{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:14:14Z","timestamp":1750220054062,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,3,27]],"date-time":"2023-03-27T00:00:00Z","timestamp":1679875200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Japan Science and Technology (JST)","award":["JPMJCR22U3"],"award-info":[{"award-number":["JPMJCR22U3"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,3,27]]},"DOI":"10.1145\/3555776.3577687","type":"proceedings-article","created":{"date-parts":[[2023,6,7]],"date-time":"2023-06-07T17:16:29Z","timestamp":1686158189000},"page":"1293-1300","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Nioh-PT: Virtual I\/O Filtering for Agile Protection against Vulnerability Windows"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4876-6585","authenticated-orcid":false,"given":"Mana","family":"Senuki","sequence":"first","affiliation":[{"name":"Dept. of Information and Computer Science, Keio University, Yokohama, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0302-1600","authenticated-orcid":false,"given":"Kenta","family":"Ishiguro","sequence":"additional","affiliation":[{"name":"Hosei University, Tokyo, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8650-9822","authenticated-orcid":false,"given":"Kenji","family":"Kono","sequence":"additional","affiliation":[{"name":"Dept. of Information and Computer Science, Keio University, Yokohama, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,6,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2020. Filebench. https:\/\/github.com\/filebench\/filebench  2020. Filebench. https:\/\/github.com\/filebench\/filebench"},{"key":"e_1_3_2_1_2_1","unstructured":"2022. Crate predicates. https:\/\/docs.rs\/predicates\/latest\/predicates\/  2022. Crate predicates. https:\/\/docs.rs\/predicates\/latest\/predicates\/"},{"key":"e_1_3_2_1_3_1","unstructured":"2022. git:\/\/git.qemu.org\/qemu.git. https:\/\/git.qemu.org\/?p=qemu.git  2022. git:\/\/git.qemu.org\/qemu.git. https:\/\/git.qemu.org\/?p=qemu.git"},{"key":"e_1_3_2_1_4_1","volume-title":"17th USENIX symposium on networked systems design and implementation (NSDI 20)","author":"Agache Alexandru","year":"2020","unstructured":"Alexandru Agache , Marc Brooker , Alexandra Iordache , Anthony Liguori , Rolf Neugebauer , Phil Piwonka , and Diana-Maria Popa . 2020 . Firecracker: Lightweight virtualization for serverless applications . In 17th USENIX symposium on networked systems design and implementation (NSDI 20) . USENIX Association, 419--434. Alexandru Agache, Marc Brooker, Alexandra Iordache, Anthony Liguori, Rolf Neugebauer, Phil Piwonka, and Diana-Maria Popa. 2020. Firecracker: Lightweight virtualization for serverless applications. In 17th USENIX symposium on networked systems design and implementation (NSDI 20). USENIX Association, 419--434."},{"key":"e_1_3_2_1_5_1","unstructured":"AMD. 2021. AMD64 Architecture Programmer's Manual Volume 2: System Programming. https:\/\/www.amd.com\/system\/files\/TechDocs\/24593.pdf  AMD. 2021. AMD64 Architecture Programmer's Manual Volume 2: System Programming. https:\/\/www.amd.com\/system\/files\/TechDocs\/24593.pdf"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815420"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945462"},{"key":"e_1_3_2_1_8_1","volume-title":"2005 USENIX Annual Technical Conference (USENIX ATC 05)","author":"Bellard Fabrice","year":"2005","unstructured":"Fabrice Bellard . 2005 . QEMU, a Fast and Portable Dynamic Translator . In 2005 USENIX Annual Technical Conference (USENIX ATC 05) . USENIX Association. Fabrice Bellard. 2005. QEMU, a Fast and Portable Dynamic Translator. In 2005 USENIX Annual Technical Conference (USENIX ATC 05). USENIX Association."},{"key":"e_1_3_2_1_9_1","unstructured":"CrowdStrike. 2015. VENOM Vulnerability Details. https:\/\/www.crowdstrike.com\/blog\/venom-vulnerability-details\/  CrowdStrike. 