{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T04:06:34Z","timestamp":1778904394803,"version":"3.51.4"},"reference-count":79,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2023YFB4503702"],"award-info":[{"award-number":["2023YFB4503702"]}]},{"DOI":"10.13039\/501100001809","name":"NSFC","doi-asserted-by":"crossref","award":["62372287"],"award-info":[{"award-number":["62372287"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1109\/tdsc.2026.3657770","type":"journal-article","created":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T21:01:44Z","timestamp":1769634104000},"page":"5814-5830","source":"Crossref","is-referenced-by-count":0,"title":["Enabling Confidential VMs Across Diverse ARM Platforms by Retrofitting TrustZone"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-6275-7139","authenticated-orcid":false,"given":"Yicong","family":"Wang","sequence":"first","affiliation":[{"name":"Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8395-1319","authenticated-orcid":false,"given":"Zeyu","family":"Mi","sequence":"additional","affiliation":[{"name":"Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9720-0361","authenticated-orcid":false,"given":"Haibo","family":"Chen","sequence":"additional","affiliation":[{"name":"Institute of Parallel and Distributed Systems, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3477132.3483554"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/hpca.2013.6522323"},{"key":"ref3","first-page":"1065","article-title":"CPC: Flexible, secure, and efficient CVM maintenance with confidential procedure calls","volume-title":"Proc. USENIX Annu. Tech. Conf.","author":"Chen"},{"key":"ref4","first-page":"1","article-title":"Bifrost: Analysis and optimization of network $\\lbrace${I\/O$\\rbrace$} tax in confidential virtual machines","volume-title":"Proc. USENIX Annu. Tech. Conf.","author":"Li","year":"2023"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3669940.3707224"},{"key":"ref6","article-title":"AMD SEV-SNP for amazon EC2 instances","year":"2025"},{"key":"ref7","article-title":"Google cloud confidential virtual machines","year":"2025"},{"key":"ref8","article-title":"Microsoft becomes the first major cloud provider to offer confidential virtual machines","year":"2025"},{"key":"ref9","article-title":"AMD secure encrypted virtualization (sev)","year":"2025"},{"key":"ref10","article-title":"AMD SEV-SNP: Strengthening VM isolation with itegrity protection and more","year":"2025"},{"key":"ref11","article-title":"Intel trust domain extensions (intel tdx)","year":"2025"},{"key":"ref12","article-title":"Intel trust domain cpu architectural extensions","year":"2025"},{"key":"ref13","article-title":"AWS graviton processor","year":"2025"},{"key":"ref14","article-title":"Huawei cloud elastic cloud server","year":"2025"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid.2012.84"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40517-4_16"},{"key":"ref17","first-page":"132","article-title":"Energy efficiency vs. performance of the numerical solution of PDEs: An application study on a low-power ARM-based cluster","volume-title":"J. Comput. Phys.","volume":"237","author":"G\u00f6ddeke","year":"2013"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3324989.3325722"},{"key":"ref19","article-title":"Arm confidential compute architecture","year":"2025"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW67616.2025.00056"},{"key":"ref21","article-title":"Azure confidential VM options","year":"2025"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3291047"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043576"},{"key":"ref24","first-page":"1695","article-title":"(mostly) exitless VM protection from untrusted hypervisor through disaggregated nested virtualization","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Mi","year":"2020"},{"key":"ref25","first-page":"269","article-title":"LXDs: Towards isolation of kernel subsystems","volume-title":"Proc. USENIX Annu. Tech. Conf.","author":"Narayanan","year":"2019"},{"key":"ref26","article-title":"Trust issues: Exploiting trustzone tees","year":"2025"},{"key":"ref27","first-page":"1257","article-title":"Exploiting unprotected I\/O operations in AMD\u2019s secure encrypted virtualization","volume-title":"Proc. 28th USENIX Conf. Secur. Symp.","author":"Li","year":"2019"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00061"},{"key":"ref29","article-title":"KVM: Kernel-based virtual machine","year":"2025"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2541940.2541946"},{"key":"ref31","first-page":"221","article-title":"Optimizing the design and implementation of the linux ARM hypervisor","volume-title":"Proc. USENIX Annu. Tech. Conf.","author":"Dall","year":"2017"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/361011.361073"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/2694344.2694386"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23455"},{"key":"ref35","first-page":"541","article-title":"vTZ: Virtualizing ARM trustzone","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Hua","year":"2017"},{"key":"ref36","article-title":"ARM corelink TZC-400 trustzone address space controller technical reference