Search

The rapid expansion of Internet of Things (IoT), edge, and embedded devices in the past decade has introduced numerous challenges in terms of security and configuration management. Simultaneously, advances in cloud-native development practices have greatly enhanced the development experience and facilitated quicker updates, thereby enhancing application security. However, applying these advances to IoT, edge, and embedded devices remains a complex task, primarily due to the heterogeneous environments and the need to support devices with extended lifespans. WebAssembly and the WebAssembly System Interface (WASI) has emerged as a promising technology to bridge this gap. As WebAssembly becomes more popular on IoT, edge, and embedded devices, there is a growing demand for hardware interface support in WebAssembly programs. This work presents WASI proposals and proof-of-concept implementations to enable hardware interaction with I2C and USB, which are two commonly used protocols in IoT, directly from WebAssembly applications. This is achieved by running the device drivers within WebAssembly as well. A thorough evaluation of the proof of concepts shows that WASI-USB introduces a minimal overhead of at most 8% compared to native operating system USB APIs. However, the results show that runtime initialization overhead can be significant in low-latency applications., Comment: Preprint of article submitted to IEEE/IFIP Network Operations and Management Symposium 2025

A Kubernetes cluster typically consists of trusted nodes, running within the confines of a physically secure datacenter. With recent advances in edge orchestration, this is no longer the case. This poses a new challenge: how can we trust a device that an attacker has physical access to? This paper presents an architecture and open-source implementation that securely enrolls edge devices as trusted Kubernetes worker nodes. By providing boot attestation rooted in a hardware Trusted Platform Module, a strong base of trust is provided. A new custom controller directs a modified version of Keylime to cross the cloud-edge gap and securely deliver unique cluster credentials required to enroll an edge worker. The controller dynamically grants and revokes these credentials based on attestation events, preventing a possibly compromised node from accessing sensitive cluster resources. We provide both a qualitative and a quantitative evaluation of the architecture. The qualitative scenarios prove its ability to attest and enroll an edge device with role-based access control (RBAC) permissions that dynamically adjust to attestation events. The quantitative evaluation reflects an average of 10.28 seconds delay incurred on the startup time of the edge node due to attestation for a total average enrollment time of 20.91 seconds. The presented architecture thus provides a strong base of trust, securing a physically exposed edge device and paving the way for a robust and resilient edge computing ecosystem., Comment: Pre-print of article accepted to IEEE ICCCN 2024

The semiconductor ReSe$_2$ is characterized by a strongly anisotropic optical absorption and is therefore promising as an optically active component in two-dimensional heterostructures. However, the underlying femtosecond dynamics of photoinduced excitations in such materials has not been sufficiently explored. Here, we apply an infrared optical excitation to single-layer ReSe$_2$ grown on a bilayer graphene substrate and monitor the temporal evolution of the excited state signal using time- and angle-resolved photoemission spectroscopy. We measure an optical gap of $(1.53 \pm 0.02)$ eV, consistent with resonant excitation of the lowest exciton state. The exciton distribution is tunable via the linear polarization of the pump pulse and exhibits a biexponential decay with time constants given by $\tau_1 = (110 \pm 10)$ fs and $\tau_2 = (650 \pm 70)$ fs, facilitated by recombination via an in-gap state that is pinned at the Fermi level. By extracting the momentum-resolved exciton distribution we estimate its real-space radial extent to be greater than 17.1 \AA, implying significant exciton delocalization due to screening from the bilayer graphene substrate., Comment: 6 pages, 4 figures

Kubernetes' high resource requirements hamper its adoption in constrained environments such as the edge and fog. Its extensible control plane is a significant contributor to this, consisting of long-lived processes called "controllers" that constantly listen for state changes and use resources even when they are not needed. This paper presents a WebAssembly-based framework for running lightweight controllers on-demand, only when they are needed. This framework extends the WebAssembly System Interface (WASI), in order to run Kubernetes controllers as lightweight Wasm modules. The framework runs these Wasm controllers in a modified version of Wasmtime, the reference WebAssembly (Wasm) runtime, that swaps idle controllers to disk and activates them when needed. A thorough evaluation shows this framework achieves a 64% memory reduction compared to traditional container-based controller frameworks., Comment: Pre-print of article accepted to IEEE CloudNet 2022