2015. VENOM Vulnerability Details. https:\/\/www.crowdstrike.com\/blog\/venom-vulnerability-details\/"},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings of the 13th ACM SIGPLAN\/SIGOPS International Conference on Virtual Execution Environments (VEE '17)","author":"Deng Liang","year":"2017","unstructured":"Liang Deng , Peng Liu , Jun Xu , Ping Chen , and Qingkai Zeng . 2017 . Dancing with Wolves: Towards Practical Event-Driven VMM Monitoring . In Proceedings of the 13th ACM SIGPLAN\/SIGOPS International Conference on Virtual Execution Environments (VEE '17) . ACM, 83--96. Liang Deng, Peng Liu, Jun Xu, Ping Chen, and Qingkai Zeng. 2017. Dancing with Wolves: Towards Practical Event-Driven VMM Monitoring. In Proceedings of the 13th ACM SIGPLAN\/SIGOPS International Conference on Virtual Execution Environments (VEE '17). ACM, 83--96."},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of the Thirteenth EuroSys Conference (EuroSys '18)","author":"Fonseca Pedro","year":"2018","unstructured":"Pedro Fonseca , Xi Wang , and Arvind Krishnamurthy . 2018 . MultiNyx: A Multi-Level Abstraction Framework for Systematic Analysis of Hypervisors . In Proceedings of the Thirteenth EuroSys Conference (EuroSys '18) . ACM, Article 23. Pedro Fonseca, Xi Wang, and Arvind Krishnamurthy. 2018. MultiNyx: A Multi-Level Abstraction Framework for Systematic Analysis of Hypervisors. In Proceedings of the Thirteenth EuroSys Conference (EuroSys '18). ACM, Article 23."},{"key":"e_1_3_2_1_12_1","unstructured":"Google. 2022. crosvm - The Chrome OS Virtual Machine Monitor. https:\/\/chromium.googlesource.com\/chromiumos\/platform\/crosvm\/  Google. 2022. crosvm - The Chrome OS Virtual Machine Monitor. https:\/\/chromium.googlesource.com\/chromiumos\/platform\/crosvm\/"},{"key":"e_1_3_2_1_13_1","unstructured":"Red Hat. 2022. Red Hat Bugzilla - Main Page. https:\/\/bugzilla.redhat.com\/  Red Hat. 2022. Red Hat Bugzilla - Main Page. https:\/\/bugzilla.redhat.com\/"},{"key":"e_1_3_2_1_14_1","volume-title":"VDF: Targeted Evolutionary Fuzz Testing of Virtual Devices. In International Symposium on Research in Attacks, Intrusions, and Defenses. Springer, 3--25","author":"Henderson Andrew","year":"2017","unstructured":"Andrew Henderson , Heng Yin , Guang Jin , Hao Han , and Hongmei Deng . 2017 . VDF: Targeted Evolutionary Fuzz Testing of Virtual Devices. In International Symposium on Research in Attacks, Intrusions, and Defenses. Springer, 3--25 . Andrew Henderson, Heng Yin, Guang Jin, Hao Han, and Hongmei Deng. 2017. VDF: Targeted Evolutionary Fuzz Testing of Virtual Devices. In International Symposium on Research in Attacks, Intrusions, and Defenses. Springer, 3--25."},{"key":"e_1_3_2_1_15_1","unstructured":"Intel. [n. d.]. Intel Virtualization Technology (Intel VT). https:\/\/www.intel.com\/content\/www\/us\/en\/virtualization\/virtualization-technology\/intel-virtualization-technology.html  Intel. [n. d.]. Intel Virtualization Technology (Intel VT). https:\/\/www.intel.com\/content\/www\/us\/en\/virtualization\/virtualization-technology\/intel-virtualization-technology.html"},{"key":"e_1_3_2_1_16_1","volume-title":"KVM: the Linux Virtual Machine Monitor. In In Proceedings of the 2007 Ottawa Linux Symposium (OLS'07)","author":"Kivity Avi","year":"2007","unstructured":"Avi Kivity , Yaniv Kamay , Dor Laor , Uri Lublin , and Anthony Liguori . 2007 . KVM: the Linux Virtual Machine Monitor. In In Proceedings of the 2007 Ottawa Linux Symposium (OLS'07) . Avi Kivity, Yaniv Kamay, Dor Laor, Uri Lublin, and Anthony Liguori. 2007. KVM: the Linux Virtual Machine Monitor. In In Proceedings of the 2007 Ottawa Linux Symposium (OLS'07)."},{"key":"e_1_3_2_1_17_1","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Li Shih-Wei","year":"2019","unstructured":"Shih-Wei Li , John S. Koh , and Jason Nieh . 2019 . Protecting Cloud Virtual Machines from Hypervisor and Host Operating System Exploits . In 28th USENIX Security Symposium (USENIX Security 19) . USENIX Association, 1357--1374. Shih-Wei Li, John S. Koh, and Jason Nieh. 2019. Protecting Cloud Virtual Machines from Hypervisor and Host Operating System Exploits. