{"id":"https://openalex.org/W4403593405","doi":"https://doi.org/10.1145/3658644.3690188","title":"The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches","display_name":"The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4403593405","doi":"https://doi.org/10.1145/3658644.3690188"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3690188","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690188","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690188","source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690188","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044106963","display_name":"Chuqi Zhang","orcid":"https://orcid.org/0009-0006-3550-696X"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chuqi Zhang","raw_affiliation_strings":["School of Computing, National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0006-3550-696X","affiliations":[{"raw_affiliation_string":"School of Computing, National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023256521","display_name":"Jun Zeng","orcid":"https://orcid.org/0009-0004-3471-9504"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jun Zeng","raw_affiliation_strings":["Independent Researcher, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0004-3471-9504","affiliations":[{"raw_affiliation_string":"Independent Researcher, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100395363","display_name":"Yiming Zhang","orcid":"https://orcid.org/0000-0002-4247-5202"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]},{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN","HK"],"is_corresponding":false,"raw_author_name":"Yiming Zhang","raw_affiliation_strings":["Southern University of Science and Technology & The Hong Kong Polytechnic University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-4247-5202","affiliations":[{"raw_affiliation_string":"Southern University of Science and Technology & The Hong Kong Polytechnic University, Shenzhen, China","institution_ids":["https://openalex.org/I14243506","https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101746889","display_name":"Adil Ahmad","orcid":"https://orcid.org/0009-0002-4097-3205"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adil Ahmad","raw_affiliation_strings":["School of Computing and Augmented Intelligence, Arizona State University, Tempe, USA"],"raw_orcid":"https://orcid.org/0009-0002-4097-3205","affiliations":[{"raw_affiliation_string":"School of Computing and Augmented Intelligence, Arizona State University, Tempe, USA","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101886601","display_name":"Fengwei Zhang","orcid":"https://orcid.org/0000-0003-3365-2526"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengwei Zhang","raw_affiliation_strings":["Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-3365-2526","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022262922","display_name":"Hai Jin","orcid":"https://orcid.org/0000-0002-3934-7605"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hai Jin","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-3934-7605","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084611756","display_name":"Zhenkai Liang","orcid":"https://orcid.org/0000-0001-7138-5030"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zhenkai Liang","raw_affiliation_strings":["School of Computing, National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7138-5030","affiliations":[{"raw_affiliation_string":"School of Computing, National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.9001,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.94997394,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"3898","last_page":"3912"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9904999732971191,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9843999743461609,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.8336035013198853},{"id":"https://openalex.org/keywords/observability","display_name":"Observability","score":0.8154762983322144},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6581763625144958},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.5563418865203857},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.494994580745697},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4381854832172394},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42791423201560974},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09349590539932251},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09235325455665588}],"concepts":[{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.8336035013198853},{"id":"https://openalex.org/C36299963","wikidata":"https://www.wikidata.org/wiki/Q1369844","display_name":"Observability","level":2,"score":0.8154762983322144},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6581763625144958},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.5563418865203857},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.494994580745697},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4381854832172394},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42791423201560974},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09349590539932251},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09235325455665588},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C28826006","wikidata":"https://www.wikidata.org/wiki/Q33521","display_name":"Applied mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3658644.3690188","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690188","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690188","source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2409.04484","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2409.04484","pdf_url":"https://arxiv.org/pdf/2409.04484","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3658644.3690188","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3690188","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3690188","source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1523888516","display_name":null,"funder_award_id":"FA9550-","funder_id":"https://openalex.org/F4320338279","funder_display_name":"Air Force Office of Scientific Research"},{"id":"https://openalex.org/G438549943","display_name":null,"funder_award_id":"FA9550-24-1-0204","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G637702150","display_name":null,"funder_award_id":"62372218","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7090116110","display_name":null,"funder_award_id":"FA9550","funder_id":"https://openalex.org/F4320332467","funder_display_name":"U.S. Air Force"},{"id":"https://openalex.org/G748846607","display_name":null,"funder_award_id":"62372218","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"},{"id":"https://openalex.org/F4320332467","display_name":"U.S. Air Force","ror":"https://ror.org/006gmme17"},{"id":"https://openalex.org/F4320338279","display_name":"Air Force Office of Scientific Research","ror":"https://ror.org/011e9bt93"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4403593405.pdf"},"referenced_works_count":57,"referenced_works":["https://openalex.org/W187572568","https://openalex.org/W1976721395","https://openalex.org/W2014517322","https://openalex.org/W2036329595","https://openalex.org/W2112735498","https://openalex.org/W2149576136","https://openalex.org/W2150615820","https://openalex.org/W2150709728","https://openalex.org/W2170646878","https://openalex.org/W2471066505","https://openalex.org/W2604395162","https://openalex.org/W2612012086","https://openalex.org/W2747669027","https://openalex.org/W2773448422","https://openalex.org/W2907338990","https://openalex.org/W2914223029","https://openalex.org/W2947815220","https://openalex.org/W2948616374","https://openalex.org/W2951658790","https://openalex.org/W2962622685","https://openalex.org/W2998038410","https://openalex.org/W3008508243","https://openalex.org/W3008991042","https://openalex.org/W3016246341","https://openalex.org/W3085035003","https://openalex.org/W3101654741","https://openalex.org/W3109160943","https://openalex.org/W3138838255","https://openalex.org/W3157091123","https://openalex.org/W3157604780","https://openalex.org/W3173170122","https://openalex.org/W3191918078","https://openalex.org/W3195954353","https://openalex.org/W3209537220","https://openalex.org/W3216137074","https://openalex.org/W4220890574","https://openalex.org/W4221160945","https://openalex.org/W4242926647","https://openalex.org/W4252834746","https://openalex.org/W4288057708","https://openalex.org/W4288057753","https://openalex.org/W4288057803","https://openalex.org/W4306406279","https://openalex.org/W4320168800","https://openalex.org/W4324007153","https://openalex.org/W4384948624","https://openalex.org/W4391623933","https://openalex.org/W4395116679","https://openalex.org/W4402288660","https://openalex.org/W6632104034","https://openalex.org/W6730426483","https://openalex.org/W6753501380","https://openalex.org/W6797785253","https://openalex.org/W6966790520","https://openalex.org/W7000814283","https://openalex.org/W7006592683","https://openalex.org/W7074579249"],"related_works":["https://openalex.org/W2046459260","https://openalex.org/W2967463586","https://openalex.org/W2074679142","https://openalex.org/W2765830098","https://openalex.org/W1971989957","https://openalex.org/W2517338020","https://openalex.org/W3157641275","https://openalex.org/W4300874943","https://openalex.org/W2951405282","https://openalex.org/W4311843831"],"abstract_inverted_index":{"Protecting":[0],"system":[1,64],"observability":[2],"records":[3],"(logs)":[4],"from":[5],"compromised":[6],"OSs":[7],"has":[8],"gained":[9],"significant":[10],"traction":[11],"in":[12],"recent":[13],"times,":[14],"with":[15,29,98],"several":[16],"note-worthy":[17],"approaches":[18,25],"proposed.":[19],"Unfortunately,":[20],"none":[21],"of":[22,72,138],"the":[23,123,149],"proposed":[24],"achieve":[26],"high":[27],"performance":[28],"tiny":[30],"log":[31,103,116],"protection":[32,40,71,96,117],"delays.":[33],"They":[34],"also":[35],"leverage":[36],"risky":[37],"environments":[38],"for":[39,101],"(e.g.,":[41],"many":[42],"use":[43],"general-purpose":[44],"hypervisors":[45],"or":[46],"TrustZone,":[47],"which":[48],"have":[49],"large":[50],"TCB":[51,127],"and":[52,78,87,106,110],"attack":[53],"surfaces).":[54],"HitchHiker":[55,114,133],"is":[56,65],"an":[57,89],"attempt":[58],"to":[59,67,122],"rectify":[60],"this":[61],"problem.":[62],"The":[63],"designed":[66],"ensure":[68],"(a)":[69],"in-memory":[70],"batched":[73],"logs":[74],"within":[75],"a":[76,135],"short":[77],"configurable":[79],"real-time":[80],"deadline":[81],"by":[82,119,128,152],"efficient":[83],"hardware":[84,95],"permission":[85],"switching,":[86],"(b)":[88],"end-to-end":[90],"high-assurance":[91],"environment":[92],"built":[93],"upon":[94],"primitives":[97],"debloating":[99],"strategies":[100],"secure":[102],"protection,":[104],"persistence,":[105],"management.":[107],"Security":[108],"evaluations":[109,131],"validations":[111],"show":[112,132],"that":[113],"reduces":[115],"delay":[118],"93.3--99.3%":[120],"compared":[121],"state-of-the-art,":[124],"while":[125],"reducing":[126],"9.4--26.9X.":[129],"Performance":[130],"incurs":[134],"geometric":[136],"mean":[137],"less":[139],"than":[140],"6%":[141],"overhead":[142],"on":[143,148],"diverse":[144],"real-world":[145],"programs,":[146],"improving":[147],"state-of-the-art":[150],"approach":[151],"61.9--77.5%.":[153]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":4}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}