{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T15:32:05Z","timestamp":1785511925552,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":56,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,3,14]],"date-time":"2015-03-14T00:00:00Z","timestamp":1426291200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N00014-12-1-0552, N00014-4-1-0525"],"award-info":[{"award-number":["N00014-12-1-0552, N00014-4-1-0525"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"name":"MURI","award":["FA9550-09-1-0539"],"award-info":[{"award-number":["FA9550-09-1-0539"]}]},{"DOI":"10.13039\/501100004608","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS 07-09122"],"award-info":[{"award-number":["CNS 07-09122"]}],"id":[{"id":"10.13039\/501100004608","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,3,14]]},"DOI":"10.1145\/2694344.2694386","type":"proceedings-article","created":{"date-parts":[[2015,3,3]],"date-time":"2015-03-03T09:15:23Z","timestamp":1425374123000},"page":"191-206","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":84,"title":["Nested Kernel"],"prefix":"10.1145","author":[{"given":"Nathan","family":"Dautenhahn","sequence":"first","affiliation":[{"name":"University of Illinois at Urbana-Champaign, Urbana, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Theodoros","family":"Kasampalis","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign, Urbana, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Will","family":"Dietz","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign, Urbana, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"John","family":"Criswell","sequence":"additional","affiliation":[{"name":"University of Rochester, Rochester, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vikram","family":"Adve","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign, Urbana, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2015,3,14]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Advancd Micro Devices","year":"2006","unstructured":"AMD64 architecture programmers manual volume 2: System programming. Manual , Advancd Micro Devices , 2006 . AMD64 architecture programmers manual volume 2: System programming. Manual, Advancd Micro Devices, 2006."},{"key":"e_1_3_2_1_2_1","volume-title":"Intel","author":"Intel","year":"2014","unstructured":"Intel 64 and IA-32 architectures software developers manual. Manual 325384-051US , Intel , June 2014 . Intel 64 and IA-32 architectures software developers manual. Manual 325384-051US, Intel, June 2014."},{"key":"e_1_3_2_1_3_1","first-page":"93","volume-title":"Proceedings of the USENIX Annual Technical Conference, USENIX ATC'10","author":"Accetta M.","year":"1986","unstructured":"M. Accetta , R. Baron , W. Bolosky , D. Golub , R. Rashid , A. Tevanian , and M. Young . Mach: A new kernel foundation for UNIX development . In Proceedings of the USENIX Annual Technical Conference, USENIX ATC'10 , pages 93 -- 112 , Altanta, GA, USA , 1986 . USENIX Association. M. Accetta, R. Baron, W. Bolosky, D. Golub, R. Rashid, A. Tevanian, and M. Young. Mach: A new kernel foundation for UNIX development. In Proceedings of the USENIX Annual Technical Conference, USENIX ATC'10, pages 93--112, Altanta, GA, USA, 1986. USENIX Association."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1178597.1178599"},{"key":"e_1_3_2_1_5_1","volume-title":"Nov.","author":"Exploiting","year":"2009","unstructured":"argp and Karl. Exploiting UMA , FreeBSD's kernel memory allocator..:: Phrack Magazine ::., 0x0d(0x42) , Nov. 2009 . argp and Karl. Exploiting UMA, FreeBSD's kernel memory allocator..:: Phrack Magazine ::., 0x0d(0x42), Nov. 2009."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2010.39"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945462"},{"key":"e_1_3_2_1_8_1","first-page":"335","volume-title":"Proceedings of the 10th USENIX Conference on Operating Systems Design and Implementation, OSDI'12","author":"Belay A.","year":"2012","unstructured":"A. Belay , A. Bittau , A. Mashtizadeh , D. Terei , D. Mazires , and C. Kozyrakis . Dune: Safe user-level access to privileged CPU features . In Proceedings of the 10th USENIX Conference on Operating Systems Design and Implementation, OSDI'12 , pages 335 -- 348 , Berkeley, CA, USA , 2012 . USENIX Association. A. Belay, A. Bittau, A. Mashtizadeh, D. Terei, D. Mazires, and C. Kozyrakis. Dune: Safe user-level access to privileged CPU features. In Proceedings of the 10th USENIX Conference on Operating Systems Design and Implementation, OSDI'12, pages 335--348, Berkeley, CA, USA, 2012. USENIX Association."