{"id":"https://openalex.org/W2203543290","doi":"https://doi.org/10.1145/2842621","title":"Rethinking Memory Permissions for Protection Against Cross-Layer Attacks","display_name":"Rethinking Memory Permissions for Protection Against Cross-Layer Attacks","publication_year":2015,"publication_date":"2015-12-08","ids":{"openalex":"https://openalex.org/W2203543290","doi":"https://doi.org/10.1145/2842621","mag":"2203543290"},"language":"en","primary_location":{"id":"doi:10.1145/2842621","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2842621","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2842621?download=true","source":{"id":"https://openalex.org/S26056741","display_name":"ACM Transactions on Architecture and Code Optimization","issn_l":"1544-3566","issn":["1544-3566","1544-3973"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Architecture and Code Optimization","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/2842621?download=true","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020417025","display_name":"Jesse Elwell","orcid":"https://orcid.org/0000-0001-6679-1624"},"institutions":[{"id":"https://openalex.org/I123946342","display_name":"Binghamton University","ror":"https://ror.org/008rmbt77","country_code":"US","type":"education","lineage":["https://openalex.org/I123946342"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jesse Elwell","raw_affiliation_strings":["SUNY Binghamton"],"raw_orcid":"https://orcid.org/0000-0001-6679-1624","affiliations":[{"raw_affiliation_string":"SUNY Binghamton","institution_ids":["https://openalex.org/I123946342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024209765","display_name":"Ryan Riley","orcid":"https://orcid.org/0000-0002-8321-1211"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Ryan Riley","raw_affiliation_strings":["Qatar University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059614371","display_name":"Nael Abu\u2010Ghazaleh","orcid":"https://orcid.org/0000-0002-9485-5370"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nael Abu-Ghazaleh","raw_affiliation_strings":["University of California, Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101850696","display_name":"Dmitry Ponomarev","orcid":"https://orcid.org/0000-0002-7776-3933"},"institutions":[{"id":"https://openalex.org/I123946342","display_name":"Binghamton University","ror":"https://ror.org/008rmbt77","country_code":"US","type":"education","lineage":["https://openalex.org/I123946342"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dmitry Ponomarev","raw_affiliation_strings":["SUNY Binghamton"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SUNY Binghamton","institution_ids":["https://openalex.org/I123946342"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061649545","display_name":"Iliano Cervesato","orcid":"https://orcid.org/0000-0001-6329-3400"},"institutions":[{"id":"https://openalex.org/I4210089979","display_name":"Carnegie Mellon University Qatar","ror":"https://ror.org/00az5dt38","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210089979","https://openalex.org/I74973139"]},{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["QA","US"],"is_corresponding":false,"raw_author_name":"Iliano Cervesato","raw_affiliation_strings":["Carnegie Mellon University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Doha, Qatar","institution_ids":["https://openalex.org/I4210089979","https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0375,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.90857972,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":"12","issue":"4","first_page":"1","last_page":"27"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8721392154693604},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.7475279569625854},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6875119805335999},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.5986325740814209},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5786839723587036},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.5477482676506042},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5394687056541443},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4483281373977661},{"id":"https://openalex.org/keywords/system-software","display_name":"System software","score":0.44582003355026245},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4436124265193939},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.44224363565444946},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.42014044523239136},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.41174620389938354},{"id":"https://openalex.org/keywords/virtual-memory","display_name":"Virtual memory","score":0.4109947383403778},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.38311266899108887},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.36328303813934326},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.32736730575561523},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.3062804043292999},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.2889396548271179},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.16306960582733154},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.16159898042678833},{"id":"https://openalex.org/keywords/overlay","display_name":"Overlay","score":0.13269394636154175}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8721392154693604},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.7475279569625854},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6875119805335999},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.5986325740814209},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5786839723587036},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.5477482676506042},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5394687056541443},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4483281373977661},{"id":"https://openalex.org/C2779960034","wikidata":"https://www.wikidata.org/wiki/Q676202","display_name":"System