{"id":"https://openalex.org/W4408750010","doi":"https://doi.org/10.14722/ndss.2025.230035","title":"LeakLess: Selective Data Protection against Memory Leakage Attacks for Serverless Platforms","display_name":"LeakLess: Selective Data Protection against Memory Leakage Attacks for Serverless Platforms","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4408750010","doi":"https://doi.org/10.14722/ndss.2025.230035"},"language":"en","primary_location":{"id":"doi:10.14722/ndss.2025.230035","doi":"https://doi.org/10.14722/ndss.2025.230035","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2025.230035","pdf_url":"https://doi.org/10.14722/ndss.2025.230035","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2025 Network and Distributed System Security Symposium","raw_type":"proceedings-article"},"parent_works":[],"lineage":["https://openalex.org/W4408750010"],"child_works_count":0,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://doi.org/10.14722/ndss.2025.230035","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092177733","display_name":"Maryam Rostamipoor","orcid":"https://orcid.org/0000-0003-4370-5636","observed_orcids":["https://orcid.org/0000-0003-4370-5636"]},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Maryam Rostamipoor","raw_affiliation_strings":["Stony Brook University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075699568","display_name":"Seyedhamed Ghavamnia","orcid":"https://orcid.org/0000-0002-1872-8062","observed_orcids":["https://orcid.org/0000-0002-1872-8062"]},"institutions":[{"id":"https://openalex.org/I140172145","display_name":"University of Connecticut","ror":"https://ror.org/02der9h97","country_code":"US","type":"education","lineage":["https://openalex.org/I140172145"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Seyedhamed Ghavamnia","raw_affiliation_strings":["University of Connecticut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Connecticut","institution_ids":["https://openalex.org/I140172145"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007101727","display_name":"Michalis Polychronakis","orcid":"https://orcid.org/0000-0002-3106-0343","observed_orcids":["https://orcid.org/0000-0002-3106-0343"]},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michalis Polychronakis","raw_affiliation_strings":["Stony Brook University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University","institution_ids":["https://openalex.org/I59553526"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.2705,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.89344157,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/serverless-computing","display_name":"serverless computing","score":0.8740000128746033},{"id":"https://openalex.org/keywords/transient-execution-attacks","display_name":"transient execution attacks","score":0.8690000176429749},{"id":"https://openalex.org/keywords/i-o-modules","display_name":"I/O modules","score":0.703000009059906}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.70097416639328},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.5753920674324036},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.49747589230537415},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.48317137360572815},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47451868653297424},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3327763080596924},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.27299824357032776},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.2557772994041443},{"id":"https://openalex.org/C98986596","wikidata":"https://www.wikidata.org/wiki/Q1143031","display_name":"Semiconductor memory","level":2,"score":0.1238957941532135},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.0836072564125061},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.14722/ndss.2025.230035","doi":"https://doi.org/10.14722/ndss.2025.230035","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2025.230035","pdf_url":"https://doi.org/10.14722/ndss.2025.230035","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2025 Network and Distributed System Security Symposium","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.14722/ndss.2025.230035","doi":"https://doi.org/10.14722/ndss.2025.230035","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2025.230035","pdf_url":"https://doi.org/10.14722/ndss.2025.230035","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2025 Network and Distributed System Security Symposium","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G6621866438","display_name":"SaTC: CORE: Small: Selective Data Protection against Data-oriented and Transient Execution Attacks","funder_award_id":"2104148","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4408750010.pdf","grobid_xml":"https://content.openalex.org/works/W4408750010.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2906760656","https://openalex.org/W4404371641","https://openalex.org/W3099384392","https://openalex.org/W4404787591","https://openalex.org/W7214159199","https://openalex.org/W6893234338","https://openalex.org/W7204879902","https://openalex.org/W2985424804","https://openalex.org/W4393211136","https://openalex.org/W4412846081"],"abstract_inverted_index":{"As":[0],"the":[1,11,25,88,109,128,132,146,178,187,198],"use":[2],"of":[3,27,91,111,131,145,173],"language-level":[4,43,92],"sandboxing":[5,63],"for":[6,104],"running":[7,49,79],"untrusted":[8,28],"code":[9,32],"grows,":[10],"risks":[12],"associated":[13],"with":[14,121,153],"memory":[15,66],"disclosure":[16],"vulnerabilities":[17],"and":[18,138,150,190],"transient":[19],"execution":[20,26],"attacks":[21],"become":[22],"increasingly":[23],"significant.Besides":[24],"JavaScript":[29],"or":[30],"WebAssembly":[31],"in":[33,75],"web":[34],"browsers,":[35],"serverless":[36,76,105,136,148,155],"environments":[37],"have":[38,60],"also":[39],"started":[40],"relying":[41],"on":[42,143,182,197],"isolation":[44],"to":[45,64,126,175,192],"improve":[46],"scalability":[47],"by":[48,117],"multiple":[50],"functions":[51,137],"from":[52],"different":[53,184],"customers":[54],"within":[55],"a":[56,83,99,122,166,183],"single":[57],"process.Web":[58],"browsers":[59],"adopted":[61],"process-level":[62],"mitigate":[65],"leakage":[67],"attacks,":[68],"but":[69],"this":[70,94],"solution":[71],"is":[72],"not":[73],"applicable":[74],"environments,":[77],"as":[78,82],"each":[80],"function":[81],"separate":[84,123],"process":[85],"would":[86],"negate":[87],"performance":[89],"benefits":[90],"isolation.In":[93],"paper":[95],"we":[96],"present":[97],"LeakLess,":[98],"selective":[100,113],"data":[101,114,134],"protection":[102,115,163],"approach":[103],"computing":[106],"platforms.LeakLess":[107],"alleviates":[108],"limitations":[110],"previous":[112],"techniques":[116],"combining":[118],"in-memory":[119],"encryption":[120],"I/O":[124,179],"module":[125,180],"enable":[127],"safe":[129],"transmission":[130],"protected":[133],"between":[135],"external":[139],"hosts.We":[140],"implemented":[141],"Leak-Less":[142],"top":[144],"Spin":[147,188],"platform,":[149],"evaluated":[151],"it":[152,195],"real-world":[154],"applications.Our":[156],"results":[157],"demonstrate":[158],"that":[159],"LeakLess":[160],"offers":[161],"robust":[162],"while":[164],"incurring":[165],"minor":[167],"throughput":[168],"decrease":[169],"under":[170],"stress-testing":[171],"conditions":[172],"up":[174,191],"2.8%":[176],"when":[177,194],"runs":[181,196],"host":[185],"than":[186],"runtime,":[189],"8.5%":[193],"same":[199],"host.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":1}],"updated_date":"2026-11-14T11:04:58.165337","created_date":"2025-03-23T00:00:00"}