{"id":"https://openalex.org/W3097562018","doi":"https://doi.org/10.1145/3372297.3417886","title":"Cache-in-the-Middle (CITM) Attacks: Manipulating Sensitive Data in Isolated Execution Environments","display_name":"Cache-in-the-Middle (CITM) Attacks: Manipulating Sensitive Data in Isolated Execution Environments","publication_year":2020,"publication_date":"2020-10-30","ids":{"openalex":"https://openalex.org/W3097562018","doi":"https://doi.org/10.1145/3372297.3417886","mag":"3097562018"},"language":"en","primary_location":{"id":"doi:10.1145/3372297.3417886","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3372297.3417886","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100440074","display_name":"Jie Wang","orcid":"https://orcid.org/0000-0002-3249-9219"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Wang","raw_affiliation_strings":["Institute of Information Engineering, CAS & George Mason University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS & George Mason University, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026728546","display_name":"Kun Sun","orcid":"https://orcid.org/0000-0003-4152-2107"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kun Sun","raw_affiliation_strings":["George Mason University, Fairfax, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060586167","display_name":"Lingguang Lei","orcid":"https://orcid.org/0000-0002-1936-0562"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingguang Lei","raw_affiliation_strings":["Institute of Information Engineering, CAS & University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004300345","display_name":"Shengye Wan","orcid":"https://orcid.org/0000-0001-6117-4109"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]},{"id":"https://openalex.org/I16285277","display_name":"William & Mary","ror":"https://ror.org/03hsf0573","country_code":"US","type":"education","lineage":["https://openalex.org/I16285277"]},{"id":"https://openalex.org/I267592682","display_name":"Williams (United States)","ror":"https://ror.org/007zhvp17","country_code":"US","type":"company","lineage":["https://openalex.org/I267592682"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shengye Wan","raw_affiliation_strings":["College of William and Mary & George Mason University, Williamsburg, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of William and Mary & George Mason University, Williamsburg, VA, USA","institution_ids":["https://openalex.org/I162714631","https://openalex.org/I16285277","https://openalex.org/I267592682"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101640450","display_name":"Yuewu Wang","orcid":"https://orcid.org/0009-0003-5170-1253"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuewu Wang","raw_affiliation_strings":["Institute of Information Engineering, CAS & University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS & University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033745290","display_name":"Jiwu Jing","orcid":"https://orcid.org/0000-0002-3409-6149"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiwu Jing","raw_affiliation_strings":["University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.345,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.59721609,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1001","last_page":"1015"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9702000021934509,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8305481672286987},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7597753405570984},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6870212554931641},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.5823354125022888},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5252684354782104},{"id":"https://openalex.org/keywords/trusted-computing-base","display_name":"Trusted computing base","score":0.5083000063896179},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4641011953353882},{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.41457778215408325},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.41029679775238037},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.392636775970459},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.25031420588493347},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.2497881054878235},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08851733803749084}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8305481672286987},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7597753405570984},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6870212554931641},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.5823354125022888},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5252684354782104},{"id":"https://openalex.org/C147346212","wikidata":"https://www.wikidata.org/wiki/Q5492632","display_name":"Trusted computing