{"id":"https://openalex.org/W7126063929","doi":"https://doi.org/10.1109/srds69199.2025.00048","title":"MVMONT: Securing Confidential Deployments With Attestable Multi-Variant Monitoring","display_name":"MVMONT: Securing Confidential Deployments With Attestable Multi-Variant Monitoring","publication_year":2025,"publication_date":"2025-09-29","ids":{"openalex":"https://openalex.org/W7126063929","doi":"https://doi.org/10.1109/srds69199.2025.00048"},"language":null,"primary_location":{"id":"doi:10.1109/srds69199.2025.00048","is_oa":false,"landing_page_url":"https://doi.org/10.1109/srds69199.2025.00048","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 44th International Symposium on Reliable Distributed Systems (SRDS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5107954470","display_name":"Kailun Qin","orcid":"https://orcid.org/0009-0004-3372-8724"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kailun Qin","raw_affiliation_strings":["Shanghai Jiao Tong University,Shanghai,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University,Shanghai,China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029335881","display_name":"Dawu Gu","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dawu Gu","raw_affiliation_strings":["Shanghai Jiao Tong University,Shanghai,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University,Shanghai,China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"392","last_page":"403"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9679999947547913,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9679999947547913,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.004999999888241291,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8184000253677368},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.7005000114440918},{"id":"https://openalex.org/keywords/redundancy","display_name":"Redundancy (engineering)","score":0.5697000026702881},{"id":"https://openalex.org/keywords/trusted-computing-base","display_name":"Trusted computing base","score":0.4966000020503998},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4927999973297119},{"id":"https://openalex.org/keywords/intrusion-tolerance","display_name":"Intrusion tolerance","score":0.4763000011444092},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.46129998564720154},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.40689998865127563},{"id":"https://openalex.org/keywords/trusted-computing","display_name":"Trusted Computing","score":0.4043000042438507},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.3970000147819519}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8446000218391418},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8184000253677368},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.7005000114440918},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5953999757766724},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.5697000026702881},{"id":"https://openalex.org/C147346212","wikidata":"https://www.wikidata.org/wiki/Q5492632","display_name":"Trusted computing base","level":4,"score":0.4966000020503998},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4927999973297119},{"id":"https://openalex.org/C196903269","wikidata":"https://www.wikidata.org/wiki/Q6059063","display_name":"Intrusion tolerance","level":3,"score":0.4763000011444092},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.46129998564720154},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.40689998865127563},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.4043000042438507},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3970000147819519},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.39169999957084656},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3806999921798706},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.36890000104904175},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.36149999499320984},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.337799996137619},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3312000036239624},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.33070001006126404},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.33059999346733093},{"id":"https://openalex.org/C148609458","wikidata":"https://www.wikidata.org/wiki/Q7021281","display_name":"Nexus (standard)","level":2,"score":0.3174999952316284},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C139089976","wikidata":"https://www.wikidata.org/wiki/Q2142273","display_name":"Trusted third party","level":2,"score":0.30230000615119934},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.29899999499320984},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.29510000348091125},{"id":"https://openalex.org/C100980136","wikidata":"https://www.wikidata.org/wiki/Q4668956","display_name":"Malleability","level":4,"score":0.2946000099182129},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.28780001401901245},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C202775310","wikidata":"https://www.wikidata.org/wiki/Q1140366","display_name":"Trusted Platform Module","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.27090001106262207},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.2583000063896179},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.25099998712539673}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/srds69199.2025.00048","is_oa":false,"landing_page_url":"https://doi.org/10.1109/srds69199.2025.00048","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 