{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T12:04:41Z","timestamp":1779883481132,"version":"3.53.1"},"reference-count":43,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100019091","name":"Key Research and Development Program of Hunan Province of China","doi-asserted-by":"publisher","award":["2025JK2001"],"award-info":[{"award-number":["2025JK2001"]}],"id":[{"id":"10.13039\/501100019091","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100019091","name":"Key Research and Development Program of Hunan Province of China","doi-asserted-by":"publisher","award":["2025JK2041"],"award-info":[{"award-number":["2025JK2041"]}],"id":[{"id":"10.13039\/501100019091","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62133014"],"award-info":[{"award-number":["62133014"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62321003"],"award-info":[{"award-number":["62321003"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U24B20145"],"award-info":[{"award-number":["U24B20145"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Journal of Systems Architecture"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.sysarc.2026.103801","type":"journal-article","created":{"date-parts":[[2026,4,10]],"date-time":"2026-04-10T17:30:08Z","timestamp":1775842208000},"page":"103801","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["TrustSpace: Trusted memory space against control hijacking attacks"],"prefix":"10.1016","volume":"176","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4822-2916","authenticated-orcid":false,"given":"Chenglai","family":"Xiong","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guoqi","family":"Xie","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinxin","family":"Jiang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shufeng","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sirong","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xingyu","family":"Hu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xuejun","family":"Yu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.sysarc.2026.103801_b1","series-title":"2016 IEEE 2nd International Conference on Collaboration and Internet Computing","first-page":"445","article-title":"Trustzone explained: Architectural features and use cases","author":"Ngabonziza","year":"2016"},{"key":"10.1016\/j.sysarc.2026.103801_b2","doi-asserted-by":"crossref","unstructured":"Zhiang Li, Daisuke Mashima, Wen Shei Ong, Ertem Esiner, Zbigniew Kalbarczyk, Ee-Chien Chang, On Practicality of Using ARM TrustZone Trusted Execution Environment for Securing Programmable Logic Controllers, in: Proceedings of the 19th ACM Asia Conference on Computer and Communications Security, 2024, pp. 947\u2013961.","DOI":"10.1145\/3634737.3645002"},{"issue":"1","key":"10.1016\/j.sysarc.2026.103801_b3","doi-asserted-by":"crossref","first-page":"35","DOI":"10.1109\/TCAD.2021.3052856","article-title":"Runtime malware detection using embedded trace buffers","volume":"41","author":"Elnaggar","year":"2021","journal-title":"IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."},{"key":"10.1016\/j.sysarc.2026.103801_b4","unstructured":"Silas Boyd-Wickizer, Nickolai Zeldovich, Tolerating malicious device drivers in Linux, in: 2010 USENIX Annual Technical Conference (USENIX ATC 10), 2010."},{"issue":"11","key":"10.1016\/j.sysarc.2026.103801_b5","doi-asserted-by":"crossref","first-page":"4093","DOI":"10.1109\/TCAD.2024.3447468","article-title":"Backdoor attacks on safe reinforcement learning-enabled cyber\u2013physical systems","volume":"43","author":"Jiang","year":"2024","journal-title":"IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."},{"key":"10.1016\/j.sysarc.2026.103801_b6","article-title":"AVL function table for LeafHooks insertion with obfuscated control flow integrity","author":"Zhao","year":"2024","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/j.sysarc.2026.103801_b7","unstructured":"Zhichao Hua, Jinyu Gu, Yubin Xia, Haibo Chen, Binyu Zang, Haibing Guan, {vTZ}: virtualizing {ARM}{TrustZone}, in: 26th USENIX Security Symposium (USENIX Security 17), 2017, pp. 541\u2013556."},{"issue":"1","key":"10.1016\/j.sysarc.2026.103801_b8","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1609956.1609960","article-title":"Control-flow integrity principles, implementations, and applications","volume":"13","author":"Abadi","year":"2009","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"10.1016\/j.sysarc.2026.103801_b9","first-page":"828","article-title":"A hypervisor-based system for protecting software runtime memory and persistent storage","volume":"8","author":"Dewan","year":"2008","journal-title":"SpringSim"},{"issue":"3","key":"10.1016\/j.sysarc.2026.103801_b10","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1347375.1347389","article-title":"The worst-case execution-time problem\u2014overview of methods and survey of tools","volume":"7","author":"Wilhelm","year":"2008","journal-title":"ACM Trans. Embed. Comput. Syst. (TECS)"},{"key":"10.1016\/j.sysarc.2026.103801_b11","doi-asserted-by":"crossref","DOI":"10.1109\/TSC.2025.3592381","article-title":"Model caching and application offloading for mobile edge intelligence network with learning-and-optimization approach","author":"Peng","year":"2025","journal-title":"IEEE Trans. Serv. Comput."