{"id":"https://openalex.org/W4416549531","doi":"https://doi.org/10.1145/3719027.3744849","title":"<scp>BASTAG:</scp> Byte-level Access Control on Shared Memory using ARM Memory Tagging Extension","display_name":"<scp>BASTAG:</scp> Byte-level Access Control on Shared Memory using ARM Memory Tagging Extension","publication_year":2025,"publication_date":"2025-11-19","ids":{"openalex":"https://openalex.org/W4416549531","doi":"https://doi.org/10.1145/3719027.3744849"},"language":null,"primary_location":{"id":"doi:10.1145/3719027.3744849","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3744849","pdf_url":null,"source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3719027.3744849","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030661220","display_name":"Junseung You","orcid":"https://orcid.org/0000-0003-1539-229X"},"institutions":[{"id":"https://openalex.org/I139264467","display_name":"Seoul National University","ror":"https://ror.org/04h9pn542","country_code":"KR","type":"education","lineage":["https://openalex.org/I139264467"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Junseung You","raw_affiliation_strings":["Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0003-1539-229X","affiliations":[{"raw_affiliation_string":"Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I139264467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080529361","display_name":"Jiwon Seo","orcid":"https://orcid.org/0000-0003-1848-750X"},"institutions":[{"id":"https://openalex.org/I89015989","display_name":"Dankook University","ror":"https://ror.org/058pdbn81","country_code":"KR","type":"education","lineage":["https://openalex.org/I89015989"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jiwon Seo","raw_affiliation_strings":["Department of Cybersecurity, Dankook University, Yongin, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0003-1848-750X","affiliations":[{"raw_affiliation_string":"Department of Cybersecurity, Dankook University, Yongin, Republic of Korea","institution_ids":["https://openalex.org/I89015989"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kyeongryong Lee","orcid":"https://orcid.org/0000-0002-6716-2915"},"institutions":[{"id":"https://openalex.org/I139264467","display_name":"Seoul National University","ror":"https://ror.org/04h9pn542","country_code":"KR","type":"education","lineage":["https://openalex.org/I139264467"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Kyeongryong Lee","raw_affiliation_strings":["Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-6716-2915","affiliations":[{"raw_affiliation_string":"Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I139264467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001298234","display_name":"Yeongpil Cho","orcid":"https://orcid.org/0000-0001-7842-1719"},"institutions":[{"id":"https://openalex.org/I4575257","display_name":"Hanyang University","ror":"https://ror.org/046865y68","country_code":"KR","type":"education","lineage":["https://openalex.org/I4575257"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yeongpil Cho","raw_affiliation_strings":["Department of Computer Science, Hanyang University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0001-7842-1719","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Hanyang University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I4575257"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082524666","display_name":"Yunheung Paek","orcid":"https://orcid.org/0000-0002-6412-2926"},"institutions":[{"id":"https://openalex.org/I139264467","display_name":"Seoul National University","ror":"https://ror.org/04h9pn542","country_code":"KR","type":"education","lineage":["https://openalex.org/I139264467"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yunheung Paek","raw_affiliation_strings":["Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea and Core Trust Link, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-6412-2926","affiliations":[{"raw_affiliation_string":"Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea and Core Trust Link, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I139264467"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1514","last_page":"1528"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9764000177383423,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9764000177383423,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.007699999958276749,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.003000000026077032,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6718999743461609},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.6313999891281128},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.5978999733924866},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.5054000020027161},{"id":"https://openalex.org/keywords/distributed-shared-memory","display_name":"Distributed shared memory","score":0.48809999227523804},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.46700000762939453},{"id":"https://openalex.org/keywords/extension","display_name":"Extension (predicate logic)","score":0.4634000062942505},{"id":"https://openalex.org/keywords/shared-memory","display_name":"Shared memory","score":0.4203000068664551}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8321999907493591},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6718999743461609},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.6313999891281128},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.5978999733924866},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.5054000020027161},{"id":"https://openalex.org/C39528615","wikidata":"https://www.wikidata.org/wiki/Q1229610","display_name":"Distributed shared memory","level":5,"score":0.48809999227523804},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.46700000762939453},{"id":"https://openalex.org/C2778029271","wikidata":"https://www.wikidata.org/wiki/Q5421931","display_name":"Extension (predicate