{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T08:21:42Z","timestamp":1769934102321,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":90,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,12,9]],"date-time":"2019-12-09T00:00:00Z","timestamp":1575849600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"ONR","award":["N00014-17-1-2891"],"award-info":[{"award-number":["N00014-17-1-2891"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,12,9]]},"DOI":"10.1145\/3359789.3359815","type":"proceedings-article","created":{"date-parts":[[2019,11,22]],"date-time":"2019-11-22T18:41:59Z","timestamp":1574448119000},"page":"598-611","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["Mitigating data leakage by protecting memory-resident sensitive data"],"prefix":"10.1145","author":[{"given":"Tapti","family":"Palit","sequence":"first","affiliation":[{"name":"Stony Brook University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabian","family":"Monrose","sequence":"additional","affiliation":[{"name":"UNC Chapel Hill"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michalis","family":"Polychronakis","sequence":"additional","affiliation":[{"name":"Stony Brook University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2019,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2003. Grsecurity. https:\/\/grsecurity.net\/.  2003. Grsecurity. https:\/\/grsecurity.net\/."},{"key":"e_1_3_2_1_2_1","volume-title":"SPEC CPU2006 Benchmark. http:\/\/www.spec.org\/cpu2006","unstructured":"2006. SPEC CPU2006 Benchmark. http:\/\/www.spec.org\/cpu2006 . 2006. SPEC CPU2006 Benchmark. http:\/\/www.spec.org\/cpu2006."},{"key":"e_1_3_2_1_3_1","unstructured":"2014. The Heartbleed Bug. http:\/\/heartbleed.com\/.  2014. The Heartbleed Bug. http:\/\/heartbleed.com\/."},{"key":"e_1_3_2_1_4_1","unstructured":"2015. Control Flow Guard. https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/mt637065(v=vs.85).aspx.  2015. Control Flow Guard. https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/mt637065(v=vs.85).aspx."},{"key":"e_1_3_2_1_5_1","unstructured":"2016. CFL-based Unification-based Alias Analysis. https:\/\/github.com\/llvm-mirror\/llvm\/blob\/master\/lib\/Analysis\/CFLSteensAliasAnalysis.cpp.  2016. CFL-based Unification-based Alias Analysis. https:\/\/github.com\/llvm-mirror\/llvm\/blob\/master\/lib\/Analysis\/CFLSteensAliasAnalysis.cpp."},{"key":"e_1_3_2_1_6_1","unstructured":"2016. Intel Streaming SIMD Extensions Technology. https:\/\/www.intel.com\/content\/www\/us\/en\/support\/articles\/000005779\/processors.html.  2016. Intel Streaming SIMD Extensions Technology. https:\/\/www.intel.com\/content\/www\/us\/en\/support\/articles\/000005779\/processors.html."},{"key":"e_1_3_2_1_7_1","unstructured":"2018. SSL Library mbed TLS. https:\/\/tls.mbed.org\/.  2018. SSL Library mbed TLS. https:\/\/tls.mbed.org\/."},{"key":"e_1_3_2_1_8_1","unstructured":"2018. The Sodium crypto library (libsodium). https:\/\/www.gitbook.com\/book\/jedisct1\/libsodium\/details.  2018. The Sodium crypto library (libsodium). https:\/\/www.gitbook.com\/book\/jedisct1\/libsodium\/details."},{"key":"e_1_3_2_1_9_1","unstructured":"2019. Overview: Intrinsics for Intel\u00c2\u0151 Advanced Vector Extensions 2. https:\/\/software.intel.com\/en-us\/cpp-compiler-developer-guide-and-reference-overview-intrinsics-for-intel-advanced-vector-extensions-2-intel-avx2-instructions.  2019. Overview: Intrinsics for Intel\u00c2\u0151 Advanced Vector Extensions 2. https:\/\/software.intel.com\/en-us\/cpp-compiler-developer-guide-and-reference-overview-intrinsics-for-intel-advanced-vector-extensions-2-intel-avx2-instructions."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102165"},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of the 19th USENIX Security Symposium.","author":"Akritidis Periklis","year":"2010","unstructured":"Periklis Akritidis . 2010 . Cling: A Memory Allocator to Mitigate Dangling Pointers . In Proceedings of the 19th USENIX Security Symposium. Periklis Akritidis. 