{"id":"https://openalex.org/W4409212859","doi":"https://doi.org/10.1145/3728360","title":"Security Implications of the Morello Platform: An Empirical Threat Model-Based Analysis","display_name":"Security Implications of the Morello Platform: An Empirical Threat Model-Based Analysis","publication_year":2025,"publication_date":"2025-04-07","ids":{"openalex":"https://openalex.org/W4409212859","doi":"https://doi.org/10.1145/3728360"},"language":"en","primary_location":{"id":"doi:10.1145/3728360","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728360","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3728360","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3728360","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5059924789","display_name":"Sami Ullah","orcid":"https://orcid.org/0000-0002-5332-2914"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Sami Ullah","raw_affiliation_strings":["Department of Computer Science, University of Bristol","Department of Computer Science, University of Bristol, Bristol, United Kingdom of Great Britain and Northern Ireland"],"raw_orcid":"https://orcid.org/0000-0002-5332-2914","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Bristol","institution_ids":["https://openalex.org/I36234482"]},{"raw_affiliation_string":"Department of Computer Science, University of Bristol, Bristol, United Kingdom of Great Britain and Northern Ireland","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034962802","display_name":"Awais Rashid","orcid":"https://orcid.org/0000-0002-0109-1341"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Awais Rashid","raw_affiliation_strings":["Depart of Computer Science, University of Bristol","Depart of Computer Science, University of Bristol, Bristol United Kingdom of Great Britain and Northern Ireland"],"raw_orcid":"https://orcid.org/0000-0002-0109-1341","affiliations":[{"raw_affiliation_string":"Depart of Computer Science, University of Bristol","institution_ids":["https://openalex.org/I36234482"]},{"raw_affiliation_string":"Depart of Computer Science, University of Bristol, Bristol United Kingdom of Great Britain and Northern Ireland","institution_ids":["https://openalex.org/I36234482"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I36234482"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.06794655,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"28","issue":"3","first_page":"1","last_page":"41"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4611632227897644},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4408799111843109},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.42688778042793274}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4611632227897644},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4408799111843109},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.42688778042793274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3728360","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728360","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3728360","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3728360","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728360","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3728360","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334630","display_name":"Economic and Social Research Council","ror":"https://ror.org/03n0ht308"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409212859.pdf","grobid_xml":"https://content.openalex.org/works/W4409212859.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W1904738922","https://openalex.org/W1964132576","https://openalex.org/W2059278087","https://openalex.org/W2101699859","https://openalex.org/W2136938453","https://openalex.org/W2165266180","https://openalex.org/W2171482413","https://openalex.org/W2180474751","https://openalex.org/W2586250227","https://openalex.org/W2600258283","https://openalex.org/W2789215356","https://openalex.org/W2808492852","https://openalex.org/W2914947522","https://openalex.org/W3119195810","https://openalex.org/W3136458971","https://openalex.org/W4232172926","https://openalex.org/W4248542611","https://openalex.org/W4308642904","https://openalex.org/W4315746341","https://openalex.org/W4387781802"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4322731571","https://openalex.org/W1929087753","https://openalex.org/W4400055136","https://openalex.org/W2886023993","https://openalex.org/W3185781018","https://openalex.org/W2113607124"],"abstract_inverted_index":{"This":[0],"article":[1],"explores":[2],"the":[3,16,26,33,36,46,64,67,77,91,96,105,113,119,125,155],"software":[4,42,68,163],"security":[5,43,54,169],"potential":[6,138],"of":[7,15,28,56,115,121,149],"ARM\u2019s":[8],"Morello":[9,29,81,110,156],"experimental":[10],"hardware":[11],"platform,":[12],"an":[13],"embodiment":[14],"Capability":[17],"Hardware":[18],"Enhanced":[19],"RISC":[20],"Instructions":[21],"(CHERI)":[22],"model.":[23],"We":[24,103,134],"navigate":[25],"intricacies":[27],"adoption,":[30,111],"uncovering":[31],"both":[32],"promise":[34],"and":[35,60,71,124,131,168],"challenges":[37,107],"it":[38],"presents":[39],"for":[40,66,129],"bolstering":[41],"assurance.":[44],"Employing":[45],"Juliet":[47],"Test":[48],"Suite,":[49],"we":[50],"conduct":[51],"a":[52],"rigorous":[53],"assessment":[55],"Morello\u2019s":[57],"operational":[58],"modes\u2014Purecap":[59],"Hybrid\u2014shedding":[61],"light":[62],"on":[63],"ramifications":[65],"development":[69,130,166],"lifecycle":[70],"assurance":[72,132,170],"processes.":[73],"Our":[74],"findings":[75],"affirm":[76],"robust":[78],"spatial":[79],"safety":[80],"confers,":[82],"especially":[83],"in":[84,95,100,162],"its":[85],"Purecap":[86],"mode,":[87],"while":[88],"also":[89],"underscoring":[90],"persisting":[92],"temporal":[93],"vulnerabilities":[94],"CheriBSD":[97],"version":[98],"used":[99],"our":[101],"experiments.":[102],"discuss":[104],"novel":[106],"associated":[108],"with":[109],"including":[112],"management":[114],"CHERI":[116,143],"violation":[117],"exceptions,":[118],"imperative":[120],"software-hardware":[122],"co-validation,":[123],"specialized":[126],"training":[127],"requisites":[128],"teams.":[133],"draw":[135],"attention":[136],"to":[137,154],"risks,":[139],"like":[140],"crashes":[141],"from":[142],"violations":[144],"potentially":[145],"metamorphosing":[146],"into":[147],"Denial":[148],"Service":[150],"(DoS)":[151],"attacks.":[152],"Transitioning":[153],"model":[157],"could":[158],"necessitate":[159],"substantial":[160],"alterations":[161],"design":[164],"principles,":[165],"methodologies,":[167],"protocols.":[171]},"counts_by_year":[],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}