{"id":"https://openalex.org/W7125920004","doi":"https://doi.org/10.1109/tdsc.2026.3657770","title":"Enabling Confidential VMs Across Diverse ARM Platforms by Retrofitting TrustZone","display_name":"Enabling Confidential VMs Across Diverse ARM Platforms by Retrofitting TrustZone","publication_year":2026,"publication_date":"2026-01-28","ids":{"openalex":"https://openalex.org/W7125920004","doi":"https://doi.org/10.1109/tdsc.2026.3657770"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3657770","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3657770","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033562441","display_name":"Y. Wang","orcid":"https://orcid.org/0000-0002-0271-626X"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yicong Wang","raw_affiliation_strings":["Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0007-6275-7139","affiliations":[{"raw_affiliation_string":"Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051857167","display_name":"Zeyu Mi","orcid":"https://orcid.org/0000-0001-8395-1319"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zeyu Mi","raw_affiliation_strings":["Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-8395-1319","affiliations":[{"raw_affiliation_string":"Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100406215","display_name":"Haibo Chen","orcid":"https://orcid.org/0000-0002-9720-0361"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haibo Chen","raw_affiliation_strings":["Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-9720-0361","affiliations":[{"raw_affiliation_string":"Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0901163,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"3","first_page":"5814","last_page":"5830"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9606000185012817,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9606000185012817,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.008799999952316284,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.00430000014603138,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.8001000285148621},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7221999764442444},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.6373000144958496},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.6007000207901001},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4625000059604645},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.39239999651908875},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.36309999227523804}],"concepts":[{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.8001000285148621},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7785999774932861},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7221999764442444},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.6373000144958496},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.6007000207901001},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.548799991607666},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4625000059604645},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.40059998631477356},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.39239999651908875},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.36309999227523804},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.35530000925064087},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3474000096321106},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.33480000495910645},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.3249000012874603},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.3197000026702881},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.31929999589920044},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.3102000057697296},{"id":"https://openalex.org/C2778368411","wikidata":"https://www.wikidata.org/wiki/Q24662","display_name":"Retrofitting","level":2,"score":0.27950000762939453},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2549000084400177}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3657770","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3657770","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8491644513","display_name":null,"funder_award_id":"62372287","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1844153653","https://openalex.org/W2031806437","https://openalex.org/W2043501224","https://openalex.org/W2055184282","https://openalex.org/W2057743816","https://openalex.org/W2131726714","https://openalex.org/W2136310957","https://openalex.org/W2145904766","https://openalex.org/W2149886445","https://openalex.org/W2171863291","https://openalex.org/W2368550879","https://openalex.org/W2579632738","https://openalex.org/W2613314374","https://openalex.org/W2761289806","https://openalex.org/W2762625979","https://openalex.org/W2792548049","https://openalex.org/W2807772963","https://openalex.org/W2913096406","https://openalex.org/W2914223029","https://openalex.org/W2927484243","https://openalex.org/W2935013673","https://openalex.org/W2937177421","https://openalex.org/W3011209438","https://openalex.org/W3016246341","https://openalex.org/W3205994385","https://openalex.org/W4252834746","https://openalex.org/W4407197294","https://openalex.org/W4408750180","https://openalex.org/W4413886878"],"related_works":[],"abstract_inverted_index":{"As":[0],"cloud":[1,64],"tenants":[2],"increasingly":[3],"adopt":[4],"ARM":[5,82,89,159],"servers,":[6],"securing":[7],"their":[8],"sensitive":[9],"workloads":[10],"becomes":[11],"a":[12,30,74,112,127],"critical":[13],"concern.":[14,36],"Confidential":[15,42],"virtualization,":[16],"which":[17],"shields":[18],"data":[19],"from":[20,106],"privileged":[21],"software":[22],"by":[23,62,102],"establishing":[24],"isolated":[25],"VMs,":[26,97],"has":[27],"emerged":[28],"as":[29],"standard":[31],"approach":[32],"to":[33,47,91,123],"address":[34],"this":[35,49,69,120],"However,":[37],"ARM's":[38],"official":[39],"solution,":[40],"the":[41,87,100,116,132],"Compute":[43],"Architecture":[44],"(CCA),":[45],"fails":[46],"meet":[48],"demand.":[50],"It":[51],"lacks":[52],"support":[53],"on":[54,81,156],"most":[55],"deployed":[56],"hardware,":[57],"and":[58,168],"its":[59,154],"widespread":[60],"adoption":[61],"major":[63],"providers":[65],"remains":[66],"distant.":[67],"In":[68],"paper,":[70],"we":[71],"propose":[72],"TwinVisor,":[73,167],"novel":[75],"system":[76],"that":[77,172],"enables":[78],"confidential":[79,96,177],"virtualization":[80,142],"platforms.":[83,160],"TwinVisor":[84,110,149],"innovatively":[85],"retrofits":[86],"mature":[88],"TrustZone":[90],"enforce":[92],"strong":[93],"isolation":[94],"for":[95,135,184],"while":[98,125,179],"minimizing":[99],"TCB":[101],"decoupling":[103],"resource":[104,136],"management":[105],"security":[107],"mechanisms.":[108],"Specifically,":[109],"introduces":[111],"tiny":[113],"hypervisor":[114,129],"in":[115,131],"secure":[117],"world":[118,134],"(calledS-visorin":[119],"paper)":[121],"dedicated":[122],"protection,":[124],"reusing":[126],"full-fledged":[128],"(calledN-visor)":[130],"normal":[133],"management.":[137],"By":[138],"combining":[139],"S-EL2":[140],"hardware":[141],"features":[143],"with":[144],"software-based":[145],"same-privilege":[146],"protection":[147],"techniques,":[148],"achieves":[150],"broad":[151],"compatibility,":[152],"enabling":[153],"deployment":[155],"almost":[157],"all":[158],"We":[161],"have":[162],"implemented":[163],"two":[164],"prototypes":[165],"of":[166],"our":[169],"evaluation":[170],"demonstrates":[171],"it":[173],"can":[174],"effectively":[175],"protect":[176],"VMs":[178],"imposing":[180],"negligible":[181],"performance":[182],"overhead":[183],"real-world":[185],"applications.":[186]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-01-29T00:00:00"}