Heterostructures composed of the intrinsic magnetic topological insulator MnBi$_2$Te$_4$ and its non-magnetic counterpart Bi$_2$Te$_3$ host distinct surface electronic band structures depending on the stacking order and exposed termination. Here, we probe the ultrafast dynamical response of MnBi$_2$Te$_4$ and MnBi$_4$Te$_7$ following near-infrared optical excitation using time- and angle-resolved photoemission spectroscopy, and disentangle surface from bulk dynamics based on density functional theory slab calculations of the surface-projected electronic structure. We gain access to the out-of-equilibrium charge carrier populations of both MnBi$_2$Te$_4$ and Bi$_2$Te$_3$ surface terminations of MnBi$_4$Te$_7$, revealing an instantaneous occupation of states associated with the Bi$_2$Te$_3$ surface layer followed by carrier extraction into the adjacent MnBi$_2$Te$_4$ layers with a laser fluence-tunable delay of up to 350 fs. The ensuing thermal relaxation processes are driven by phonon scattering with significantly slower relaxation times in the magnetic MnBi$_2$Te$_4$ septuple layers. The observed competition between interlayer charge transfer and intralayer phonon scattering demonstrates a method to control ultrafast charge transfer processes in MnBi$_2$Te$_4$-based van der Waals compounds., Comment: This document (21 pages, 4 figures) is the Accepted Manuscript version of a Published Work that appeared in final form in Nano Lett. 2023, 23, 2, 414-421, Copyright {\copyright} 2023 American Chemical Society after peer review. To access the final edited and published work see https://doi.org/10.1021/acs.nanolett.2c03075

Hexagonal Si2Te2 monolayers (ML-Si2Te2) were predicted to show strain-dependent band-crossover between semiconducting and room-temperature quantum spin Hall phases. However, investigations on this artificial two-dimensional (2D) material have mainly been restricted to theoretical calculations because its bulk counterpart does not exist naturally. Here, we report on the successful epitaxial growth of ML-Si2Te2 films on Sb2Te3 thin film substrates. High-quality (1*1) ML-Si2Te2 films with a coverage as high as 95% were obtained as revealed by scanning tunneling microscopy. X-ray photoelectron spectroscopy confirms the absence of intermixing between Si2Te2 and Sb2Te3 at the interface. By combining scanning tunneling spectroscopy with density functional theory calculations, we demonstrate the semiconducting band structure of ML-Si2Te2 on Sb2Te3. Furthermore, it is theoretically predicted that the system can be driven into the nontrivial phase via reducing the strain by 4.4% using strain engineering. Our results pave the way for in-depth investigations on this 2D topological insulator candidate.

X-ray photoelectron diffraction is a powerful tool for determining the structure of clean and adsorbate-covered surfaces. Extending the technique into the ultrafast time domain will open the door to studies as diverse as the direct determination of the electron-phonon coupling strength in solids and the mapping of atomic motion in surface chemical reactions. Here we demonstrate time-resolved photoelectron diffraction using ultrashort soft X-ray pulses from the free electron laser FLASH. We collect Se 3d photoelectron diffraction patterns over a wide angular range from optically excited Bi$_2$Se$_3$ with a time resolution of 140 fs. Combining these with multiple scattering simulations allows us to track the motion of near-surface atoms within the first 3 ps after triggering a coherent vibration of the A$_{1g}$ optical phonons. Using a fluence of 4.2 mJ/cm$^2$ from a 1.55 eV pump laser, we find the resulting coherent vibrational amplitude in the first two interlayer spacings to be on the order of 1 pm.

Using light to control transient phases in quantum materials is an emerging route to engineer new properties and functionality, with both thermal and non-thermal phases observed out of equilibrium. Transient phases are expected to be heterogeneous, either through photo-generated domain growth or by generating topological defects, and this impacts the dynamics of the system. However, this nanoscale heterogeneity has not been directly observed. Here we use time- and spectrally resolved coherent X-ray imaging to track the prototypical light induced insulator-to-metal phase transition in vanadium dioxide on the nanoscale with femtosecond time resolution. We show that the early-time dynamics are independent of the initial spatial heterogeneity and observe a 200 fs switch to the metallic phase. A heterogeneous response emerges only after hundreds of picoseconds. Through spectroscopic imaging, we reveal that the transient metallic phase is a highly orthorhombically strained rutile metallic phase, an interpretation that is in contrast to those based on spatially averaged probes. Our results demonstrate the critical importance of spatially and spectrally resolved measurements for understanding and interpreting the transient phases of quantum materials.

