{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T20:38:24Z","timestamp":1743107904750,"version":"3.40.3"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030582074"},{"type":"electronic","value":"9783030582081"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-58208-1_6","type":"book-chapter","created":{"date-parts":[[2020,8,26]],"date-time":"2020-08-26T09:03:28Z","timestamp":1598432608000},"page":"97-116","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["MKM: Multiple Kernel Memory for Protecting Page Table Switching Mechanism Against Memory Corruption"],"prefix":"10.1007","author":[{"given":"Hiroki","family":"Kuzuno","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Toshihiro","family":"Yamauchi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,8,26]]},"reference":[{"key":"6_CR1","doi-asserted-by":"publisher","unstructured":"Kemerlis, P, V., Portokalidis, G. and Keromytis, D, A.: kGuard: lightweight kernel protection against return-to-user attacks. In: Proceedings of the 21st USENIX Conference on Security Symposium, USENIX (2012). https:\/\/doi.org\/10.5555\/2362793.2362832","DOI":"10.5555\/2362793.2362832"},{"key":"6_CR2","doi-asserted-by":"publisher","unstructured":"Abadi, M., Budiu, M., Erlingsson, U., Ligatti, J.: Control-flow integrity principles, implementations. In: Proceedings of the 12th ACM Conference on Computer and Communications Security, pp. 340\u2013353. ACM (2005). https:\/\/doi.org\/10.1145\/1609956.1609960","DOI":"10.1145\/1609956.1609960"},{"key":"6_CR3","unstructured":"Rapoport, M.: $$\\times $$86: introduce system calls address space isolation. https:\/\/lwn.net\/Articles\/786894\/. Accessed 22 May 2019"},{"key":"6_CR4","doi-asserted-by":"publisher","unstructured":"Hund, R., Willems, C., Holz, T.: Practical timing side channel attacks against kernel space ASLR. In: Proceedings of the 2013 IEEE Symposium on Security and Privacy, pp. 191\u2013205, IEEE (2013). https:\/\/doi.org\/10.1109\/SP.2013.23","DOI":"10.1109\/SP.2013.23"},{"key":"6_CR5","doi-asserted-by":"publisher","unstructured":"Gruss, D., Lipp, M., Schwarz, M., Fellner, R., Maurice, C., Mangard, S.: KASLR is dead : long live KASLR, In: Bodden, E., Payer, M., Athanasopoulos, E. (eds.) ESSoS 2017. LNCS, vol. 10379, pp. 161\u2013176, Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-62105-0_11","DOI":"10.1007\/978-3-319-62105-0_11"},{"key":"6_CR6","unstructured":"Mulnix D.: Intel\u00ae Xeon\u00ae Processor D Product Family Technical Overview, https:\/\/software.intel.com\/en-us\/articles\/intel-xeon-processor-d-product-family-technical-overview. Accessed 10 Aug 2018"},{"key":"6_CR7","unstructured":"Security-enhanced Linux. http:\/\/www.nsa.gov\/research\/selinux\/. Accessed 22 May 2019"},{"key":"6_CR8","unstructured":"Exploit Database, Nexus 5 Android 5.0 - Privilege Escalation. https:\/\/www.exploit-db.com\/exploits\/35711\/. Accessed 21 May 2019"},{"key":"6_CR9","unstructured":"grsecurity: super fun 2.6.30+\/RHEL5 2.6.18 local kernel exploit. https:\/\/grsecurity.net\/~spender\/exploits\/exploit2.txt. Accessed 21 May 2019"},{"key":"6_CR10","doi-asserted-by":"publisher","unstructured":"Kuzuno, H., Yamauchi, T.: KMO: kernel memory observer to identify memory corruption by secret inspection mechanism. In: Heng, S,H., Lopez, J. (eds.) ISPEC 2019. LNCS, vol. 11879, pp. 75\u201394, Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-34339-2_5","DOI":"10.1007\/978-3-030-34339-2_5"},{"key":"6_CR11","unstructured":"Bovet, P.D., Cesati, M.: Understanding the Linux kernel, 3rd edition. O\u2019Reilly Media (2005)"},{"key":"6_CR12","unstructured":"CVE-2017-16995. