{"id":"https://openalex.org/W2907416151","doi":"https://doi.org/10.1145/3292006.3300022","title":"Extracting Secrets from Encrypted Virtual Machines","display_name":"Extracting Secrets from Encrypted Virtual Machines","publication_year":2019,"publication_date":"2019-03-13","ids":{"openalex":"https://openalex.org/W2907416151","doi":"https://doi.org/10.1145/3292006.3300022","mag":"2907416151"},"language":"en","primary_location":{"id":"doi:10.1145/3292006.3300022","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3292006.3300022","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1901.01759","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Mathias Morbitzer","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mathias Morbitzer","raw_affiliation_strings":["Fraunhofer AISEC, Garching near Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer AISEC, Garching near Munich, Germany","institution_ids":["https://openalex.org/I4210136922"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Manuel Huber","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Manuel Huber","raw_affiliation_strings":["Fraunhofer AISEC, Garching near Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer AISEC, Garching near Munich, Germany","institution_ids":["https://openalex.org/I4210136922"]}]},{"author_position":"last","author":{"id":null,"display_name":"Julian Horsch","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Julian Horsch","raw_affiliation_strings":["Fraunhofer AISEC, Garching near Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer AISEC, Garching near Munich, Germany","institution_ids":["https://openalex.org/I4210136922"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210136922"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":30,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"221","last_page":"230"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.993399977684021,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.9415000081062317},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.76419997215271},{"id":"https://openalex.org/keywords/plaintext","display_name":"Plaintext","score":0.6310999989509583},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.6280999779701233},{"id":"https://openalex.org/keywords/memory-protection","display_name":"Memory protection","score":0.5266000032424927},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.48410001397132874},{"id":"https://openalex.org/keywords/disk-encryption","display_name":"Disk encryption","score":0.4528000056743622},{"id":"https://openalex.org/keywords/on-the-fly-encryption","display_name":"On-the-fly encryption","score":0.44749999046325684},{"id":"https://openalex.org/keywords/virtual-memory","display_name":"Virtual memory","score":0.41990000009536743}],"concepts":[{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.9415000081062317},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7874000072479248},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.76419997215271},{"id":"https://openalex.org/C92717368","wikidata":"https://www.wikidata.org/wiki/Q1162538","display_name":"Plaintext","level":3,"score":0.6310999989509583},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.6280999779701233},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5271999835968018},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.5266000032424927},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.48410001397132874},{"id":"https://openalex.org/C9368797","wikidata":"https://www.wikidata.org/wiki/Q117010","display_name":"Disk encryption","level":4,"score":0.4528000056743622},{"id":"https://openalex.org/C147977885","wikidata":"https://www.wikidata.org/wiki/Q117010","display_name":"On-the-fly encryption","level":3,"score":0.44749999046325684},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.41990000009536743},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3790999948978424},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.36010000109672546},{"id":"https://openalex.org/C161615301","wikidata":"https://www.wikidata.org/wiki/Q309396","display_name":"Keystroke logging","level":2,"score":0.3596999943256378},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3452000021934509},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33550000190734863},{"id":"https://openalex.org/C18319499","wikidata":"https://www.wikidata.org/wiki/Q5448402","display_name":"Filesystem-level encryption","level":4,"score":0.3346000015735626},{"id":"https://openalex.org/C166501710","wikidata":"https://www.wikidata.org/wiki/Q5132476","display_name":"Client-side