Memory Protection Keys for Userspace (PKU) is a recent hardware feature that allows programs to assign virtual memory pages to protection domains, and to change domain access permissions using inexpensive, unprivileged instructions. Several in-process memory isolation approaches leverage this feature to prevent untrusted code from accessing sensitive program state and data. Typically, PKU-based isolation schemes need to be used in conjunction with mitigations such as CFI because untrusted code, when compromised, can otherwise bypass the PKU access permissions using unprivileged instructions or operating system APIs. Recently, researchers proposed fully self-contained PKUbased memory isolation schemes that do not rely on other mitigations. These systems use exploit-proof call gates to transfer control between trusted and untrusted code, as well as a sandbox that prevents tampering with the PKU infrastructure from untrusted code. In this paper, we show that these solutions are not complete. We first develop two proof-of-concept attacks against a state-of-the-art PKU-based memory isolation scheme. We then present Garmr, a PKU-based sandboxing framework that can overcome limitations of existing sandboxes. We apply Garmr to several memory isolation schemes and show that it is practical, efficient and secure.

The bulk band structure of the topological insulator \sbte~ is investigated by angle-resolved photoemission spectroscopy. Of particular interest is the dispersion of the uppermost valence band with respect to the topological surface state Dirac point. The valence band maximum has been calculated to be either near the Brillouin zone centre or in a low-symmetry position in the $\bar{\Gamma}-\bar{M}$ azimuthal direction. In order to observe the full energy range of the valence band, the strongly p-doped crystals are counter-doped by surface alkali adsorption. The data show that that the absolute valence band maximum is likely to be found at the bulk $\Gamma$ point and predictions of a low-symmetry position with an energy higher than the surface Dirac point can be ruled out., Comment: 6 pages, 4 figures

Core level binding energies and absorption edges are at the heart of many experimental techniques concerned with element-specific structure, electronic structure, chemical reactivity, elementary excitations and magnetism. X-ray photoemission spectroscopy (XPS) in particular, can provide information about the electronic and vibrational many-body interactions in a solid as these are reflected in the detailed energy distribution of the photoelectrons. Ultrafast pump-probe techniques add a new dimension to such studies, introducing the ability to probe a transient state of the many-body system. Here we use a free electron laser to investigate the effect of a transiently excited electron gas on the core level spectrum of graphene, showing that it leads to a large broadening of the C 1s peak. Confirming a decade-old prediction, the broadening is found to be caused by an exchange of energy and momentum between the photoemitted core electron and the hot electron system, rather than by vibrational excitations. This interpretation is supported by a line shape analysis that accounts for the presence of the excited electrons. Fitting the spectra to this model directly yields the electronic temperature of the system, in agreement with electronic temperature values obtained from valence band data. Furthermore, making use of time- and momentum-resolved C 1s spectra, we illustrate how the momentum change of the outgoing core electrons leads to a small but detectable change in the time-resolved photoelectron diffraction pattern and to a nearly complete elimination of the core level binding energy variation associated with the narrow $\sigma$-band in the C 1s state. The results demonstrate that the XPS line shape can be used as an element-specific and local probe of the excited electron system and that X-ray photoelectron diffraction investigations remain feasible at very high electronic temperatures., Comment: 16 pages, 12 figures

The quasiparticle spectra of atomically thin semiconducting transition metal dichalcogenides (TMDCs) and their response to an ultrafast optical excitation critically depend on interactions with the underlying substrate. Here, we present a comparative time- and angle-resolved photoemission spectroscopy (TR-ARPES) study of the transient electronic structure and ultrafast carrier dynamics in the single- and bilayer TMDCs MoS$_2$ and WS$_2$ on three different substrates: Au(111), Ag(111) and graphene/SiC. The photoexcited quasiparticle bandgaps are observed to vary over the range of 1.9-2.3 eV between our systems. The transient conduction band signals decay on a sub-100 fs timescale on the metals, signifying an efficient removal of photoinduced carriers into the bulk metallic states. On graphene, we instead observe two timescales on the order of 200 fs and 50 ps, respectively, for the conduction band decay in MoS$_2$. These multiple timescales are explained by Auger recombination involving MoS$_2$ and in-gap defect states. In bilayer TMDCs on metals we observe a complex redistribution of excited holes along the valence band that is substantially affected by interactions with the continuum of bulk metallic states., Comment: 10 pages, 4 figures