2010. Cling: A Memory Allocator to Mitigate Dangling Pointers. In Proceedings of the 19th USENIX Security Symposium."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.30"},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the 18th USENIX Security Symposium. 51--66","author":"Akritidis Periklis","year":"2009","unstructured":"Periklis Akritidis , Manuel Costa , Miguel Castro , and Steven Hand . 2009 . Baggy Bounds Checking: An Efficient and Backwards-compatible Defense Against Out-of-bounds Errors . In Proceedings of the 18th USENIX Security Symposium. 51--66 . Periklis Akritidis, Manuel Costa, Miguel Castro, and Steven Hand. 2009. Baggy Bounds Checking: An Efficient and Backwards-compatible Defense Against Out-of-bounds Errors. In Proceedings of the 18th USENIX Security Symposium. 51--66."},{"key":"e_1_3_2_1_15_1","unstructured":"Brad Antoniewicz. 2013. Analysis of a Malware ROP Chain. http:\/\/blog.opensecurityresearch.com\/2013\/10\/analysis-of-malware-rop-chain.html.  Brad Antoniewicz. 2013. Analysis of a Malware ROP Chain. http:\/\/blog.opensecurityresearch.com\/2013\/10\/analysis-of-malware-rop-chain.html."},{"key":"e_1_3_2_1_16_1","unstructured":"ARM. 2010. ARM TrustZone. https:\/\/developer.arm.com\/ip-products\/security-ip\/trustzone.  ARM. 2010. ARM TrustZone. https:\/\/developer.arm.com\/ip-products\/security-ip\/trustzone."},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation (OSDI). 689--703","author":"Arnautov Sergei","year":"2016","unstructured":"Sergei Arnautov , Bohdan Trach , Franz Gregor , Thomas Knauth , Andre Martin , Christian Priebe , Joshua Lind , Divya Muthukumaran , Dan O'Keeffe , Mark Stillwell , 2016 . SCONE: Secure Linux Containers with Intel SGX .. In Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation (OSDI). 689--703 . Sergei Arnautov, Bohdan Trach, Franz Gregor, Thomas Knauth, Andre Martin, Christian Priebe, Joshua Lind, Divya Muthukumaran, Dan O'Keeffe, Mark Stillwell, et al. 2016. SCONE: Secure Linux Containers with Intel SGX.. In Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation (OSDI). 689--703."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53413-7_5"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3102980.3103002"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_16"},{"key":"e_1_3_2_1_21_1","unstructured":"Eli Bendersky. 2015. Pure-python library for parsing ELF and DWARF. https:\/\/github.com\/eliben\/pyelftools.  Eli Bendersky. 2015. Pure-python library for parsing ELF and DWARF. https:\/\/github.com\/eliben\/pyelftools."},{"key":"e_1_3_2_1_22_1","unstructured":"James Bennett Yichong Lin and Thoufique Haq. 2013. The Number of the Beast. http:\/\/blog.fireeye.com\/research\/2013\/02\/the-number-of-the-beast.html.  James Bennett Yichong Lin and Thoufique Haq. 2013. The Number of the Beast. http:\/\/blog.fireeye.com\/research\/2013\/02\/the-number-of-the-beast.html."},{"key":"e_1_3_2_1_23_1","volume-title":"Proceedings of the 27th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI). 158--168","author":"Emery","unstructured":"Emery D. Berger and Benjamin G. Zorn. 2006. DieHard: Probabilistic Memory Safety for Unsafe Languages . In Proceedings of the 27th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI). 158--168 . Emery D. Berger and Benjamin G. Zorn. 2006. DieHard: Probabilistic Memory Safety for Unsafe Languages. In Proceedings of the 27th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI). 158--168."},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 5th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA). 1--22","author":"Bhatkar Sandeep","unstructured":"Sandeep Bhatkar and R. Sekar . 2008. Data Space Randomization . In Proceedings of the 5th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA). 1--22 . Sandeep Bhatkar and R. Sekar. 2008. Data Space Randomization. In Proceedings of the 5th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA). 1--22."