{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,16]],"date-time":"2026-10-16T05:43:52Z","timestamp":1792129432710,"version":"4.4.0"},"reference-count":95,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000780","name":"European Union","doi-asserted-by":"publisher","award":["101141972"],"award-info":[{"award-number":["101141972"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100010663","name":"ERC","doi-asserted-by":"publisher","award":["101115046"],"award-info":[{"award-number":["101115046"]}],"id":[{"id":"10.13039\/100010663","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003246","name":"NWO","doi-asserted-by":"publisher","award":["024.006.037"],"award-info":[{"award-number":["024.006.037"]}],"id":[{"id":"10.13039\/501100003246","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100004723","name":"NWA","doi-asserted-by":"publisher","award":["1215.18.006"],"award-info":[{"award-number":["1215.18.006"]}],"id":[{"id":"10.13039\/100004723","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00085","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"3377-3395","source":"Crossref","is-referenced-by-count":0,"title":["QuickSafe: Targeted Hardening Against Memory Corruption"],"prefix":"10.1109","author":[{"given":"Johannes","family":"Blaser","sequence":"first","affiliation":[{"name":"Vrije Universiteit Amsterdam"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Floris","family":"Gorter","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Klaus v.","family":"Gleissenthall","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Herbert","family":"Bos","sequence":"additional","affiliation":[{"name":"Vrije Universiteit Amsterdam"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Memory Unsafety in Apple\u2019s Operating Systems","volume-title":"Blogpost. Langui.sh","author":"Kehrer","year":"2019"},{"key":"ref2","article-title":"Memory safety","volume-title":"Blogpost. Google - The Chromium Projects","year":"2020"},{"key":"ref3","article-title":"A proactive approach to more secure code","volume-title":"Blogpost. Microsoft - Security Research & Defense","author":"Thomas","year":"2019"},{"key":"ref4","article-title":"We need a safer systems programming language","volume-title":"Blogpost. Microsoft - Security Research & Defense","author":"Levick","year":"2019"},{"key":"ref5","article-title":"Implications of Rewriting a Browser Component in Rust","volume-title":"Blogpost. Mozilla Hacks","author":"Hosfelt","year":"2019"},{"key":"ref6","article-title":"Queue the Hardening Enhancements","volume-title":"Blogpost. Google - Security Blog","author":"Van Der Stoep","year":"2019"},{"key":"ref7","article-title":"The More You Know, The More You Know You Don\u2019t Know","volume-title":"Blogpost. Google - Project Zero","author":"Stone","year":"2022"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2011.5764689"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1273442.1250746"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2259016.2259034"},{"key":"ref11","first-page":"805","article-title":"FloatZone: Accelerating Memory Error Detection using the Floating Point Unit","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Gorter","year":"2023"},{"key":"ref12","article-title":"RangeSanitizer: Detecting Memory Errors with Efficient Range Checks","author":"Gorter","year":"2025","journal-title":"USENIX Security"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3475960.3475985"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00010"},{"key":"ref15","volume-title":"Address Sanitizer local root","author":"Nagy","year":"2016"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3190508.3190553"},{"key":"ref17","first-page":"535","article-title":"TAILCHECK: A Lightweight Heap Overflow Detection Mechanism with Page Protection and Tagged Pointers","volume-title":"17th USENIX Symposium on Operating Systems Design and Implementation (OSDI 23)","author":"Gopal","year":"2023"},{"key":"ref18","first-page":"7177","article-title":"ShadowBound: Efficient Heap Memory Protection Through Advanced Metadata Management and Customized Compiler Optimization","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Yu","year":"2024"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560625"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690310"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00263"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560598"},{"key":"ref23","article-title":"Complete spatial safety for C and C++ using CHERI capabilities","volume-title":"University of Cambridge, Tech. Rep.","author":"Richardson","year":"2020"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2015.58"},{"key":"ref25","first-page":"249","article-title":"Simple testing can prevent most critical failures: An analysis of production failures in distributed DataIntensive systems","volume-title":"11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14)","author":"Yuan","year":"2014"},{"key":"ref26","volume-title":"Cold Paths","author":"Kellogg","year":"2021"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-025-09709-4"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-019-09742-5"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2837614.2837617"},{"key":"ref30","article-title":"Automated software vulnerability patching using large language models","author":"Nong","year":"2024","journal-title":"arXiv"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240298"},{"key":"ref32","volume-title":"Memory Tagging Extension","year":"2021"},{"key":"ref33","volume-title":"Electric Fence","author":"Perens","year":"1987"},{"key":"ref34","year":"2021","journal-title":"Intel\u00ae architecture memory encryption technologies"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP60621.2024.00024"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3639477.3640328"},{"key":"ref37","volume-title":"Kernel Electric-Fence (KFENCE)","year":"2021"},{"key":"ref38","article-title":"ARVO: Atlas of Reproducible