{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T18:36:09Z","timestamp":1791916569734,"version":"4.3.4"},"reference-count":68,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2015,8,31]],"date-time":"2015-08-31T00:00:00Z","timestamp":1440979200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Comput. Syst."],"published-print":{"date-parts":[[2015,9,11]]},"abstract":"<jats:p>Today\u2019s cloud computing infrastructure requires substantial trust. Cloud users rely on both the provider\u2019s staff and its globally distributed software\/hardware platform not to expose any of their private data.<\/jats:p>\n          <jats:p>We introduce the notion of shielded execution, which protects the confidentiality and integrity of a program and its data from the platform on which it runs (i.e., the cloud operator\u2019s OS, VM, and firmware). Our prototype, Haven, is the first system to achieve shielded execution of unmodified legacy applications, including SQL Server and Apache, on a commodity OS (Windows) and commodity hardware. Haven leverages the hardware protection of Intel SGX to defend against privileged code and physical attacks such as memory probes, and also addresses the dual challenges of executing unmodified legacy binaries and protecting them from a malicious host. This work motivated recent changes in the SGX specification.<\/jats:p>","DOI":"10.1145\/2799647","type":"journal-article","created":{"date-parts":[[2015,9,1]],"date-time":"2015-09-01T13:41:09Z","timestamp":1441114869000},"page":"1-26","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":315,"title":["Shielding Applications from an Untrusted Cloud with Haven"],"prefix":"10.1145","volume":"33","author":[{"given":"Andrew","family":"Baumann","sequence":"first","affiliation":[{"name":"Microsoft Research, Redmond, WA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marcus","family":"Peinado","sequence":"additional","affiliation":[{"name":"Microsoft Research, Redmond, WA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Galen","family":"Hunt","sequence":"additional","affiliation":[{"name":"Microsoft Research, Redmond, WA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2015,8,31]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"Retrieved","author":"Services Amazon Web","year":"2013"},{"key":"e_1_2_1_2_1","volume-title":"Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy.","author":"Anati Ittai"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/146941.146944"},{"key":"e_1_2_1_4_1","volume-title":"Proceedings of the 6th Conference on Innovative Data Systems Research.","author":"Arasu Arvind","year":"2013"},{"key":"e_1_2_1_5_1","unstructured":"ARM Limited. 2009. Building a Secure System Using TrustZone Technology. Ref. PRD29-GENC-009492C. ARM Limited.  ARM Limited. 2009. Building a Secure System Using TrustZone Technology. Ref. PRD29-GENC-009492C. ARM Limited."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2465351.2465375"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/2685048.2685070"},{"key":"e_1_2_1_8_1","volume-title":"Proceedings of the 12th USENIX Security Symposium. 105--120","author":"Bhatkar Sandeep"},{"key":"e_1_2_1_10_1","volume-title":"Proceedings of the 16th IEEE International Symposium on High-Performance Computer Architecture. 1--12","author":"Champagne David"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451145"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346281.1346284"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1995896.1995914"},{"key":"e_1_2_1_14_1","volume-title":"Retrieved","author":"Alliance Cloud Security","year":"2013"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2541940.2541986"},{"key":"e_1_2_1_16_1","volume-title":"Proceedings of the 8th USENIX Symposium on Operating Systems Design and Implementation. 339--354","author":"Douceur John R."},{"key":"e_1_2_1_17_1","volume-title":"Proceedings of the 4th USENIX Symposium on Operating Systems Design and Implementation. 181--196","author":"Fu Kevin","year":"2000"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/822080.822806"},{"key":"e_1_2_1_19_1","first-page":"2013","article-title":"U.S., British intelligence mining data from nine U.S. Internet companies in broad secret program","volume":"6","author":"Gellman Barton","year":"2013","journal-title":"Washington Post"},{"key":"e_1_2_1_20_1","first-page":"2013","article-title":"NSA infiltrates links to yahoo, google data centers worldwide, snowden documents say","volume":"30","author":"Gellman Barton","year":"2013","journal-title":"Washington Post"},{"key":"e_1_2_1_21_1","doi-asserted-by":"crossref","unstructured":"Craig Gentry. 2009. A Fully Homomorphic Encryption Scheme. Ph.D. Dissertation. Stanford University Stanford CA.   Craig Gentry. 2009. A Fully Homomorphic Encryption Scheme. Ph.D. Dissertation. Stanford University Stanford CA.","DOI":"10.1145\/1536414.1536440"},{"key":"e_1_2_1_22_1","volume-title":"Lecture Notes in Computer Science","volume":"7417","author":"Gentry Craig"},{"key":"e_1_2_1_23_1","volume-title":"Proceedings of the 3rd USENIX Symposium on Operating Systems Design and Implementation. 73--86","author":"Hand Steven M.","year":"1999"},{"key":"e_1_2_1_24_1","volume-title":"Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation.","author":"Hawblitzel Chris","year":"2014"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488370"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451146"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/NAS.2009.15"},{"key":"e_1_2_1_28_1","volume-title":"Proceedings of the 2013 USENIX Annual Technical Conference. 