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2988336.2988350"},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of the 13th USENIX Security Symposium.","author":"Brumley David","year":"2004","unstructured":"David Brumley and Dawn Song . 2004 . Privtrans: Automatically Partitioning Programs for Privilege Separation . In Proceedings of the 13th USENIX Security Symposium. David Brumley and Dawn Song. 2004. Privtrans: Automatically Partitioning Programs for Privilege Separation. In Proceedings of the 13th USENIX Security Symposium."},{"key":"e_1_3_2_1_27_1","volume-title":"Proceedings of the ACM Asia Conference on Computer and Communications Security (AsiaCCS). 193--204","author":"Scott","unstructured":"Scott A. Carr and Mathias Payer. 2017. DataShield: Configurable Data Confidentiality and Integrity . In Proceedings of the ACM Asia Conference on Computer and Communications Security (AsiaCCS). 193--204 . Scott A. Carr and Mathias Payer. 2017. DataShield: Configurable Data Confidentiality and Integrity. In Proceedings of the ACM Asia Conference on Computer and Communications Security (AsiaCCS). 193--204."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.5555\/1298455.1298470"},{"key":"e_1_3_2_1_29_1","volume-title":"Proceedings of the 14th USENIX Security Symposium.","author":"Chen Shuo","unstructured":"Shuo Chen , Jun Xu , Emre C. Sezer , Prachi Gauriar , and Ravishankar K. Iyer . 2005. Non-Control-Data Attacks Are Realistic Threats . In Proceedings of the 14th USENIX Security Symposium. Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, and Ravishankar K. Iyer. 2005. Non-Control-Data Attacks Are Realistic Threats. In Proceedings of the 14th USENIX Security Symposium."},{"key":"e_1_3_2_1_30_1","volume-title":"The design of Rijndael: AES-the advanced encryption standard","author":"Daemen Joan","unstructured":"Joan Daemen and Vincent Rijmen . 2013. The design of Rijndael: AES-the advanced encryption standard . Springer Science & Business Media . Joan Daemen and Vincent Rijmen. 2013. The design of Rijndael: AES-the advanced encryption standard. Springer Science & Business Media."},{"key":"e_1_3_2_1_31_1","unstructured":"Jamie Danielson. 2017. ProcessMitigations 1.0.7. https:\/\/www.powershellgallery.com\/packages\/ProcessMitigations\/1.0.7.  Jamie Danielson. 2017. ProcessMitigations 1.0.7. https:\/\/www.powershellgallery.com\/packages\/ProcessMitigations\/1.0.7."},{"key":"e_1_3_2_1_32_1","volume-title":"Minisign: A dead simple tool to sign files and verify digital signatures. https:\/\/github.com\/jedisct1\/minisign.","author":"Denis Frank","year":"2018","unstructured":"Frank Denis . 2018 . Minisign: A dead simple tool to sign files and verify digital signatures. https:\/\/github.com\/jedisct1\/minisign. Frank Denis. 2018. Minisign: A dead simple tool to sign files and verify digital signatures. https:\/\/github.com\/jedisct1\/minisign."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/780732.780743"},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI).","author":"Erlingsson \u00dalfar","unstructured":"\u00dalfar Erlingsson , Mart\u00edn Abadi , Michael Vrable , Mihai Budiu , and George C. Necula . 2006. (XFI): Software Guards for System Address Spaces . In Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI). \u00dalfar Erlingsson, Mart\u00edn Abadi, Michael Vrable, Mihai Budiu, and George C. Necula. 2006. (XFI): Software Guards for System Address Spaces. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI)."},{"key":"e_1_3_2_1_35_1","unstructured":"Francisco Falcon. 2015. Exploiting Adobe Flash Player in the era of Control Flow Guard. In Black Hat Europe.  Francisco Falcon. 2015. Exploiting Adobe Flash Player in the era of Control Flow Guard. In Black Hat Europe."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523656"},{"key":"e_1_3_2_1_37_1","unstructured":"Dan Goodin. 2007. Safari zero-day exploit nets $10 000 prize. https:\/\/www.theregister.co.uk\/2007\/04\/20\/pwn-2-ownwinner\/.  Dan Goodin. 