Tables via Relativistic Programming
Process Cloning: A System for Duplicating UNIX Processes
On the Efficiency of Durable State Machine Replication
Specializing General-Purpose Computing: A New Approach to Designing Clusters for High-Performance Technical Computing
KSG: Augmenting Kernel Fuzzing with System Call Specification Generation
Dayu: Fast and Low-interference Data Recovery in Very-large Storage Systems
Proceedings of the Usenix Winter 1991 Conference, Dallas, TX, USA, January 1991
Cognitive SSD: A Deep Learning Engine for In-Storage Data Retrieval
Latency-Tolerant Software Distributed Shared Memory
Can Applications Recover from fsync Failures?
WARLOCK - A Static Data Race Analysis Tool
PathWeaver: A High-Throughput Multi-GPU System for Graph-Based Approximate Nearest Neighbor Search
Pantheon: the training ground for Internet congestion-control research
Emerging Hypermedia Standards - Hypermedia Marketplace Frepares for HyTime and MHEG
Transparent Checkpoint-Restart of Multiple Processes on Commodity Operating Systems
Making Scheduling "Cool": Temperature-Aware Workload Placement in Data Centers
Every Mapping Counts in Large Amounts: Folio Accounting
Mangosteen: Fast Transparent Durability for Linearizable Applications using NVM
Exploring Recovery from Operating System Lockups
TrustedBSD: Adding Trusted Operating System Features to FreeBSD
FlexGroup Volumes: A Distributed WAFL File System
A Realistic Evaluation of Memory Hardware Errors and Software System Susceptibility
Implementation of a Modern Web Search Engine Cluster
Decentralized Deduplication in SAN Cluster File Systems
Nested QoS: Providing Flexible Performance in Shared IO Environment
MAGPY: Compiling Eager Mode DNN Programs by Monitoring Execution States
Performing Replacement in Modem Pools
Kernel Mechanisms for Service Differentiation in Overloaded Web Servers
Scaling Distributed File Systems in Resource-Harvesting Datacenters
Scalability of Linux Event-Dispatch Mechanisms
Insuring improved VM Performance: Some No-Fault Policies
MapJAX: Data Structure Abstractions for Asynchronous Web Applications
Max: A Multicore-Accelerated File System for Flash Storage
A Portable Kernel Abstraction for Low-Overhead Ephemeral Mapping Management
Simple Continuous Media Storage Server on Real-Time Mach
Weblint: Just Another Perl Hack
FarReach: Write-back Caching in Programmable Switches
Don't cry over spilled records: Memory elasticity of data-parallel applications and its application to cluster scheduling
Lessons Learned Tuning the 4.3BSD Reno Implementation of the NFS Protocol
Adaptive Block Rearrangement Under UNIX
Outwit: UNIX Tool-Based Programming Meets the Windows World
Latency Analysis of TCP on an ATM Network
Gleaner: Mitigating the Blocked-Waiter Wakeup Problem for Virtualized Multicore Applications
Bolt: Faster Reconfiguration in Operating Systems
ALERT: Accurate Learning for Energy and Timeliness
On Migrating a Distributed Application to a Multi-Threaded Environment
Weaver: Efficient Multi-LLM Serving with Attention Offloading
Transparent Network Security Policy Enforcement
Tributary: spot-dancing for elastic services with latency SLOs
Lamassu: Storage-Efficient Host-Side Encryption
Cache Modeling and Optimization using Miniature Simulations
Semantics of Caching with SPOCA: A Stateless, Proportional, Optimally-Consistent Addressing Algorithm
Hackers and Founders
The Parallelization of UNIX System V Release 4.0
Union Mounts in 4.4BSD-Lite
Janus: Optimal Flash Provisioning for Cloud Storage Workloads
Automatically Generating Predicates and Solutions for Configuration Troubleshooting
Using Causality to Diagnose Configuration Bugs
Live Malware Attack!
UNIX Systems as Cypress Implets
Touchstone: Generating Enormous Query-Aware Test Databases
The Big Picture: Visualizing System Behavior in Real Time
Elfen Scheduling: Fine-Grain Principled Borrowing from Latency-Critical Workloads Using Simultaneous Multithreading
AutoSys: The Design and Operation of Learning-Augmented Systems
ACPI Implementation on FreeBSD
First USENIX Workshop on Large-Scale Computing, LASCO 2008, June 23, 2008, Boston, MA, USA, Proceedings
HyCache: Hybrid Caching for Accelerating DNN Input Preprocessing Pipelines
PerfIso: Performance Isolation for Commercial Latency-Sensitive Services
Meces: Latency-efficient Rescaling via Prioritized State Migration for Stateful Distributed Stream Processing Systems
Early Experience with an Internet Broadcast System Based on Overlay Multicast
Autonomous Storage Management for Personal Devices with PodBase
A Uniform Name Service for Spring's UNIX Environment
Decaf: Moving Device Drivers to a Modern Language
Implementation of IPv6 in 4.4 BSD
Large-scale Virtualization in the Emulab Network Testbed
High-density Mobile Cloud Gaming on Edge SoC Clusters
SIFT - a Tool for Wide-Area Information Dissemination
Idleness is Not Sloth
QEMU, a Fast and Portable Dynamic Translator
SafeStore: A Durable and Practical Storage System
sRDMA - Efficient NIC-based Authentication and Encryption for Remote Direct Memory Access
SmartMD: A High Performance Deduplication Engine with Mixed Pages
SimEnc: A High-Performance Similarity-Preserving Encryption Approach for Deduplication of Encrypted Docker Images
Processors, Priority, and Policy: Mach Scheduling for New Environments
Quant-LLM: Accelerating the Serving of Large Language Models via FP6-Centric Algorithm-System Co-Design on Modern GPUs
A Logic File System
Slipstream: Automatic Interprocess Communication Optimization
Fast Consistency Checking for the Solaris File System
INSIDER: Designing In-Storage Computing System for Emerging High-Performance Drive
Zero-Change Object Transmission for Distributed Big Data Analytics
A Practical Scripting Environment for Mobile Devices
Privacy Analysis for Data Sharing in *nix Systems
Redundant State Detection for Dynamic Symbolic Execution
A Brief Overview of the DCS Distributed Conferencing System
The Compression Cache: Using On-line Compression to Extend Physical Memory
Light-Dedup: A Light-weight Inline Deduplication Framework for Non-Volatile Memory File Systems
A Second-Generation Micro-Kernel Based UNIX: Lessons in Performance and Compatibility
Meta: A Freely-Available Scalable MTA
The AutoCacher: A File Cache Which Operates at the NFS Level
A Comprehensive Analysis of Superpage Management Mechanisms and Policies
Optimizing Network Virtualization in Xen (awarded best paper)
Page Replacement in Linux 2.4 Memory Management
Centimani: Enabling Fast AI Accelerator Selection for DNN Training with a Novel Performance Predictor
Computers, Developers, and The Law
IAW - The Intelligence Analyst Workbench
An Analysis of Trace Data for Predictive File Caching in Mobile Computing
Preemptive, Low Latency Datacenter Scheduling via Lightweight Virtualization
ShadowNet: A Platform for Rapid and Safe Network Evolution
Optimizing the Performance of Dynamically-Linked Programs
From Trusted to Secure: Building and Executing Applications That Enforce System Security