{"id":"https://openalex.org/W3140837477","doi":"https://doi.org/10.1145/945445.945463","title":"Implementing an untrusted operating system on trusted hardware","display_name":"Implementing an untrusted operating system on trusted hardware","publication_year":2003,"publication_date":"2003-10-19","ids":{"openalex":"https://openalex.org/W3140837477","doi":"https://doi.org/10.1145/945445.945463","mag":"3140837477"},"language":"en","primary_location":{"id":"doi:10.1145/945445.945463","doi":"https://doi.org/10.1145/945445.945463","is_oa":false,"landing_page_url":"https://doi.org/10.1145/945445.945463","pdf_url":null,"source":{"id":"https://openalex.org/S7407089168","display_name":"ACM SIGOPS Symposium on Operating Systems Principles (SOSP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the nineteenth ACM symposium on Operating systems principles","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049933072","display_name":"David Lie","orcid":"https://orcid.org/0000-0002-2000-6827","observed_orcids":["https://orcid.org/0000-0002-2000-6827"]},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"David Lie","raw_affiliation_strings":["University of Toronto, Toronto, ONT, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Toronto, Toronto, ONT, Canada","institution_ids":["https://openalex.org/I185261750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086887602","display_name":"Chandramohan A. Thekkath","orcid":"https://orcid.org/0009-0004-9924-2428","observed_orcids":["https://orcid.org/0009-0004-9924-2428"]},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chandramohan A. Thekkath","raw_affiliation_strings":["Microsoft Research, Mountain View, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Mountain View, CA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090469068","display_name":"Mark Horowitz","orcid":"https://orcid.org/0000-0003-3245-7542","observed_orcids":["https://orcid.org/0000-0003-3245-7542"]},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mark Horowitz","raw_affiliation_strings":["Stanford University, Stanford, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stanford University, Stanford, CA","institution_ids":["https://openalex.org/I97018004"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.9659,"has_fulltext":false,"cited_by_count":160,"citation_normalized_percentile":{"value":0.98317647,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"178","last_page":"192"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trusted-computing-platform","display_name":"trusted computing platform","score":0.906000018119812},{"id":"https://openalex.org/keywords/copy-protection","display_name":"copy protection","score":0.6600000262260437},{"id":"https://openalex.org/keywords/tamper-resistance","display_name":"tamper resistance","score":0.9430000185966492},{"id":"https://openalex.org/keywords/operating-system-services","display_name":"operating system services","score":0.5479999780654907},{"id":"https://openalex.org/keywords/single-input-multiple-output","display_name":"SIMO","score":0.5099999904632568},{"id":"https://openalex.org/keywords/performance-overhead","display_name":"performance overhead","score":0.6159999966621399}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7919496297836304},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6834990978240967},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.6488065123558044},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.6268337965011597},{"id":"https://openalex.org/C35939892","wikidata":"https://www.wikidata.org/wiki/Q1139923","display_name":"Embedded operating system","level":3,"score":0.6022955179214478},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.550374448299408},{"id":"https://openalex.org/C202775310","wikidata":"https://www.wikidata.org/wiki/Q1140366","display_name":"Trusted Platform Module","level":2,"score":0.5469709038734436},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.506735622882843},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.494599312543869},{"id":"https://openalex.org/C169796023","wikidata":"https://www.wikidata.org/wiki/Q3708936","display_name":"Direct Anonymous Attestation","level":3,"score":0.4719644784927368},{"id":"https://openalex.org/C19163912","wikidata":"https://www.wikidata.org/wiki/Q7681779","display_name":"Tamper