{"id":"https://openalex.org/W4366494059","doi":"https://doi.org/10.1145/3577923.3583659","title":"Protecting Encrypted Virtual Machines from Nested Page Fault Controlled Channel","display_name":"Protecting Encrypted Virtual Machines from Nested Page Fault Controlled Channel","publication_year":2023,"publication_date":"2023-04-20","ids":{"openalex":"https://openalex.org/W4366494059","doi":"https://doi.org/10.1145/3577923.3583659"},"language":"en","primary_location":{"id":"doi:10.1145/3577923.3583659","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3577923.3583659","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3577923.3583659","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3577923.3583659","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036743762","display_name":"Haoxiang Qin","orcid":"https://orcid.org/0000-0003-2303-1099"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoxiang Qin","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2303-1099","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018753353","display_name":"Zhenyu Song","orcid":"https://orcid.org/0000-0002-3336-923X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyu Song","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3336-923X","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011039370","display_name":"Weijuan Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weijuan Zhang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9858-3587","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038486397","display_name":"Sicong Huang","orcid":"https://orcid.org/0000-0001-9721-8214"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sicong Huang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9721-8214","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005135537","display_name":"Wentao Yao","orcid":"https://orcid.org/0000-0003-2112-6334"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wentao Yao","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2112-6334","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076219903","display_name":"Ge Liu","orcid":"https://orcid.org/0000-0001-6449-3113"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ge Liu","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6449-3113","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015456692","display_name":"Xiaoqi Jia","orcid":"https://orcid.org/0000-0002-8376-3235"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqi Jia","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-8376-3235","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007408376","display_name":"Haichao Du","orcid":"https://orcid.org/0000-0003-2783-3232"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haichao Du","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2783-3232","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"165","last_page":"175"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.991100013256073,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.795651912689209},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6782805323600769},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.6487356424331665},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.6400656700134277},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5157608985900879},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5049803853034973},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.47283536195755005},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.4710060656070709},{"id":"https://openalex.org/keywords/paging","display_name":"Paging","score":0.41122007369995117},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3542528450489044},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.34850698709487915},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.23509123921394348},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22445213794708252},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.17408740520477295}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.795651912689209},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6782805323600769},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.6487356424331665},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.6400656700134277},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5157608985900879},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5049803853034973},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.47283536195755005},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.4710060656070709},{"id":"https://openalex.org/C50954386","wikidata":"https://www.wikidata.org/wiki/Q656083","display_name":"Paging","level":2,"score":0.41122007369995117},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3542528450489044},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.34850698709487915},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.23509123921394348},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22445213794708252},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.17408740520477295}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3577923.3583659