software","level":3,"score":0.44582003355026245},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4436124265193939},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.44224363565444946},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.42014044523239136},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.41174620389938354},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.4109947383403778},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38311266899108887},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.36328303813934326},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.32736730575561523},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.3062804043292999},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.2889396548271179},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.16306960582733154},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.16159898042678833},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.13269394636154175},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2842621","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2842621","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2842621?download=true","source":{"id":"https://openalex.org/S26056741","display_name":"ACM Transactions on Architecture and Code Optimization","issn_l":"1544-3566","issn":["1544-3566","1544-3973"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Architecture and Code Optimization","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/2842621","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2842621","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2842621?download=true","source":{"id":"https://openalex.org/S26056741","display_name":"ACM Transactions on Architecture and Code Optimization","issn_l":"1544-3566","issn":["1544-3566","1544-3973"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Architecture and Code Optimization","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7999137494","display_name":null,"funder_award_id":"4-1593-1-260","funder_id":"https://openalex.org/F4320332753","funder_display_name":"Qatar National Research Fund"}],"funders":[{"id":"https://openalex.org/F4320309815","display_name":"Qatar Foundation","ror":"https://ror.org/01cawbq05"},{"id":"https://openalex.org/F4320332753","display_name":"Qatar National Research Fund","ror":"https://ror.org/01svaqq28"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2203543290.pdf","grobid_xml":"https://content.openalex.org/works/W2203543290.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W1112477","https://openalex.org/W103986934","https://openalex.org/W1504669610","https://openalex.org/W1535810264","https://openalex.org/W1546317334","https://openalex.org/W1641762327","https://openalex.org/W1829003931","https://openalex.org/W1852007091","https://openalex.org/W1971740328","https://openalex.org/W1978703818","https://openalex.org/W2000375627","https://openalex.org/W2011491452","https://openalex.org/W2025539306","https://openalex.org/W2027135600","https://openalex.org/W2029224396","https://openalex.org/W2031806437","https://openalex.org/W2036329595","https://openalex.org/W2036601091","https://openalex.org/W2043366397","https://openalex.org/W2043501224","https://openalex.org/W2060468294","https://openalex.org/W2093460657","https://openalex.org/W2096828726","https://openalex.org/W2106728965","https://openalex.org/W2108255910","https://openalex.org/W2112731379","https://openalex.org/W2117479921","https://openalex.org/W2121774147","https://openalex.org/W2135359801","https://openalex.org/W2136310957","https://openalex.org/W2137622193","https://openalex.org/W2144006591","https://openalex.org/W2150615820","https://openalex.org/W2150709728","https://openalex.org/W2151006143","https://openalex.org/W2153553074","https://openalex.org/W2159265516","https://openalex.org/W2162055502","https://openalex.org/W2162598060","https://openalex.org/W2166293920","https://openalex.org/W2168760272","https://openalex.org/W2171482413","https://openalex.org/W2914982603","https://openalex.org/W3150612471","https://openalex.org/W4206314719","https://openalex.org/W4230464498","https://openalex.org/W4231928253","https://openalex.org/W4300807510"],"related_works":["https://openalex.org/W2148749405","https://openalex.org/W2104105430","https://openalex.org/W1515917392","https://openalex.org/W2743348030","https://openalex.org/W1973516247","https://openalex.org/W1991063492","https://openalex.org/W2613320081","https://openalex.org/W2179519055","https://openalex.org/W2967546679","https://openalex.org/W4387237709"],"abstract_inverted_index":{"The":[0],"inclusive":[1,40],"permissions":[2,20,41,103],"structure":[3],"(e.g.,":[4],"the":[5,34,68,75,96,175,209],"Intel":[6],"ring":[7],"model)":[8],"of":[9,70,98,101,107,119,145,161,180],"modern":[10],"commodity":[11,210],"CPUs":[12],"provides":[13],"privileged":[14],"system":[15,35,64,71,76,108,151],"software":[16,46,72,109,152],"layers":[17,65,106],"with":[18,127,141,191],"arbitrary":[19,50],"to":[21,29,48,59,73,149,153,208],"access":[22],"and":[23,33,77,115,199,205,212],"modify":[24],"client":[25,155],"processes,":[26,156],"allowing":[27],"them":[28,136],"manage":[30,74,154],"these":[31,39],"clients":[32],"resources":[36],"efficiently.":[37],"Unfortunately,":[38],"allow":[42],"a":[43,84,159,178],"compromised":[44],"high-privileged":[45],"layer":[47],"perform":[49],"malicious":[51],"activities.":[52],"In":[53,80,147],"this":[54],"article,":[55],"our":[56],"goal":[57],"is":[58,93],"prevent":[60],"attacks":[61],"that":[62,92,165,174,186],"cross":[63],"while":[66],"maintaining":[67],"abilities":[69],"allocate":[78],"resources.":[79],"particular,":[81],"we":[82,134,157],"present":[83],"hardware-supported":[85],"page":[86],"permission":[87,163],"framework":[88],"for":[89,104],"physical":[90],"pages":[91],"based":[94],"on":[95],"concept":[97],"noninclusive":[99],"sets":[100],"memory":[102],"different":[105],"(such":[110],"as":[111,123,137],"hypervisors,":[112],"operating":[113],"systems,":[114],"user-level":[116],"applications).":[117],"Instead":[118],"viewing":[120],"privilege":[121],"levels":[122,139],"an":[124],"ordered":[125],"hierarchy":[126],"each":[128,140],"successive":[129],"level":[130],"being":[131],"more":[132],"privileged,":[133],"view":[135],"distinct":[138],"its":[142],"own":[143],"set":[144,160],"permissions.":[146],"order":[148],"enable":[150],"define":[158],"legal":[162],"transitions":[164],"support":[166],"resource":[167],"allocation":[168],"but":[169],"preserve":[170],"security.":[171],"We":[172,183],"show":[173,185],"model":[176],"prevents":[177],"range":[179],"recent":[181],"attacks.":[182],"also":[184],"it":[187],"can":[188],"be":[189],"implemented":[190],"negligible":[192],"performance":[193],"overhead":[194],"(both":[195],"at":[196,200],"load":[197],"time":[198],"runtime),":[201],"low":[202],"hardware":[203],"complexity,":[204],"minimal":[206],"changes":[207],"OS":[211],"hypervisor":[213],"code.":[214]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":2}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2025-10-10T00:00:00"}