Xuewen Dong
3 indexed papers
Publications per year
Top categories
Frequent co-authors
Research Timeline
The paper identifies that the convenience of host-acting agents leads to semantic under-specification in user goals, which forces the agent to generate potentially risky execution plans.
The paper proposes an operation-centric, TEE-backed isolation model to constrain self-hosted computer-use agents, preventing malicious or unsafe host-level operations without sacrificing general functionality.
The paper introduces EBCC, an OCI-compatible runtime architecture that manages composite confidential-computing workloads by integrating TEE-backed execution into the standard container lifecycle.
Papers
EBCC: Enclave-Backed Confidential Containers via OCI-Compatible Runtime Integration
Di Lu, Qingwen Zhang, Yujia Liu, Xuewen Dong +3 more
The paper introduces EBCC, an OCI-compatible runtime architecture that manages composite confidential-computing workloads by integrating TEE-backed execution into the standard container lifecycle.