{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T11:53:47Z","timestamp":1790855627645,"version":"4.1.0"},"reference-count":157,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2016,2,8]],"date-time":"2016-02-08T00:00:00Z","timestamp":1454889600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"EPSRC Project CIPART","award":["EP\/L022729\/1"],"award-info":[{"award-number":["EP\/L022729\/1"]}]},{"name":"FP7 EU-funded project Coco Cloud","award":["610853"],"award-info":[{"award-number":["610853"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Comput. Surv."],"published-print":{"date-parts":[[2016,2,8]]},"abstract":"<jats:p>Virtualization technology enables Cloud providers to efficiently use their computing services and resources. Even if the benefits in terms of performance, maintenance, and cost are evident, however, virtualization has also been exploited by attackers to devise new ways to compromise a system. To address these problems, research security solutions have evolved considerably over the years to cope with new attacks and threat models. In this work, we review the protection strategies proposed in the literature and show how some of the solutions have been invalidated by new attacks, or threat models, that were previously not considered. The goal is to show the evolution of the threats, and of the related security and trust assumptions, in virtualized systems that have given rise to complex threat models and the corresponding sophistication of protection strategies to deal with such attacks. We also categorize threat models, security and trust assumptions, and attacks against a virtualized system at the different layers\u2014in particular, hardware, virtualization, OS, and application.<\/jats:p>","DOI":"10.1145\/2856126","type":"journal-article","created":{"date-parts":[[2016,2,8]],"date-time":"2016-02-08T22:37:07Z","timestamp":1454971027000},"page":"1-38","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":72,"title":["Evolution of Attacks, Threat Models, and Solutions for Virtualized Systems"],"prefix":"10.1145","volume":"48","author":[{"given":"Daniele","family":"Sgandurra","sequence":"first","affiliation":[{"name":"Imperial College London, London, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emil","family":"Lupu","sequence":"additional","affiliation":[{"name":"Imperial College London, London, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2016,2,8]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102165"},{"key":"e_1_2_1_2_1","volume-title":"\u201cpacifica","author":"Devices Advanced Micro","year":"2005"},{"key":"e_1_2_1_3_1","first-page":"14","article-title":"Smashing the stack for fun and profit","volume":"7","author":"One Aleph","year":"1996","journal-title":"Phrack Magazine"},{"key":"e_1_2_1_4_1","volume-title":"Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy (HASP\u201913)","author":"Anati Ittai"},{"key":"e_1_2_1_5_1","volume-title":"Proceedings of the 1997 IEEE Symposium on Security and Privacy (SP\u201997)","author":"Arbaugh W. A."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.2"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.50"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866313"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046752"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2010.39"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00587-9_6"},{"key":"e_1_2_1_12_1","volume-title":"Trusted platform module (TPM) based security on notebook PCS-white paper. White Paper","author":"Bajikar Sundeep"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1165389.945462"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/2685048.2685070"},{"key":"e_1_2_1_15_1","volume-title":"Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation (OSDI\u201910)","author":"Ben-Yehuda Muli","year":"2010"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2013.31"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2506164.2506167"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.47"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382226"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516714"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33338-5_2"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2008.24"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.63"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2009.2028166"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/VLSI.Design.2010.54"},{"key":"e_1_2_1_26_1","volume-title":"High Performance Computer Architecture (HPCA), 2010 IEEE 16th International Symposium on. 1--12","author":"Champagne D.","year":"2010"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2490301.2451145"},{"key":"e_1_2_1_28_1","volume-title":"Tamper-Resistant Execution in an Untrusted Operating System Using A Virtual Machine Monitor","author":"Chen Haibo","year":"2007"},{"key":"e_1_2_1_29_1","volume-title":"Proceedings