2007. Safari zero-day exploit nets $10 000 prize. https:\/\/www.theregister.co.uk\/2007\/04\/20\/pwn-2-ownwinner\/."},{"key":"e_1_3_2_1_38_1","unstructured":"Brian Gorenc. 2017. Pwn2Own 2017 - An Event for the Ages. http:\/\/blog.trendmicro.com\/pwn2own-2017-event-ages\/.  Brian Gorenc. 2017. Pwn2Own 2017 - An Event for the Ages. http:\/\/blog.trendmicro.com\/pwn2own-2017-event-ages\/."},{"key":"e_1_3_2_1_39_1","volume-title":"Intel\u00ae Advanced Encryption Standard (AES) New Instructions Set","author":"Gueron Shay","year":"2010","unstructured":"Shay Gueron . 2010. Intel\u00ae Advanced Encryption Standard (AES) New Instructions Set . Intel Corporation ( 2010 ). Shay Gueron. 2010. Intel\u00ae Advanced Encryption Standard (AES) New Instructions Set. Intel Corporation (2010)."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.5555\/2831143.2831155"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.62"},{"key":"e_1_3_2_1_42_1","unstructured":"Intel. 2015. Software Guard Extensions SDK. https:\/\/software.intel.com\/sites\/default\/files\/managed\/b4\/cf\/Intel-SGX-SDK-Developer-Reference-for-Windows-OS.pdf.  Intel. 2015. Software Guard Extensions SDK. https:\/\/software.intel.com\/sites\/default\/files\/managed\/b4\/cf\/Intel-SGX-SDK-Developer-Reference-for-Windows-OS.pdf."},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of the USENIX Annual Technical Conference (ATC). 275--288","author":"Jim Trevor","year":"2002","unstructured":"Trevor Jim , J. Greg Morrisett , Dan Grossman , Michael W. Hicks , James Cheney , and Yanling Wang . 2002 . Cyclone: A Safe Dialect of C . In Proceedings of the USENIX Annual Technical Conference (ATC). 275--288 . Trevor Jim, J. Greg Morrisett, Dan Grossman, Michael W. Hicks, James Cheney, and Yanling Wang. 2002. Cyclone: A Safe Dialect of C. In Proceedings of the USENIX Annual Technical Conference (ATC). 275--288."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064217"},{"key":"e_1_3_2_1_46_1","unstructured":"Vadim Kotov. 2014. Dissecting the newest IE10 0-day exploit (CVE-2014-0322). http:\/\/labs.bromium.com\/2014\/02\/25\/dissecting-the-newest-ie10-0-day-exploit-cve-2014-0322\/.  Vadim Kotov. 2014. Dissecting the newest IE10 0-day exploit (CVE-2014-0322). http:\/\/labs.bromium.com\/2014\/02\/25\/dissecting-the-newest-ie10-0-day-exploit-cve-2014-0322\/."},{"key":"e_1_3_2_1_47_1","volume-title":"Code-pointer Integrity. In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI). 147--163","author":"Kuznetsov Volodymyr","year":"2014","unstructured":"Volodymyr Kuznetsov , L\u00e1szl\u00f3 Szekeres , Mathias Payer , George Candea , R. Sekar , and Dawn Song . 2014 . Code-pointer Integrity. In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI). 147--163 . Volodymyr Kuznetsov, L\u00e1szl\u00f3 Szekeres, Mathias Payer, George Candea, R. Sekar, and Dawn Song. 2014. Code-pointer Integrity. In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI). 147--163."},{"key":"e_1_3_2_1_48_1","unstructured":"MWR Labs. 2013. MWR Labs Pwn2Own 2013 Write-up - Webkit Exploit. https:\/\/labs.mwrinfosecurity.com\/blog\/mwr-labs-pwn2own-2013-write-up-webkit-exploit\/.  MWR Labs. 2013. MWR Labs Pwn2Own 2013 Write-up - Webkit Exploit. https:\/\/labs.mwrinfosecurity.com\/blog\/mwr-labs-pwn2own-2013-write-up-webkit-exploit\/."},{"key":"e_1_3_2_1_49_1","unstructured":"Michael Larabel. 2016. The Current Spectre \/ Meltdown Mitigation Overhead Benchmarks On Linux 5.0. https:\/\/www.phoronix.com\/scan.php?page=article&item=linux50-spectre-meltdown.  Michael Larabel. 2016. The Current Spectre \/ Meltdown Mitigation Overhead Benchmarks On Linux 5.0. https:\/\/www.phoronix.com\/scan.php?page=article&item=linux50-spectre-meltdown."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065027"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23238"},{"key":"e_1_3_2_1_52_1","unstructured":"Haifei Li. 2011. Understanding and Exploiting Flash ActionScript Vulnerabilities. CanSecWest.  Haifei Li. 2011. Understanding and Exploiting Flash ActionScript Vulnerabilities. CanSecWest."