{"id":"https://openalex.org/W7213316036","doi":"https://doi.org/10.48456/tr-927","title":"Capability Hardware Enhanced RISC Instructions: CHERI Instruction-Set Architecture (Version 7)","display_name":"Capability Hardware Enhanced RISC Instructions: CHERI Instruction-Set Architecture (Version 7)","publication_year":2021,"publication_date":"2021-04-12","ids":{"openalex":"https://openalex.org/W7213316036","doi":"https://doi.org/10.48456/tr-927","mag":"2917611871"},"language":"en","primary_location":{"id":"doi:10.48456/tr-927","doi":"https://doi.org/10.48456/tr-927","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-927","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48456/tr-927","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013006563","display_name":"Robert N. M. Watson","orcid":"https://orcid.org/0000-0001-8139-8783","observed_orcids":["https://orcid.org/0000-0001-8139-8783"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert N. M. Watson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151801015","display_name":"Peter G. Neumann","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter G. Neumann","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136101822","display_name":"Jonathan Woodruff","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jonathan Woodruff","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Michael Roe","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Michael Roe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008338356","display_name":"Hesham Almatary","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hesham Almatary","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062925499","display_name":"Jonathan Anderson","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jonathan Anderson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151747651","display_name":"John Baldwin","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"John Baldwin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003350033","display_name":"David Chisnall","orcid":"https://orcid.org/0000-0001-6060-0153","observed_orcids":["https://orcid.org/0000-0001-6060-0153"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David Chisnall","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048690334","display_name":"Brooks Davis","orcid":"https://orcid.org/0009-0006-6256-0419","observed_orcids":["https://orcid.org/0009-0006-6256-0419"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Brooks Davis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026202020","display_name":"Nathaniel Wesley Filardo","orcid":"https://orcid.org/0009-0002-9698-1503","observed_orcids":["https://orcid.org/0009-0002-9698-1503"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nathaniel Wesley Filardo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026528066","display_name":"Alexandre Joannou","orcid":"https://orcid.org/0000-0002-3161-2638","observed_orcids":["https://orcid.org/0000-0002-3161-2638"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alexandre Joannou","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151780184","display_name":"Ben Laurie","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ben Laurie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086006620","display_name":"A. Theodore Markettos","orcid":"https://orcid.org/0009-0008-4411-2318","observed_orcids":["https://orcid.org/0009-0008-4411-2318"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"A. Theodore Markettos","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041439799","display_name":"Simon W. Moore","orcid":"https://orcid.org/0000-0002-2806-495X","observed_orcids":["https://orcid.org/0000-0002-2806-495X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Simon W. Moore","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011443512","display_name":"Steven J. Murdoch","orcid":"https://orcid.org/0000-0002-8744-1575","observed_orcids":["https://orcid.org/0000-0002-8744-1575"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Steven J. Murdoch","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018775869","display_name":"Kyndylan Nienhuis","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kyndylan Nienhuis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151727828","display_name":"Robert Norton","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert Norton","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017365974","display_name":"Alexander Richardson","orcid":"https://orcid.org/0000-0002-6372-217X","observed_orcids":["https://orcid.org/0000-0002-6372-217X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alex Richardson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021838848","display_name":"Peter Rugg","orcid":"https://orcid.org/0009-0000-2976-0474","observed_orcids":["https://orcid.org/0009-0000-2976-0474"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter Rugg","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083405043","display_name":"Peter Sewell","orcid":"https://orcid.org/0000-0001-9352-1013","observed_orcids":["https://orcid.org/0000-0001-9352-1013"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter Sewell","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151835815","display_name":"Stacey Son","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Stacey