{"id":"https://openalex.org/W4387810229","doi":"https://doi.org/10.1145/3625275.3625402","title":"The K2 Architecture for Trustworthy Hardware Security Modules","display_name":"The K2 Architecture for Trustworthy Hardware Security Modules","publication_year":2023,"publication_date":"2023-10-20","ids":{"openalex":"https://openalex.org/W4387810229","doi":"https://doi.org/10.1145/3625275.3625402"},"language":"en","primary_location":{"id":"doi:10.1145/3625275.3625402","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3625275.3625402","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3625275.3625402","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st Workshop on Kernel Isolation, Safety and Verification","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3625275.3625402","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091720485","display_name":"Anish Athalye","orcid":"https://orcid.org/0000-0001-9355-6857"},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anish Athalye","raw_affiliation_strings":["Massachusetts Institute of Technology, Cambridge, MA, United States of America"],"raw_orcid":"https://orcid.org/0000-0001-9355-6857","affiliations":[{"raw_affiliation_string":"Massachusetts Institute of Technology, Cambridge, MA, United States of America","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110236312","display_name":"Frans Kaashoek","orcid":null},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Frans Kaashoek","raw_affiliation_strings":["Massachusetts Institute of Technology, Cambridge, MA, United States of America"],"raw_orcid":"https://orcid.org/0000-0001-7098-586X","affiliations":[{"raw_affiliation_string":"Massachusetts Institute of Technology, Cambridge, MA, United States of America","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082808262","display_name":"Nickolai Zeldovich","orcid":"https://orcid.org/0000-0003-0238-2703"},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nickolai Zeldovich","raw_affiliation_strings":["Massachusetts Institute of Technology, Cambridge, MA, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-0238-2703","affiliations":[{"raw_affiliation_string":"Massachusetts Institute of Technology, Cambridge, MA, United States of America","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073987903","display_name":"Joseph Tassarotti","orcid":"https://orcid.org/0000-0001-5692-3347"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joseph Tassarotti","raw_affiliation_strings":["New York University, New York, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-5692-3347","affiliations":[{"raw_affiliation_string":"New York University, New York, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15007939,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"26","last_page":"32"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9882000088691711,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7907077670097351},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.7682384252548218},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.5799360275268555},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5192611217498779},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.5135062336921692},{"id":"https://openalex.org/keywords/hardware-architecture","display_name":"Hardware architecture","score":0.47918879985809326},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.46810364723205566},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.4605969190597534},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4526689648628235},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.4388868808746338},{"id":"https://openalex.org/keywords/computer-architecture","display_name":"Computer architecture","score":0.35444748401641846},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.20883965492248535},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.18463924527168274}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7907077670097351},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7682384252548218},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.5799360275268555},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5192611217498779},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.5135062336921692},{"id":"https://openalex.org/C65232700","wikidata":"https://www.wikidata.org/wiki/Q5656403","display_name":"Hardware architecture","level":3,"score":0.47918879985809326},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.46810364723205566},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.4605969190597534},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4526689648628235},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.4388868808746338},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.35444748401641846},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.20883965492248535},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18463924527168274},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3625275.3625402","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3625275.3625402","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3625275.3625402","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st Workshop on Kernel Isolation, Safety and Verification","raw_type":"proceedings-article"},{"id":"pmh:oai:dspace.mit.edu:1721.1/152918","is_oa":true,"landing_page_url":"https://hdl.handle.net/1721.1/152918","pdf_url":"https://dspace.mit.edu/bitstream/1721.1/152918/1/3625275.3625402.pdf","source":{"id":"https://openalex.org/S4306400425","display_name":"DSpace@MIT (Massachusetts Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63966007","host_organization_name":"Massachusetts Institute of Technology","host_organization_lineage":["https://openalex.org/I63966007"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Association for Computing Machinery","raw_type":"http://purl.org/eprint/type/ConferencePaper"}],"best_oa_location":{"id":"doi:10.1145/3625275.3625402","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3625275.3625402","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3625275.3625402","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st Workshop on Kernel Isolation, Safety and Verification","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.44999998807907104,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1485883516","display_name":"SaTC: CORE: Medium: Verifying Hardware Security Modules with Information-Preserving Refinement","funder_award_id":"2225441","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387810229.pdf","grobid_xml":"https://content.openalex.org/works/W4387810229.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W69090831","https://openalex.org/W1657240689","https://openalex.org/W1988079752","https://openalex.org/W2057156093","https://openalex.org/W2084715426","https://openalex.org/W2252814878","https://openalex.org/W2415236938","https://openalex.org/W2762625979","https://openalex.org/W2767162229","https://openalex.org/W2914982603","https://openalex.org/W2953840721","https://openalex.org/W2955155286","https://openalex.org/W2964540713","https://openalex.org/W3034103899","https://openalex.org/W3081680242","https://openalex.org/W3082349452","https://openalex.org/W3202816353","https://openalex.org/W4232485878","https://openalex.org/W4281986595","https://openalex.org/W4388858498"],"related_works":["https://openalex.org/W1667647204","https://openalex.org/W2404647514","https://openalex.org/W4247536566","https://openalex.org/W2018477250","https://openalex.org/W3119814709","https://openalex.org/W4241418540","https://openalex.org/W1508895727","https://openalex.org/W2725786787","https://openalex.org/W55831818","https://openalex.org/W2111870610"],"abstract_inverted_index":{"K2":[0,14,59],"is":[1],"a":[2,54,61,75,87],"new":[3,62],"architecture":[4],"and":[5,21,29,34,40,46],"verification":[6,35,41],"approach":[7],"for":[8,31],"hardware":[9,38,77],"security":[10,47],"modules":[11],"(HSMs).":[12],"The":[13],"architecture's":[15],"rigid":[16],"separation":[17],"between":[18],"I/O,":[19],"storage,":[20],"computation":[22],"over":[23],"secret":[24],"state":[25],"enables":[26],"modular":[27],"proofs":[28],"allows":[30],"software":[32,72],"development":[33,39],"independent":[36],"of":[37,57,71,82],"while":[42],"still":[43],"providing":[44],"correctness":[45],"guarantees":[48],"about":[49],"the":[50,80],"composed":[51],"system.":[52],"For":[53],"key":[55],"step":[56],"verification,":[58],"introduces":[60],"tool":[63],"called":[64],"Chroniton":[65],"that":[66],"automatically":[67],"proves":[68],"timing":[69,83],"properties":[70],"running":[73],"on":[74],"particular":[76],"implementation,":[78],"ensuring":[79],"lack":[81],"side":[84],"channels":[85],"at":[86],"cycle-accurate":[88],"level.":[89]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}