of the 8th Workshop on Hot Topics in Operating Systems (HOTOS\u201901)","author":"Peter"},{"key":"e_1_2_1_30_1","volume-title":"Proceedings of the 14th Conference on USENIX Security Symposium","volume":"14","author":"Chen Shuo"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1353534.1346284"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382201"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1655008.1655022"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1147\/rd.255.0483"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.26"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866390"},{"key":"e_1_2_1_37_1","unstructured":"D. A. Dai Zovi. 2006. Hardware virtualization rootkits. BlackHat Briefings USA August.  D. A. Dai Zovi. 2006. Hardware virtualization rootkits. BlackHat Briefings USA August."},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2459976.2459985"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455779"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/SERE-C.2013.20"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2012.0252"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.11"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.955100"},{"key":"e_1_2_1_44_1","volume-title":"NDSS 2012, 19th Annual Network and Distributed System Security Symposium, February 5--8","author":"Eldefrawy Karim","year":"2012"},{"key":"e_1_2_1_45_1","volume-title":"Black Hat USA","author":"Elhage Nelson","year":"2011"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/1460877.1460892"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.03.007"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368506.1368518"},{"key":"e_1_2_1_51_1","volume-title":"Botnet Detection. Advances in Information Security","author":"Franklin Jason"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.40"},{"key":"e_1_2_1_53_1","volume-title":"Proceedings of the 11th Workshop on Hot Topics in Operating Systems (HotOS-XI\u201907)","author":"Garfinkel Tal","year":"2007"},{"key":"e_1_2_1_54_1","volume-title":"Proceedings of the 2003 Network and Distributed System Symposium.","author":"Garfinkel Tal","year":"2003"},{"key":"e_1_2_1_55_1","volume-title":"Proceedings of the 10th Conference on Hot Topics in Operating Systems","volume":"10","author":"Garfinkel Tal","year":"2005"},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/1867635.1867648"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2014.2358236"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/800122.803950"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.1974.6323581"},{"key":"e_1_2_1_60_1","volume-title":"Retrieved","author":"Greene James","year":"2012"},{"key":"e_1_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368506.1368517"},{"key":"e_1_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950398"},{"key":"e_1_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/2490301.2451146"},{"key":"e_1_2_1_64_1","volume-title":"Rootkits: Subverting the Windows Kernel","author":"Hoglund Greg","year":"2006"},{"key":"e_1_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/2757667.2757673"},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.42"},{"key":"e_1_2_1_67_1","volume-title":"Wait a minute&excl","author":"Irazoqui Gorka"},{"key":"e_1_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/1133058.1133063"},{"key":"e_1_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2013.55"},{"key":"e_1_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/2517488.2517489"},{"key":"e_1_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315262"},{"key":"e_1_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346256.1346269"},{"key":"e_1_2_1_73_1","volume-title":"Proceedings of the 16th USENIX Security Symposium on USENIX Security Symposium (SS\u201907)","author":"Kauer Bernhard","year":"2007"},{"key":"e_1_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/1816038.1816010"},{"key":"e_1_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714594"},{"key":"e_1_2_1_76_1","volume-title":"STEALTHMEM: System-level protection against cache-based side channel attacks in the cloud. In Presented as Part of the 21st USENIX Security Symposium (USENIX Security 12)","author":"Kim Taesoo","year":"2012"},{"key":"e_1_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.38"},{"key":"e_1_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"e_1_2_1_79_1","volume-title":"Black Hat Technical Security Conference. USA","author":"Kortchinsky Kostya","year":"2009"},{"key":"e_1_2_1_80_1","volume-title":"Trustworthy Clouds","author":"Lacoste