{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,4]],"date-time":"2026-02-04T17:50:52Z","timestamp":1770227452044,"version":"3.49.0"},"reference-count":42,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2023,7,1]],"date-time":"2023-07-01T00:00:00Z","timestamp":1688169600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,7,1]],"date-time":"2023-07-01T00:00:00Z","timestamp":1688169600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,7,1]],"date-time":"2023-07-01T00:00:00Z","timestamp":1688169600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2016YFB0801002"],"award-info":[{"award-number":["2016YFB0801002"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,7,1]]},"DOI":"10.1109\/tdsc.2022.3200206","type":"journal-article","created":{"date-parts":[[2022,8,19]],"date-time":"2022-08-19T19:32:56Z","timestamp":1660937576000},"page":"2925-2938","source":"Crossref","is-referenced-by-count":8,"title":["HyperPS: A Virtual-Machine Memory Protection Approach Through Hypervisor's Privilege Separation"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8923-1582","authenticated-orcid":false,"given":"Kunli","family":"Lin","sequence":"first","affiliation":[{"name":"Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenqing","family":"Liu","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2278-0979","authenticated-orcid":false,"given":"Kun","family":"Zhang","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0278-7420","authenticated-orcid":false,"given":"Bibo","family":"Tu","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/224057.224076"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2168836.2168850"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3140607.3050750"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud.2016.40"},{"key":"ref15","article-title":"Cuvillo, ”Using innovative instructions to create trustworthy software solutions,” in hardware and architectural support for security and privacy","author":"hoekstra","year":"0","journal-title":"Proc 2nd Int Workshop Hardware Architectural Support Secur Privacy"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3309697.3331478"},{"key":"ref14","first-page":"1","article-title":"Intel advanced encryption standard (AES) instructions set","volume":"3","author":"gueron","year":"2010","journal-title":"Intel White Paper Rev"},{"key":"ref36","article-title":"Nested virtualization: Shadow turtles","author":"wasserman","year":"2013","journal-title":"KVM Forum"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2248487.2151022"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382200"},{"key":"ref11","article-title":"Nested virtualization: State of the art and future directions","author":"das","year":"2014"},{"key":"ref33","first-page":"347","article-title":"SecPod: A framework for virtualization-based security systems","author":"wang","year":"2015","journal-title":"Proc Usenix Conf Usenix Tech Conf"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382201"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15512-3_9"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046752"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866313"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"ref39","first-page":"246","article-title":"Architecture support for guest-transparent VM protection from untrusted hypervisor and physical attacks","author":"xia","year":"2013","journal-title":"Proc IEEE 19th Int Symp High Perform Comput Architect"},{"key":"ref16","article-title":"AMD memory encryption","author":"kaplan","year":"2016"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/844128.844147"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/224057.224075"},{"key":"ref18","first-page":"511","article-title":"K I-Mon: A hardware-assisted event-triggered monitoring platform for mutable kernel object","author":"lee","year":"2013","journal-title":"Proc USENIX Conf Secur"},{"key":"ref24","author":"ramakesavan","year":"2016"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382202"},{"key":"ref26","article-title":"Preventing and detecting xen hypervisor subversions","author":"rutkowska","year":"2008"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2016.11.001"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2948618.2954331"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043576"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.53"},{"key":"ref22","first-page":"1695","article-title":"(Mostly) exitless {VM} protection from untrusted hypervisor through disaggregated nested virtualization","author":"mi","year":"2020","journal-title":"Proc 29th USENIX Secur Symp"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488368"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23455"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/319151.319163"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1755913.1755935"},{"key":"ref8","first-page":"56","article-title":"ExOShim: Preventing memory disclosure using execute-only kernel code","author":"brookes","year":"2016","journal-title":"Proc 11th Int Conf Cyber Warfare Secur"},{"key":"ref7","first-page":"423","article-title":"The turtles project: Design and implementation of nested virtualization","author":"ben-yehuda","year":"2010","journal-title":"Proc 9th USENIX Conf Oper Syst Des Implementation"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2008.24"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629579"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23009"},{"key":"ref6","first-page":"423","article-title":"The turtles project: Design and implementation of nested virtualization","author":"ben-yehuda","year":"2010","journal-title":"Proc 9th USENIX Symp Oper Syst Des Implementation"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2799647"},{"key":"ref40","article-title":"Direct device assignment for untrusted fully-virtualized virtual machines","author":"yassour","year":"2008"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10177761\/09863665.pdf?arnumber=9863665","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,1]],"date-time":"2023-08-01T18:39:01Z","timestamp":1690915141000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9863665\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,1]]},"references-count":42,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3200206","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,7,1]]}}}