{"id":"https://openalex.org/W4380874861","doi":"https://doi.org/10.1145/3579371.3589050","title":"ISA-Grid: Architecture of Fine-grained Privilege Control for Instructions and Registers","display_name":"ISA-Grid: Architecture of Fine-grained Privilege Control for Instructions and Registers","publication_year":2023,"publication_date":"2023-06-16","ids":{"openalex":"https://openalex.org/W4380874861","doi":"https://doi.org/10.1145/3579371.3589050"},"language":"en","primary_location":{"id":"doi:10.1145/3579371.3589050","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3579371.3589050","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 50th Annual International Symposium on Computer Architecture","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101889891","display_name":"Shulin Fan","orcid":"https://orcid.org/0009-0007-1828-8996"},"institutions":[{"id":"https://openalex.org/I1327237609","display_name":"Ministry of Education of the People's Republic of China","ror":"https://ror.org/01mv9t934","country_code":"CN","type":"government","lineage":["https://openalex.org/I1327237609","https://openalex.org/I4210127390"]},{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]},{"id":"https://openalex.org/I4210158445","display_name":"Institute of Natural Science","ror":"https://ror.org/004tze884","country_code":"KP","type":"education","lineage":["https://openalex.org/I4210158445"]}],"countries":["CN","KP"],"is_corresponding":true,"raw_author_name":"Shulin Fan","raw_affiliation_strings":["Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0007-1828-8996","affiliations":[{"raw_affiliation_string":"Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","institution_ids":["https://openalex.org/I1327237609"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I4210158445"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035727373","display_name":"Zhichao Hua","orcid":"https://orcid.org/0000-0002-2211-9120"},"institutions":[{"id":"https://openalex.org/I1327237609","display_name":"Ministry of Education of the People's Republic of China","ror":"https://ror.org/01mv9t934","country_code":"CN","type":"government","lineage":["https://openalex.org/I1327237609","https://openalex.org/I4210127390"]},{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]},{"id":"https://openalex.org/I4210158445","display_name":"Institute of Natural Science","ror":"https://ror.org/004tze884","country_code":"KP","type":"education","lineage":["https://openalex.org/I4210158445"]}],"countries":["CN","KP"],"is_corresponding":false,"raw_author_name":"Zhichao Hua","raw_affiliation_strings":["Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-2211-9120","affiliations":[{"raw_affiliation_string":"Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","institution_ids":["https://openalex.org/I1327237609"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I4210158445"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026023746","display_name":"Yubin Xia","orcid":"https://orcid.org/0000-0001-6558-5298"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]},{"id":"https://openalex.org/I4210158445","display_name":"Institute of Natural Science","ror":"https://ror.org/004tze884","country_code":"KP","type":"education","lineage":["https://openalex.org/I4210158445"]},{"id":"https://openalex.org/I4391012619","display_name":"Shanghai Artificial Intelligence Laboratory","ror":"https://ror.org/03wkvpx79","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391012619"]}],"countries":["CN","KP"],"is_corresponding":false,"raw_author_name":"Yubin Xia","raw_affiliation_strings":["Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","Shanghai AI Laboratory, Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Shanghai AI Laboratory, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-6558-5298","affiliations":[{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I4210158445"]},{"raw_affiliation_string":"Shanghai AI Laboratory, Shanghai, China","institution_ids":["https://openalex.org/I4391012619"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Shanghai AI Laboratory, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100406215","display_name":"Haibo Chen","orcid":"https://orcid.org/0000-0002-9720-0361"},"institutions":[{"id":"https://openalex.org/I1327237609","display_name":"Ministry of Education of the People's Republic of China","ror":"https://ror.org/01mv9t934","country_code":"CN","type":"government","lineage":["https://openalex.org/I1327237609","https://openalex.org/I4210127390"]},{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]},{"id":"https://openalex.org/I4210158445","display_name":"Institute of Natural Science","ror":"https://ror.org/004tze884","country_code":"KP","type":"education","lineage":["https://openalex.org/I4210158445"]}],"countries":["CN","KP"],"is_corresponding":false,"raw_author_name":"Haibo