","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3577923.3583659","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3577923.3583659","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3577923.3583659","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3577923.3583659","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3577923.3583659","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3853462455","display_name":"\u9762\u5411\u5f00\u6e90\u8f6f\u4ef6\u590d\u7528\u7684\u7a0b\u5e8f\u5206\u6790\u57fa\u7840\u7406\u8bba\u53ca\u65b9\u6cd5\u7814\u7a76","funder_award_id":"61772078","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5519752367","display_name":null,"funder_award_id":"2019YFB1005201","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G5751519741","display_name":null,"funder_award_id":"XDC02010900","funder_id":"https://openalex.org/F4320321133","funder_display_name":"Chinese Academy of Sciences"},{"id":"https://openalex.org/G7553133599","display_name":null,"funder_award_id":"2019YFB1005201,2021YFB2910109","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G8930350183","display_name":null,"funder_award_id":"2021YFB2910109","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4366494059.pdf","grobid_xml":"https://content.openalex.org/works/W4366494059.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W2057743816","https://openalex.org/W2150620897","https://openalex.org/W2175377689","https://openalex.org/W2559981079","https://openalex.org/W2775584553","https://openalex.org/W2795160257","https://openalex.org/W2795294395","https://openalex.org/W2907416151","https://openalex.org/W2959284240","https://openalex.org/W3020133545","https://openalex.org/W3080539304","https://openalex.org/W3100785504","https://openalex.org/W3103974952","https://openalex.org/W3173474283","https://openalex.org/W3177645431","https://openalex.org/W3180349812","https://openalex.org/W3211385142","https://openalex.org/W3212271742","https://openalex.org/W4200623403","https://openalex.org/W4288057728","https://openalex.org/W4288086179","https://openalex.org/W6768959830"],"related_works":["https://openalex.org/W2148749405","https://openalex.org/W2104105430","https://openalex.org/W1515917392","https://openalex.org/W1973516247","https://openalex.org/W1991063492","https://openalex.org/W2613320081","https://openalex.org/W2179519055","https://openalex.org/W2743348030","https://openalex.org/W2145292010","https://openalex.org/W2747005099"],"abstract_inverted_index":{"AMD":[0],"Secure":[1,64],"Encrypted":[2,58],"Virtualization":[3],"(SEV)":[4],"assumes":[5],"the":[6,52,69,74,82,93,129,163,167,181,186,191,196,205,223],"hypervisor":[7],"(HV)":[8],"is":[9,89,102,214],"untrusted":[10,182],"and":[11,39,61,238],"introduces":[12],"hardware":[13],"memory":[14,42],"encryption":[15],"support":[16],"for":[17,202],"virtual":[18],"machines":[19],"(VMs).":[20],"Previous":[21],"studies":[22],"have":[23,48],"proposed":[24],"various":[25],"attacks":[26,109],"against":[27,110,119],"encrypted":[28,144,227],"VMs":[29,145,228],"by":[30,51,165,177],"exploiting":[31],"SEV":[32,56,62,115],"security":[33,154],"flaws":[34,47],"such":[35],"as":[36,157],"unencrypted":[37],"VMCB":[38],"lack":[40],"of":[41,45,55,107,132,211],"integrity.":[43],"Most":[44],"these":[46],"been":[49],"solved":[50],"subsequent":[53],"releases":[54],"with":[57,63,78,233],"State":[59],"(SEV-ES)":[60],"Nested":[65],"Paging":[66],"(SEV-SNP).":[67],"However,":[68],"latest":[70],"SEV-SNP":[71,88],"cannot":[72,117],"stop":[73],"malicious":[75],"HV":[76,164,168,183],"tampering":[77],"critical":[79,171],"flags":[80],"in":[81],"nested":[83,94,192],"page":[84,95],"table":[85],"(NPT).":[86],"So":[87],"still":[90],"vulnerable":[91],"to":[92,142,161,169,195,199],"fault":[96],"(NPF)":[97],"controlled":[98,121,134,148,231],"channel":[99,232],"attack,":[100],"which":[101],"a":[103,139,152,158],"commonly":[104],"shared":[105],"step":[106],"most":[108],"SEV.":[111],"Existing":[112],"works":[113],"on":[114,217],"also":[116],"defend":[118],"NPF":[120,133,147,230],"channel.":[122,135,149],"In":[123],"this":[124,212],"paper,":[125],"we":[126,137,189],"first":[127],"analyze":[128],"root":[130],"cause":[131],"Then":[136],"propose":[138],"software-based":[140],"approach":[141,213,224],"protect":[143,226],"from":[146,184,229],"We":[150],"introduce":[151],"virtualization":[153,197],"module":[155],"(VSM)":[156],"software":[159],"TCB":[160],"deprivilege":[162],"modifing":[166],"access":[170],"resources":[172],"indirectly":[173],"through":[174],"interfaces":[175],"managed":[176],"VSM.":[178],"To":[179],"prevent":[180],"compromising":[185],"VSM-based":[187],"protection,":[188],"extend":[190],"kernel":[193],"architecture":[194],"layer":[198],"provide":[200],"isolation":[201],"VSM":[203],"at":[204],"same":[206],"privilege":[207],"level.":[208],"A":[209],"prototype":[210],"implemented":[215],"based":[216],"KVM.":[218],"The":[219],"experiments":[220],"show":[221],"that":[222],"can":[225],"1.21%":[234],"average":[235,240],"runtime":[236],"overhead":[237],"1.47%":[239],"I/O":[241],"overhead.":[242]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}