{"id":"https://openalex.org/W7151831256","doi":"https://doi.org/10.1109/tcc.2026.3681842","title":"KPT-Fork: Enhancing User Data Isolation via Kernel Page Table Fork","display_name":"KPT-Fork: Enhancing User Data Isolation via Kernel Page Table Fork","publication_year":2026,"publication_date":"2026-04-01","ids":{"openalex":"https://openalex.org/W7151831256","doi":"https://doi.org/10.1109/tcc.2026.3681842"},"language":null,"primary_location":{"id":"doi:10.1109/tcc.2026.3681842","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2026.3681842","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100775049","display_name":"Zhongyu Wang","orcid":"https://orcid.org/0000-0001-9314-4799"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zixuan Wang","raw_affiliation_strings":["Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0009-9958-4889","affiliations":[{"raw_affiliation_string":"Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090954759","display_name":"Lisong Pan","orcid":"https://orcid.org/0009-0008-0720-2867"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lisong Pan","raw_affiliation_strings":["Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073224556","display_name":"Jia Rao","orcid":"https://orcid.org/0000-0002-2133-4363"},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jia Rao","raw_affiliation_strings":["Department of Computer Science, The University of Texas at Arlington, Arlington, TX, USA"],"raw_orcid":"https://orcid.org/0000-0002-2133-4363","affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Texas at Arlington, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114246845","display_name":"Hao Fan","orcid":"https://orcid.org/0000-0002-6741-0448"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Fan","raw_affiliation_strings":["Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-6741-0448","affiliations":[{"raw_affiliation_string":"Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101898692","display_name":"Zheng Huang","orcid":"https://orcid.org/0000-0001-5143-5192"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuo Huang","raw_affiliation_strings":["Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-6094-0166","affiliations":[{"raw_affiliation_string":"Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133190857","display_name":"Qi Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Wu","raw_affiliation_strings":["Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003766128","display_name":"Song Wu","orcid":"https://orcid.org/0000-0001-8690-127X"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Song Wu","raw_affiliation_strings":["Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-8690-127X","affiliations":[{"raw_affiliation_string":"Services Computing Technology and System Lab, Cluster and Grid Computing Lab, National Engineering Research Center for Big Data Technology and System, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.45497518,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":"2","first_page":"1127","last_page":"1140"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.2808000147342682,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.2808000147342682,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.10270000249147415,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.08340000361204147,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fork","display_name":"Fork (system call)","score":0.6658999919891357},{"id":"https://openalex.org/keywords/table","display_name":"Table (database)","score":0.5011000037193298},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.49939998984336853},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.38040000200271606},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.3287999927997589}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8374000191688538},{"id":"https://openalex.org/C40523978","wikidata":"https://www.wikidata.org/wiki/Q14675","display_name":"Fork (system call)","level":2,"score":0.6658999919891357},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.5011000037193298},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.49939998984336853},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.38040000200271606},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28369998931884766},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.28349998593330383},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.24969999492168427},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2468000054359436}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tcc.2026.3681842","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2026.3681842","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4732398609","display_name":null,"funder_award_id":"72595830/72595835","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6188817956","display_name":null,"funder_award_id":"62032008","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Modern":[0],"operating":[1],"systems":[2],"(OS)":[3],"utilize":[4],"a":[5,81,89,96,153,171,186,192,241],"shared":[6,82,187,208],"kernel":[7,13,61,70,83,91,148,154,188,209],"address":[8,84,100,202],"design,":[9],"enabling":[10],"the":[11,59,75,159,180],"OS":[12],"to":[14,31,66,110,130,226],"access":[15],"physical":[16],"memory":[17,194],"addresses":[18,210],"conveniently":[19],"and":[20,53,126,146,161,183,200],"efficiently.":[21],"However,":[22],"this":[23],"design":[24],"introduces":[25],"vulnerabilities":[26],"that":[27,106,157,174,196,221,235],"attackers":[28],"can":[29,120,223,238],"exploit":[30],"arbitrarily":[32],"read/write":[33],"content":[34],"from":[35,124],"any":[36],"kernel-space":[37],"address,":[38],"known":[39],"as":[40,74],"data-oriented":[41,245],"attacks.":[42],"Existing":[43],"MMU-based":[44],"isolation":[45,79,138,155,177],"approaches":[46],"face":[47],"inherent":[48],"challenges":[49],"in":[50,80,207],"scalability,":[51],"compatibility,":[52],"context":[54],"switch":[55],"overhead.":[56,250],"Inspired":[57],"by":[58],"reference":[60,69],"page":[62,71,92,189],"table,":[63],"we":[64],"propose":[65],"use":[67],"user-private":[68,213],"tables":[72],"(UP-KPTs)":[73],"foundation":[76],"for":[77,95],"data":[78,105,123,137,176,206],"space.":[85],"A":[86],"UP-KPT":[87,134,172],"is":[88],"customized":[90],"table":[93],"tailored":[94],"specific":[97],"container,":[98],"encompassing":[99],"mappings":[101,203],"of":[102,163,185,204,230,244],"private":[103,193,205],"user":[104],"are":[107],"not":[108],"visible":[109],"other":[111],"containers.":[112,133],"To":[113],"protect":[114,227],"sensitive":[115],"system-wide":[116],"data,":[117],"an":[118],"administrator":[119],"unmap":[121],"such":[122],"UP-KPTs":[125],"make":[127],"it":[128],"inaccessible":[129],"potentially":[131],"malicious":[132],"provides":[135],"strong":[136],"while":[139,178,247],"maintaining":[140],"full":[141],"compatibility":[142],"with":[143],"legacy":[144],"applications":[145],"existing":[147],"components.":[149],"We":[150,215],"develop":[151],"KPT-fork,":[152],"framework":[156],"enables":[158,175],"creation":[160],"management":[162],"UP-KPTs.":[164],"KPT-fork":[165,222],"entails":[166],"two":[167],"important":[168],"designs:":[169],"1)":[170],"structure":[173],"preserving":[179],"simplicity,":[181],"convenience,":[182],"efficiency":[184],"table;":[190],"2)":[191],"allocator":[195],"efficiently":[197],"transforms":[198],"static":[199],"direct":[201],"into":[211],"dynamic":[212],"mappings.":[214],"demonstrate":[216],"through":[217],"three":[218],"case":[219],"studies":[220],"be":[224],"extended":[225],"various":[228],"types":[229],"data.":[231],"Our":[232],"evaluation":[233],"shows":[234],"KPT":[236],"fork":[237],"defend":[239],"against":[240],"wide":[242],"range":[243],"attacks":[246],"incurring":[248],"negligible":[249]},"counts_by_year":[],"updated_date":"2026-06-09T06:18:44.609144","created_date":"2026-04-09T00:00:00"}