{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,8]],"date-time":"2026-06-08T18:02:37Z","timestamp":1780941757589,"version":"3.54.1"},"reference-count":60,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272028"],"award-info":[{"award-number":["62272028"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Sci. Eng."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tnse.2025.3584986","type":"journal-article","created":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T13:41:32Z","timestamp":1751377292000},"page":"552-567","source":"Crossref","is-referenced-by-count":1,"title":["Towards Verifiable Trust Proof for Trusted Confidential Virtual Machines"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-5171-0578","authenticated-orcid":false,"given":"Jingkai","family":"Mao","sequence":"first","affiliation":[{"name":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, and School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2975-8857","authenticated-orcid":false,"given":"Xiaolin","family":"Chang","sequence":"additional","affiliation":[{"name":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, and School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5232-6502","authenticated-orcid":false,"given":"Lin","family":"Li","sequence":"additional","affiliation":[{"name":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, and School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5630-9910","authenticated-orcid":false,"given":"Haoran","family":"Zhu","sequence":"additional","affiliation":[{"name":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, and School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0617-8101","authenticated-orcid":false,"given":"Junchao","family":"Fan","sequence":"additional","affiliation":[{"name":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, and School of Cyberspace Science and Technology, Beijing Jiaotong University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"AMD memory encryption","author":"Kaplan","year":"2021"},{"key":"ref2","article-title":"Google Cloud launches Confidential VMs","author":"Lardinois","year":"2020"},{"key":"ref3","article-title":"Azure confidential computing","year":"2024"},{"key":"ref4","article-title":"How to launch a linux virtual machine on the cloud  Amazon Web Services","year":"2024"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043572"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SPW53761.2021.00063"},{"key":"ref7","article-title":"TCG specification architecture overview","author":"Group","year":"2007"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.32"},{"key":"ref9","first-page":"1","article-title":"UEFI secure boot in modern computer security solutions","volume-title":"UEFI Forum","author":"Wilkins","year":"2013"},{"key":"ref10","article-title":"Protecting VM register State with SEV-ES, AMD","author":"Kaplan","year":"2017"},{"key":"ref11","article-title":"AMD SEV-SNP: Strengthening VM isolation with integrity protection and more","author":"Kaplan","year":"2021"},{"key":"ref12","article-title":"Learn the architecture - introducing arm confidential compute architecture","year":"2024"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3652597"},{"key":"ref14","article-title":"virtCCA: Virtualized arm confidential compute architecture with TrustZone","author":"Xu","year":"2023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3477132.3483554"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3346501"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3087421"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-16092-9_7"},{"key":"ref19","article-title":"AMD SEV-SNP attestation: Establishing trust in guests","author":"Powell","year":"2022"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3590140.3629124"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3615366.3615419"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.5753\/jisa.2024.3905"},{"key":"ref23","article-title":"Securing Linux VM boot with AMD SEV measurement","volume-title":"KVM Forum","author":"Murik","year":"2021"},{"key":"ref24","first-page":"305","article-title":"vTPM: Virtualizing the trusted Platform module","volume-title":"Proc. USENIX Secur. Symp.","author":"Berger"},{"key":"ref25","article-title":"Trusted platform module (TPM) summary","year":"2007"},{"key":"ref26","article-title":"Trusted platform module (TPM) summary","year":"2007"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SECURWARE.2008.23"},{"key":"ref28","article-title":"Confidential computing overview","volume-title":"Google Cloud","author":"Cloud","year":"2024"},{"key":"ref29","article-title":"Virtual TPMs in Azure confidential VMs","year":"2023"},{"key":"ref30","article-title":"NitroTPM","year":"2024"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3627106.3627112"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3564625.3564648"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2023.3243891"},{"key":"ref34","article-title":"Amd Sev Api specification","year":"2020"},{"key":"ref35","first-page":"1257","article-title":"Exploiting unprotected IO operations in AMD\u2019s Secure encrypted virtualization","volume-title":"Proc. 28th USENIX Secur. Symp. (USENIX Secur. 19)","author":"Li"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3193111.3193112"},{"key":"ref37","first-page":"3459","article-title":"Heckler: Breaking confidential VMs with malicious interrupts","volume-title":"Proc. USENIX Secur. Symp. (USENIX Security)","author":"Schlter","year":"2024"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00262"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833768"},{"key":"ref40","first-page":"717","article-title":"CIPHERLEAKS: Breaking constant-time cryptography on AMD SEV via the Ciphertext Side Channel","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Li"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-35504-2_3"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3620665.3640378"},{"key":"ref43","article-title":"AMD SEV-TIO: Trusted IO for Secure encrypted virtualization","year":"2023"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407058"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3308850"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW61312.2024.00028"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2021.102240"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3664293"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3472959"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2024.3355772"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2023.3307884"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2024.3432836"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3123640"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW61312.2024.00026"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3252565"},{"key":"ref56","article-title":"AMDSEV","year":"2017"},{"key":"ref57","article-title":"Deploying encrypted images for Confidential computing","volume-title":"James Bottomley\u2019s random Pages","author":"Bottomley","year":"2020"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833653"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3623278.3624763"},{"key":"ref60","article-title":"NestedSGX: Bootstrapping trust to enclaves within confidential VMs","author":"Wang","year":"2024"}],"container-title":["IEEE Transactions on Network Science and Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488902\/11264281\/11061256.pdf?arnumber=11061256","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,22]],"date-time":"2025-11-22T05:39:06Z","timestamp":1763789946000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11061256\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":60,"URL":"https:\/\/doi.org\/10.1109\/tnse.2025.3584986","relation":{},"ISSN":["2327-4697","2334-329X"],"issn-type":[{"value":"2327-4697","type":"electronic"},{"value":"2334-329X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}