{"id":"https://openalex.org/W7140172804","doi":"https://doi.org/10.48550/arxiv.2603.20347","title":"Byte-level Object Bounds Protection","display_name":"Byte-level Object Bounds Protection","publication_year":2026,"publication_date":"2026-03-20","ids":{"openalex":"https://openalex.org/W7140172804","doi":"https://doi.org/10.48550/arxiv.2603.20347"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.20347","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.20347","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.20347","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Kedia, Piyus","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Kedia, Piyus","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9857000112533569,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9857000112533569,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.00419999985024333,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.0017000000225380063,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.678600013256073},{"id":"https://openalex.org/keywords/prism","display_name":"Prism","score":0.6107000112533569},{"id":"https://openalex.org/keywords/object","display_name":"Object (grammar)","score":0.5149000287055969},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5108000040054321},{"id":"https://openalex.org/keywords/computer-multitasking","display_name":"Computer multitasking","score":0.4945000112056732},{"id":"https://openalex.org/keywords/invariant","display_name":"Invariant (physics)","score":0.46959999203681946},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.4203000068664551},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.4027000069618225}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7770000100135803},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.678600013256073},{"id":"https://openalex.org/C67666897","wikidata":"https://www.wikidata.org/wiki/Q165896","display_name":"Prism","level":2,"score":0.6107000112533569},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.5149000287055969},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5108000040054321},{"id":"https://openalex.org/C154556556","wikidata":"https://www.wikidata.org/wiki/Q192969","display_name":"Computer multitasking","level":2,"score":0.4945000112056732},{"id":"https://openalex.org/C190470478","wikidata":"https://www.wikidata.org/wiki/Q2370229","display_name":"Invariant (physics)","level":2,"score":0.46959999203681946},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.4203000068664551},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.413100004196167},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.4027000069618225},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.38999998569488525},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3635999858379364},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.352400004863739},{"id":"https://openalex.org/C113954288","wikidata":"https://www.wikidata.org/wiki/Q186885","display_name":"Timestamp","level":2,"score":0.34850001335144043},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3386000096797943},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3215000033378601},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.32089999318122864},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3021000027656555},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.29499998688697815},{"id":"https://openalex.org/C162319229","wikidata":"https://www.wikidata.org/wiki/Q175263","display_name":"Data structure","level":2,"score":0.29319998621940613},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.2777999937534332},{"id":"https://openalex.org/C2778383056","wikidata":"https://www.wikidata.org/wiki/Q873636","display_name":"Namespace","level":2,"score":0.2777000069618225},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2637999951839447},{"id":"https://openalex.org/C74912251","wikidata":"https://www.wikidata.org/wiki/Q6815727","display_name":"Memory footprint","level":2,"score":0.25429999828338623},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.20347","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.20347","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.20347","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.20347","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8217834830284119}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Low-level":[0],"C":[1,26,47],"programs":[2],"remain":[3],"highly":[4,198],"vulnerable":[5],"to":[6,19,190,236],"out-of-bounds":[7,227],"memory":[8,21,110],"corruption.":[9],"State-of-the-art":[10],"precise":[11,120],"defenses":[12],"either":[13],"introduce":[14],"severe":[15],"runtime":[16],"overhead":[17,182],"due":[18,235],"metadata":[20,109],"lookups,":[22],"or":[23,32],"break":[24],"standard":[25],"semantics":[27],"by":[28,56,170],"disallowing":[29],"partial":[30,242],"structs":[31],"the":[33,78,89,100,105,127,165],"creation":[34],"of":[35,83,183,239],"an":[36,145,178,212,226],"object's":[37],"end":[38],"address":[39,96,195],"(EA),":[40],"a":[41,63,74,84,92,186,193,204],"legal":[42],"operation":[43],"ubiquitous":[44],"in":[45,112,130,192,229],"real-world":[46,200],"code.":[48],"Conversely,":[49],"practical":[50],"alignment-based":[51,132],"solutions":[52],"achieve":[53,139],"efficiency":[54],"only":[55,211],"relaxing":[57],"protected":[58],"bounds.":[59,122],"We":[60],"present":[61],"PRISM,":[62],"precise,":[64,161],"zero-lookup":[65],"object-bounds":[66],"scheme":[67],"that":[68,91,147,231],"eliminates":[69,104],"these":[70],"restrictions.":[71],"PRISM":[72,102,142,176,202,223],"compresses":[73],"47-bit":[75],"EA":[76],"into":[77],"17-bit":[79],"unused":[80],"tag":[81],"area":[82],"64-bit":[85],"pointer.":[86],"By":[87],"enforcing":[88],"invariant":[90,124],"statically":[93],"known":[94],"starting":[95],"(KSA)":[97],"cannot":[98],"exceed":[99],"EA,":[101],"completely":[103],"need":[106],"for":[107,152,164,219,241],"costly":[108],"fetches":[111],"nearly":[113],"all":[114],"bounds":[115,150],"checks,":[116],"while":[117,159],"strictly":[118],"retaining":[119],"object":[121],"Our":[123],"also":[125],"simplifies":[126],"lower-bound":[128],"checks":[129,151],"existing":[131],"solutions,":[133],"thus":[134],"improving":[135],"their":[136,237],"performance.":[137],"To":[138],"high":[140],"throughput,":[141],"introduces":[143],"q-padding,":[144],"optimization":[146],"safely":[148],"removes":[149],"constant-offset":[153],"accesses":[154,167],"(such":[155],"as":[156],"struct":[157],"fields)":[158],"maintaining":[160],"byte-level":[162],"protection":[163],"variable-indexed":[166],"primarily":[168],"exploited":[169],"attackers.":[171],"Evaluated":[172],"on":[173],"SPEC":[174],"2017,":[175],"achieves":[177],"arithmetic":[179],"mean":[180],"CPU":[181],"46.1\\%":[184],"with":[185,210],"32-byte":[187],"q-padding":[188],"(dropping":[189],"31.3\\%":[191],"32-bit":[194],"space).":[196],"On":[197],"concurrent,":[199],"workloads,":[201],"secures":[203],"fully":[205],"saturated":[206],"Apache":[207],"web":[208],"server":[209],"11.1\\%":[213],"throughput":[214],"reduction,":[215],"demonstrating":[216],"its":[217],"readiness":[218],"production":[220],"deployment.":[221],"Furthermore,":[222],"successfully":[224],"detected":[225],"violation":[228],"\\texttt{gcc}":[230],"prior":[232],"tools":[233],"missed":[234],"lack":[238],"support":[240],"structs.":[243]},"counts_by_year":[],"updated_date":"2026-04-25T08:17:42.794288","created_date":"2026-03-25T00:00:00"}