Chen","raw_affiliation_strings":["Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-9720-0361","affiliations":[{"raw_affiliation_string":"Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","institution_ids":["https://openalex.org/I1327237609"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I4210158445"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031955160","display_name":"Binyu Zang","orcid":"https://orcid.org/0000-0002-1968-7645"},"institutions":[{"id":"https://openalex.org/I1327237609","display_name":"Ministry of Education of the People's Republic of China","ror":"https://ror.org/01mv9t934","country_code":"CN","type":"government","lineage":["https://openalex.org/I1327237609","https://openalex.org/I4210127390"]},{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]},{"id":"https://openalex.org/I4210158445","display_name":"Institute of Natural Science","ror":"https://ror.org/004tze884","country_code":"KP","type":"education","lineage":["https://openalex.org/I4210158445"]}],"countries":["CN","KP"],"is_corresponding":false,"raw_author_name":"Binyu Zang","raw_affiliation_strings":["Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-1968-7645","affiliations":[{"raw_affiliation_string":"Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","institution_ids":["https://openalex.org/I1327237609"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I4210158445"]},{"raw_affiliation_string":"Institute of Parallel and Distributed Systems,Shanghai Jiao Tong University, Shanghai, China Engineering Research Center for Domain-specific Operating Systems(Ministry of Education), Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5101889891"],"corresponding_institution_ids":["https://openalex.org/I1327237609","https://openalex.org/I183067930","https://openalex.org/I4210158445"],"apc_list":null,"apc_paid":null,"fwci":1.3633,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.84450354,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"15"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8212065696716309},{"id":"https://openalex.org/keywords/processor-register","display_name":"Processor register","score":0.6709481477737427},{"id":"https://openalex.org/keywords/x86","display_name":"x86","score":0.6621953248977661},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.4983651638031006},{"id":"https://openalex.org/keywords/temporal-isolation-among-virtual-machines","display_name":"Temporal isolation among virtual machines","score":0.4955188035964966},{"id":"https://openalex.org/keywords/instruction-set","display_name":"Instruction set","score":0.49253687262535095},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.4918546676635742},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4888693690299988},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.45407259464263916},{"id":"https://openalex.org/keywords/arm-architecture","display_name":"ARM architecture","score":0.42178624868392944},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.37850308418273926},{"id":"https://openalex.org/keywords/memory-address","display_name":"Memory address","score":0.37006086111068726},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.35289207100868225},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.15582656860351562}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8212065696716309},{"id":"https://openalex.org/C2871975","wikidata":"https://www.wikidata.org/wiki/Q187466","display_name":"Processor register","level":4,"score":0.6709481477737427},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.6621953248977661},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.4983651638031006},{"id":"https://openalex.org/C142355369","wikidata":"https://www.wikidata.org/wiki/Q7698919","display_name":"Temporal isolation among virtual machines","level":4,"score":0.4955188035964966},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.49253687262535095},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.4918546676635742},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4888693690299988},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.45407259464263916},{"id":"https://openalex.org/C26771161","wikidata":"https://www.wikidata.org/wiki/Q16980","display_name":"ARM architecture","level":2,"score":0.42178624868392944},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.37850308418273926},{"id":"https://openalex.org/C153247305","wikidata":"https://www.wikidata.org/wiki/Q835713","display_name":"Memory address","level":3,"score":0.37006086111068726},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.35289207100868225},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.15582656860351562},{"id":"https://openalex.org/C98986596","wikidata":"https://www.wikidata.org/wiki/Q1143031","display_name":"Semiconductor memory","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C89423630","wikidata":"https://www.wikidata.org/wiki/Q7193","display_name":"Microbiology","level":1,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3579371.3589050","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3579371.3589050","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 50th Annual International Symposium on Computer