base","level":4,"score":0.5083000063896179},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4641011953353882},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.41457778215408325},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.41029679775238037},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.392636775970459},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.25031420588493347},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.2497881054878235},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08851733803749084},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3372297.3417886","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3372297.3417886","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8199999928474426,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W95902941","https://openalex.org/W103986934","https://openalex.org/W1493190345","https://openalex.org/W1852007091","https://openalex.org/W2014517322","https://openalex.org/W2020936921","https://openalex.org/W2036329595","https://openalex.org/W2043501224","https://openalex.org/W2046036463","https://openalex.org/W2101889913","https://openalex.org/W2128159601","https://openalex.org/W2150615820","https://openalex.org/W2150709728","https://openalex.org/W2167804035","https://openalex.org/W2168872572","https://openalex.org/W2176235539","https://openalex.org/W2273027740","https://openalex.org/W2348002376","https://openalex.org/W2413016057","https://openalex.org/W2510286124","https://openalex.org/W2511473180","https://openalex.org/W2542538106","https://openalex.org/W2550565492","https://openalex.org/W2579697044","https://openalex.org/W2594560662","https://openalex.org/W2603926284","https://openalex.org/W2604789199","https://openalex.org/W2605883969","https://openalex.org/W2606774910","https://openalex.org/W2734941459","https://openalex.org/W2751274652","https://openalex.org/W2762625979","https://openalex.org/W2766534536","https://openalex.org/W2889631316","https://openalex.org/W2902578047","https://openalex.org/W2914223029","https://openalex.org/W2935013673","https://openalex.org/W2946055845","https://openalex.org/W2947886797","https://openalex.org/W2953150480","https://openalex.org/W2964206587","https://openalex.org/W2972454460","https://openalex.org/W2978489294","https://openalex.org/W2987486320","https://openalex.org/W3016246341","https://openalex.org/W3104862556","https://openalex.org/W4242464041","https://openalex.org/W4252985811","https://openalex.org/W4255163382","https://openalex.org/W4289038676"],"related_works":["https://openalex.org/W2378749186","https://openalex.org/W2364088131","https://openalex.org/W2362741838","https://openalex.org/W2081416538","https://openalex.org/W1476681652","https://openalex.org/W2149256534","https://openalex.org/W2128145651","https://openalex.org/W4310496946","https://openalex.org/W4377941332","https://openalex.org/W2908027808"],"abstract_inverted_index":{"The":[0,225],"traditional":[1],"usage":[2],"of":[3,27,45,145,184,214],"ARM":[4,91],"TrustZone":[5],"has":[6,233],"difficulty":[7],"on":[8,83,122,187,204],"solving":[9],"the":[10,13,19,25,31,35,43,50,67,72,84,90,107,116,123,128,138,143,150,157,171,199,211,215],"conflicts":[11],"between":[12],"manufacturers":[14],"that":[15,101,125,229],"want":[16],"to":[17,41,59,70,105,115,127,197,201,222],"minimize":[18],"trusted":[20],"computing":[21],"base":[22],"by":[23,148],"constraining":[24],"installation":[26],"third-party":[28,36],"applications":[29,48],"in":[30,66,111,137],"secure":[32,51],"world":[33,69,140],"and":[34,89,94,118,195,218],"application":[37,164],"developers":[38],"who":[39],"prefer":[40],"have":[42],"freedom":[44],"installing":[46],"their":[47],"into":[49],"world.":[52],"To":[53],"address":[54],"this":[55,76],"issue,":[56],"researchers":[57],"propose":[58,219],"create":[60],"Isolated":[61],"Execution":[62],"Environments":[63],"(called":[64],"IEEs)":[65],"normal":[68,139],"protect":[71],"security-sensitive":[73,163],"applications.":[74],"In":[75],"paper,":[77],"we":[78,209],"perform":[79],"a":[80,162,220,234],"systematic":[81],"study":[82],"IEE":[85,129,146,151,190],"data":[86,109,147],"protection":[87],"models":[88],"cache":[92,124],"attributes,":[93],"discover":[95],"three":[96,188],"cache-based":[97],"attacks":[98,186,217],"called":[99],"CITM":[100,185,216],"can":[102],"be":[103],"leveraged":[104],"manipulate":[106],"sensitive":[108],"protected":[110],"IEEs.":[112],"Specifically,":[113],"due":[114],"inefficient":[117],"incoherent":[119],"security":[120,144,158,173],"measures":[121,159,174],"maps":[126],"memory":[130,132,152],"(i.e.,":[131],"designated":[133],"for":[134],"IEEs),":[135],"attackers":[136],"may":[141],"compromise":[142],"manipulating":[149],"during":[153,175],"concurrent":[154],"execution,":[155],"bypassing":[156],"enforced":[160],"when":[161],"is":[165],"suspended":[166],"or":[167,169],"finished,":[168],"misusing":[170],"incomplete":[172],"IEE's":[176],"context":[177],"switching":[178],"processes.":[179],"We":[180],"conduct":[181],"case":[182],"studies":[183],"well-known":[189],"systems":[191],"including":[192],"SANCTUARY,":[193],"Ginseng,":[194],"TrustICE":[196],"illustrate":[198],"feasibility":[200],"exploit":[202],"them":[203],"real":[205],"hardware":[206],"testbeds.":[207],"Finally,":[208],"analyze":[210],"root":[212],"causes":[213],"countermeasure":[221],"defeat":[223],"them.":[224],"experimental":[226],"results":[227],"show":[228],"our":[230],"defense":[231],"scheme":[232],"small":[235],"overhead.":[236]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}