Vulnerabilities for Open Source Software","author":"Mei","year":"2024","journal-title":"arXiv preprint"},{"key":"ref39","volume-title":"Phoronix Test Suite. Version 10.8.4.","author":"Larabel","year":"2024"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1186736.1186737"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3185768.3185771"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2012.345"},{"key":"ref43","volume-title":"GFlags and PageHeap","year":"2022"},{"key":"ref44","first-page":"815","article-title":"Oscar: A Practical Page-Permissions-Based Scheme for Thwarting Dangling Pointers","volume-title":"USENIX Security Symposium","author":"Dang","year":"2017"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2006.31"},{"key":"ref46","year":"2015","journal-title":"Arm Cortex-A Series: Programmer\u2019s Guide for ARMv8-A"},{"key":"ref47","volume-title":"Arm Memory Tagging Extension (MTE)","author":"Developers","year":"2025"},{"key":"ref48","volume-title":"Memory Integrity Enforcement: A complete vision for memory safety in Apple devices","author":"Engineering","year":"2025"},{"key":"ref49","year":"2020","journal-title":"Intel Architecture Instruction Set Extensions and Future Features"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00038"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23312"},{"key":"ref52","article-title":"AddressSanitizer: A Fast Address Sanity Checker","author":"Serebryany","year":"2012","journal-title":"USENIX ATC"},{"key":"ref53","volume-title":"is_kfence_address","year":"2021"},{"key":"ref54","volume-title":"MemTagSanitizer","year":"2020"},{"key":"ref55","volume-title":"Using the New Pass Manager","year":"2025"},{"key":"ref56","volume-title":"The New Pass Manager","year":"2021"},{"key":"ref57","volume-title":"OSS-Fuzz","year":"2021"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3591257"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560575"},{"key":"ref60","volume-title":"AFL crash exploration mode","year":"2024"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542504"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3224423"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/1755688.1755707"},{"key":"ref64","article-title":"Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense against Out-of-Bounds Errors","volume-title":"USENIX Security Symposium","author":"Akritidis","year":"2009"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23287"},{"key":"ref66","first-page":"1037","article-title":"PTAuth: temporal memory safety via robust points-to authentication","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Farkhani","year":"2021"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507780"},{"key":"ref68","article-title":"Preventing Use-After-Free Attacks with Fast Forward Allocation","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Wickman","year":"2021"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00058"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/1806651.1806657"},{"key":"ref71","article-title":"Everything you want to know about pointer-based checking","author":"Nagarakatte","year":"2015","journal-title":"1st Summit on Advances in Programming Languages (SNAPL)"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196540"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304017"},{"key":"ref74","volume-title":"raw_ptr<T> (aka. MiraclePtr, aka. BackupRefPtr, aka. BRP)","year":"2022"},{"key":"ref75","volume-title":"Retrofitting spatial safety to hundreds of millions of lines of C++","year":"2024"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev.2018.00015"},{"key":"ref77","volume-title":"-fbounds-safety: Enforcing bounds safety for C","year":"2023"},{"key":"ref78","author":"Serebryany","year":"2018","journal-title":"Memory Tagging and how it improves C\/C++ memory safety"},{"key":"ref79","first-page":"841","article-title":"MTSan: A Feasible and Practical Memory Sanitizer for Fuzzing COTS Binaries","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Chen","year":"2023"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP60621.2024.00024"},{"key":"ref81","volume-title":"Retrofitting Temporal Memory Safety on C++","year":"2022"},{"key":"ref82","article-title":"Color My World: Deterministic Tagging for Memory Safety","author":"Liljestrand","year":"2022","journal-title":"arXiv preprint"},{"key":"ref83","volume-title":"The Kernel Address Sanitizer (KASAN)","year":"2025"},{"key":"ref84","volume-title":"38.7 Memory Related Tunables","year":"2025"},{"key":"ref85","volume-title":"scudo: Add initial memory tagging support","year":"2019"},{"key":"ref86","volume-title":"feat: basic MTE support for the partition allocator","author":"Townsend","year":"2021"},{"key":"ref87","first-page":"4193","article-title":"PET: Prevent discovered errors from being triggered in the linux kernel","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Wang","year":"2023"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/2892208.2892235"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23124"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.43"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2019.23052"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24582"},{"key":"ref93","first-page":"3649","article-title":"An investigation of the android kernel patch ecosystem","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Zhang","year":"2021"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464821"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2012.6227176"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573632.pdf?arnumber=11573632","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,16]],"date-time":"2026-10-16T04:47:31Z","timestamp":1792126051000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573632\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":95,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00085","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}