Marc","year":"2013"},{"key":"e_1_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2006.11"},{"key":"e_1_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523680"},{"key":"e_1_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/1181309.1181311"},{"key":"e_1_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.43"},{"key":"e_1_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/1529282.1529733"},{"key":"e_1_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.17"},{"key":"e_1_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1145\/1352592.1352625"},{"key":"e_1_2_1_88_1","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488368"},{"key":"e_1_2_1_89_1","volume-title":"Mell and Timothy Grance","author":"Peter","year":"2011"},{"key":"e_1_2_1_90_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346256.1346278"},{"key":"e_1_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516678"},{"key":"e_1_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.10"},{"key":"e_1_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.47"},{"key":"e_1_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.1145\/2431211.2431216"},{"key":"e_1_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.1145\/2480741.2480757"},{"key":"e_1_2_1_96_1","doi-asserted-by":"publisher","DOI":"10.1145\/2590296.2590299"},{"key":"e_1_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1145\/2484402.2484406"},{"key":"e_1_2_1_98_1","doi-asserted-by":"publisher","DOI":"10.5555\/1888881.1888931"},{"key":"e_1_2_1_99_1","volume-title":"Proceedings of the 13th Conference on USENIX Security Symposium","volume":"13","author":"Petroni Nick L."},{"key":"e_1_2_1_100_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315260"},{"key":"e_1_2_1_101_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664168.2664174"},{"key":"e_1_2_1_103_1","doi-asserted-by":"publisher","DOI":"10.1145\/1244002.1244070"},{"key":"e_1_2_1_104_1","doi-asserted-by":"publisher","DOI":"10.5555\/2396231.2396233"},{"key":"e_1_2_1_105_1","doi-asserted-by":"publisher","DOI":"10.1147\/sj.431.0032"},{"key":"e_1_2_1_106_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653687"},{"key":"e_1_2_1_107_1","doi-asserted-by":"publisher","DOI":"10.1145\/2133375.2133377"},{"key":"e_1_2_1_108_1","doi-asserted-by":"publisher","DOI":"10.1145\/1016998.1017000"},{"key":"e_1_2_1_109_1","volume-title":"Blackhat Briefings USA","author":"Rutkowska Joanna","year":"2008"},{"key":"e_1_2_1_110_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2012.12.025"},{"key":"e_1_2_1_111_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23226"},{"key":"e_1_2_1_112_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNT.2010.49"},{"key":"e_1_2_1_113_1","volume-title":"Proceedings of the 13th Conference on USENIX Security Symposium","volume":"13","author":"Sailer Reiner","year":"2004"},{"key":"e_1_2_1_114_1","volume-title":"Proceedings of the 21st USENIX Conference on Security Symposium (Security 12)","author":"Santos Nuno","year":"2012"},{"key":"e_1_2_1_115_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.10"},{"key":"e_1_2_1_116_1","first-page":"1","article-title":"A trusted IaaS environment with hardware security module","volume":"99","author":"Seol J.","year":"2015","journal-title":"Services Computing, IEEE Transactions on PP"},{"key":"e_1_2_1_117_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294294"},{"key":"e_1_2_1_118_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095809.1095812"},{"key":"e_1_2_1_119_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653720"},{"key":"e_1_2_1_121_1","unstructured":"Sherri Sparks and Jamie Butler. 2005. Shadow walker: Raising the bar for rootkit detection. Black Hat Japan) 504--533.  Sherri Sparks and Jamie Butler. 2005. Shadow walker: Raising the bar for rootkit detection. Black Hat Japan) 504--533."},{"key":"e_1_2_1_122_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046751"},{"key":"e_1_2_1_123_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33338-5_1"},{"key":"e_1_2_1_124_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755913.1755935"},{"key":"e_1_2_1_125_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37300-8_2"},{"key":"e_1_2_1_126_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382200"},{"key":"e_1_2_1_127_1","doi-asserted-by":"publisher","DOI":"10.1145\/782814.782838"},{"key":"e_1_2_1_128_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046754"},{"key":"e_1_2_1_129_1","doi-asserted-by":"publisher","DOI":"10.1145\/2248487.2151022"},{"key":"e_1_2_1_130_1","volume-title":"Retrieved","author":"Tereshkin Alexander","year":"2008"},{"key":"e_1_2_1_131_1","volume-title":"Black Hat USA","author":"Tereshkin Alexander","year":"2009"},{"key":"e_1_2_1_132_1","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2011.117"},{"key":"e_1_2_1_133_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2005.163"},{"key":"e_1_2_1_134_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2005.163"},{"key":"e_1_2_1_135_1","volume-title":"MPI-SWS. MPI-SWS. Retrieved","author":"Vahldiek Anjo","year":"2014"},{"key":"e_1_2_1_136_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382228"},{"key":"e_1_2_1_137_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.48"},{"key":"e_1_2_1_138_1","volume-title":"The 