{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T20:14:57Z","timestamp":1792786497148,"version":"4.5.0"},"reference-count":63,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Secure Platform for ICT Systems Rooted at the Silicon Manufacturing Process (SPIRS) Project through European Union\u2019s Horizon 2020 Research and Innovation Program","award":["952622"],"award-info":[{"award-number":["952622"]}]},{"name":"Project Security and Rights in CyberSpace (SERICS) through the National Recovery and Resilience Plan (NRRP) Italian Ministry of University and Research (MUR) Program"},{"name":"European Union\u2014NextGenerationEU","award":["PE00000014"],"award-info":[{"award-number":["PE00000014"]}],"id":[{"id":"https:\/\/ror.org\/019w4f821","id-type":"ROR","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2026.3737900","type":"journal-article","created":{"date-parts":[[2026,9,28]],"date-time":"2026-09-28T19:09:14Z","timestamp":1790622554000},"page":"149964-149982","source":"Crossref","is-referenced-by-count":0,"title":["TNED: Trusted Network Environment for Devices"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-6668-8022","authenticated-orcid":false,"given":"Flavio","family":"Ciravegna","sequence":"first","affiliation":[{"name":"Politecnico di Torino","place":["Turin, Italy"],"department":["Dipartimento di Automatica e Informatica"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-6975-4235","authenticated-orcid":false,"given":"Giacomo","family":"Bruno","sequence":"additional","affiliation":[{"name":"Politecnico di Torino","place":["Turin, Italy"],"department":["Dipartimento di Automatica e Informatica"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-6701-3150","authenticated-orcid":false,"given":"Mattin Antartiko Elorza","family":"Forcada","sequence":"additional","affiliation":[{"name":"Telef\u00f3nica Innovaci\u00f3n Digital","place":["Madrid, Spain"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2849-9782","authenticated-orcid":false,"given":"Antonio","family":"Pastor","sequence":"additional","affiliation":[{"name":"Telef\u00f3nica Innovaci\u00f3n Digital","place":["Madrid, Spain"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5669-9338","authenticated-orcid":false,"given":"Antonio","family":"Lioy","sequence":"additional","affiliation":[{"name":"Politecnico di Torino","place":["Turin, Italy"],"department":["Dipartimento di Automatica e Informatica"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1","article-title":"IKE-less IPsec: Enhancing security for IoT device networks","volume-title":"Proc. Italian Conf. Cyber Secur. (ITASEC)","author":"Ciravegna"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.23919\/ifipnetworking62109.2024.10619852"},{"key":"ref3","volume-title":"Security Architecture for the Internet Protocol","author":"Seo","year":"2005"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7296"},{"key":"ref5","volume-title":"Introduction to Trusted Execution Environments","year":"2018"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3600160.3600169"},{"key":"ref7","volume-title":"A Technical Analysis of Confidential Computing v1.3","year":"2022"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3634737.3644993"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1049\/cmu2.12759"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3387532"},{"key":"ref11","volume-title":"The RISC-V Instruction Set Manual, Volume II: Privileged Architecture (Document Version 20211203)","author":"Waterman","year":"2024"},{"key":"ref12","volume-title":"Enarx","year":"2026"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104254"},{"key":"ref14","first-page":"753","article-title":"SENG, the SGX-Enforcing network gateway: Authorizing communication from shielded clients","volume-title":"Proc. 29th USENIX Security Symp. (USENIX Secur.)","author":"Schwarz"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2876019.2876032"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.3390\/fi13010012"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/nfv-sdn47374.2019.9039980"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/dsn.2018.00048"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3545948.3545961"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3711650.3711651"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/netsoft.2015.7116186"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2022.103665"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3040992.3040994"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-59608-2_6"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560584"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3185467.3185469"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3339814"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/csci49370.2019.00267"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3322568"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/access.2022.3176385"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2025.104257"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.3390\/app16031476"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3623652.3623670"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3627703.3650071"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3620678.3624786"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3676641.3716277"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3701100.3701161"},{"key":"ref38","first-page":"203","article-title":"NetBricks: Taking the V out of NFV","volume-title":"Proc. 12th USENIX Symp. Operating Syst. Design Implement. (OSDI)","author":"Panda"},{"key":"ref39","first-page":"201","article-title":"SafeBricks: Shielding network functions in the cloud","volume-title":"Proc. 15th USENIX Symp. Networked Syst. Design Implement. (NSDI)","author":"Poddar"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3447786.3456255"},{"key":"ref41","article-title":"Bridge the future: High-performance networks in confidential VMs without trusted I\/O devices","author":"Li","year":"2024","journal-title":"arXiv:2403.03360v1"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/netsoft64993.2025.11080555"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/icnp.2016.7785316"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-64701-2_39"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2019.103357"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2023.109905"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2024.110720"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/jproc.2014.2371999"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2015.2477041"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/cloudcom59040.2023.00027"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.07.013"},{"key":"ref52","volume-title":"Open Source MANO","year":"2026"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8192"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9061"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6241"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6020"},{"key":"ref57","volume-title":"Device Identifier Composition Engine (DICE) Architecture","year":"2026"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/access.2025.3596829"},{"key":"ref59","volume-title":"PFKEY Key Management API, Version 2","author":"Metz","year":"1998"},{"key":"ref60","volume-title":"Netopeer2 Github Repository (v2.1.49)","year":"2026"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.3390\/iot7020048"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-025-09983-4"},{"key":"ref63","volume-title":"strongSwan","year":"2026"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11713442.pdf?arnumber=11713442","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T19:10:32Z","timestamp":1791227432000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11713442\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":63,"URL":"https:\/\/doi.org\/10.1109\/access.2026.3737900","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}