encryption","level":4,"score":0.32499998807907104},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.321399986743927},{"id":"https://openalex.org/C93974786","wikidata":"https://www.wikidata.org/wiki/Q1589480","display_name":"Ciphertext","level":3,"score":0.2831000089645386},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C504728807","wikidata":"https://www.wikidata.org/wiki/Q180256","display_name":"Booting","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C142355369","wikidata":"https://www.wikidata.org/wiki/Q7698919","display_name":"Temporal isolation among virtual machines","level":4,"score":0.2660999894142151},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.26330000162124634},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.2547999918460846},{"id":"https://openalex.org/C184685986","wikidata":"https://www.wikidata.org/wiki/Q3505167","display_name":"Multiple encryption","level":3,"score":0.2515000104904175}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3292006.3300022","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3292006.3300022","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1901.01759","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1901.01759","pdf_url":"https://arxiv.org/pdf/1901.01759","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:fraunhofer.de:N-568427","is_oa":false,"landing_page_url":"http://publica.fraunhofer.de/documents/N-568427.html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400801","display_name":"Publikationsdatenbank der Fraunhofer-Gesellschaft (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fraunhofer AISEC","raw_type":"Conference Paper"},{"id":"pmh:oai:publica.fraunhofer.de:publica/405865","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/405865","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1901.01759","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1901.01759","pdf_url":"https://arxiv.org/pdf/1901.01759","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W2175377689","https://openalex.org/W2559981079","https://openalex.org/W2795160257"],"related_works":[],"abstract_inverted_index":{"AMD":[0,19],"SEV":[1,13,159],"is":[2,38,71],"a":[3,48,75,127,137,166,212],"hardware":[4],"extension":[5],"for":[6,57,74,200],"main":[7],"memory":[8,27,46,55,79,105,118,178,191],"encryption":[9,90,94],"on":[10,157],"multi-tenant":[11],"systems.":[12],"uses":[14],"an":[15,133],"on-chip":[16],"coprocessor,":[17],"the":[18,34,41,44,93,112,171,177,184,201,209],"Secure":[20],"Processor,":[21],"to":[22,39,77,88,107,119,175,182],"transparently":[23],"encrypt":[24],"virtual":[25,84,97,155,167],"machine":[26,98,168],"with":[28],"individual,":[29],"ephemeral":[30],"keys":[31],"never":[32],"leaving":[33],"coprocessor.":[35],"The":[36,64],"goal":[37],"protect":[40],"confidentiality":[42],"of":[43,114,117,144,165,204,211],"tenants'":[45],"from":[47,54,82,101,153,169],"malicious":[49,138],"or":[50,62,150],"compromised":[51],"hypervisor":[52,76,139,172],"and":[53,123,142,193,215],"attacks,":[56],"instance":[58],"via":[59],"cold":[60],"boot":[61],"DMA.":[63],"SEVered":[65],"attack":[66],"has":[67],"shown":[68],"that":[69,135],"it":[70],"nevertheless":[72],"possible":[73],"extract":[78,189],"in":[80,104,126,173],"plaintext":[81],"SEV-encrypted":[83],"machines":[85,156],"without":[86],"access":[87],"their":[89,195],"keys.":[91],"However,":[92],"impedes":[95],"traditional":[96],"introspection":[99],"techniques":[100],"locating":[102],"secrets":[103,122],"prior":[106],"extraction.":[108],"This":[109,198],"can":[110],"require":[111],"extraction":[113],"large":[115],"amounts":[116],"retrieve":[120],"specific":[121],"thus":[124],"result":[125],"time-consuming,":[128],"obvious":[129],"attack.":[130],"We":[131,161],"present":[132],"approach":[134],"allows":[136,199],"quick":[140],"identification":[141],"theft":[143],"secrets,":[145,206],"such":[146],"as":[147],"TLS,":[148],"SSH":[149],"FDE":[151],"keys,":[152],"encrypted":[154],"current":[158],"hardware.":[160],"first":[162],"observe":[163],"activities":[164],"within":[170],"order":[174],"infer":[176],"regions":[179,192],"most":[180],"likely":[181],"contain":[183],"secrets.":[185],"Then,":[186],"we":[187],"systematically":[188],"those":[190],"analyze":[194],"contents":[196],"on-the-fly.":[197],"efficient":[202],"retrieval":[203],"targeted":[205],"strongly":[207],"increasing":[208],"chances":[210],"fast,":[213],"robust":[214],"stealthy":[216],"theft.":[217]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2019-01-11T00:00:00"}