},{"key":"e_1_3_2_1_53_1","volume-title":"Proceedings of the USENIX Annual Technical Conference (ATC).","author":"Lind Joshua","year":"2017","unstructured":"Joshua Lind , Christian Priebe , Divya Muthukumaran , Dan O'Keeffe , Pierre-Louis Aublin , Florian Kelbert , Tobias Reiher , David Goltzsche , David Eyers , R\u00fcdiger Kapitza , Christof Fetzer , and Peter Pietzuch . 2017 . Glamdring: Automatic application partitioning for Intel SGX . In Proceedings of the USENIX Annual Technical Conference (ATC). Joshua Lind, Christian Priebe, Divya Muthukumaran, Dan O'Keeffe, Pierre-Louis Aublin, Florian Kelbert, Tobias Reiher, David Goltzsche, David Eyers, R\u00fcdiger Kapitza, Christof Fetzer, and Peter Pietzuch. 2017. Glamdring: Automatic application partitioning for Intel SGX. In Proceedings of the USENIX Annual Technical Conference (ATC)."},{"key":"e_1_3_2_1_54_1","volume-title":"Proceedings of the 27th USENIX Security Symposium.","author":"Lipp Moritz","year":"2018","unstructured":"Moritz Lipp , Michael Schwarz , Daniel Gruss , Thomas Prescher , Werner Haas , Anders Fogh , Jann Horn , Stefan Mangard , Paul Kocher , Daniel Genkin , Yuval Yarom , and Mike Hamburg . 2018 . Meltdown: Reading Kernel Memory from User Space . In Proceedings of the 27th USENIX Security Symposium. Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Anders Fogh, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, and Mike Hamburg. 2018. Meltdown: Reading Kernel Memory from User Space. In Proceedings of the 27th USENIX Security Symposium."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813690"},{"key":"e_1_3_2_1_56_1","unstructured":"Chris Lomont. 2016. Introduction to Intel Advanced Vector Extensions. https:\/\/software.intel.com\/en-us\/articles\/introduction-to-intel-advanced-vector-extensions.  Chris Lomont. 2016. Introduction to Intel Advanced Vector Extensions. https:\/\/software.intel.com\/en-us\/articles\/introduction-to-intel-advanced-vector-extensions."},{"key":"e_1_3_2_1_57_1","volume-title":"Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 115--124","author":"Lvin Vitaliy B.","unstructured":"Vitaliy B. Lvin , Gene Novark , Emery D. Berger , and Benjamin G. Zorn . 2008. Archipelago: Trading Address Space for Reliability and Security . In Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 115--124 . Vitaliy B. Lvin, Gene Novark, Emery D. Berger, and Benjamin G. Zorn. 2008. Archipelago: Trading Address Space for Reliability and Security. In Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 115--124."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813676"},{"key":"e_1_3_2_1_59_1","volume-title":"Daniel Genkin, Daniel Gruss, Berk Sunar, Frank Piessens, and Yuval Yarom.","author":"Minkin Marina","year":"2019","unstructured":"Marina Minkin , Daniel Moghimi , Moritz Lipp , Michael Schwarz , Jo Van Bulck , Daniel Genkin, Daniel Gruss, Berk Sunar, Frank Piessens, and Yuval Yarom. 2019 . Fallout : Reading Kernel Writes From User Space . Marina Minkin, Daniel Moghimi, Moritz Lipp, Michael Schwarz, Jo Van Bulck, Daniel Genkin, Daniel Gruss, Berk Sunar, Frank Piessens, and Yuval Yarom. 2019. Fallout: Reading Kernel Writes From User Space."},{"key":"e_1_3_2_1_60_1","unstructured":"Daniel Moghimi. 2014. Subverting without EIP. http:\/\/www.moghimi.org\/subverting-without-eip\/.  Daniel Moghimi. 2014. Subverting without EIP. http:\/\/www.moghimi.org\/subverting-without-eip\/."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2018.00020"},{"key":"e_1_3_2_1_62_1","volume-title":"Proceedings of the 20th USENIX Security Symposium.","author":"M\u00fcller Tilo","year":"2011","unstructured":"Tilo M\u00fcller , Felix C. Freiling , and Andreas Dewald . 2011 . TRESOR Runs Encryption Securely Outside RAM . In Proceedings of the 20th USENIX Security Symposium. Tilo M\u00fcller, Felix C. Freiling, and Andreas Dewald. 2011. TRESOR Runs Encryption Securely Outside RAM. In Proceedings of the 20th USENIX Security Symposium."