{"id":"https://openalex.org/W4385080311","doi":"https://doi.org/10.1109/sp46215.2023.10179472","title":"SecureCells: A Secure Compartmentalized Architecture","display_name":"SecureCells: A Secure Compartmentalized Architecture","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4385080311","doi":"https://doi.org/10.1109/sp46215.2023.10179472"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179472","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179472","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://infoscience.epfl.ch/bitstreams/ec81ac8b-b412-4426-b4cd-fd4a01dc9896/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010558882","display_name":"Atri Bhattacharyya","orcid":null},"institutions":[{"id":"https://openalex.org/I200966471","display_name":"Prudential Financial (United States)","ror":"https://ror.org/05fy6my48","country_code":"US","type":"company","lineage":["https://openalex.org/I200966471"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Atri Bhattacharyya","raw_affiliation_strings":["EPFL,EcoCloud","EcoCloud, EPFL"],"affiliations":[{"raw_affiliation_string":"EPFL,EcoCloud","institution_ids":["https://openalex.org/I200966471"]},{"raw_affiliation_string":"EcoCloud, EPFL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045077608","display_name":"Florian Hofhammer","orcid":"https://orcid.org/0009-0003-7661-3233"},"institutions":[{"id":"https://openalex.org/I200966471","display_name":"Prudential Financial (United States)","ror":"https://ror.org/05fy6my48","country_code":"US","type":"company","lineage":["https://openalex.org/I200966471"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Florian Hofhammer","raw_affiliation_strings":["EPFL,EcoCloud","EcoCloud, EPFL"],"affiliations":[{"raw_affiliation_string":"EPFL,EcoCloud","institution_ids":["https://openalex.org/I200966471"]},{"raw_affiliation_string":"EcoCloud, EPFL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051817110","display_name":"Yuanlong Li","orcid":"https://orcid.org/0009-0007-2632-2576"},"institutions":[{"id":"https://openalex.org/I200966471","display_name":"Prudential Financial (United States)","ror":"https://ror.org/05fy6my48","country_code":"US","type":"company","lineage":["https://openalex.org/I200966471"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuanlong Li","raw_affiliation_strings":["EPFL,EcoCloud","EcoCloud, EPFL"],"affiliations":[{"raw_affiliation_string":"EPFL,EcoCloud","institution_ids":["https://openalex.org/I200966471"]},{"raw_affiliation_string":"EcoCloud, EPFL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033861532","display_name":"Siddharth Gupta","orcid":"https://orcid.org/0000-0002-6165-9461"},"institutions":[{"id":"https://openalex.org/I200966471","display_name":"Prudential Financial (United States)","ror":"https://ror.org/05fy6my48","country_code":"US","type":"company","lineage":["https://openalex.org/I200966471"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Siddharth Gupta","raw_affiliation_strings":["EPFL,EcoCloud","EcoCloud, EPFL"],"affiliations":[{"raw_affiliation_string":"EPFL,EcoCloud","institution_ids":["https://openalex.org/I200966471"]},{"raw_affiliation_string":"EcoCloud, EPFL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078759384","display_name":"Andr\u00e9s S\u00e1nchez","orcid":"https://orcid.org/0000-0002-9408-5230"},"institutions":[{"id":"https://openalex.org/I200966471","display_name":"Prudential Financial (United States)","ror":"https://ror.org/05fy6my48","country_code":"US","type":"company","lineage":["https://openalex.org/I200966471"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andres Sanchez","raw_affiliation_strings":["EPFL,EcoCloud","EcoCloud, EPFL"],"affiliations":[{"raw_affiliation_string":"EPFL,EcoCloud","institution_ids":["https://openalex.org/I200966471"]},{"raw_affiliation_string":"EcoCloud, EPFL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057697787","display_name":"Babak Falsafi","orcid":"https://orcid.org/0000-0001-5916-8068"},"institutions":[{"id":"https://openalex.org/I200966471","display_name":"Prudential Financial (United States)","ror":"https://ror.org/05fy6my48","country_code":"US","type":"company","lineage":["https://openalex.org/I200966471"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Babak Falsafi","raw_affiliation_strings":["EPFL,EcoCloud","EcoCloud, EPFL"],"affiliations":[{"raw_affiliation_string":"EPFL,EcoCloud","institution_ids":["https://openalex.org/I200966471"]},{"raw_affiliation_string":"EcoCloud, EPFL","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065116578","display_name":"Mathias Payer","orcid":"https://orcid.org/0000-0001-5054-7547"},"institutions":[{"id":"https://openalex.org/I200966471","display_name":"Prudential Financial (United States)","ror":"https://ror.org/05fy6my48","country_code":"US","type":"company","lineage":["https://openalex.org/I200966471"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mathias