manual","year":"2025"},{"key":"ref37","article-title":"Learn the architecture: Aarch64 virtualization","year":"2025"},{"key":"ref38","article-title":"Arm CCA hardware architecture","year":"2025"},{"key":"ref39","article-title":"Arm CCA hardware architecture","year":"2025"},{"key":"ref40","article-title":"Neoverse V3","year":"2025"},{"key":"ref41","article-title":"Let\u2019s encrypt stats","year":"2025"},{"key":"ref42","article-title":"MarketsandMarkets: Encryption software market, global forecast to 2025","year":"2025"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2017.10"},{"key":"ref44","article-title":"AWS nitro enclaves","year":"2025"},{"key":"ref45","first-page":"189","article-title":"STEALTHMEM: System-level protection against cache-based side channel attacks in the cloud","volume-title":"Proc. 21st USENIX Secur. Symp.","author":"Kim","year":"2012"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/DSNW.2011.5958812"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2846742"},{"key":"ref48","article-title":"Arm architecture reference manual ARMv8, for ARMv8-a architecture profile","year":"2025"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132782"},{"key":"ref50","first-page":"841","article-title":"FTPM: A software-only implementation of a TPM chip","volume-title":"Proc. 25th USENIX Conf. Secur. Symp.","author":"Raj","year":"2016"},{"key":"ref51","article-title":"TPM main specification version 1.2, level 2 revision 116, 1 march 2011, trusted computing group","year":"2025"},{"key":"ref52","first-page":"423","article-title":"The turtles project: Design and implementation of nested virtualization","volume-title":"Proc. 9th USENIX Conf. Operating Syst. Des. Implementation","author":"Ben-Yehuda","year":"2010"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132754"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/1165389.945462"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378507"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3302424.3303946"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.24"},{"key":"ref58","article-title":"A deep dive into CMA","year":"2025"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23009"},{"key":"ref60","article-title":"Arm fixed virtual platforms","year":"2025"},{"key":"ref61","first-page":"1037","article-title":"PTauth: Temporal memory safety via robust points-to authentication","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Farkhani","year":"2021"},{"key":"ref62","article-title":"CLOC: Count lines of code","year":"2025"},{"key":"ref63","first-page":"3953","article-title":"Formally verified memory protection for a commodity multiprocessor hypervisor","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Li","year":"2021"},{"key":"ref64","first-page":"653","article-title":"Certikos: An extensible architecture for building certified concurrent OS kernels","volume-title":"Proc. 12th USENIX Symp. Operating Syst. Des. Implementation","author":"Gu"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"ref66","article-title":"Arm system memory management unit architecture specification, smmu architecture version 3","year":"2025"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3173175"},{"key":"ref68","article-title":"Syzkaller - kernel fuzzer","year":"2025"},{"key":"ref69","article-title":"Stress-ng: Stress testing a computer system in various selectable ways","year":"2025"},{"key":"ref70","first-page":"1557","article-title":"Protecting cloud virtual machines from hypervisor and host operating system exploits","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Li","year":"2019"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3313808.3313810"},{"key":"ref72","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2019.23448","article-title":"SANCTUARY: Arming trustzone with user-space enclaves","volume-title":"Proc. 26th Annu. Netw. Distrib. Syst. Secur. Symp.","author":"Brasser","year":"2019"},{"key":"ref73","first-page":"4","article-title":"Ltzvisor: Trustzone is the key","volume-title":"Proc. 29th Euromicro Conf. Real-Time Syst.","author":"Pinto","year":"2017"},{"key":"ref74","article-title":"Hafnium architecture","year":"2025"},{"key":"ref75","article-title":"Virtualization for the masses: Exposing KVM on android","volume-title":"Proc. KVM Forum","author":"Deacon","year":"2020"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240449"},{"key":"ref77","first-page":"465","article-title":"Design and verification of the arm confidential compute architecture","volume-title":"Proc. 16th USENIX Symp. Operat. Syst. Design Implement.","author":"Li","year":"2022"},{"key":"ref78","article-title":"CAGE: Complementing arm CCA with GPU extensions","volume-title":"Proc. Netw. Distrib. Syst. Secur. Symp.","author":"Wang","year":"2024"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00061"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11517592\/11363921.pdf?arnumber=11363921","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T03:07:33Z","timestamp":1778900853000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11363921\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":79,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3657770","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5]]}}}