Son","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5045554783","display_name":"Hongyan Xia","orcid":"https://orcid.org/0000-0002-8047-899X","observed_orcids":["https://orcid.org/0000-0002-8047-899X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hongyan Xia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.001500000013038516,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cheri","display_name":"CHERI","score":0.9520000219345093},{"id":"https://openalex.org/keywords/instruction-set-architecture","display_name":"instruction set architecture","score":0.75},{"id":"https://openalex.org/keywords/risc-v","display_name":"RISC-V","score":0.703000009059906},{"id":"https://openalex.org/keywords/memory-protection","display_name":"memory protection","score":0.597000002861023},{"id":"https://openalex.org/keywords/capsicum","display_name":"Capsicum","score":0.5070000290870667},{"id":"https://openalex.org/keywords/least-privilege","display_name":"least privilege","score":0.6869999766349792},{"id":"https://openalex.org/keywords/formal-verification","display_name":"formal verification","score":0.44999998807907104}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7864000201225281},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.5541999936103821},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5353999733924866},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4975000023841858},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48510000109672546},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.4499000012874603},{"id":"https://openalex.org/C65232700","wikidata":"https://www.wikidata.org/wiki/Q5656403","display_name":"Hardware architecture","level":3,"score":0.42640000581741333},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.39590001106262207},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3937999904155731},{"id":"https://openalex.org/C126298526","wikidata":"https://www.wikidata.org/wiki/Q189376","display_name":"Reduced instruction set computing","level":3,"score":0.38029998540878296},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.37470000982284546},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3684000074863434},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.3513000011444092},{"id":"https://openalex.org/C35869016","wikidata":"https://www.wikidata.org/wiki/Q846636","display_name":"Software architecture","level":3,"score":0.3450999855995178},{"id":"https://openalex.org/C34165917","wikidata":"https://www.wikidata.org/wiki/Q188267","display_name":"Programming paradigm","level":2,"score":0.3310000002384186},{"id":"https://openalex.org/C12186640","wikidata":"https://www.wikidata.org/wiki/Q6815743","display_name":"Memory model","level":3,"score":0.3285999894142151},{"id":"https://openalex.org/C118021083","wikidata":"https://www.wikidata.org/wiki/Q610398","display_name":"System on a chip","level":2,"score":0.2913999855518341},{"id":"https://openalex.org/C2779602883","wikidata":"https://www.wikidata.org/wiki/Q15544750","display_name":"Memory architecture","level":2,"score":0.28839999437332153},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.2831000089645386},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.2766000032424927},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.272599995136261},{"id":"https://openalex.org/C107598950","wikidata":"https://www.wikidata.org/wiki/Q259864","display_name":"Microarchitecture","level":2,"score":0.26820001006126404},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.26820001006126404},{"id":"https://openalex.org/C55356503","wikidata":"https://www.wikidata.org/wiki/Q2136675","display_name":"Reference architecture","level":4,"score":0.2653999924659729},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2639999985694885},{"id":"https://openalex.org/C178059732","wikidata":"https://www.wikidata.org/wiki/Q1982529","display_name":"Software performance testing","level":5,"score":0.2583000063896179},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.25060001015663147},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.48456/tr-927","doi":"https://doi.org/10.48456/tr-927","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-927","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},{"id":"mag:2917611871","doi":null,"is_oa":false,"landing_page_url":"https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-927.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"doi:10.48456/tr-927","doi":"https://doi.org/10.48456/tr-927","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-927","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7213319025","https://openalex.org/W7213266460","https://openalex.org/W7213304200","https://openalex.org/W2499491173","https://openalex.org/W7214197657","https://openalex.org/W4388667448","https://openalex.org/W4388667356","https://openalex.org/W4388667216","https://openalex.org/W2978621079","https://openalex.org/W7099372218"],"abstract_inverted_index":{"This":[0,30],"technical":[1],"report":[2],"describes":[3],"CHERI":[4,49,80,115,205,237,257,299],"ISAv7,":[5],"the":[6,10,26,182,191,220,229,260,298,319,335],"seventh":[7],"version":[8],"of":[9,28,35,184,193,198,222,231,270,305,342,375,432],"Capability":[11],"Hardware":[12],"Enhanced":[13],"RISC":[14,129],"Instructions":[15],"(CHERI)":[16],"Instruction-Set":[17],"Architecture