Architecture","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W95608104","https://openalex.org/W1904738922","https://openalex.org/W1986468587","https://openalex.org/W2043501224","https://openalex.org/W2055084740","https://openalex.org/W2057743816","https://openalex.org/W2061643296","https://openalex.org/W2086795351","https://openalex.org/W2130694829","https://openalex.org/W2131660501","https://openalex.org/W2147657366","https://openalex.org/W2150620897","https://openalex.org/W2168872572","https://openalex.org/W2511669759","https://openalex.org/W2528661589","https://openalex.org/W2734941459","https://openalex.org/W2805608032","https://openalex.org/W2807403537","https://openalex.org/W2913465514","https://openalex.org/W2914452207","https://openalex.org/W2927484243","https://openalex.org/W2934053005","https://openalex.org/W2947243817","https://openalex.org/W3009731533","https://openalex.org/W3015513242","https://openalex.org/W3016206947","https://openalex.org/W3100860658","https://openalex.org/W3101105387","https://openalex.org/W3128202471","https://openalex.org/W3155249046","https://openalex.org/W3155768088","https://openalex.org/W3195032555","https://openalex.org/W3205994385","https://openalex.org/W4214680252","https://openalex.org/W4220866844","https://openalex.org/W4221079727","https://openalex.org/W4229371391","https://openalex.org/W4232019702","https://openalex.org/W4232172926","https://openalex.org/W4237241665","https://openalex.org/W4238851087","https://openalex.org/W6743710834","https://openalex.org/W6764306311"],"related_works":["https://openalex.org/W2375248064","https://openalex.org/W2890091348","https://openalex.org/W2041895207","https://openalex.org/W1485906286","https://openalex.org/W2215963978","https://openalex.org/W2491664907","https://openalex.org/W2499097732","https://openalex.org/W2544369712","https://openalex.org/W2439357447","https://openalex.org/W2904830019"],"abstract_inverted_index":{"Isolation":[0],"is":[1,106,167],"a":[2,168,213,228],"critical":[3],"mechanism":[4],"for":[5,102,109,137,162,199],"enhancing":[6,241],"the":[7,14,33,49,84,173],"security":[8,79,243],"of":[9,17,35,51,158,175,204],"computer":[10],"systems.":[11],"By":[12],"controlling":[13],"access":[15,100,186],"privileges":[16,184],"software":[18,26,110],"and":[19,31,53,164,188,221,240,253,267],"hardware":[20,96,169],"resources,":[21,55,104],"isolation":[22,40,50,87],"mechanisms":[23],"can":[24,75,193,249],"decouple":[25],"into":[27],"multiple":[28,176],"isolated":[29],"components":[30],"enforce":[32],"principle":[34],"least":[36],"privilege.":[37],"While":[38],"existing":[39,95,242],"systems":[41],"primarily":[42],"focus":[43],"on":[44,207,217,227,257,264],"memory":[45,86],"isolation,":[46],"they":[47],"overlook":[48],"instruction":[52],"register":[54],"which":[56,105],"we":[57],"refer":[58],"to":[59,77,128,185,233,245],"as":[60,82],"ISA":[61,73,103,177,191,251],"(Instruction":[62],"Set":[63],"Architecture)":[64],"resources.":[65],"However,":[66],"previous":[67],"works":[68],"have":[69],"shown":[70],"that":[71,171,274],"exploiting":[72],"resources":[74,252],"lead":[76],"serious":[78],"problems,":[80],"such":[81],"breaking":[83],"system's":[85],"property":[88],"by":[89],"abusing":[90,258],"x86's":[91],"CR3":[92],"register.":[93],"Furthermore,":[94],"only":[97,123,143],"provides":[98],"privilege-level-based":[99],"control":[101,139,161,198],"too":[107],"coarse-grained":[108],"decoupling.":[111],"For":[112],"example,":[113],"ARM":[114],"Cortex":[115],"A53":[116],"has":[117,276],"several":[118],"hundred":[119],"system":[120,138],"instructions/registers,":[121],"but":[122],"four":[124],"exception":[125],"levels":[126],"(EL0":[127],"EL3)":[129],"are":[130,140],"provided.":[131],"Additionally,":[132],"more":[133],"than":[134,281],"100":[135],"instructions/registers":[136],"available":[141],"in":[142],"EL1":[144],"(the":[145],"kernel":[146,238],"mode).":[147],"To":[148],"address":[149],"this":[150,152],"problem,":[151],"paper":[153],"proposes":[154],"ISA-Grid,":[155],"an":[156,218,223],"architecture":[157],"fine-grained":[159,196],"privilege":[160,197],"instructions":[163,187],"registers.":[165,189,200],"ISA-Grid":[166,205,232,248,275],"extension":[170],"enables":[172],"creation":[174],"domains,":[178],"with":[179,270],"each":[180],"domain":[181,192],"having":[182],"different":[183,209,234],"The":[190,260],"provide":[194],"bit-level":[195],"We":[201,230],"implemented":[202],"prototypes":[203],"based":[206,256],"two":[208],"CPU":[210,215,225],"cores:":[211],"1)":[212],"RISC-V":[214,268],"core":[216,226],"FPGA":[219],"board":[220],"2)":[222],"x86":[224,266],"simulator.":[229],"applied":[231],"cases,":[235],"including":[236],"Linux":[237],"decomposition":[239],"systems,":[244],"demonstrate":[246],"how":[247],"isolate":[250],"mitigate":[254],"attacks":[255],"them.":[259],"performance":[261],"evaluation":[262],"results":[263],"both":[265],"platforms":[269],"real-world":[271],"applications":[272],"showed":[273],"negligible":[277],"runtime":[278],"overhead":[279],"(less":[280],"1%).":[282]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}