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224077"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629581"},{"key":"e_1_3_2_1_11_1","first-page":"12","volume-title":"Proceedings of the 14th Conference on USENIX Security Symposium -","volume":"14","author":"Chen S.","year":"2005","unstructured":"S. Chen , J. Xu , E. C. Sezer , P. Gauriar , and R. K. Iyer . Non-control-data attacks are realistic threats . In Proceedings of the 14th Conference on USENIX Security Symposium - Volume 14 , SSYM'05, pages 12 -- 12 , Berkeley, CA, USA , 2005 . USENIX Association. S. Chen, J. Xu, E. C. Sezer, P. Gauriar, and R. K. Iyer. Non-control-data attacks are realistic threats. In Proceedings of the 14th Conference on USENIX Security Symposium - Volume 14, SSYM'05, pages 12--12, Berkeley, CA, USA, 2005. USENIX Association."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/502034.502042"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.26"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2541940.2541986"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/1855768.1855774"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294295"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224076"},{"key":"e_1_3_2_1_18_1","first-page":"75","volume-title":"Proceedings of the 7th Symposium on Operating Systems Design and Implementation, OSDI '06","author":"Erlingsson U.","year":"2006","unstructured":"U. Erlingsson , M. Abadi , M. Vrable , M. Budiu , and G. C. Necula . XFI: Software guards for system address spaces . In Proceedings of the 7th Symposium on Operating Systems Design and Implementation, OSDI '06 , pages 75 -- 88 , Berkeley, CA, USA , 2006 . USENIX Association. U. Erlingsson, M. Abadi, M. Vrable, M. Budiu, and G. C. Necula. XFI: Software guards for system address spaces. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation, OSDI '06, pages 75--88, Berkeley, CA, USA, 2006. USENIX Association."},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium, NDSS 2003","author":"Garfinkel T.","year":"2003","unstructured":"T. Garfinkel and M. Rosenblum . A virtual machine introspection based architecture for intrusion detection . In Proceedings of the Network and Distributed System Security Symposium, NDSS 2003 , San Diego, California, USA. The Internet Society , 2003 . T. Garfinkel and M. Rosenblum. A virtual machine introspection based architecture for intrusion detection. In Proceedings of the Network and Distributed System Security Symposium, NDSS 2003, San Diego, California, USA. The Internet Society, 2003."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451146"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-980109"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451138"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/2665671.2665737"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.45"},{"key":"e_1_3_2_1_25_1","first-page":"957","volume-title":"Proceedings of the 23rd USENIX Conference on Security Symposium, SEC'14","author":"Kemerlis V. P.","year":"2014","unstructured":"V. P. Kemerlis , M. Polychronakis , and A. D. Keromytis . ret2dir: Rethinking kernel isolation . In Proceedings of the 23rd USENIX Conference on Security Symposium, SEC'14 , pages 957 -- 972 , Berkeley, CA, USA , 2014 . USENIX Association. V. P. Kemerlis, M. Polychronakis, and A. D. Keromytis. ret2dir: Rethinking kernel isolation. In Proceedings of the 23rd USENIX Conference on Security Symposium, SEC'14, pages 957--972, Berkeley, CA, USA, 2014. USENIX Association."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945467"},{"key":"e_1_3_2_1_27_1","volume-title":"USA","author":"Kong J.","year":"2007","unstructured":"J. Kong . Designing BSD Rootkits . No Starch Press, San Francisco, CA , USA , 2007 . J. Kong. Designing BSD Rootkits. No Starch Press, San Francisco, CA, USA, 2007."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224075"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043568"},{"key":"e_1_3_2_1_30_1","first-page":"23","volume-title":"Proceedings of the 1996 Annual Conference on USENIX Annual Technical Conference, ATEC '96","author":"McVoy L.","year":"1996","unstructured":"L. McVoy and C. Staelin . lmbench: Portable tools for performance analysis . In Proceedings of the 1996 Annual Conference on USENIX Annual Technical Conference, ATEC '96 , pages 23 -- 23 , Berkeley, CA, USA , 1996 . USENIX Association. L. McVoy and C. Staelin. lmbench: Portable tools for performance analysis. In Proceedings of the 1996 Annual Conference on USENIX Annual Technical Conference, ATEC '96, pages 23--23, Berkeley, CA, USA, 1996. USENIX Association."},{"key":"e_1_3_2_1_31_1","volume-title":"Kernel patch protection: frequently asked questions (windows drivers)","year":"2007","unstructured":"Microsoft. Kernel patch protection: frequently asked questions (windows drivers) , 2007 . Microsoft. Kernel patch protection: frequently asked questions (windows drivers), 2007."