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, 1357--1374."},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 29th USENIX Conference on Security Symposium. USENIX Association, 1695--1712","author":"Mi Zeyu","year":"2020","unstructured":"Zeyu Mi , Dingji Li , Haibo Chen , Binyu Zang , and Haibing Guan . 2020 . (Mostly) Exitless VM protection from untrusted hypervisor through disaggregated nested virtualization . In Proceedings of the 29th USENIX Conference on Security Symposium. USENIX Association, 1695--1712 . Zeyu Mi, Dingji Li, Haibo Chen, Binyu Zang, and Haibing Guan. 2020. (Mostly) Exitless VM protection from untrusted hypervisor through disaggregated nested virtualization. In Proceedings of the 29th USENIX Conference on Security Symposium. USENIX Association, 1695--1712."},{"key":"e_1_3_2_1_19_1","first-page":"2016","volume":"202","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 202 0. CVE- 2016 - 7909 . https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2016-7909 National Institute of Standards and Technology. 2020. CVE-2016-7909. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2016-7909","journal-title":"Technology."},{"key":"e_1_3_2_1_20_1","first-page":"2020","volume":"202","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 202 0. CVE- 2020 - 13361 . https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-13361 National Institute of Standards and Technology. 2020. CVE-2020-13361. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-13361","journal-title":"Technology."},{"key":"e_1_3_2_1_21_1","first-page":"2015","volume":"202","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 202 1. CVE- 2015 - 3456 . https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-3456 National Institute of Standards and Technology. 2021. CVE-2015-3456. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-3456","journal-title":"Technology."},{"key":"e_1_3_2_1_22_1","first-page":"2015","volume":"202","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 202 1. CVE- 2015 - 5279 . https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-5279 National Institute of Standards and Technology. 2021. CVE-2015-5279. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-5279","journal-title":"Technology."},{"key":"e_1_3_2_1_23_1","first-page":"2020","volume":"202","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 202 1. CVE- 2020 - 15863 . https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-15863 National Institute of Standards and Technology. 2021. CVE-2020-15863. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-15863","journal-title":"Technology."},{"key":"e_1_3_2_1_24_1","first-page":"2020","volume":"202","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 202 2. CVE- 2020 - 13800 . https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-13800 National Institute of Standards and Technology. 2022. CVE-2020-13800. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-13800","journal-title":"Technology."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447786.3456235"},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of the 7th ACM european conference on Computer Systems (EuroSys '12)","author":"Nguyen Anh","year":"2012","unstructured":"Anh Nguyen , Himanshu Raj , Shravan Rayanchu , Stefan Saroiu , and Alec Wolman . 2012 . Delusional boot: securing hypervisors without massive re-engineering . In Proceedings of the 7th ACM european conference on Computer Systems (EuroSys '12) . ACM, 141--154. Anh Nguyen, Himanshu Raj, Shravan Rayanchu, Stefan Saroiu, and Alec Wolman. 2012. Delusional boot: securing hypervisors without massive re-engineering. In Proceedings of the 7th ACM european conference on Computer Systems (EuroSys '12). ACM, 141--154."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134648"},{"key":"e_1_3_2_1_28_1","unstructured":"ORACLE. 2022. Oracle VM VirutalBox. https:\/\/www.virtualbox.org  ORACLE. 