{"id":"https://openalex.org/W3117037481","doi":"https://doi.org/10.1145/3419475","title":"Mitigating Data-only Attacks by Protecting Memory-resident Sensitive Data","display_name":"Mitigating Data-only Attacks by Protecting Memory-resident Sensitive Data","publication_year":2020,"publication_date":"2020-12-22","ids":{"openalex":"https://openalex.org/W3117037481","doi":"https://doi.org/10.1145/3419475","mag":"3117037481"},"language":"en","primary_location":{"id":"doi:10.1145/3419475","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3419475","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3419475","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3419475","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004420648","display_name":"Tapti Palit","orcid":"https://orcid.org/0009-0006-4602-7171"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tapti Palit","raw_affiliation_strings":["Stony Brook University, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University, NY","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069862528","display_name":"Fabian Monrose","orcid":"https://orcid.org/0000-0002-9805-2217"},"institutions":[{"id":"https://openalex.org/I114027177","display_name":"University of North Carolina at Chapel Hill","ror":"https://ror.org/0130frc33","country_code":"US","type":"education","lineage":["https://openalex.org/I114027177"]},{"id":"https://openalex.org/I1333535994","display_name":"University of North Carolina Health Care","ror":"https://ror.org/00qz24g20","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I1333535994"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fabian Monrose","raw_affiliation_strings":["UNC Chapel Hill, NC"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UNC Chapel Hill, NC","institution_ids":["https://openalex.org/I114027177","https://openalex.org/I1333535994"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007101727","display_name":"Michalis Polychronakis","orcid":"https://orcid.org/0000-0002-3106-0343"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michalis Polychronakis","raw_affiliation_strings":["Stony Brook University, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stony Brook University, NY","institution_ids":["https://openalex.org/I59553526"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.134,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.61144352,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":"1","issue":"4","first_page":"1","last_page":"26"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10478","display_name":"Diamond and Carbon-based Materials Research","score":0.9866999983787537,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8484945893287659},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6695557832717896},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.6023942232131958},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5622344613075256},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.509973406791687},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4771139919757843},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.4357849955558777},{"id":"https://openalex.org/keywords/data-access","display_name":"Data access","score":0.4167087972164154},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.39660459756851196},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.2528954744338989}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8484945893287659},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6695557832717896},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.6023942232131958},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5622344613075256},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.509973406791687},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4771139919757843},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.4357849955558777},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.4167087972164154},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.39660459756851196},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2528954744338989}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3419475","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3419475","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3419475","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3419475","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3419475","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3419475","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.8100000023841858,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G2195491630","display_name":"CAREER: Principled and Practical Software Shielding against Advanced