logic)","level":2,"score":0.4634000062942505},{"id":"https://openalex.org/C133875982","wikidata":"https://www.wikidata.org/wiki/Q764810","display_name":"Shared memory","level":2,"score":0.4203000068664551},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.4138000011444092},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4047999978065491},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4041999876499176},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.39879998564720154},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3418999910354614},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.32269999384880066},{"id":"https://openalex.org/C51290061","wikidata":"https://www.wikidata.org/wiki/Q1936765","display_name":"Uniform memory access","level":4,"score":0.28630000352859497},{"id":"https://openalex.org/C194080101","wikidata":"https://www.wikidata.org/wiki/Q46306","display_name":"Access time","level":2,"score":0.2847999930381775},{"id":"https://openalex.org/C74426580","wikidata":"https://www.wikidata.org/wiki/Q719484","display_name":"Memory map","level":3,"score":0.27410000562667847},{"id":"https://openalex.org/C2779478453","wikidata":"https://www.wikidata.org/wiki/Q6889748","display_name":"Modularity (biology)","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C70000936","wikidata":"https://www.wikidata.org/wiki/Q4672467","display_name":"Access method","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C2778383056","wikidata":"https://www.wikidata.org/wiki/Q873636","display_name":"Namespace","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C82687282","wikidata":"https://www.wikidata.org/wiki/Q66221","display_name":"Auxiliary memory","level":2,"score":0.2632000148296356},{"id":"https://openalex.org/C1304207","wikidata":"https://www.wikidata.org/wiki/Q7189582","display_name":"Physical access","level":3,"score":0.25940001010894775},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2581000030040741},{"id":"https://openalex.org/C117797892","wikidata":"https://www.wikidata.org/wiki/Q286363","display_name":"Shadow (psychology)","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3719027.3744849","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3744849","pdf_url":null,"source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3719027.3744849","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3719027.3744849","pdf_url":null,"source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W183323481","https://openalex.org/W2018688088","https://openalex.org/W2062340141","https://openalex.org/W2086795351","https://openalex.org/W2105349588","https://openalex.org/W2105842205","https://openalex.org/W2116730531","https://openalex.org/W2131660501","https://openalex.org/W2135531618","https://openalex.org/W2137622193","https://openalex.org/W2155851497","https://openalex.org/W2156858199","https://openalex.org/W2297774820","https://openalex.org/W2495410038","https://openalex.org/W2517176850","https://openalex.org/W2534917055","https://openalex.org/W2899759798","https://openalex.org/W2934720435","https://openalex.org/W2945589999","https://openalex.org/W3009605901","https://openalex.org/W3029114445","https://openalex.org/W3036557299","https://openalex.org/W3089947917","https://openalex.org/W3154844554","https://openalex.org/W4226543528","https://openalex.org/W4308644262","https://openalex.org/W4327930423","https://openalex.org/W4383221465","https://openalex.org/W4386973789","https://openalex.org/W4388857293","https://openalex.org/W4394998511","https://openalex.org/W4395020689","https://openalex.org/W4404787982","https://openalex.org/W4405183072","https://openalex.org/W4411337888"],"related_works":[],"abstract_inverted_index":{"As":[0],"software":[1],"grows":[2],"in":[3],"size":[4],"and":[5,52,97,149,166],"complexity,":[6],"modular":[7],"designs":[8],"are":[9],"increasingly":[10],"adopted,":[11],"leading":[12],"to":[13,33,68,87,105],"frequent":[14],"interactions":[15],"via":[16],"shared":[17,34,50],"memory":[18,31,131,143],"between":[19,95],"components.":[20],"This":[21],"design":[22],"however":[23],"increases":[24],"the":[25,64,114,141],"risk":[26],"of":[27,66,117],"vulnerabilities":[28],"from":[29],"uncontrolled":[30],"access":[32,38,122,151,183],"memory.":[35],"Enforcing":[36],"byte-level":[37,46,107,182],"control":[39,67,108,152,184],"can":[40],"mitigate":[41],"these":[42],"risks":[43],"by":[44],"enabling":[45],"permissions":[47],"on":[48,109,160,169],"complex":[49],"objects":[51],"their":[53],"sub-elements.":[54],"However,":[55],"existing":[56,181],"approaches":[57],"face":[58],"performance":[59],"limitations":[60,116],"as":[61,129],"they":[62],"increase":[63],"granularity":[65,101],"byte":[69],"level.":[70],"In":[71],"this":[72,89],"paper,":[73],"we":[74],"present":[75],"BASTAG,":[76],"a":[77,126,157],"novel":[78],"system":[79],"that":[80,133,177],"leverages":[81],"ARM's":[82],"Memory":[83],"Tagging":[84],"Extension":[85],"(MTE)":[86],"tack":[88],"challenge.":[90],"Although":[91],"MTE":[92,119,138,164],"enforces":[93],"tag-matching":[94],"pointers":[96],"memory,":[98],"its":[99,110],"hardware-defined":[100],"is":[102],"too":[103],"coarse":[104],"support":[106,165],"own.":[111],"To":[112],"address":[113],"inherent":[115],"applying":[118],"for":[120,140,146],"nuanced":[121],"control,":[123],"BASTAG":[124,158,178],"incorporates":[125],"technique":[127],"known":[128],"shadow":[130],"tagging":[132],"places":[134],"separate,":[135],"but":[136],"associated":[137],"tags":[139],"actual":[142],"targets,":[144],"allowing":[145],"more":[147],"flexible":[148],"finer":[150],"with":[153,163],"efficiency.":[154],"We":[155],"implemented":[156],"prototype":[159],"AArch64":[161],"hardware":[162],"evaluated":[167],"it":[168],"three":[170],"real-world":[171],"use":[172],"cases.":[173],"Our":[174],"results":[175],"demonstrate":[176],"significantly":[179],"outperforms":[180],"mechanisms.":[185]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-23T00:00:00"}