{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,22]],"date-time":"2026-09-22T07:49:16Z","timestamp":1790063356763,"version":"4.0.1"},"reference-count":61,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00148","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"2076-2095","source":"Crossref","is-referenced-by-count":2,"title":["It's a Feature, Not a Bug: Secure and Auditable State Rollback for Confidential Cloud Applications"],"prefix":"10.1109","author":[{"given":"Quinn","family":"Burke","sequence":"first","affiliation":[{"name":"University of Wisconsin-Madison,Intel Labs"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anjo","family":"Vahldiek-Oberwagner","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison,Intel Labs"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael","family":"Swift","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison,Intel Labs"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"McDaniel","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison,Intel Labs"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"645","article-title":"Graphene-SGX: A practical library OS for unmodified applications on SGX","volume-title":"2017 USENIX Annual Technical Conference (USENIX ATC 17)","author":"Tsai"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3590140.3629124"},{"key":"ref3","first-page":"1401","article-title":"Practical \\{Data-Only\\} attack generation","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Johannesmeyer"},{"key":"ref4","article-title":"Data-only attacks are easier than you think","author":"Hoven","year":"2019","journal-title":"login; USENIX"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.38"},{"key":"ref6","first-page":"193","article-title":"Nimble: Rollback protection for confidential cloud services","volume-title":"17th USENIX Symposium on Operating Systems Design and Implementation (OSDI 23)","author":"Angel"},{"key":"ref7","first-page":"1289","article-title":"\\{ROTE\\}: Rollback protection for trusted execution","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Matetic"},{"key":"ref8","first-page":"875","article-title":"Ariadne: A minimal approach to state continuity","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Strackx"},{"issue":"1","key":"ref9","first-page":"464","article-title":"Devops project management: Aligning development and operations teams","volume":"1","author":"Alluri","year":"2020","journal-title":"Journal of Science & Technology"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME52107.2021.00048"},{"key":"ref11","article-title":"Foundational devops patterns","author":"Marques","year":"2023","journal-title":"arXiv preprint"},{"key":"ref12","article-title":"Ccxtrust: Confidential computing platform based on tee and tpm collaborative trust","author":"Shang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref13","year":"2025","journal-title":"Monotonic counter objects in thales protectserver hsm"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00053"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/UCC63386.2024.00040"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-9615-8_34"},{"key":"ref17","article-title":"End-to-end data integrity for file systems: A ZFS case study","volume-title":"8th USENIX Conference on File and Storage Technologies (FAST 10)","author":"Zhang"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1150019.1136511"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.15"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME46990.2020.00027"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2016.114"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45439-X_26"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2213836.2213945"},{"key":"ref24","volume-title":"Cassandra: the definitive guide","author":"Hewitt","year":"2010"},{"key":"ref25","first-page":"173","article-title":"SPEICHER: Securing LSM-based Key-Value stores using shielded execution","volume-title":"17th USENIX Conference on File and Storage Technologies (FAST 19)","author":"Bailleu"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560620"},{"key":"ref27","author":"Dev","year":"2025","journal-title":"Tessera. Transparency Dev"},{"key":"ref28","article-title":"Verifiable data structures","author":"Eijdenberg","year":"2015","journal-title":"Google Research, Tech. Rep"},{"key":"ref29","article-title":"Microservices: yesterday, today, and tomorrow","volume":"abs\/1606.04036","author":"Dragoni","year":"2016","journal-title":"CoRR"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICSA.2018.00013"},{"key":"ref31","first-page":"1393","article-title":"in-toto: Providing farm-to-table guarantees for bits and bytes","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Torres-Arias"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/MASCOTS59514.2023.10387607"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560596"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00196"},{"key":"ref35","first-page":"218","article-title":"A certified digital signature","volume-title":"Conference on the Theory and Application of Cryptology","author":"Merkle"},{"key":"ref36","article-title":"Veritasdb: High throughput keyvalue store with integrity","author":"Sinha","year":"2018","journal-title":"Cryptology ePrint Archive"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3448016.3457312"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-39658-1_2"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2699909"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/49.839932"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2578855.2535851"},{"key":"ref42","doi-asserted-by":"crossref","DOI":"10.1145\/2487726.2488368","article-title":"Innovative instructions and software model for isolated execution","volume-title":"Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy - HASP \u201913","author":"McKeen"},{"key":"ref43","article-title":"Amd sev-snp in amazon ec2","year":"2024","journal-title":"A. W. Services"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2799647"},{"key":"ref45","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1109\/Trustcom.2015.357","article-title":"Trusted Execution Environment: What It is, and What It is Not","volume-title":"2015 IEEE Trustcom\/BigDataSE\/ISPA","author":"Sabt","year":"2015"},{"key":"ref46","first-page":"445451","article-title":"TrustZone Explained: Architectural Features and Use Cases","volume-title":"2016 IEEE 2nd International Conference on Collaboration and Internet Computing (CIC)","author":"Ngabonziza"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00031"},{"key":"ref48","first-page":"86","article-title":"Intel sgx explained","volume":"2016","author":"Costan","year":"2016","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2019599.2019602"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2016.02.027"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24065"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833745"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179405"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24270"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243776"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.10.005"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102282"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.45"},{"key":"ref59","first-page":"19","author":"Torvalds","year":"2010","journal-title":"Git: Fast version control system"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/356725.356730"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6962"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573496.pdf?arnumber=11573496","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:36:49Z","timestamp":1782970609000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573496\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":61,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00148","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}