{"id":"https://openalex.org/W7135048696","doi":"https://doi.org/10.48550/arxiv.2603.10840","title":"MAD: Memory Allocation meets Software Diversity","display_name":"MAD: Memory Allocation meets Software Diversity","publication_year":2026,"publication_date":"2026-03-11","ids":{"openalex":"https://openalex.org/W7135048696","doi":"https://doi.org/10.48550/arxiv.2603.10840"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.10840","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.10840","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.10840","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024342349","display_name":"Manuel Wiesinger","orcid":"https://orcid.org/0009-0005-3947-4355"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wiesinger, Manuel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066487316","display_name":"Daniel Dorfmeister","orcid":"https://orcid.org/0000-0002-2718-6007"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dorfmeister, Daniel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5058365944","display_name":"Stefan Brunthaler","orcid":"https://orcid.org/0000-0001-9766-4871"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Brunthaler, Stefan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9296000003814697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9296000003814697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.031300000846385956,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.006200000178068876,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dram","display_name":"Dram","score":0.6664000153541565},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.6098999977111816},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.5170000195503235},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.4715000092983246},{"id":"https://openalex.org/keywords/diversity","display_name":"Diversity (politics)","score":0.4499000012874603},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.32910001277923584}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6904000043869019},{"id":"https://openalex.org/C7366592","wikidata":"https://www.wikidata.org/wiki/Q1255620","display_name":"Dram","level":2,"score":0.6664000153541565},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.6098999977111816},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.5170000195503235},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.4715000092983246},{"id":"https://openalex.org/C2781316041","wikidata":"https://www.wikidata.org/wiki/Q1230584","display_name":"Diversity (politics)","level":2,"score":0.4499000012874603},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4099000096321106},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.32910001277923584},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.3050999939441681},{"id":"https://openalex.org/C180916674","wikidata":"https://www.wikidata.org/wiki/Q3711935","display_name":"Diversification (marketing strategy)","level":2,"score":0.2858000099658966},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.2808000147342682},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2750000059604645}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.10840","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.10840","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.10840","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.10840","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vulnerabilities":[0],"emanating":[1],"from":[2,51],"DRAM":[3],"errors":[4],"pose":[5],"a":[6,76,158,177,183],"vexing":[7],"problem":[8],"that":[9,49,79,198],"remains,":[10],"as":[11],"of":[12,27,38,113,185,195],"yet,":[13],"unsolved":[14],"and":[15,31,88,150,154],"elusive":[16],"but":[17],"cannot":[18],"be":[19,55,100,200],"ignored.":[20],"Prior":[21],"defenses":[22,53],"focused":[23],"on":[24],"specific":[25],"details":[26],"early":[28,91],"RowHammer":[29,40,166],"attacks":[30,167,197],"fail":[32],"to":[33,57,99,137,164,171],"generalize":[34],"with":[35,59,83],"the":[36,111,172,180],"generalizations":[37,61],"recent":[39],"attacks.":[41],"Even":[42],"worse,":[43],"it":[44,105],"is":[45,68,151,163],"presently":[46],"not":[47],"clear":[48],"techniques":[50,136],"prior":[52],"will":[54],"able":[56],"cope":[58],"these":[60],"or":[62,191],"if":[63],"an":[64,101,204],"entirely":[65],"new":[66,77],"approach":[67,78],"required.":[69],"Although":[70],"still":[71],"work-in-progress,":[72],"we":[73],"have":[74],"identified":[75],"combines":[80],"memory":[81,117,126],"allocation":[82,127],"principles":[84],"underlying":[85],"software":[86,96,155],"diversity":[87,97,128],"shows":[89],"promising":[90],"results.":[92],"At":[93],"first":[94],"glance,":[95],"seems":[98],"unlikely":[102],"contender,":[103],"since":[104],"faces":[106],"seemingly":[107],"insurmountable":[108],"obstacles,":[109],"primarily":[110],"lack":[112],"sufficient":[114],"entropy":[115,140],"in":[116],"subsystems.":[118],"Our":[119],"system":[120],"-":[121,129],"called":[122],"MAD,":[123],"short":[124],"for":[125,182,203],"leverages":[130],"two":[131],"novel,":[132],"complementary":[133,192],"spatial":[134],"diversification":[135],"overcome":[138],"this":[139],"obstacle.":[141],"Entropy":[142],"aside,":[143],"MAD":[144],"offers":[145],"ease-of-implementation,":[146],"negligible":[147],"performance":[148],"impact,":[149],"both":[152],"hardware":[153],"agnostic.":[156],"From":[157],"security":[159],"perspective,":[160],"MAD's":[161],"goal":[162],"deter":[165],"by":[168],"delaying":[169],"them":[170],"maximum":[173],"extent":[174],"possible.":[175],"Such":[176],"delay":[178],"opens":[179],"door":[181],"variety":[184],"additional":[186],"responses,":[187],"e.g.,":[188],"proactive":[189],"rebooting,":[190],"in-depth":[193],"analysis":[194],"ongoing":[196],"would":[199],"too":[201],"slow":[202],"always-on":[205],"defense.":[206]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-13T00:00:00"}