The Enemy Within: Running Untrusted Code with gVisor - Ian Lewis, Google
gvisor
A real-world example: Running untrusted user code
gvisor fun with uname syscall
Introduction to gVisor: Sandboxed Linux Container Runtime
NanoVisor: Modernizing Container Runtime with an Architecture Refactor..- Jianfeng Tan & Tianyu Zhou
SREUniversity - gVisor and KataContainers Install
Untrusted User Code Isolation
gVisor The Future of Container Security - Andy Nguyen
Christo Goosen - Google gvisor container runtime sandbox
Blending Containers and Virtual Machines: A Study of Firecracker and gVisor
Kubernetes Security - Container Runtime Sandboxes gVisor runsc/kata containers - 15
OSS Unboxing - Kubernetes TrustedSandbox containers with gVisor
Securing Untrusted Workloads with Kata Containers on Kubernetes - David Angot & Alex Price
gVisor+Falco-Strengthen K8s & container security without losing visibility
Kata and gVisor: A Quantitative Comparison - Xu Wang, hyper.sh
Container Isolation at Scale (Introducing gVisor) - Dawn Chen & Zhengyu He, Google
Sandboxing is frequently used to inspect untested or untrusted code
gVisor, Kata Containers, Firecracker, Docker: Who is Who in the Container Space?
BKK19-105 - gVisor Container on Arm64: Let‘s Talk about Our Progress!