We apply an intense infrared laser pulse in order to perturb the electronic and vibrational states in the three-dimensional charge density wave material 1$T$-VSe$_2$. Ultrafast snapshots of the light-induced hot carrier dynamics and non-equilibrium quasiparticle spectral function are collected using time- and angle-resolved photoemission spectroscopy. The hot carrier temperature and time-dependent electronic self-energy are extracted from the time-dependent spectral function, revealing that incoherent electron-phonon interactions heat the lattice above the charge density wave critical temperature on a timescale of $(200 \pm 40)$~fs. Density functional perturbation theory calculations establish that the presence of hot carriers alters the overall phonon dispersion and quenches efficient low-energy acoustic phonon scattering channels, which results in a new quasi-equilibrium state that is experimentally observed., Comment: 24 pages including supplemental material, 4 figures in the main text and 4 figures in the supplemental material

Multi-variant execution (MVX) systems amplify the effectiveness of software diversity techniques. The key idea is to run multiple diversified program variants in lockstep while providing them with the same input and monitoring their run-time behavior for divergences. Thus, adversaries have to compromise all program variants simultaneously to mount an attack successfully. Recent work proposed distributed, heterogeneous MVX systems that leverage different ABIs and ISAs to increase the diversity between program variants further. However, existing distributed MVX system designs suffer from high performance overhead due to time-consuming network transactions for the MVX system's operations. This paper presents dMVX, a novel hybrid distributed MVX design, which incorporates new techniques that significantly reduce the overhead of MVX systems in a distributed setting. Our key insight is that we can intelligently reduce the MVX operations that use expensive network transfers. First, we can limit the monitoring of system calls that are not security-critical. Second, we observe that, in many circumstances, we can also safely cache or avoid replication operations needed for I/O related system calls. Our evaluation shows that dMVX reduces the performance degradation from over 50% to 3.1% for realistic server benchmarks.

Assembling transition metal dichalcogenides (TMDCs) at the two-dimensional (2D) limit is a promising approach for tailoring emerging states of matter such as superconductivity or charge density waves (CDWs). Single-layer (SL) VSe$_2$ stands out in this regard because it exhibits a strongly enhanced CDW transition with a higher transition temperature compared to the bulk in addition to an insulating phase with an anisotropic gap at the Fermi level, causing a suppression of anticipated 2D ferromagnetism in the material. Here, we investigate the interplay of electronic and lattice degrees of freedom that underpin these electronic phases in SL VSe$_2$ using ultrafast pump-probe photoemission spectroscopy. In the insulating state, we observe a light-induced closure of the energy gap on a timescale of 480 fs, which we disentangle from the ensuing hot carrier dynamics. Our work thereby reveals that the phase transition in SL VSe$_2$ is driven by electron-lattice coupling and demonstrates the potential for controlling electronic phases in 2D materials with light., Comment: 23 pages including supplementary information, 3 figures in the main text and 6 figures in the supplemental text

The possibility of triggering correlated phenomena by placing a singularity of the density of states near the Fermi energy remains an intriguing avenue towards engineering the properties of quantum materials. Twisted bilayer graphene is a key material in this regard because the superlattice produced by the rotated graphene layers introduces a van Hove singularity and flat bands near the Fermi energy that cause the emergence of numerous correlated phases, including superconductivity. While the twist angle-dependence of these properties has been explored, direct demonstration of electrostatic control of the superlattice bands over a wide energy range has, so far, been critically missing. This work examines a functional twisted bilayer graphene device using in-operando angle-resolved photoemission with a nano-focused light spot. A twist angle of 12.2$^{\circ}$ is selected such that the superlattice Brillouin zone is sufficiently large to enable identification of van Hove singularities and flat band segments in momentum space. The doping dependence of these features is extracted over an energy range of 0.4 eV, expanding the combinations of twist angle and doping where they can be placed at the Fermi energy and thereby induce new correlated electronic phases in twisted bilayer graphene., Comment: 16 pages, 4 figures. A revised version of the manuscript has been accepted for publication in Advanced Materials

The presence of an electrical transport current in a material is one of the simplest and most important realisations of non-equilibrium physics. The current density breaks the crystalline symmetry and can give rise to dramatic phenomena, such as sliding charge density waves [1], insulator-to-metal transitions [2,3] or gap openings in topologically protected states [4]. Almost nothing is known about how a current influences the electron spectral function, which characterizes most of the solid's electronic, optical and chemical properties. Here we show that angle-resolved photoemission spectroscopy with a nano-scale light spot (nanoARPES) provides not only a wealth of information on local equilibrium properties, but also opens the possibility to access the local non-equilibrium spectral function in the presence of a transport current. Unifying spectroscopic and transport measurements in this way allows non-invasive local measurements of the composition, structure, many-body effects and carrier mobility in the presence of high current densities., Comment: 9 pages, 8 figures