},{"key":"10.1016\/j.sysarc.2026.103801_b12","article-title":"DC-GCL: Dynamically configurable gate control list in automotive TSN switch for ADAS","author":"Wei","year":"2025","journal-title":"IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."},{"issue":"1","key":"10.1016\/j.sysarc.2026.103801_b13","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2133375.2133377","article-title":"Return-oriented programming: Systems, languages, and applications","volume":"15","author":"Roemer","year":"2012","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"10.1016\/j.sysarc.2026.103801_b14","series-title":"linux-malware-detect","author":"MacDonald","year":"2023"},{"key":"10.1016\/j.sysarc.2026.103801_b15","series-title":"2008 5th IEEE Consumer Communications and Networking Conference","first-page":"257","article-title":"Xen on ARM: System virtualization using Xen hypervisor for ARM-based secure mobile phones","author":"Hwang","year":"2008"},{"key":"10.1016\/j.sysarc.2026.103801_b16","series-title":"Efficient Memory Virtualization","author":"Gandhi","year":"2016"},{"key":"10.1016\/j.sysarc.2026.103801_b17","series-title":"AArch64-exception-vector-table","author":"Arm","year":"2023"},{"key":"10.1016\/j.sysarc.2026.103801_b18","doi-asserted-by":"crossref","first-page":"103671","DOI":"10.1016\/j.sysarc.2025.103671","article-title":"Thwarting gradient inversion in federated learning via generative shadow mapping defense","volume":"172","author":"Zhou","year":"2026","journal-title":"J. Syst. Architect."},{"key":"10.1016\/j.sysarc.2026.103801_b19","unstructured":"Sandeep Bhatkar, Daniel C. DuVarney, Ron Sekar, Address obfuscation: An efficient approach to combat a broad range of memory error exploits, in: 12th USENIX Security Symposium (USENIX Security 03), 2003."},{"key":"10.1016\/j.sysarc.2026.103801_b20","doi-asserted-by":"crossref","unstructured":"Thurston H.Y. Dang, Petros Maniatis, David Wagner, The performance cost of shadow stacks and stack canaries, in: Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security, 2015, pp. 555\u2013566.","DOI":"10.1145\/2714576.2714635"},{"key":"10.1016\/j.sysarc.2026.103801_b21","series-title":"2014 IEEE Symposium on Security and Privacy","first-page":"227","article-title":"Hacking blind","author":"Bittau","year":"2014"},{"key":"10.1016\/j.sysarc.2026.103801_b22","series-title":"CVE-2022-1015","author":"Bouman","year":"2022"},{"key":"10.1016\/j.sysarc.2026.103801_b23","series-title":"2020 IEEE Symposium on Security and Privacy","first-page":"563","article-title":"xmp: Selective memory protection for kernel and user space","author":"Proskurin","year":"2020"},{"key":"10.1016\/j.sysarc.2026.103801_b24","series-title":"Phoronix Test Suite","author":"Phoronix Media","year":"2025"},{"key":"10.1016\/j.sysarc.2026.103801_b25","series-title":"Unixbench","author":"Lucas","year":"2025"},{"key":"10.1016\/j.sysarc.2026.103801_b26","series-title":"Cryptographically enforced control flow integrity","author":"Mashtizadeh","year":"2014"},{"key":"10.1016\/j.sysarc.2026.103801_b27","doi-asserted-by":"crossref","unstructured":"Mingwei Zhang, R. Sekar, Control flow and code integrity for COTS binaries: An effective defense against real-world ROP attacks, in: Proceedings of the 31st Annual Computer Security Applications Conference, 2015, pp. 91\u2013100.","DOI":"10.1145\/2818000.2818016"},{"key":"10.1016\/j.sysarc.2026.103801_b28","series-title":"Proceedings of 2016 IEEE European Symposium on Security and Privacy (EuroS&P)","first-page":"179","article-title":"Fine-grained control-flow integrity for kernel software","author":"Ge","year":"2016"},{"key":"10.1016\/j.sysarc.2026.103801_b29","doi-asserted-by":"crossref","unstructured":"Hong Hu, Chenxiong Qian, Carter Yagemann, Simon Pak Ho Chung, William R. Harris, Taesoo Kim, Wenke Lee, Enforcing unique code target property for control-flow integrity, in: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018, pp. 1470\u20131486.","DOI":"10.1145\/3243734.3243797"},{"key":"10.1016\/j.sysarc.2026.103801_b30","doi-asserted-by":"crossref","DOI":"10.1016\/j.infsof.2021.106572","article-title":"BCI-CFI: A context-sensitive control-flow integrity method based on branch correlation integrity","volume":"136","author":"Wang","year":"2021","journal-title":"Inf. Softw. Technol."