44th International Symposium on Reliable Distributed Systems (SRDS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.638914942741394,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5331269760","display_name":null,"funder_award_id":"2022ZD0120304","funder_id":"https://openalex.org/F4320329860","funder_display_name":"National Science and Technology Major Project"}],"funders":[{"id":"https://openalex.org/F4320329860","display_name":"National Science and Technology Major Project","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W1504083933","https://openalex.org/W1977336977","https://openalex.org/W2036329595","https://openalex.org/W2050529434","https://openalex.org/W2081105932","https://openalex.org/W2086320398","https://openalex.org/W2108860402","https://openalex.org/W2136938453","https://openalex.org/W2142778065","https://openalex.org/W2484015479","https://openalex.org/W2506852773","https://openalex.org/W2528894473","https://openalex.org/W2605470470","https://openalex.org/W2606288313","https://openalex.org/W2607063282","https://openalex.org/W2613229705","https://openalex.org/W2794796225","https://openalex.org/W2898518680","https://openalex.org/W2931122162","https://openalex.org/W2934715626","https://openalex.org/W2982506996","https://openalex.org/W2988897519","https://openalex.org/W3010956057","https://openalex.org/W3022459224","https://openalex.org/W3023238978","https://openalex.org/W3041891086","https://openalex.org/W3047868298","https://openalex.org/W3161624383","https://openalex.org/W3169290693","https://openalex.org/W3185923498","https://openalex.org/W3208695543","https://openalex.org/W3209811848","https://openalex.org/W4287882639","https://openalex.org/W4288057713","https://openalex.org/W4311165856","https://openalex.org/W4312060051","https://openalex.org/W4312624614","https://openalex.org/W4387005270","https://openalex.org/W4387298278","https://openalex.org/W4391724745","https://openalex.org/W4391725260","https://openalex.org/W4399665662","https://openalex.org/W4402263683","https://openalex.org/W4404787981","https://openalex.org/W4405182342","https://openalex.org/W4408565485","https://openalex.org/W4417134514"],"related_works":[],"abstract_inverted_index":{"Confidential":[0],"deployments,":[1,194],"combining":[2],"Trusted":[3,173],"Execution":[4,121],"Environments":[5],"(TEEs)":[6],"with":[7,63,135,148,159,236],"cloud-native":[8,51,107],"techniques,":[9],"have":[10],"become":[11],"the":[12,64,78,111,117,143,169,172,179,202,212],"primary":[13],"model":[14,67],"for":[15,82,99,154,193,207],"protecting":[16],"sensitive":[17],"cloud":[18],"workloads.":[19],"However,":[20],"they":[21],"are":[22,59,69],"not":[23,37],"immune":[24],"to":[25,73,123],"memory":[26,75],"vulnerabilities":[27],"and":[28,41,68,116,145,163,184,244],"runtime":[29,79,125,199,232],"attacks.":[30],"In":[31,87],"particular,":[32],"TEEs":[33],"by":[34,127],"design":[35,180],"do":[36],"consider":[38],"such":[39],"threats":[40],"their":[42],"built-in":[43,197],"attestation":[44,200],"only":[45],"captures":[46],"load-time":[47],"compromises.":[48],"Furthermore,":[49],"existing":[50],"security":[52],"tools,":[53],"relying":[54],"on":[55,219],"untrusted":[56],"system":[57,98],"software,":[58],"inherently":[60],"in":[61,230],"conflict":[62],"TEE":[65,187],"threat":[66],"rendered":[70],"ineffective":[71],"due":[72],"TEE's":[74],"protection,":[76],"making":[77],"exploit":[80],"detection":[81],"confidential":[83,101],"deployments":[84,115],"even":[85],"harder.":[86],"this":[88],"paper,":[89],"we":[90,152,177],"present":[91],"MVMONT":[92,103,195,215],"-":[93],"an":[94],"attestable":[95],"Multi-Variant":[96,120],"Monitoring":[97],"TEE-based":[100],"deployments.":[102],"introduces":[104],"a":[105,136,220,241],"new":[106],"abstraction":[108],"that":[109],"leverages":[110],"inherent":[112],"redundancy":[113],"of":[114,119,171,181,214,222],"concept":[118],"(MVX)":[122],"detect":[124],"compromises":[126],"checking":[128],"execution":[129],"divergences":[130],"across":[131],"concurrently":[132],"running":[133],"variants":[134],"memory-safe":[137],"out-of-band":[138],"monitor":[139,183],"enclave.":[140],"To":[141,166,189],"mitigate":[142],"overhead":[144],"complexity":[146],"associated":[147],"MVX's":[149],"synchronized":[150],"execution,":[151],"opt":[153],"lightweight":[155],"similarity-based":[156],"event":[157],"monitoring":[158],"carefully":[160],"designed":[161],"tracing":[162],"reporting":[164],"mechanisms.":[165],"tightly":[167],"control":[168],"size":[170],"Computing":[174],"Base":[175],"(TCB),":[176],"specialize":[178],"our":[182],"debloat":[185],"its":[186],"runtime.":[188],"enable":[190],"trust":[191],"establishment":[192],"provides":[196],"collective":[198],"through":[201,216],"monitor,":[203],"incorporating":[204],"Property-Based":[205],"Attestation":[206],"privacy":[208],"considerations.":[209],"We":[210,225],"demonstrate":[211],"practicality":[213],"extensive":[217],"evaluations":[218],"set":[221],"real-world":[223],"applications.":[224],"also":[226],"show":[227],"MVMONT's":[228],"effectiveness":[229],"identifying":[231],"exploits":[233],"at":[234],"scale":[235],"minimal":[237,242],"overhead,":[238],"while":[239],"achieving":[240],"TCB":[243],"small":[245],"attack":[246],"surface.":[247]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-01-30T00:00:00"}