Derek Murray
I am a third year PhD student in the Computer Laboratory at the University of Cambridge. I am a member of the Networks and Operating Systems group, which is a subdivision of the Systems Research Group.
Research
Under the supervision of Steve Hand, I am carrying out research into large-scale distributed computation. In particular, I am looking at techniques and algorithms that improve performance on heterogeneous systems, such as cloud computing platforms. For more information, see the project page.
I previously worked on the XenSE and OpenTC projects. My role in both of these projects was concerned with improving the security characteristics of the Xen virtual machine monitor.
My particular focus was on domain-zero (dom0) disaggregation. At present, a Xen system is managed by dom0, a full instance of Linux, including various user-space tools, which has full access to every virtual machine on a physical host. Therefore, the whole of dom0 has to be trusted, in order to trust the platform. Alternatively, if an attacker gains root privileges in dom0, he may compromise the whole system. In my work, I looked at splitting the functionality of dom0 into two or more domains, each of which is given the least privilege necessary to carry out its respective role.
Publications
- Satori: Enlightened Page Sharing
Grzegorz Miłoś, Derek G. Murray, Steven Hand and Michael Fetterman
in Proceedings of the USENIX Annual Technical Conference, San Diego, CA, July 2009 (to appear) -
Xen and the Beauty of Virtualization
Derek Murray and Keir Fraser
in Beautiful Architecture: Leading Thinkers Reveal the Hidden Beauty in Software Design (O'Reilly)
[Publisher] - Spread-spectrum computation
Derek G. Murray and Steven Hand
in Proceedings of HotDep 2008, San Diego, CA, December 2008
[PDF] - Boxing clever with IOMMUs
Grzegorz Miłoś and Derek G. Murray
in Proceedings of VMSec 2008, Alexandria, VA, October 2008
[ACM DL] - Privilege separation made easy
Derek G. Murray and Steven Hand
in Proceedings of EuroSec 2008, Glasgow, UK, April 2008
[PDF] [BibTeX] [ACM DL] - Improving Xen Security Through Disaggregation
Derek G. Murray, Grzegorz Miłoś and Steven Hand
in Proceedings of the Fourth ACM International Conference on Virtual Execution Environments (VEE 08), Seattle, WA, March 2008
[PDF] [BibTeX] [ACM DL]
Conferences
I have been fortunate to attend many conferences in recent years. My collected notes on some of them are available here:
- SOSP 2007: day 1, day 2, day 3
- EuroSys 2008: day 1, day 2, day 3
- NSDI 2008: day 1, day 2, day 3
- HotDep 2008
- OSDI 2008: day 1, day 2, day 3
- NSDI 2009: day 1, day 2, day 3
Education
Before coming to Cambridge, I was awarded an MSc in High-Performance Computing by the University of Edinburgh. For my undergraduate studies, I recieved a BSc (Hons) in Computing Science from the University of Glasgow.
Teaching
In session 2007/2008, I supervised the following courses:
In session 2006/2007, I supervised the following Part II courses:
If I am supervising you, you might be looking for my information for supervisees.
Contact Details
I work in office FN07, on the first floor of the William Gates Building. My email address is Forename.Surname@cl.cam.ac.uk. My office telephone number is +44 (0)1223 763741, and I can usually be reached between 9am and 5pm on weekdays.