},{"key":"e_1_3_2_1_63_1","volume-title":"Proceedings of the 1st Summit on Advances in Programming Languages, (SNAPL). 190--208","author":"Nagarakatte Santosh","year":"2015","unstructured":"Santosh Nagarakatte , Milo M. K. Martin , and Steve Zdancewic . 2015 . Everything You Want to Know About Pointer-Based Checking . In Proceedings of the 1st Summit on Advances in Programming Languages, (SNAPL). 190--208 . Santosh Nagarakatte, Milo M. K. Martin, and Steve Zdancewic. 2015. Everything You Want to Know About Pointer-Based Checking. In Proceedings of the 1st Summit on Advances in Programming Languages, (SNAPL). 190--208."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542504"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806651.1806657"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065887.1065892"},{"key":"e_1_3_2_1_67_1","volume-title":"Proceedings of the 17th ACM Conference on Computer and Communications Security (CCS). 573--584","author":"Novark Gene","unstructured":"Gene Novark and Emery D. Berger . 2010. DieHarder: Securing the Heap . In Proceedings of the 17th ACM Conference on Computer and Communications Security (CCS). 573--584 . Gene Novark and Emery D. Berger. 2010. DieHarder: Securing the Heap. In Proceedings of the 17th ACM Conference on Computer and Communications Security (CCS). 573--584."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_20"},{"key":"e_1_3_2_1_69_1","unstructured":"Andrew Pardoe. 2017. Security Features in Microsoft Visual C++. https:\/\/blogs.msdn.com\/vcblog\/security-features-in-microsoft-visual-c\/.  Andrew Pardoe. 2017. Security Features in Microsoft Visual C++. https:\/\/blogs.msdn.com\/vcblog\/security-features-in-microsoft-visual-c\/."},{"key":"e_1_3_2_1_70_1","unstructured":"PaX Team. 2003. Address Space Layout Randomization. http:\/\/pax.grsecurity.net\/docs\/aslr.txt.  PaX Team. 2003. Address Space Layout Randomization. http:\/\/pax.grsecurity.net\/docs\/aslr.txt."},{"key":"e_1_3_2_1_71_1","unstructured":"PaX Team. 2003. Paging Based Non-executable Pages. http:\/\/pax.grsecurity.net\/docs\/pageexec.txt.  PaX Team. 2003. Paging Based Non-executable Pages. http:\/\/pax.grsecurity.net\/docs\/pageexec.txt."},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/1290520.1290524"},{"key":"e_1_3_2_1_73_1","volume-title":"Proceedings of the 12th USENIX Security Symposium.","author":"Provos Niels","year":"2003","unstructured":"Niels Provos , Markus Friedl , and Peter Honeyman . 2003 . Preventing Privilege Escalation . In Proceedings of the 12th USENIX Security Symposium. Niels Provos, Markus Friedl, and Peter Honeyman. 2003. Preventing Privilege Escalation. In Proceedings of the 12th USENIX Security Symposium."},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.39"},{"key":"e_1_3_2_1_75_1","volume-title":"Proceedings of the 11th Network and Distributed System Security Symposium (NDSS). 159--169","author":"Ruwase Olatunji","unstructured":"Olatunji Ruwase and Monica S. Lam . 2004. A Practical Dynamic Buffer Overflow Detector . In Proceedings of the 11th Network and Distributed System Security Symposium (NDSS). 159--169 . Olatunji Ruwase and Monica S. Lam. 2004. A Practical Dynamic Buffer Overflow Detector. In Proceedings of the 11th Network and Distributed System Security Symposium (NDSS). 159--169."},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.10"},{"key":"e_1_3_2_1_77_1","unstructured":"Fermin J. Serna. 2012. CVE-2012-0769 the case of the perfect info leak. http:\/\/zhodiac.hispahack.com\/my-stuff\/security\/FlashASLRbypass.pdf.  Fermin J. Serna. 2012. CVE-2012-0769 the case of the perfect info leak. http:\/\/zhodiac.hispahack.com\/my-stuff\/security\/FlashASLRbypass.pdf."},{"key":"e_1_3_2_1_78_1","volume-title":"Proceedings of the IEEE Symposium on Security and Privacy (S&P).","author":"Song C.","unstructured":"C. Song , H. Moon , M. Alam , I. Yun , B. Lee , T. Kim , W. Lee , and Y. Paek . 