{"id":"https://openalex.org/W2164055093","doi":"https://doi.org/10.1145/1165389.945448","title":"Model-carrying code: a practical approach for safe execution of untrusted applications","display_name":"Model-carrying code: a practical approach for safe execution of untrusted applications","publication_year":2003,"publication_date":"2003-10-19","ids":{"openalex":"https://openalex.org/W2164055093","doi":"https://doi.org/10.1145/1165389.945448","mag":"2164055093"},"language":"en","primary_location":{"id":"doi:10.1145/1165389.945448","doi":"https://doi.org/10.1145/1165389.945448","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1165389.945448","pdf_url":null,"source":{"id":"https://openalex.org/S50071195","display_name":"ACM SIGOPS Operating Systems Review","issn_l":"0163-5980","issn":["0163-5980","1943-586X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGOPS Operating Systems Review","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102886132","display_name":"R. Sekar","orcid":"https://orcid.org/0009-0008-9135-3296","observed_orcids":["https://orcid.org/0009-0008-9135-3296"]},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"R. Sekar","raw_affiliation_strings":["Stony Brook University, Stony Brook, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, NY","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058117020","display_name":"Venkat N. Venkatakrishnan","orcid":"https://orcid.org/0000-0002-1690-9185","observed_orcids":["https://orcid.org/0000-0002-1690-9185"]},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"V.N. Venkatakrishnan","raw_affiliation_strings":["Stony Brook University, Stony Brook, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, NY","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103063258","display_name":"Samik Basu","orcid":"https://orcid.org/0000-0002-3757-2227","observed_orcids":["https://orcid.org/0000-0002-3757-2227"]},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Samik Basu","raw_affiliation_strings":["Stony Brook University, Stony Brook, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, NY","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111447650","display_name":"Sandeep Bhatkar","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sandeep Bhatkar","raw_affiliation_strings":["Stony Brook University, Stony Brook, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, NY","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109878341","display_name":"Daniel C. DuVarney","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel C. DuVarney","raw_affiliation_strings":["Stony Brook University, Stony Brook, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, NY","institution_ids":["https://openalex.org/I59553526"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I59553526"],"apc_list":null,"apc_paid":null,"fwci":11.9835,"has_fulltext":false,"cited_by_count":161,"citation_normalized_percentile":{"value":0.98413538,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":87,"max":99},"biblio":{"volume":"37","issue":"5","first_page":"15","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/untrusted-code-execution","display_name":"untrusted code execution","score":0.878000020980835},{"id":"https://openalex.org/keywords/security-policy","display_name":"security policy","score":0.6769999861717224},{"id":"https://openalex.org/keywords/policy-verification","display_name":"policy verification","score":0.49900001287460327},{"id":"https://openalex.org/keywords/policy-choice","display_name":"policy choice","score":0.7680000066757202},{"id":"https://openalex.org/keywords/policy-enforcement","display_name":"policy enforcement","score":0.6539999842643738},{"id":"https://openalex.org/keywords/code-safety","display_name":"code safety","score":0.4099999964237213},{"id":"https://openalex.org/keywords/binary-code-analysis","display_name":"binary analysis","score":0.5419999957084656},{"id":"https://openalex.org/keywords/automated-verification","display_name":"automated verification","score":0.32899999618530273}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8961582779884338},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.7450439929962158},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5644790530204773},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5304775834083557},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.47986143827438354},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.26794469356536865},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":7,"locations":[{"id":"doi:10.1145/1165389.945448","doi":"https://doi.org/10.1145/1165389.945448","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1165389.945448","pdf_url":null,"source":{"id":"https://openalex.org/S50071195","display_name":"ACM SIGOPS Operating Systems Review","issn_l":"0163-5980","issn":["0163-5980","1943-586X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGOPS Operating Systems Review","raw_type":"journal-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.153.3870","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.153.3870","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://cs.uic.edu/~venkat/research/papers/venkatakrishnan-pub-sosp03.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.159.2998","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.159.2998","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.iastate.edu/~sbasu/research/papers/svbbd.sosp03.