},{"key":"10.1016\/j.sysarc.2026.103801_b31","doi-asserted-by":"crossref","unstructured":"Monirul I. Sharif, Wenke Lee, Weidong Cui, Andrea Lanzi, Secure in-vm monitoring using hardware virtualization, in: Proceedings of the 16th ACM Conference on Computer and Communications Security, 2009, pp. 477\u2013487.","DOI":"10.1145\/1653662.1653720"},{"issue":"1","key":"10.1016\/j.sysarc.2026.103801_b32","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1145\/2654822.2541986","article-title":"Virtual ghost: Protecting applications from hostile operating systems","volume":"42","author":"Criswell","year":"2014","journal-title":"ACM SIGARCH Comput. Archit. News"},{"key":"10.1016\/j.sysarc.2026.103801_b33","series-title":"Proceedings of Research in Attacks, Intrusions, and Defenses: 21st International Symposium, RAID 2018, Heraklion, Crete, Greece, September 10-12, 2018, Proceedings 21","first-page":"670","article-title":"ShadowMonitor: An effective in-VM monitoring framework with hardware-enforced isolation","author":"Shi","year":"2018"},{"key":"10.1016\/j.sysarc.2026.103801_b34","series-title":"NDSS","first-page":"21","article-title":"SKEE: A lightweight Secure Kernel-level Execution Environment for ARM","volume":"Vol. 16","author":"Azab","year":"2016"},{"key":"10.1016\/j.sysarc.2026.103801_b35","doi-asserted-by":"crossref","first-page":"130","DOI":"10.1016\/j.cose.2018.01.009","article-title":"Domain isolated kernel: A lightweight sandbox for untrusted kernel extensions","volume":"74","author":"Man\u00e8s","year":"2018","journal-title":"Comput. Secur."},{"key":"10.1016\/j.sysarc.2026.103801_b36","series-title":"Execution of subset of driver code in separate protection domain","author":"Varma","year":"2019"},{"key":"10.1016\/j.sysarc.2026.103801_b37","doi-asserted-by":"crossref","unstructured":"John Criswell, Andrew Lenharth, Dinakar Dhurjati, Vikram Adve, Secure virtual architecture: A safe execution environment for commodity operating systems, in: Proceedings of Twenty-First ACM SIGOPS Symposium on Operating Systems Principles, 2007, pp. 351\u2013366.","DOI":"10.1145\/1294261.1294295"},{"issue":"2","key":"10.1016\/j.sysarc.2026.103801_b38","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1698750.1698752","article-title":"Stealthy malware detection and monitoring through VMM-based \u201cout-of-the-box\u201d semantic view reconstruction","volume":"13","author":"Jiang","year":"2010","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"issue":"10","key":"10.1016\/j.sysarc.2026.103801_b39","doi-asserted-by":"crossref","first-page":"2833","DOI":"10.1109\/TC.2015.2389792","article-title":"H-svm: Hardware-assisted secure virtual machines under a vulnerable hypervisor","volume":"64","author":"Jin","year":"2015","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/j.sysarc.2026.103801_b40","unstructured":"Lionel Litty, H. Andr\u00e9s Lagar-Cavilla, David Lie, Hypervisor support for identifying covertly executing binaries, in: Proceedings of USENIX Security Symposium, Vol. 22, 2008, p. 70."},{"key":"10.1016\/j.sysarc.2026.103801_b41","series-title":"Proceedings of 2010 IEEE Symposium on Security and Privacy","first-page":"143","article-title":"TrustVisor: Efficient TCB reduction and attestation","author":"McCune","year":"2010"},{"issue":"9","key":"10.1016\/j.sysarc.2026.103801_b42","first-page":"2205","article-title":"Bluevisor: Time-predictable hardware hypervisor for many-core embedded systems","volume":"71","author":"Jiang","year":"2021","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/j.sysarc.2026.103801_b43","doi-asserted-by":"crossref","DOI":"10.1109\/TC.2025.3584274","article-title":"Hypercall-oriented abnormal VM status detection system: A non-intrusive solution for both hypervisor and guests","author":"Bi","year":"2025","journal-title":"IEEE Trans. Comput."}],"container-title":["Journal of Systems Architecture"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1383762126001190?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1383762126001190?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T11:08:25Z","timestamp":1779880105000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1383762126001190"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":43,"alternative-id":["S1383762126001190"],"URL":"https:\/\/doi.org\/10.1016\/j.sysarc.2026.103801","relation":{},"ISSN":["1383-7621"],"issn-type":[{"value":"1383-7621","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"TrustSpace: Trusted memory space against control hijacking attacks","name":"articletitle","label":"Article Title"},{"value":"Journal of Systems Architecture","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.sysarc.2026.103801","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"103801"}}