2016. HDFI: Hardware-Assisted Data-Flow Isolation . In Proceedings of the IEEE Symposium on Security and Privacy (S&P). C. Song, H. Moon, M. Alam, I. Yun, B. Lee, T. Kim, W. Lee, and Y. Paek. 2016. HDFI: Hardware-Assisted Data-Flow Isolation. In Proceedings of the IEEE Symposium on Security and Privacy (S&P)."},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1145\/237721.237727"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/2892208.2892235"},{"key":"e_1_3_2_1_81_1","unstructured":"Bing Sun Chong Xu and Stanley Zhu. 2017. The Power of Data-Oriented Attacks: Bypassing Memory Mitigation Using Data-Only Exploitation. In Black Hat Asia.  Bing Sun Chong Xu and Stanley Zhu. 2017. The Power of Data-Oriented Attacks: Bypassing Memory Mitigation Using Data-Only Exploitation. In Black Hat Asia."},{"key":"e_1_3_2_1_82_1","volume-title":"Proceedings of the USENIX Annual Technical Conference (ATC).","author":"Tsai Chia-Che","year":"2017","unstructured":"Chia-Che Tsai , Donald E Porter , and Mona Vij . 2017 . Graphene-SGX: A practical library OS for unmodified applications on SGX . In Proceedings of the USENIX Annual Technical Conference (ATC). Chia-Che Tsai, Donald E Porter, and Mona Vij. 2017. Graphene-SGX: A practical library OS for unmodified applications on SGX. In Proceedings of the USENIX Annual Technical Conference (ATC)."},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813673"},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00087"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660316"},{"key":"e_1_3_2_1_86_1","volume-title":"Proceedings of the 14th ACM Symposium on Operating Systems Principles (SOSP). 203--216","author":"Wahbe Robert","unstructured":"Robert Wahbe , Steven Lucco , Thomas E. Anderson , and Susan L. Graham . 1993. Efficient Software-based Fault Isolation . In Proceedings of the 14th ACM Symposium on Operating Systems Principles (SOSP). 203--216 . Robert Wahbe, Steven Lucco, Thomas E. Anderson, and Susan L. Graham. 1993. Efficient Software-based Fault Isolation. In Proceedings of the 14th ACM Symposium on Operating Systems Principles (SOSP). 203--216."},{"key":"e_1_3_2_1_87_1","unstructured":"David Weston and Matt Miller. 2016. Windows 10 Mitigation Improvements. Black Hat USA.  David Weston and Matt Miller. 2016. Windows 10 Mitigation Improvements. Black Hat USA."},{"key":"e_1_3_2_1_88_1","volume-title":"ACM International Conference on Virtual Execution Environments (VEE). 71--80","author":"Yang Jisoo","unstructured":"Jisoo Yang and Kang G. Shin . 2008. Using Hypervisor to Provide Data Secrecy for User Applications on a Per-page Basis . In ACM International Conference on Virtual Execution Environments (VEE). 71--80 . Jisoo Yang and Kang G. Shin. 2008. Using Hypervisor to Provide Data Secrecy for User Applications on a Per-page Basis. In ACM International Conference on Virtual Execution Environments (VEE). 71--80."},{"key":"e_1_3_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23190"},{"key":"e_1_3_2_1_90_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23327"},{"key":"e_1_3_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046713"}],"event":{"name":"ACSAC '19: 2019 Annual Computer Security Applications Conference","location":"San Juan Puerto Rico USA","acronym":"ACSAC '19"},"container-title":["Proceedings of the 35th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3359789.3359815","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3359789.3359815","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3359789.3359815","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:45:04Z","timestamp":1750203904000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3359789.3359815"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12,9]]},"references-count":90,"alternative-id":["10.1145\/3359789.3359815","10.1145\/3359789"],"URL":"https:\/\/doi.org\/10.1145\/3359789.3359815","relation":{},"subject":[],"published":{"date-parts":[[2019,12,9]]},"assertion":[{"value":"2019-12-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}