Payer","raw_affiliation_strings":["EPFL,EcoCloud","EcoCloud, EPFL"],"affiliations":[{"raw_affiliation_string":"EPFL,EcoCloud","institution_ids":["https://openalex.org/I200966471"]},{"raw_affiliation_string":"EcoCloud, EPFL","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5010558882"],"corresponding_institution_ids":["https://openalex.org/I200966471"],"apc_list":null,"apc_paid":null,"fwci":1.037,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.81058831,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"2921","last_page":"2939"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9688000082969666,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8548153042793274},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5426337122917175},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.542384684085846},{"id":"https://openalex.org/keywords/compartmentalization","display_name":"Compartmentalization (fire protection)","score":0.5312846302986145},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.45767921209335327},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4567514657974243},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.43667295575141907},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4165588319301605},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3428804874420166},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.34095498919487}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8548153042793274},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5426337122917175},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.542384684085846},{"id":"https://openalex.org/C110455231","wikidata":"https://www.wikidata.org/wiki/Q897788","display_name":"Compartmentalization (fire protection)","level":3,"score":0.5312846302986145},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.45767921209335327},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4567514657974243},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.43667295575141907},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4165588319301605},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3428804874420166},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.34095498919487},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C181199279","wikidata":"https://www.wikidata.org/wiki/Q8047","display_name":"Enzyme","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sp46215.2023.10179472","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179472","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:infoscience.epfl.ch:301914","is_oa":true,"landing_page_url":"https://infoscience.epfl.ch/handle/20.500.14299/196901","pdf_url":"https://infoscience.epfl.ch/bitstreams/ec81ac8b-b412-4426-b4cd-fd4a01dc9896/download","source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference proceedings"}],"best_oa_location":{"id":"pmh:oai:infoscience.epfl.ch:301914","is_oa":true,"landing_page_url":"https://infoscience.epfl.ch/handle/20.500.14299/196901","pdf_url":"https://infoscience.epfl.ch/bitstreams/ec81ac8b-b412-4426-b4cd-fd4a01dc9896/download","source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference proceedings"},"sustainable_development_goals":[{"score":0.6000000238418579,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1441312571","display_name":null,"funder_award_id":"00020","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"},{"id":"https://openalex.org/G2018973337","display_name":null,"funder_award_id":"200020B_188696","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"},{"id":"https://openalex.org/G4621158401","display_name":null,"funder_award_id":"Fellowship","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"},{"id":"https://openalex.org/G4836148144","display_name":null,"funder_award_id":"20002","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"},{"id":"https://openalex.org/G6111715058","display_name":"Visionen in der Offenbarung des Johannes.","funder_award_id":"30006","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"},{"id":"https://openalex.org/G628552264","display_name":null,"funder_award_id":"200020","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"},{"id":"https://openalex.org/G6992804425","display_name":"Hardware/Software Co-Design for In-Memory Services","funder_award_id":"188696","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"}],"funders":[{"id":"https://openalex.org/F4320307102","display_name":"Intel Corporation","ror":"https://ror.org/01ek73717"},{"id":"https://openalex.org/F4320320924","display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung","ror":"https://ror.org/00yjd3n13"},{"id":"https://openalex.org/F4320326958","display_name":"Fondation