Exploits","funder_award_id":"1749895","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4126391370","display_name":null,"funder_award_id":"D18AP00045","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G4504108201","display_name":null,"funder_award_id":"N00014-17-1","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G5614959969","display_name":null,"funder_award_id":"N00014-17-1-2891","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8797752025","display_name":"TWC: Small: Combating Environment-aware Malware","funder_award_id":"1617902","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320332815","display_name":"Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3117037481.pdf","grobid_xml":"https://content.openalex.org/works/W3117037481.grobid-xml"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W1556212265","https://openalex.org/W1569778844","https://openalex.org/W1575709006","https://openalex.org/W1972484642","https://openalex.org/W1993682390","https://openalex.org/W2042856445","https://openalex.org/W2051384716","https://openalex.org/W2081768685","https://openalex.org/W2088383546","https://openalex.org/W2098806455","https://openalex.org/W2105112969","https://openalex.org/W2109219878","https://openalex.org/W2117798902","https://openalex.org/W2121579803","https://openalex.org/W2124360577","https://openalex.org/W2131135493","https://openalex.org/W2148755014","https://openalex.org/W2149237601","https://openalex.org/W2154795299","https://openalex.org/W2155851497","https://openalex.org/W2168601499","https://openalex.org/W2297774820","https://openalex.org/W2550236071","https://openalex.org/W2561955909","https://openalex.org/W2597705742","https://openalex.org/W2605597658","https://openalex.org/W2610170208","https://openalex.org/W2619159161","https://openalex.org/W2737641195","https://openalex.org/W2914982603","https://openalex.org/W2999987410","https://openalex.org/W4232485878","https://openalex.org/W4234099413","https://openalex.org/W4238567305","https://openalex.org/W4239277337","https://openalex.org/W4243272515","https://openalex.org/W4248542611","https://openalex.org/W4254234063"],"related_works":["https://openalex.org/W4387497383","https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2948807893","https://openalex.org/W2935909890","https://openalex.org/W2778153218","https://openalex.org/W2758277628","https://openalex.org/W1531601525","https://openalex.org/W143386018"],"abstract_inverted_index":{"Gaining":[0],"reliable":[1],"arbitrary":[2],"code":[3,121],"execution":[4],"through":[5],"the":[6,18,46,76,86,115,118,135,147,169],"exploitation":[7],"of":[8,20,48,89,117,173],"memory":[9,196],"corruption":[10],"vulnerabilities":[11],"is":[12,123,187],"becoming":[13],"increasingly":[14],"more":[15],"difficult":[16],"in":[17,146],"face":[19],"modern":[21],"exploit":[22],"mitigations.":[23],"Facing":[24],"this":[25,56,131],"challenge,":[26],"adversaries":[27],"have":[28],"started":[29],"shifting":[30],"their":[31],"attention":[32],"to":[33,40,80,100,125,141],"data":[34,64,92,127,201],"leakage":[35,65],"attacks,":[36],"which":[37,109],"can":[38],"lead":[39],"equally":[41],"damaging":[42],"outcomes,":[43],"such":[44],"as":[45,157,159],"disclosure":[47],"private":[49,144],"keys":[50,145],"or":[51,191],"other":[52],"sensitive":[53,82,106,126],"data.":[54],"In":[55],"work,":[57],"we":[58,97],"present":[59],"a":[60,73,152,176],"compiler-level":[61],"defense":[62],"against":[63],"attacks":[66],"for":[67,162,184,199],"user-space":[68],"applications.":[69],"Our":[70,166],"approach":[71,132],"strikes":[72],"balance":[74],"between":[75],"manual":[77],"effort":[78],"required":[79],"protect":[81,142],"application":[83],"data,":[84,107],"and":[85,138,151,164,171],"performance":[87],"overhead":[88,179],"achieving":[90],"strong":[91],"confidentiality.":[93],"To":[94],"that":[95,122,186],"end,":[96],"require":[98],"developers":[99],"simply":[101],"annotate":[102],"those":[103],"variables":[104],"holding":[105],"after":[108],"our":[110,174],"framework":[111],"automatically":[112],"transforms":[113],"only":[114],"fraction":[116],"entire":[119],"program":[120],"related":[124],"operations.":[128],"We":[129],"implemented":[130],"by":[133],"extending":[134],"LLVM":[136],"compiler,":[137],"used":[139],"it":[140],"memory-resident":[143],"MbedTLS":[148],"server,":[149],"ssh-agent,":[150],"Libsodium-based":[153],"file":[154],"signing":[155],"program,":[156],"well":[158],"user":[160],"passwords":[161],"Lighttpd":[163],"Memcached.":[165],"results":[167],"demonstrate":[168],"feasibility":[170],"practicality":[172],"technique:":[175],"modest":[177],"runtime":[178],"(e.g.,":[180],"13%":[181],"throughput":[182],"reduction":[183],"MbedTLS)":[185],"on":[188],"par":[189],"with,":[190],"better":[192],"than,":[193],"existing":[194],"state-of-the-art":[195],"safety":[197],"approaches":[198],"selective":[200],"protection.":[202]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2025-10-10T00:00:00"}