{"id":"https://openalex.org/W4311165859","doi":"https://doi.org/10.1145/3564625.3567984","title":"Formal Modeling and Security Analysis for Intra-level Privilege Separation","display_name":"Formal Modeling and Security Analysis for Intra-level Privilege Separation","publication_year":2022,"publication_date":"2022-12-03","ids":{"openalex":"https://openalex.org/W4311165859","doi":"https://doi.org/10.1145/3564625.3567984"},"language":"en","primary_location":{"id":"doi:10.1145/3564625.3567984","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3567984","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028238939","display_name":"Yinggang Guo","orcid":"https://orcid.org/0000-0001-8104-6470"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yinggang Guo","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, China"],"raw_orcid":"https://orcid.org/0000-0001-8104-6470","affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057149835","display_name":"Zicheng Wang","orcid":"https://orcid.org/0000-0002-5154-162X"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zicheng Wang","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, China"],"raw_orcid":"https://orcid.org/0000-0002-5154-162X","affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086167023","display_name":"Bingnan Zhong","orcid":"https://orcid.org/0000-0002-0436-2709"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bingnan Zhong","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, China"],"raw_orcid":"https://orcid.org/0000-0002-0436-2709","affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030469532","display_name":"Qingkai Zeng","orcid":"https://orcid.org/0000-0002-0610-1553"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingkai Zeng","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, China"],"raw_orcid":"https://orcid.org/0000-0002-0610-1553","affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, China","institution_ids":["https://openalex.org/I881766915"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I881766915"],"apc_list":null,"apc_paid":null,"fwci":0.1687,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.43654705,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"88","last_page":"101"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9868999719619751,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.8283226490020752},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7204276323318481},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6759139895439148},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.604425847530365},{"id":"https://openalex.org/keywords/mainstream","display_name":"Mainstream","score":0.5664244890213013},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.5201143026351929},{"id":"https://openalex.org/keywords/separation","display_name":"Separation (statistics)","score":0.5183019042015076},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.42891842126846313},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4255460202693939},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3040342330932617},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.25506943464279175},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.12551084160804749},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09662830829620361},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.09325909614562988}],"concepts":[{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.8283226490020752},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7204276323318481},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6759139895439148},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.604425847530365},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.5664244890213013},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.5201143026351929},{"id":"https://openalex.org/C2776061190","wikidata":"https://www.wikidata.org/wiki/Q7451805","display_name":"Separation (statistics)","level":2,"score":0.5183019042015076},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.42891842126846313},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4255460202693939},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3040342330932617},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.25506943464279175},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.12551084160804749},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09662830829620361},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.09325909614562988},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3564625.3567984","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3564625.3567984","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[{"id":"https://openalex.org/G2338580574","display_name":null,"funder_award_id":"61772266, 61431008","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1967182706","https://openalex.org/W1975177131","https://openalex.org/W1988079752","https://openalex.org/W2029224396","https://openalex.org/W2057743816","https://openalex.org/W2091161634","https://openalex.org/W2095881341","https://openalex.org/W2136310957","https://openalex.org/W2594161941","https://openalex.org/W2603926284","https://openalex.org/W2613314374","https://openalex.org/W2762625979","https://openalex.org/W2767174522","https://openalex.org/W2809505114","https://openalex.org/W2897668282","https://openalex.org/W2902578047","https://openalex.org/W2913096406","https://openalex.org/W2917234824","https://openalex.org/W2935013673","https://openalex.org/W2939057911","https://openalex.org/W2974073952","https://openalex.org/W2982827547","https://openalex.org/W3016246341","https://openalex.org/W3033862860","https://openalex.org/W3139619551","https://openalex.org/W3153719543","https://openalex.org/W3155827311","https://openalex.org/W3205972330","https://openalex.org/W3205994385","https://openalex.org/W4206314719","https://openalex.org/W4250902494","https://openalex.org/W4252834746"],"related_works":["https://openalex.org/W2401656370","https://openalex.org/W2896807552","https://openalex.org/W2240600741","https://openalex.org/W2743511463","https://openalex.org/W1599380747","https://openalex.org/W2162787360","https://openalex.org/W94304979","https://openalex.org/W4252444451","https://openalex.org/W200304987","https://openalex.org/W1993064893"],"abstract_inverted_index":{"Privileged":[0],"system":[1,7],"software":[2],"such":[3],"as":[4],"mainstream":[5],"operating":[6],"kernels":[8],"and":[9,68],"hypervisors":[10],"have":[11],"an":[12],"ongoing":[13],"stream":[14],"of":[15],"vulnerabilities.":[16],"Even":[17],"the":[18],"inflated":[19],"secure":[20,30],"world":[21],"in":[22,31],"Trusted":[23],"Execution":[24],"Environment":[25],"(TEE)":[26],"is":[27],"no":[28],"longer":[29],"complex":[32],"real-world":[33],"scenarios.":[34],"Since":[35],"higher":[36],"privilege":[37,47,61],"levels":[38],"cannot":[39,69],"always":[40],"be":[41],"stacked":[42],"to":[43,54],"provide":[44],"protection,":[45],"intra-level":[46,60],"separation":[48,62],"has":[49],"become":[50],"a":[51],"powerful":[52],"way":[53],"build":[55],"trustworthy":[56],"systems.":[57],"However,":[58],"existing":[59],"systems":[63],"lack":[64],"sound":[65],"security":[66],"analysis":[67],"give":[70],"formal":[71],"guarantees.":[72]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}
