Patrick Diehl

Locking Down Science Gateways with Landlock and Seccomp

Abstract The most recent Linux kernels have a new feature for securing applications: Landlock. Like Seccomp before it, Landlock makes it possible for a running process to selectively relinquish access to certain system resources including network and filesystem access. Rather tha...

A Survey of Distributed Asynchronous Many-Task Models and Their Applications

Asynchronous many-task (AMT) runtime systems have become an important paradigm for expressing fine-grained parallelism and managing asynchrony in high-performance computing (HPC). Originating from early dataflow concepts, AMTs have evolved to enable dynamic task generation, expli...