2022. Oracle VM VirutalBox. https:\/\/www.virtualbox.org"},{"key":"e_1_3_2_1_29_1","unstructured":"Tavis Ormandy. 2007. An empirical study into the security exposure to hosts of hostile virtualized environments (CanSecWest '07).  Tavis Ormandy. 2007. An empirical study into the security exposure to hosts of hostile virtualized environments (CanSecWest '07)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484811"},{"key":"e_1_3_2_1_31_1","unstructured":"Rust Team. 2022. Rust. https:\/\/www.rust-lang.org\/  Rust Team. 2022. Rust. https:\/\/www.rust-lang.org\/"},{"key":"e_1_3_2_1_32_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Schumilo Sergej","year":"2021","unstructured":"Sergej Schumilo , Cornelius Aschermann , Ali Abbasi , Simon W\u00f6rner , and Thorsten Holz . 2021 . Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types . In 30th USENIX Security Symposium (USENIX Security 21) . USENIX Association, 2597--2614. Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon W\u00f6rner, and Thorsten Holz. 2021. Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 2597--2614."},{"key":"e_1_3_2_1_33_1","volume-title":"HYPER-CUBE: High-Dimensional Hypervisor Fuzzing. In 27th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society.","author":"Schumilo Sergej","year":"2020","unstructured":"Sergej Schumilo , Cornelius Aschermann , Ali Abbasi , Simon W\u00f6rner , and Thorsten Holz . 2020 . HYPER-CUBE: High-Dimensional Hypervisor Fuzzing. In 27th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society. Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon W\u00f6rner, and Thorsten Holz. 2020. HYPER-CUBE: High-Dimensional Hypervisor Fuzzing. In 27th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society."},{"key":"e_1_3_2_1_34_1","volume-title":"Deconstructing Xen. In 24th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society.","author":"Shi Lei","year":"2017","unstructured":"Lei Shi , Yuming Wu , Yubin Xia , Nathan Dautenhahn , Haibo Chen , Binyu Zang , and Jinming Li . 2017 . Deconstructing Xen. In 24th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society. Lei Shi, Yuming Wu, Yubin Xia, Nathan Dautenhahn, Haibo Chen, Binyu Zang, and Jinming Li. 2017. Deconstructing Xen. In 24th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755913.1755935"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046754"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2168836.2168850"},{"key":"e_1_3_2_1_38_1","volume-title":"Taming Hosted Hypervisors with (Mostly) Deprivileged Execution. In 20th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society.","author":"Wu Chiachih","year":"2013","unstructured":"Chiachih Wu , Zhi Wang , and Xuxian Jiang . 2013 . Taming Hosted Hypervisors with (Mostly) Deprivileged Execution. In 20th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society. Chiachih Wu, Zhi Wang, and Xuxian Jiang. 2013. Taming Hosted Hypervisors with (Mostly) Deprivileged Execution. In 20th Annual Network and Distributed System Security Symposium, NDSS. The Internet Society."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043576"}],"event":{"name":"SAC '23: 38th ACM\/SIGAPP Symposium on Applied Computing","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"],"location":"Tallinn Estonia","acronym":"SAC '23"},"container-title":["Proceedings of the 38th ACM\/SIGAPP Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3555776.3577687","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3555776.3577687","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:08:24Z","timestamp":1750183704000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3555776.3577687"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,27]]},"references-count":39,"alternative-id":["10.1145\/3555776.3577687","10.1145\/3555776"],"URL":"https:\/\/doi.org\/10.1145\/3555776.3577687","relation":{},"subject":[],"published":{"date-parts":[[2023,3,27]]},"assertion":[{"value":"2023-06-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}