{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T16:10:54Z","timestamp":1783008654873,"version":"3.54.5"},"reference-count":42,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2021,7,1]]},"DOI":"10.1109\/tdsc.2019.2946816","type":"journal-article","created":{"date-parts":[[2019,10,11]],"date-time":"2019-10-11T19:57:01Z","timestamp":1570823821000},"page":"1989-2004","source":"Crossref","is-referenced-by-count":7,"title":["CATTmew: Defeating Software-Only Physical Kernel Isolation"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6277-340X","authenticated-orcid":false,"given":"Yueqiang","family":"Cheng","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3604-5369","authenticated-orcid":false,"given":"Zhi","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3289-6599","authenticated-orcid":false,"given":"Surya","family":"Nepal","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhi","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"213","article-title":"Throwhammer: Rowhammer attacks over the network and defenses","author":"tatar","year":"2018","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref38","doi-asserted-by":"crossref","first-page":"275","DOI":"10.1145\/1272998.1273025","article-title":"Container-based operating system virtualization: a scalable, high-performance alternative to hypervisors","volume":"41","author":"soltesz","year":"2007","journal-title":"ACM SIGOPS Operating Syst Rev"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2016.7495576"},{"key":"ref32","first-page":"565","article-title":"Drama: Exploiting dram addressing for cross-cpu attacks","author":"pessl","year":"2016","journal-title":"Proc Usenix Security Symp"},{"key":"ref31","article-title":"Memory performance attacks: Denial of memory service in multi-core systems","author":"moscibroda","year":"2007","journal-title":"Proc 16th USENIX Security Symp USENIX Security Symp"},{"key":"ref30","article-title":"Cache and memory manager improvements","year":"2017"},{"key":"ref37","article-title":"Pagemap: Do not leak physical addresses to non-privileged userspace","author":"shutemov","year":"2015"},{"key":"ref36","article-title":"Exploiting the dram rowhammer bug to gain kernel privileges","volume":"15","author":"seaborn","year":"0","journal-title":"Black Hat"},{"key":"ref35","first-page":"3","article-title":"Malware guard extension: Using sgx to conceal cache attacks","author":"schwarz","year":"0","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref34","first-page":"1","article-title":"Flip feng shui: Hammering a needle in the software stack","author":"razavi","year":"2016","journal-title":"Proc Usenix Security Symp"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00022"},{"key":"ref40","first-page":"1675","article-title":"Drammer: Deterministic rowhammer attacks on mobile platforms","author":"fratantonio","year":"2016","journal-title":"Proc ACM SIGSAC Conf Comput Commun Security"},{"key":"ref11","article-title":"Disable ion heap type system contig","year":"2016"},{"key":"ref12","article-title":"Glitch vulnerability status","year":"2018"},{"key":"ref13","author":"gorman","year":"2004","journal-title":"Understanding the Linux Virtual Memory Manager"},{"key":"ref14","doi-asserted-by":"crossref","first-page":"161","DOI":"10.1007\/978-3-319-62105-0_11","article-title":"KASLR is dead: Long live KASLR","author":"gruss","year":"2017","journal-title":"Proc Int Symp Eng Secure Softw Syst"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00031"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978356"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-40667-1_15"},{"key":"ref18","article-title":"Program for testing for the dram rowhammer problem using eviction","author":"gruss","year":"2017"},{"key":"ref19","article-title":"Hp moonshot component pack","year":"2015"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043568"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329827"},{"key":"ref27","article-title":"Nethammer: Inducing rowhammer faults through network requests","author":"lipp","year":"2018","journal-title":"arXiv 1805 04956"},{"key":"ref3","first-page":"602","article-title":"Curious case of rowhammer: flipping secret exponent bits using timing analysis","author":"bhattacharya","year":"2016","journal-title":"Proc Cryptogr Hardware Embedded Syst"},{"key":"ref6","article-title":"Can't touch this: Practical and generic software-only defenses against rowhammer attacks","author":"brasser","year":"2016","journal-title":"arXiv 1611 08396"},{"key":"ref29","article-title":"Ddr4 sdram mt40a2g4, mt40a1g8, mt40a512m16 data sheet","year":"2015"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.63"},{"key":"ref8","article-title":"kexec: Add sysctl to disable kexec_load","author":"cook","year":"2014"},{"key":"ref7","first-page":"117","article-title":"Can't touch this: Software-only mitigation against rowhammer attacks targeting kernel memory","author":"brasser","year":"2017","journal-title":"Proc 26th USENIX Conf Security Symp"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2954679.2872390"},{"key":"ref9","article-title":"Intel sgx explained","volume":"2016","author":"costan","year":"2016","journal-title":"IACR Cryptology ePrint Archive"},{"key":"ref1","article-title":"About the security content of mac efi security update 2015–001","year":"2015"},{"key":"ref20","article-title":"Intel 64 and IA-32 architectures optimization reference manual","year":"2014"},{"key":"ref22","article-title":"Mascat: Stopping microarchitectural attacks before execution","volume":"2016","author":"irazoqui","year":"2016","journal-title":"IACR Cryptology ePrint Archive"},{"key":"ref21","article-title":"The role of ecc memory","year":"2015"},{"key":"ref42","first-page":"19","article-title":"One bit flips, one cloud flops: Cross-vm row hammer attacks and privilege escalation","author":"xiao","year":"2016","journal-title":"Proc Usenix Security Symp"},{"key":"ref24","doi-asserted-by":"crossref","first-page":"361","DOI":"10.1145\/2678373.2665726","article-title":"Flipping bits in memory without accessing them: An experimental study of dram disturbance errors","volume":"42","author":"kim","year":"2014","journal-title":"Proc ACM SIGARCH Comput Architecture News"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_5"},{"key":"ref23","article-title":"Low power double data rate 4 (lpddr4)","year":"2015"},{"key":"ref26","article-title":"Video for linux api","year":"2016"},{"key":"ref25","article-title":"Row hammer privilege escalation lenovo security advisory: Len-2015–009","year":"2015"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/9478312\/08865632.pdf?arnumber=8865632","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,2,2]],"date-time":"2022-02-02T20:15:28Z","timestamp":1643832928000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8865632\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,1]]},"references-count":42,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2019.2946816","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,7,1]]}}}