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2017-16995. Accessed 10 June 2019"},{"key":"6_CR13","doi-asserted-by":"publisher","unstructured":"Chen, H., Mao, Y., Wang, X., Zhow, D., Zeldovich, N., Kaashoek, F, M.: Linux kernel vulnerabilities - state-of-the-art defenses and open problems. In: Proceedings of the Second Asia-Pacific Workshop on Systems, pp. 1\u20135, ACM (2011). https:\/\/doi.org\/10.1145\/2103799.2103805","DOI":"10.1145\/2103799.2103805"},{"key":"6_CR14","unstructured":"Tetlow, G.: Response to Meltdown and Spectre. https:\/\/lists.freebsd.org\/pipermail\/freebsd-security\/2018-January\/009719.html. Accessed 21 May 2019"},{"key":"6_CR15","doi-asserted-by":"publisher","unstructured":"Linden, A. T.: Operating system structures to support security and reliable software. ACM Computing Surveys, vol. 8, no. 4, pp. 409\u2013445. ACM (1976). https:\/\/doi.org\/10.1145\/356678.356682","DOI":"10.1145\/356678.356682"},{"key":"6_CR16","doi-asserted-by":"crossref","unstructured":"Davi, L., Gens, D., Liebchen, C., Sadeghi, A.-R.: PT-Rand: practical mitigation of data-only attacks against page tables. In: Proceedings of the 23th Network and Distributed System Security Symposium, Internet Society (2016)","DOI":"10.14722\/ndss.2017.23421"},{"key":"6_CR17","doi-asserted-by":"publisher","unstructured":"Pomonis, M., Petsios, T.: kR $$\\hat{}$$ X: comprehensive kernel protection against just-in-time code reuse. In: Protection of the Twelfth European Conference on Computer Systems, pp. 420\u2013436, ACM (2017). https:\/\/doi.org\/10.1145\/3064176.3064216","DOI":"10.1145\/3064176.3064216"},{"key":"6_CR18","unstructured":"Trusted computing group. tpm main specification. http:\/\/www.trustedcomputinggroup.org\/resources\/tpm_main_specification. Accessed 10 Aug 2018"},{"key":"6_CR19","unstructured":"Ge, X., Vijayakumar, H., Jaeger, T.: Sprobes: enforcing kernel code integrity on the trustzone architecture. In: Proceedings of the third Workshop on Mobile Security Technologies, ACM (2014)"},{"key":"6_CR20","doi-asserted-by":"publisher","unstructured":"Seshadri, A., Luk, M., Qu, N., Perrig, A.: SecVisor: a tiny hypervisor to provide lifetime kernel code integrity for commodity OSes. In: Proceedings of the 21st ACM SIGOPS Symposium on Operating Systems Principles, pp. 335\u2013350, ACM (2007). https:\/\/doi.org\/10.1145\/1294261.1294294","DOI":"10.1145\/1294261.1294294"},{"key":"6_CR21","doi-asserted-by":"publisher","unstructured":"McCune, M.J., Li, Y., Qu, Z., Zhou, A., Datta, V., Gligor, D., Perrig A.: TrustVisor: efficient TCB reduction and attestation. In: Proceedings of the 2010 IEEE Symposium on Security and Privacy, pp. 143\u2013158, IEEE (2010). https:\/\/doi.org\/10.1109\/SP.2010.17","DOI":"10.1109\/SP.2010.17"},{"key":"6_CR22","doi-asserted-by":"publisher","unstructured":"Sharif, I.M., Lee, W., Cui, W., Lanzi, A.: Secure in-VM monitoring using hardware virtualization. In: Proceedings of the 16th ACM Conference on Computer and Communications Security, pp. 477\u2013487. ACM (2009). https:\/\/doi.org\/10.1145\/1653662.1653720","DOI":"10.1145\/1653662.1653720"},{"key":"6_CR23","doi-asserted-by":"publisher","unstructured":"Deng, L., Liu, P., Xu, J., Chen, P., Zeng, Q.: Dancing with Wolves: towards practical event-driven VMM monitoring. In: Proceedings of the 13th ACM SIGPLAN \/ SIGOPS International Conference, pp. 83\u201396. ACM (2017). https:\/\/doi.org\/10.1145\/3050748.3050750","DOI":"10.1145\/3050748.3050750"},{"key":"6_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-319-45719-2_1","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"L Koromilas","year":"2016","unstructured":"Koromilas, L., Vasiliadis, G., Athanasopoulos, E., Ioannidis, S.: GRIM: leveraging GPUs for kernel integrity monitoring. In: Monrose, F., Dacier, M., Blanc, G., Garcia-Alfaro, J. (eds.) RAID 2016. LNCS, vol. 9854, pp. 3\u201323. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-45719-2_1"},{"key":"6_CR25","doi-asserted-by":"publisher","unstructured":"Klein, G., et al.: seL4: formal verification of an OS kernel. In: Proceedings of the 22nd ACM Symposium on Operating Systems Principles, pp. 207\u2013220. ACM (2009). https:\/\/doi.org\/10.1145\/1629575.1629596","DOI":"10.1145\/1629575.1629596"},{"key":"6_CR26","unstructured":"Getting started with kmemcheck. https:\/\/www.kernel.org\/doc\/dev-tools\/kmemcheck.html. Accessed 21 May 2019"},{"key":"6_CR27","unstructured":"The Kernel Address Sanitizer (KASAN). https:\/\/www.kernel.org\/doc\/dev-tools\/kasan.html Accessed 21 May 