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1508244.1508254"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1127345.1127348"},{"key":"e_1_3_2_1_34_1","volume-title":"The Multics System: An Examination of Its Structure","author":"Organick E. I.","year":"1972","unstructured":"E. I. Organick . The Multics System: An Examination of Its Structure . MIT Press , Cambridge, MA, USA , 1972 . E. I. Organick. The Multics System: An Examination of Its Structure. MIT Press, Cambridge, MA, USA, 1972."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.24"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2485922.2485977"},{"key":"e_1_3_2_1_37_1","volume-title":"Filtering methodologies, attacks, and defenses. Technical report","author":"Ries C.","year":"2005","unstructured":"C. Ries . Defeating windows personal firewalls : Filtering methodologies, attacks, and defenses. Technical report , 2005 . C. Ries. Defeating windows personal firewalls: Filtering methodologies, attacks, and defenses. Technical report, 2005."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.5555\/1433006.1433008"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/800216.806586"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/361011.361067"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"e_1_3_2_1_42_1","volume-title":"Inside the JavaOS operating system","author":"Saulpaugh T.","year":"1999","unstructured":"T. Saulpaugh and C. A. Mirho . Inside the JavaOS operating system . Addison-Wesley Reading , 1999 . T. Saulpaugh and C. A. Mirho. Inside the JavaOS operating system. Addison-Wesley Reading, 1999."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294294"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653720"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/782814.782838"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/1047915.1047919"},{"key":"e_1_3_2_1_47_1","volume-title":"Proceedings of the Black Hat USA 2006 Conference","author":"Tereshkin A.","year":"2006","unstructured":"A. Tereshkin . Rootkits : Attacking personal firewalls . In Proceedings of the Black Hat USA 2006 Conference , 2006 . A. Tereshkin. Rootkits: Attacking personal firewalls. In Proceedings of the Black Hat USA 2006 Conference, 2006."},{"key":"e_1_3_2_1_48_1","volume-title":"November","author":"I. Unified","year":"2010","unstructured":"I. Unified EFI. Unified extensible firmware interface specification: Version 2.2d , November 2010 . I. Unified EFI. Unified extensible firmware interface specification: Version 2.2d, November 2010."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586145"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.30"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653728"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1999.766910"},{"key":"e_1_3_2_1_53_1","unstructured":"D. Wheeler. SLOCCount 2015. http:\/\/www.dwheeler.com\/sloccount\/.  D. Wheeler. SLOCCount 2015. http:\/\/www.dwheeler.com\/sloccount\/."},{"key":"e_1_3_2_1_54_1","unstructured":"C. Wright. Para-virtualization interfaces 2006. http:\/\/lwn.net\/Articles\/194340.  C. Wright. Para-virtualization interfaces 2006. http:\/\/lwn.net\/Articles\/194340."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41284-4_6"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/1266840.1266852"}],"event":{"name":"ASPLOS '15: Architectural Support for Programming Languages and Operating Systems","location":"Istanbul Turkey","acronym":"ASPLOS '15","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages","SIGOPS ACM Special Interest Group on Operating Systems","SIGARCH ACM Special Interest Group on Computer Architecture","SIGBED ACM Special Interest Group on Embedded Systems"]},"container-title":["Proceedings of the Twentieth International Conference on Architectural Support for Programming Languages and Operating Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2694344.2694386","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2694344.2694386","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:12:20Z","timestamp":1750212740000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2694344.2694386"}},"subtitle":["An Operating System Architecture for Intra-Kernel Privilege Separation"],"short-title":[],"issued":{"date-parts":[[2015,3,14]]},"references-count":56,"alternative-id":["10.1145\/2694344.2694386","10.1145\/2694344"],"URL":"https:\/\/doi.org\/10.1145\/2694344.2694386","relation":{"is-identical-to":[{"id-type":"doi","id":"10.1145\/2786763.2694386","asserted-by":"object"},{"id-type":"doi","id":"10.1145\/2775054.2694386","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2015,3,14]]},"assertion":[{"value":"2015-03-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}