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.526.8441","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.526.8441","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://seclab.cs.sunysb.edu/sandeep/pubs/papers/mcc_sosp03.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.59.7427","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.59.7427","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://seclab.cs.sunysb.edu/seclab/pubs/papers/sosp03.ps","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.9.9973","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.9.9973","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.rochester.edu/sosp2003/papers/p214-sekar.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.988.1764","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.988.1764","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://staff.cs.upt.ro/%7Eionel/DSD/p15-sekar.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W24839522","https://openalex.org/W1482766136","https://openalex.org/W1500460345","https://openalex.org/W1502994384","https://openalex.org/W1535237014","https://openalex.org/W1535244464","https://openalex.org/W1542723081","https://openalex.org/W1552618981","https://openalex.org/W1556462035","https://openalex.org/W1565113942","https://openalex.org/W1571573079","https://openalex.org/W1583975142","https://openalex.org/W1595810432","https://openalex.org/W1895041775","https://openalex.org/W1896273530","https://openalex.org/W1952434180","https://openalex.org/W1974940962","https://openalex.org/W2006611045","https://openalex.org/W2020284627","https://openalex.org/W2034711041","https://openalex.org/W2036910349","https://openalex.org/W2066137796","https://openalex.org/W2066859698","https://openalex.org/W2086469601","https://openalex.org/W2099137371","https://openalex.org/W2106649514","https://openalex.org/W2114639597","https://openalex.org/W2116685080","https://openalex.org/W2117189826","https://openalex.org/W2119736157","https://openalex.org/W2120138937","https://openalex.org/W2123886726","https://openalex.org/W2126954297","https://openalex.org/W2128217000","https://openalex.org/W2135143063","https://openalex.org/W2135274583","https://openalex.org/W2137689716","https://openalex.org/W2141988808","https://openalex.org/W2154564703","https://openalex.org/W2161168778","https://openalex.org/W2167052686","https://openalex.org/W2167332015","https://openalex.org/W2295399529","https://openalex.org/W2350778671","https://openalex.org/W2483362090","https://openalex.org/W2499974232","https://openalex.org/W4301329292","https://openalex.org/W6631959887"],"related_works":["https://openalex.org/W7095953103","https://openalex.org/W7095633365","https://openalex.org/W7098725108","https://openalex.org/W100820593","https://openalex.org/W2135265774","https://openalex.org/W1980135105","https://openalex.org/W2115549888","https://openalex.org/W7095171162","https://openalex.org/W2034711041","https://openalex.org/W2160255280"],"abstract_inverted_index":{"This":[0,38],"paper":[1],"presents":[2],"a":[3,30,65,86,101,167],"new":[4],"approach":[5],"called":[6],"model-carrying":[7],"code":[8,26,74,125],"(MCC)":[9],"for":[10,140],"safe":[11],"execution":[12],"of":[13,19,34,88],"untrusted":[14,25,158,192],"code.":[15,117,159],"At":[16],"the":[17,22,42,73,98,109,116,121,153,163,174,187],"heart":[18],"MCC":[20,106,122,148],"is":[21,95,104,178],"idea":[23],"that":[24,94,108,165,176],"comes":[27],"equipped":[28],"with":[29,97,157],"concise":[31],"high-level":[32,45],"model":[33,39],"its":[35],"security-relevant":[36],"behavior.":[37],"helps":[40],"bridge":[41],"gap":[43],"between":[44],"security":[46,77],"policies":[47,90],"and":[48,127],"low-level":[49],"binary":[50],"code,":[51],"thereby":[52],"enabling":[53],"analyses":[54],"which":[55],"would":[56],"otherwise":[57],"be":[58,113],"impractical.":[59],"For":[60],"instance,":[61],"users":[62],"can":[63,83],"use":[64],"fully":[66],"automated":[67,81],"verification":[68],"procedure":[69,82],"to":[70,91,129,133,169,180,184],"determine":[71],"if":[72],"satisfies":[75],"their":[76],"policies.":[78],"Alternatively,":[79],"an":[80,191],"sift":[84],"through":[85],"catalog":[87],"acceptable":[89],"identify":[92],"one":[93],"compatible":[96],"model.":[99],"Once":[100],"suitable":[102],"policy":[103,110,141],"selected,":[105],"guarantees":[107],"will":[111],"not":[112],"violated":[114],"by":[115,190],"Unlike":[118],"previous":[119],"approaches,":[120],"framework":[123],"enables":[124],"producers":[126],"consumers":[128],"collaborate":[130],"in":[131],"order":[132],"achieve":[134],"safety.":[135],"Moreover,":[136],"it":[137],"provides":[138,162],"support":[139],"selection":[142],"as":[143,145,183],"well":[144],"enforcement.":[146],"Finally,":[147],"makes":[149],"no":[150],"assumptions":[151],"regarding":[152],"inherent":[154],"risks":[155],"associated":[156],"It":[160],"simply":[161],"tools":[164],"enable":[166],"consumer":[168],"make":[170],"informed":[171],"decisions":[172],"about":[173],"risk":[175],"he/she":[177],"willing":[179],"tolerate":[181],"so":[182],"benefit":[185],"from":[186],"functionality":[188],"offered":[189],"application.":[193]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":5},{"year":2014,"cited_by_count":6},{"year":2013,"cited_by_count":5},{"year":2012,"cited_by_count":8}],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2016-06-24T00:00:00"}