6th EuroSys Doctoral Workshop","author":"Wailly Aurelien","year":"2012"},{"key":"e_1_2_1_139_1","series-title":"Lecture Notes in Computer Science","volume-title":"Recent Advances in Intrusion Detection, Somesh Jha, Robin Sommer, and Christian Kreibich (Eds.)","author":"Wang Jiang"},{"key":"e_1_2_1_140_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.30"},{"key":"e_1_2_1_141_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653728"},{"key":"e_1_2_1_142_1","doi-asserted-by":"publisher","DOI":"10.1145\/2168836.2168850"},{"key":"e_1_2_1_143_1","doi-asserted-by":"publisher","DOI":"10.1145\/2482767.2482799"},{"key":"e_1_2_1_144_1","volume-title":"Invisible Things Lab","author":"Wojtczuk Rafal","year":"2009"},{"key":"e_1_2_1_145_1","unstructured":"Rafal Wojtczuk and Joanna Rutkowska. 2011. Following the white rabbit: Software attacks against Intel VT-d technology. ITL: http:\/\/invisiblethingslab.com\/resources\/2011\/Software&percnt;20Attacks&percnt;20on&percnt;20Intel&percnt;20VT-d.pdf.  Rafal Wojtczuk and Joanna Rutkowska. 2011. Following the white rabbit: Software attacks against Intel VT-d technology. ITL: http:\/\/invisiblethingslab.com\/resources\/2011\/Software&percnt;20Attacks&percnt;20on&percnt;20Intel&percnt;20VT-d.pdf."},{"key":"e_1_2_1_146_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS\u201913)","author":"Wu Chiachih","year":"2013"},{"key":"e_1_2_1_147_1","volume-title":"Presented as part of the 21st USENIX Security Symposium (USENIX Security 12)","author":"Wu Zhenyu","year":"2015"},{"key":"e_1_2_1_148_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2013.6522323"},{"key":"e_1_2_1_149_1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2012.060912.00182"},{"key":"e_1_2_1_150_1","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.3273"},{"key":"e_1_2_1_151_1","doi-asserted-by":"crossref","unstructured":"Huijun Xiong Xinwen Zhang Wei Zhu and Danfeng Yao. 2012. CloudSeal: End-to-end content protection in cloud-based storage and delivery services. In Security and Privacy in Communication Networks Muttukrishnan Rajarajan Fred Piper Haining Wang and George Kesidis (Eds.). Lecture Notes of the Institute for Computer Sciences Social Informatics and Telecommunications Engineering Vol. 96. Springer Berlin 491--500. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-642-31909-9_30  Huijun Xiong Xinwen Zhang Wei Zhu and Danfeng Yao. 2012. CloudSeal: End-to-end content protection in cloud-based storage and delivery services. In Security and Privacy in Communication Networks Muttukrishnan Rajarajan Fred Piper Haining Wang and George Kesidis (Eds.). Lecture Notes of the Institute for Computer Sciences Social Informatics and Telecommunications Engineering Vol. 96. Springer Berlin 491--500. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-642-31909-9_30","DOI":"10.1007\/978-3-642-31909-9_30"},{"key":"e_1_2_1_152_1","unstructured":"Xi Xiong Donghai Tian and Peng Liu. 2011. Practical protection of kernel integrity for commodity OS from untrusted extensions. In NDSS.  Xi Xiong Donghai Tian and Peng Liu. 2011. Practical protection of kernel integrity for commodity OS from untrusted extensions. In NDSS."},{"key":"e_1_2_1_153_1","doi-asserted-by":"publisher","DOI":"10.1145\/1266840.1266852"},{"key":"e_1_2_1_154_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046660.2046670"},{"key":"e_1_2_1_155_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346256.1346267"},{"key":"e_1_2_1_156_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043576"},{"key":"e_1_2_1_157_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.53"},{"key":"e_1_2_1_158_1","doi-asserted-by":"publisher","DOI":"10.1145\/1133373.1133423"},{"key":"e_1_2_1_159_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.31"},{"key":"e_1_2_1_160_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382230"},{"key":"e_1_2_1_161_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660356"}],"container-title":["ACM Computing Surveys"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2856126","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2856126","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:54:12Z","timestamp":1750222452000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2856126"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,2,8]]},"references-count":157,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2016,2,8]]}},"alternative-id":["10.1145\/2856126"],"URL":"https:\/\/doi.org\/10.1145\/2856126","relation":{},"ISSN":["0360-0300","1557-7341"],"issn-type":[{"value":"0360-0300","type":"print"},{"value":"1557-7341","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,2,8]]},"assertion":[{"value":"2015-02-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2015-11-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2016-02-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}