Being Friendly to Your Hardware Performance Engineering A gentle introduction to hardware for software engineers 2Where does C++ run? 3On an abstract C++ machine 4On an abstract C++ machine? specialty instructions, on-core and off- core accelerators • Data layout: both software and hardware characteristics 84 src dst • Alignment: source and destination • Size • Direction • LinearityExample

1200, Vienna, Austria wien@zuehlke.com +43 1 205 11 6800 2Motivation 3 direct interaction with hardware references encapsulation inheritance polymorphism large library support exception handling overloading C compatibility templates overhead auto lambda RAII move semantics namespaceOverview Hardware Abstraction Layer ⚫ Encapsulation ⚫ Inheritance ⚫ Polymorphism + ⚫ Template Metaprogramming function calls (de-virtualization) CPin pin { GPIO_PIN_6 }; CLed led { &pin }; while (true) { led.toggle(); delay(1000); } 41Dynamic Polymorphism without de-virtualization 42

: push

采用Upstart方式启动的服务则在/etc/init/目录中有属于自己的一份配置文件，终端 下键入： initctl list Virtualization & Docker Wang Xiaodong Virtualization In computing, virtualization refers to the act of creating a virtual (rather than actual) version of something, including virtual computer hardware platforms, operating systems, storage devices, and computer network resources. Virtualization began in the 1960s, as a method of logically dividing dist-info websocket websocket_client-0.32.0.dist-info References 1. https://en.wikipedia.org/wiki/Virtualization 2. https://linuxcontainers.org 3. Docker容器内多进程的管理方案. http://www.tuicool.com/articles/2677VfR

soon Shadow Stack Control-flow Enforcement Technology (CET)) CIG Code Integrity Guard Virtualization-based security (VBS) enclaves Redirection GuardCurrent Defensive Strategies Control flow high-jacking Binary, etc.) Deserializers Network Streams Browser Data User Input Data and FilesHigh Privilege Hardware Ring 2: Device Drivers Ring 1: Device Drivers Ring 0: Kernel Ring -1: Hypervisor Ring -2: System string print sprintf and snprintf #include “banned.h” https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/28719-banned-api-usage-use-updated-function-replacementIntegrating Security into

--image=busybox sh / # f(){ f|f& };f # WARNING: Don't try this! Things We Have Done 1. Hardware Isolation 2. Security Tools - SELinux, Seccomp, AppArmor, Capabilities, Cgroup 3. Intrusion Detection hypervisors. It abstracts the common virtualization components which implements a Rust-based VMM. • Written in Rust: Memory-safe language • Secure: Minimal hardware emulation • Flexible: Easy to customize Rust-VMM crates. • The project focuses on running modern, cloud workloads, on top of a limited set of hardware architectures and platforms. Let’s demo Demo virtio-fs block vm-memory acpi linux-loader

faster, especially if they are compiled into a form that is directly executable on the underlying hardware. Static compilation can also devote an arbitrary amount of time to program analysis and optimization faster, especially if they are compiled into a form that is directly executable on the underlying hardware. Static compilation can also devote an arbitrary amount of time to program analysis and optimization faster, especially if they are compiled into a form that is directly executable on the underlying hardware. Static compilation can also devote an arbitrary amount of time to program analysis and optimization

German Aerospace Center (DLR) Institute of Software Methods for Product Virtualization VECTORIZING A CFD CODE WITH STD::SIMD SUPPLEMENTED BY (ALMOST) TRANSPARENT LOADING AND STORINGMotivation: The generation CFD code CODA with a focus on: ▪ modern algorithms ▪ exploiting current and future HPC hardware architectures ▪ making use of modern software engineering and code design Background: Cooperation

dist python myscript.py Generate license to bind obfuscated scripts to fixed machine, first get hardware information: pyarmor hdinfo Then generate new license bind to harddisk serial number and mac address: licenses for obfuscated scripts pack Obfuscate scripts then pack them to one bundle hdinfo Show hardware information The commands for project: init Create a project to manage obfuscated scripts config 2019-10-10 --bind-mac f8:ff:c2:27:00:7f r001 Before this, run command hdinfo to get hardware information: pyarmor hdinfo Hardware informations got by PyArmor: Serial number of first harddisk: "FV994730S6LLF07AY"

scalability needed for the enterprise. Assets Assets can range from the tangible (real estate and hardware) to the intangible (contracts and intellectual property). Hyperledger Fabric provides the ability VirtualBox [https://www.virtualbox.org/] - 5.0 or later BIOS Enabled Virtualization - Varies based on hardware Note: The BIOS Enabled Virtualization may be within the CPU or Security settings of the BIOS pip and

scalability needed for the enterprise. 2.3.1 Assets Assets can range from the tangible (real estate and hardware) to the intangible (contracts and intellectual property). Hyperledger Fabric provides the ability using Vagrant) - VirtualBox - 5.0 or later • BIOS Enabled Virtualization - Varies based on hardware • Note: The BIOS Enabled Virtualization may be within the CPU or Security settings of the BIOS 9.3