":[18],"(ISA)":[19],"being":[20],"developed":[21],"by":[22,334],"SRI":[23],"International":[24],"and":[25,42,46,73,109,139,151,168,187,201,212,254,272,286,294,314,321,351,394,406,426,435],"University":[27],"Cambridge.":[29],"design":[31],"captures":[32],"nine":[33],"years":[34],"research,":[36],"development,":[37],"experimentation,":[38],"refinement,":[39],"formal":[40,166],"analysis,":[41],"validation":[43],"through":[44],"hardware":[45],"software":[47,132,141,152,164,194,327,345,365,384,418],"implementation.":[48],"ISAv7":[50],"is":[51,85,116],"a":[52,78,117,303],"substantial":[53],"enhancement":[54],"to":[55,126,133,301,317,372,440],"prior":[56],"ISA":[57],"versions.":[58],"We":[59,75,171,409],"differentiate":[60],"an":[61,244],"architecture-neutral":[62],"protection":[63,138,306],"model":[64,247,300],"vs.":[65],"architecture-specific":[66],"instantiations":[67],"in":[68,94,190,215,281],"64-bit":[69,71,110,128],"MIPS,":[70],"RISC-V,":[72],"x86-64.":[74],"have":[76,172],"defined":[77],"new":[79,90,123],"Concentrate":[81],"compression":[82],"model.":[83],"CHERI-RISC-V":[84],"more":[86,223,349],"substantially":[87],"elaborated.":[88],"A":[89],"compartment-ID":[91],"register":[92],"assists":[93],"resisting":[95],"microarchitectural":[96],"side-channel":[97],"attacks.":[98],"Experimental":[99],"features":[100],"include":[101,145,382],"linear":[102],"capabilities,":[103],"capability":[104,246,250,252,292],"coloring,":[105],"temporal":[106],"memory":[107,137,158,242],"safety,":[108],"capabilities":[111,265],"for":[112,157,163,181,276,326],"32-bit":[113],"architectures.":[114],"hybrid":[118,330],"capability-system":[119,124,331],"architecture":[120,207],"that":[121,218,248,347],"adds":[122],"primitives":[125],"commodity":[127,216],"ISAs,":[130],"enabling":[131],"efficiently":[134],"implement":[135],"fine-grained":[136,268],"scalable":[140],"compartmentalization.":[142,328],"Design":[143],"goals":[144],"incremental":[146,340],"adoptability":[147],"within":[148],"current":[149],"ISAs":[150,217],"stacks,":[153],"low":[154],"performance":[155,161,211],"overhead":[156],"protection,":[159],"significant":[160],"improvements":[162],"compartmentalization,":[165],"grounding,":[167],"programmer-friendly":[169],"underpinnings.":[170],"focused":[173],"on":[174,259],"providing":[175],"strong,":[176],"non-probabilistic,":[177],"efficient":[178],"architectural":[179],"foundations":[180],"principles":[183],"least":[185,232],"privilege":[186],"intentional":[188],"use":[189],"execution":[192],"at":[195],"multiple":[196],"levels":[197],"abstraction,":[199],"preventing":[200],"mitigating":[202],"vulnerabilities.":[203],"The":[204],"system":[206],"purposefully":[208],"addresses":[209],"known":[210],"robustness":[213],"gaps":[214],"hinder":[219],"adoption":[221,341],"secure":[224],"programming":[225],"models":[226],"centered":[227],"around":[228,415],"principle":[230],"privilege.":[233],"To":[234],"this":[235],"end,":[236],"blends":[238],"traditional":[239],"paged":[240],"virtual":[241],"with":[243],"in-address-space":[245],"includes":[249],"registers,":[251],"instructions,":[253],"tagged":[255],"memory.":[256],"builds":[258],"C-language":[261,311],"fat-pointer":[262],"literature:":[263],"its":[264],"can":[266,273,353],"describe":[267],"regions":[269],"memory,":[271],"be":[274,354,373],"substituted":[275],"data":[277,285,422,442],"or":[278],"code":[279,438],"pointers":[280],"generated":[282],"code,":[283],"protecting":[284],"also":[287,410],"improving":[288],"control-flow":[289],"robustness.":[290],"Strong":[291],"integrity":[293],"monotonicity":[295],"properties":[296],"allow":[297],"express":[302],"variety":[304],"properties,":[307],"from":[308],"enforcing":[309],"valid":[310],"pointer":[312],"provenance":[313],"bounds":[315],"checking":[316],"implementing":[318],"isolation":[320],"controlled":[322],"communication":[323],"structures":[324],"required":[325],"CHERI\u2019s":[329],"approach,":[332],"inspired":[333],"Capsicum":[336],"security":[337],"model,":[338],"allows":[339],"capability-oriented":[343],"design:":[344],"implementations":[346],"are":[348,358,430],"robust":[350],"resilient":[352],"deployed":[355],"where":[356],"they":[357],"most":[359],"needed,":[360],"while":[361,444],"leaving":[362,445],"less":[363],"critical":[364],"largely":[366],"unmodified,":[367],"but":[368],"nevertheless":[369],"suitably":[370],"constrained":[371],"incapable":[374],"having":[376],"adverse":[377],"effects.":[378],"Potential":[379],"deployment":[380],"scenarios":[381,414],"low-level":[383],"Trusted":[385],"Computing":[386],"Bases":[387],"(TCBs)":[388],"such":[389,402],"as":[390,397,399,403,421],"separation":[391],"kernels,":[392,396],"hypervisors,":[393],"operating-system":[395],"well":[398],"userspace":[400],"TCBs":[401],"language":[404],"runtimes":[405],"web":[407],"browsers.":[408],"see":[411],"potential":[412],"early-use":[413],"particularly":[416],"high-risk":[417],"libraries":[419],"(such":[420],"compression,":[423],"protocol":[424],"parsing,":[425],"image":[427],"processing),":[428],"which":[429],"concentrations":[431],"both":[433],"complex":[434],"historically":[436],"vulnerability-prone":[437],"exposed":[439],"untrustworthy":[441],"sources,":[443],"containing":[446],"applications":[447],"unchanged.":[448]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-09-16T00:00:00"}