321--332","author":"Howell Jon"},{"key":"e_1_2_1_29_1","unstructured":"Intel Corp. 2013. Software Guard Extensions Programming Reference. Ref. #329298-001. Intel Corp. https:\/\/software.intel.com\/sites\/default\/files\/329298-001.pdf.  Intel Corp. 2013. Software Guard Extensions Programming Reference. Ref. #329298-001. Intel Corp. https:\/\/software.intel.com\/sites\/default\/files\/329298-001.pdf."},{"key":"e_1_2_1_30_1","unstructured":"Intel Corp. 2014a. Intel 64 and IA-32 Architectures Software Developer\u2019s Manual. Ref. #253665-050US. Intel Corp.  Intel Corp. 2014a. Intel 64 and IA-32 Architectures Software Developer\u2019s Manual. Ref. #253665-050US. Intel Corp."},{"key":"e_1_2_1_31_1","unstructured":"Intel Corp. 2014b. Software Guard Extensions Programming Reference Rev. 2. Ref. #329298-002. Intel Corp. https:\/\/software.intel.com\/sites\/default\/files\/managed\/48\/88\/329298-002.pdf.  Intel Corp. 2014b. Software Guard Extensions Programming Reference Rev. 2. Ref. #329298-002. Intel Corp. https:\/\/software.intel.com\/sites\/default\/files\/managed\/48\/88\/329298-002.pdf."},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2005.14"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/800213.806531"},{"key":"e_1_2_1_35_1","volume-title":"Proceedings of the 2014 USENIX Annual Technical Conference.","author":"Li Yanlin","year":"2014"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/378993.379237"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945463"},{"key":"e_1_2_1_38_1","volume-title":"Proceedings of the 12th USENIX Symposium on Networked Systems Design and Implementation. https:\/\/www.usenix.org\/conference\/nsdi15\/technical-sessions\/presentation\/lorch.","author":"Lorch Jacob R.","year":"2015"},{"key":"e_1_2_1_39_1","volume-title":"Proceedings of the 4th USENIX Symposium on Operating Systems Design and Implementation. 135--150","author":"Maheshwari Umesh","year":"2000"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/121132.344329"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.17"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1352592.1352625"},{"key":"e_1_2_1_43_1","volume-title":"Retrieved","author":"McGrew David","year":"2004"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488368"},{"key":"e_1_2_1_45_1","series-title":"Lecture Notes in Computer Science","volume-title":"Advances in Cryptology\u2014CRYPTO \u201987","author":"Merkle Ralph"},{"key":"e_1_2_1_46_1","first-page":"2014","article-title":"Revelations of N.S.A. spying cost U.S. tech companies","volume":"21","author":"Miller Claire Cain","year":"2014","journal-title":"New York Times"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516678"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.38"},{"key":"e_1_2_1_49_1","volume-title":"Retrieved","author":"Plastina Dan","year":"2015"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043566"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/361011.361073"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950399"},{"key":"e_1_2_1_53_1","volume-title":"Retrieved","year":"2014"},{"key":"e_1_2_1_55_1","volume-title":"Proceedings of the 13th USENIX Security Symposium.","author":"Sailer Reiner","year":"2004"},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2541940.2541949"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043580"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.5555\/324119.324128"},{"key":"e_1_2_1_59_1","volume-title":"Proceedings of the 7th USENIX Symposium on Operating Systems Design and Implementation. 279--292","author":"Ta-Min Richard","year":"2006"},{"key":"e_1_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/2509136.2509554"},{"key":"e_1_2_1_61_1","first-page":"12","article-title":"TPC Benchmark E Standard","volume":"1","author":"Transaction Processing Performance Council","year":"2010","journal-title":"Specification. Rev."},{"key":"e_1_2_1_62_1","unstructured":"Trusted Computing Group. 2011. TPM Main Specification Level 2. Version 1.2 Revision 116. Trusted Computing Group.  Trusted Computing Group. 2011. TPM Main Specification Level 2. Version 1.2 Revision 116. Trusted Computing Group."},{"key":"e_1_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2592798.2592812"},{"key":"e_1_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30921-2_10"},{"key":"e_1_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.45"},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346256.1346267"},{"key":"e_1_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.25"},{"key":"e_1_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/1655008.1655017"},{"key":"e_1_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043576"},{"key":"e_1_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/1519065.1519076"}],"container-title":["ACM Transactions on Computer Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2799647","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2799647","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:42:43Z","timestamp":1750225363000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2799647"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,8,31]]},"references-count":68,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2015,9,11]]}},"alternative-id":["10.1145\/2799647"],"URL":"https:\/\/doi.org\/10.1145\/2799647","relation":{},"ISSN":["0734-2071","1557-7333"],"issn-type":[{"value":"0734-2071","type":"print"},{"value":"1557-7333","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015,8,31]]},"assertion":[{"value":"2015-04-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2015-06-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2015-08-31","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}