resistance","level":2,"score":0.44016656279563904},{"id":"https://openalex.org/C53833338","wikidata":"https://www.wikidata.org/wiki/Q1061424","display_name":"Context switch","level":2,"score":0.42822080850601196},{"id":"https://openalex.org/C65232700","wikidata":"https://www.wikidata.org/wiki/Q5656403","display_name":"Hardware architecture","level":3,"score":0.42020779848098755},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3719603419303894},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.22786575555801392},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.22216325998306274},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.21191683411598206},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19917955994606018},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.1443009078502655},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/945445.945463","doi":"https://doi.org/10.1145/945445.945463","is_oa":false,"landing_page_url":"https://doi.org/10.1145/945445.945463","pdf_url":null,"source":{"id":"https://openalex.org/S7407089168","display_name":"ACM SIGOPS Symposium on Operating Systems Principles (SOSP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the nineteenth ACM symposium on Operating systems principles","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W18781825","https://openalex.org/W19830081","https://openalex.org/W1555250994","https://openalex.org/W1656678770","https://openalex.org/W2011992756","https://openalex.org/W2032776879","https://openalex.org/W2067580212","https://openalex.org/W2082222018","https://openalex.org/W2095881341","https://openalex.org/W2122960384","https://openalex.org/W2148888468","https://openalex.org/W2150210903","https://openalex.org/W2167800525","https://openalex.org/W2175430183","https://openalex.org/W2914563499","https://openalex.org/W4232836212","https://openalex.org/W4253795537","https://openalex.org/W4300807510"],"related_works":["https://openalex.org/W7099859816","https://openalex.org/W2806153512","https://openalex.org/W1983151813","https://openalex.org/W2462302966","https://openalex.org/W7096346212","https://openalex.org/W2371371678","https://openalex.org/W143066512","https://openalex.org/W2375371686","https://openalex.org/W1527365968","https://openalex.org/W2186948209"],"abstract_inverted_index":{"Recently,":[0],"there":[1],"has":[2],"been":[3],"considerable":[4],"interest":[5],"in":[6,105],"providing":[7,100],"\"trusted":[8],"computing":[9],"platforms\"":[10],"using":[11,33],"hardware~---~TCPA":[12],"and":[13,48,60,89,144],"Palladium":[14],"being":[15],"the":[16,54,61,86,122,142],"most":[17],"publicly":[18],"visible":[19],"examples.":[20],"In":[21,51],"this":[22,106],"paper":[23],"we":[24,117],"discuss":[25],"our":[26],"experience":[27],"with":[28],"building":[29],"such":[30],"a":[31,34,81,111,128],"platform":[32],"traditional":[35,101],"time-sharing":[36],"operating":[37,62,67,87,102,131,151],"system":[38,63,68,88,132,152],"executing":[39],"on":[40,153],"XOM~---~a":[41],"processor":[42,55,113],"architecture":[43],"that":[44,75,91],"provides":[45],"copy":[46],"protection":[47],"tamper-resistance":[49],"functions.":[50],"XOM,":[52],"only":[53],"is":[56,92],"trusted;":[57],"main":[58],"memory":[59],"are":[64,137],"not":[65,115],"trusted.Our":[66],"(XOMOS)":[69],"manages":[70],"hardware":[71,90],"resources":[72],"for":[73,99],"applications":[74],"don't":[76],"trust":[77],"it.":[78],"This":[79],"requires":[80],"division":[82],"of":[83,110,147],"responsibilities":[84],"between":[85],"unlike":[93],"previous":[94],"systems.":[95],"We":[96,124,136],"describe":[97],"techniques":[98],"systems":[103],"services":[104],"context.Since":[107],"an":[108,149],"implementation":[109,145],"XOM":[112],"does":[114],"exist,":[116],"use":[118],"SimOS":[119],"to":[120,133,140],"simulate":[121],"hardware.":[123,155],"modify":[125],"IRIX":[126],"6.5,":[127],"commercially":[129],"available":[130],"create":[134],"xomos.":[135],"then":[138],"able":[139],"analyze":[141],"performance":[143],"overheads":[146],"running":[148],"untrusted":[150],"trusted":[154]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":9},{"year":2016,"cited_by_count":6},{"year":2015,"cited_by_count":18},{"year":2014,"cited_by_count":9},{"year":2013,"cited_by_count":17},{"year":2012,"cited_by_count":5}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-04-13T00:00:00"}