2019"},{"key":"6_CR28","unstructured":"syzkaller is an unsupervised, coverage-guided kernel fuzzer. https:\/\/github.com\/google\/syzkaller\/. Accessed 22 May 2019"},{"key":"6_CR29","doi-asserted-by":"publisher","unstructured":"Hua. Z., Du, D., Xia, Y., Chen, H., Zang, B.: EPTI: efficient defence against meltdown attack for unpatched VMs. In: Proceedings of the 2018 USENIX Annual Technical Conference, pp. 255\u2013266. USENIX (2018). https:\/\/doi.org\/10.5555\/3277355.3277380","DOI":"10.5555\/3277355.3277380"},{"key":"6_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"212","DOI":"10.1007\/978-3-319-08509-8_12","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"A Kurmus","year":"2014","unstructured":"Kurmus, A., Dechand, S., Kapitza, R.: Quantifiable run-time kernel attack surface reduction. In: Dietrich, S. (ed.) DIMVA 2014. LNCS, vol. 8550, pp. 212\u2013234. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-08509-8_12"},{"key":"6_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"691","DOI":"10.1007\/978-3-030-00470-5_32","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"Z Zhang","year":"2018","unstructured":"Zhang, Z., Cheng, Y., Nepal, S., Liu, D., Shen, Q., Rabhi, F.: KASR: a reliable and practical approach to attack surface reduction of commodity OS kernels. In: Bailey, M., Holz, T., Stamatogiannakis, M., Ioannidis, S. (eds.) RAID 2018. LNCS, vol. 11050, pp. 691\u2013710. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-00470-5_32"},{"key":"6_CR32","doi-asserted-by":"publisher","unstructured":"Dautenhahn, N., Kasampalis, T., Dietz, W., Criswell, J., Adve, V.: Nested Kernel: an operating system architecture for intra-kernel privilege separation. In: Proceedings of the 20th International Conference on Architectural Support for Programming Languages and Operating Systems, pp. 191\u2013206. ACM (2015). https:\/\/doi.org\/10.1145\/2694344.2694386","DOI":"10.1145\/2694344.2694386"},{"key":"6_CR33","unstructured":"Kuo, H, C., Gunasekaran, A., Jang, Y., Mohan, S., Bobba, B, R., Lie, D., Walker, J.: MultiK: a framework for orchestrating multiple specialized kernels. https:\/\/arxiv.org\/abs\/1903.06889v1. Accessed 16 May 2019"},{"key":"6_CR34","doi-asserted-by":"publisher","unstructured":"\u00d6sterlund, S., Koning, K., Olivier, P., Barbalace, A., Bos, H., Giuffrida, C.: kMVX: detecting kernel information leaks with multi-variant execution. In: Proceedings of the 24th International Conference on Architectural Support for Programming Languages and Operating Systems, pp. 559\u2013572. ACM (2019). https:\/\/doi.org\/10.1145\/3297858.3304054","DOI":"10.1145\/3297858.3304054"}],"container-title":["Lecture Notes in Computer Science","Advances in Information and Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-58208-1_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,23]],"date-time":"2021-04-23T20:03:14Z","timestamp":1619208194000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-58208-1_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030582074","9783030582081"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-58208-1_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"26 August 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"IWSEC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Workshop on Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Fukui","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Japan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2 September 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 September 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iwsec2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.iwsec.org\/2020\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"47","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"15","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"32% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.9","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4.9","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually due to the COVID-19 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}