{"id":"https://openalex.org/W4405182787","doi":"https://doi.org/10.1145/3658644.3670279","title":"Safeslab: Mitigating Use-After-Free Vulnerabilities via Memory Protection Keys","display_name":"Safeslab: Mitigating Use-After-Free Vulnerabilities via Memory Protection Keys","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4405182787","doi":"https://doi.org/10.1145/3658644.3670279"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3670279","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670279","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670279","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670279","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026880771","display_name":"Marius Momeu","orcid":"https://orcid.org/0009-0009-3389-9837"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marius Momeu","raw_affiliation_strings":["Technical University of Munich &amp; Brown University, Munich, Germany"],"raw_orcid":"https://orcid.org/0009-0009-3389-9837","affiliations":[{"raw_affiliation_string":"Technical University of Munich &amp; Brown University, Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099637757","display_name":"Simon Schn\u00fcckel","orcid":"https://orcid.org/0009-0002-0740-6495"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Simon Schn\u00fcckel","raw_affiliation_strings":["Technical University of Munich, Munich, Germany"],"raw_orcid":"https://orcid.org/0009-0002-0740-6495","affiliations":[{"raw_affiliation_string":"Technical University of Munich, Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115061071","display_name":"Kai Angnis","orcid":"https://orcid.org/0009-0006-1277-4646"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kai Angnis","raw_affiliation_strings":["Technical University of Munich, Munich, Germany"],"raw_orcid":"https://orcid.org/0009-0006-1277-4646","affiliations":[{"raw_affiliation_string":"Technical University of Munich, Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007101727","display_name":"Michalis Polychronakis","orcid":"https://orcid.org/0000-0002-3106-0343"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michalis Polychronakis","raw_affiliation_strings":["Stony Brook University, Stony Brook, NY, USA"],"raw_orcid":"https://orcid.org/0000-0002-3106-0343","affiliations":[{"raw_affiliation_string":"Stony Brook University, Stony Brook, NY, USA","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006944216","display_name":"Vasileios P. Kemerlis","orcid":"https://orcid.org/0000-0002-6528-437X"},"institutions":[{"id":"https://openalex.org/I27804330","display_name":"Brown University","ror":"https://ror.org/05gq02987","country_code":"US","type":"education","lineage":["https://openalex.org/I27804330"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vasileios P. Kemerlis","raw_affiliation_strings":["Brown University, Providence, RI, USA"],"raw_orcid":"https://orcid.org/0000-0002-6528-437X","affiliations":[{"raw_affiliation_string":"Brown University, Providence, RI, USA","institution_ids":["https://openalex.org/I27804330"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9164,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.8041259,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1345","last_page":"1359"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6517876386642456},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5490175485610962},{"id":"https://openalex.org/keywords/memory-protection","display_name":"Memory protection","score":0.5204970240592957},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.28694838285446167},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17405760288238525},{"id":"https://openalex.org/keywords/virtual-memory","display_name":"Virtual memory","score":0.11482340097427368},{"id":"https://openalex.org/keywords/semiconductor-memory","display_name":"Semiconductor memory","score":0.08403375744819641}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6517876386642456},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5490175485610962},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.5204970240592957},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.28694838285446167},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17405760288238525},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.11482340097427368},{"id":"https://openalex.org/C98986596","wikidata":"https://www.wikidata.org/wiki/Q1143031","display_name":"Semiconductor memory","level":2,"score":0.08403375744819641}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3658644.3670279","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670279","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670279","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3658644.3670279","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670279","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670279","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6085641461","display_name":null,"funder_award_id":"CNS-2238467,CNS-2104148,CNS-1749895","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405182787.pdf"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W1447175589","https://openalex.org/W1984471991","https://openalex.org/W2105321788","https://openalex.org/W2122757982","https://openalex.org/W2606752733","https://openalex.org/W2664885055","https://openalex.org/W2751137623","https://openalex.org/W2903261599","https://openalex.org/W2947243817","https://openalex.org/W2947565728","https://openalex.org/W2985831349","https://openalex.org/W3015513242","https://openalex.org/W3108020564","https://openalex.org/W3160448675","https://openalex.org/W4214768370","https://openalex.org/W4308411157","https://openalex.org/W4308642904","https://openalex.org/W4308643135","https://openalex.org/W4328143499","https://openalex.org/W4383221452"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Restricting":[0],"dangling":[1,37,117],"pointers":[2,38,118],"from":[3,23],"accessing":[4],"freed":[5],"memory":[6,70,101,156],"is":[7,90],"a":[8,46,56,94,146],"promising":[9],"technique":[10],"for":[11,100],"mitigating":[12],"use-after-free":[13,53],"vulnerabilities":[14,54],"in":[15,72],"memory-unsafe":[16],"programming":[17],"languages.":[18],"However,":[19],"existing":[20],"solutions":[21],"suffer":[22],"high":[24],"performance":[25],"overheads,":[26],"as":[27],"they":[28],"rely":[29],"on":[30],"conventional":[31],"page":[32,71,98,112],"table":[33,113],"manipulation":[34],"to":[35,51,68,92,97,106,152],"make":[36],"inaccessible.":[39],"In":[40],"this":[41],"paper,":[42],"we":[43],"present":[44],"Safeslab:":[45],"heap-hardening":[47],"extension":[48],"that":[49,143],"aims":[50],"mitigate":[52],"via":[55,80],"novel":[57],"and":[58,75,154],"efficient":[59],"address":[60],"aliasing":[61],"approach.":[62],"Safeslab":[63,105,122,144],"assigns":[64],"multiple":[65],"virtual":[66],"aliases":[67],"each":[69],"the":[73,81,109,124],"system,":[74],"manages":[76],"their":[77],"access":[78],"rights":[79],"recently":[82],"introduced":[83],"Memory":[84],"Protection":[85],"Keys":[86],"hardware":[87],"extension,":[88],"which":[89],"designed":[91],"provide":[93],"fast":[95],"alternative":[96],"tables":[99],"management.":[102],"This":[103],"allows":[104],"drastically":[107],"reduce":[108],"number":[110],"of":[111,135,150],"modifications,":[114],"while":[115],"blocking":[116],"efficiently.":[119],"We":[120],"integrated":[121],"into":[123],"Linux":[125],"kernel,":[126],"replacing":[127],"its":[128],"default":[129],"heap":[130],"allocator":[131],"(SLUB).":[132],"The":[133],"results":[134],"our":[136],"experimental":[137],"evaluation":[138],"with":[139],"real-world":[140],"benchmarks":[141],"show":[142],"incurs":[145],"negligible":[147],"runtime":[148],"overhead":[149],"up":[151],"4%":[153],"moderate":[155],"waste.":[157]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