Botnar","ror":"https://ror.org/033ztm745"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4385080311.pdf"},"referenced_works_count":53,"referenced_works":["https://openalex.org/W1594317058","https://openalex.org/W1904738922","https://openalex.org/W2004807638","https://openalex.org/W2020733012","https://openalex.org/W2035142022","https://openalex.org/W2095881341","https://openalex.org/W2136310957","https://openalex.org/W2137622193","https://openalex.org/W2162800072","https://openalex.org/W2511669759","https://openalex.org/W2534917055","https://openalex.org/W2605597658","https://openalex.org/W2765742937","https://openalex.org/W2805608032","https://openalex.org/W2907135502","https://openalex.org/W2951933700","https://openalex.org/W2953357877","https://openalex.org/W2963311060","https://openalex.org/W2979633637","https://openalex.org/W2995538315","https://openalex.org/W3027054693","https://openalex.org/W3029114445","https://openalex.org/W3155249046","https://openalex.org/W3177916483","https://openalex.org/W3183974204","https://openalex.org/W3205828860","https://openalex.org/W4205586362","https://openalex.org/W4221048168","https://openalex.org/W4226543528","https://openalex.org/W4242574860","https://openalex.org/W4251741637","https://openalex.org/W4299301436","https://openalex.org/W6602324607","https://openalex.org/W6607203013","https://openalex.org/W6608386446","https://openalex.org/W6628561984","https://openalex.org/W6629464551","https://openalex.org/W6665931110","https://openalex.org/W6681719896","https://openalex.org/W6705143995","https://openalex.org/W6732337940","https://openalex.org/W6747789540","https://openalex.org/W6753006707","https://openalex.org/W6760312436","https://openalex.org/W6762668627","https://openalex.org/W6766685781","https://openalex.org/W6773836194","https://openalex.org/W6775865111","https://openalex.org/W6782431242","https://openalex.org/W6799272267","https://openalex.org/W6820089763","https://openalex.org/W6851729688","https://openalex.org/W6987020231"],"related_works":["https://openalex.org/W4234653771","https://openalex.org/W4226193002","https://openalex.org/W4306938366","https://openalex.org/W2026670093","https://openalex.org/W2048904889","https://openalex.org/W2040958228","https://openalex.org/W1990340848","https://openalex.org/W3177737022","https://openalex.org/W2060475972","https://openalex.org/W3167477202"],"abstract_inverted_index":{"Modern":[0],"programs":[1,34],"are":[2],"monolithic,":[3],"combining":[4],"code":[5,25],"of":[6,28,45,76,94,170,190],"varied":[7],"provenance":[8],"without":[9],"isolation,":[10],"all":[11,29],"the":[12,43,77],"while":[13],"running":[14],"on":[15,86,160],"network-connected":[16],"devices.":[17],"A":[18],"vulnerability":[19],"in":[20,156],"any":[21],"component":[22],"may":[23],"compromise":[24],"and":[26,83,115,119,126,134,147],"data":[27],"other":[30],"components.":[31,52],"Compartmentalization":[32],"separates":[33],"into":[35],"fault":[36],"domains":[37],"with":[38,130,187],"limited":[39],"policy-defined":[40],"permissions,":[41],"following":[42],"Principle":[44],"Least":[46],"Privilege,":[47],"preventing":[48],"arbitrary":[49],"interactions":[50],"between":[51],"Unfortunately,":[53],"existing":[54],"compartmentalization":[55],"mechanisms":[56,142],"target":[57],"weak":[58],"attacker":[59],"models,":[60],"incur":[61],"high":[62],"overheads,":[63],"or":[64],"overfit":[65],"to":[66,173],"specific":[67],"use":[68],"cases,":[69],"precluding":[70],"their":[71],"general":[72],"adoption.":[73],"The":[74],"need":[75],"hour":[78],"is":[79],"a":[80,99,161],"secure,":[81],"performant,":[82],"flexible":[84],"mechanism":[85],"which":[87],"developers":[88],"can":[89],"reliably":[90],"implement":[91],"an":[92,168,183],"arsenal":[93],"compartmentalized":[95],"software.We":[96],"present":[97],"SecureCells,":[98],"novel":[100,140],"architecture":[101],"for":[102,113,124,143],"intra-address":[103],"space":[104],"compartmentalization.":[105],"SecureCells":[106,138,153,176],"enforces":[107],"per-Virtual":[108],"Memory":[109],"Area":[110],"(VMA)":[111],"permissions":[112],"secure":[114,125,178],"scalable":[116],"access":[117],"control,":[118],"introduces":[120],"new":[121],"userspace":[122],"instructions":[123],"fast":[127],"compartment":[128],"switching":[129],"hardware-enforced":[131],"call":[132,144],"gates":[133],"zero-copy":[135],"permission":[136],"transfers.":[137],"enables":[139],"software":[141,180],"stack":[145],"maintenance":[146],"register":[148],"context":[149],"isolation.":[150],"In":[151],"microbenchmarks,":[152],"switches":[154],"compartments":[155],"only":[157],"8":[158],"cycles":[159],"5-stage":[162],"in-order":[163],"processor,":[164],"reducing":[165],"cost":[166],"by":[167],"order":[169],"magnitude":[171],"compared":[172],"state-of-the-art.":[174],"Consequently,":[175],"helps":[177],"high-performance":[179],"such":[181],"as":[182],"in-memory":[184],"key-value":[185],"store":[186],"negligible":[188],"overhead":[189],"less":[191],"than":[192],"3%.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}
