{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T01:09:14Z","timestamp":1782868154747,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":46,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,12,5]],"date-time":"2022-12-05T00:00:00Z","timestamp":1670198400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,12,5]]},"DOI":"10.1145\/3564625.3564634","type":"proceedings-article","created":{"date-parts":[[2022,12,3]],"date-time":"2022-12-03T01:01:29Z","timestamp":1670029289000},"page":"869-880","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Making Memory Account Accountable: Analyzing and Detecting Memory Missing-account bugs for Container Platforms"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2899-0117","authenticated-orcid":false,"given":"Yutian","family":"Yang","sequence":"first","affiliation":[{"name":"Zhejiang University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2899-6121","authenticated-orcid":false,"given":"Wenbo","family":"Shen","sequence":"additional","affiliation":[{"name":"Zhejiang University, China and Key Laboratory of Blockchain and Cyberspace Governance of Zhejiang Province, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3715-564X","authenticated-orcid":false,"given":"Xun","family":"Xie","sequence":"additional","affiliation":[{"name":"Zhejiang University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4763-7354","authenticated-orcid":false,"given":"Kangjie","family":"Lu","sequence":"additional","affiliation":[{"name":"University of Minnesota, Twin Cities, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5177-8531","authenticated-orcid":false,"given":"Mingsen","family":"Wang","sequence":"additional","affiliation":[{"name":"Zhejiang University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7325-0399","authenticated-orcid":false,"given":"Tianyu","family":"Zhou","sequence":"additional","affiliation":[{"name":"Zhejiang University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5989-9055","authenticated-orcid":false,"given":"Chenggang","family":"Qin","sequence":"additional","affiliation":[{"name":"Ant Group, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5231-9027","authenticated-orcid":false,"given":"Wang","family":"Yu","sequence":"additional","affiliation":[{"name":"Ant Group, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3441-6277","authenticated-orcid":false,"given":"Kui","family":"Ren","sequence":"additional","affiliation":[{"name":"Zhejiang University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,12,5]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2021. VMware ESXi: The Purpose-Built Bare Metal Hypervisor. https:\/\/www.vmware.com\/products\/esxi-and-esx.html.  2021. VMware ESXi: The Purpose-Built Bare Metal Hypervisor. https:\/\/www.vmware.com\/products\/esxi-and-esx.html."},{"key":"e_1_3_2_1_2_1","unstructured":"2022. Docker run reference. https:\/\/docs.docker.com\/engine\/reference\/run\/#runtime-privilege-and-linux-capabilities.  2022. Docker run reference. https:\/\/docs.docker.com\/engine\/reference\/run\/#runtime-privilege-and-linux-capabilities."},{"key":"e_1_3_2_1_3_1","unstructured":"2022. Host cgroup management. https:\/\/github.com\/kata-containers\/kata-containers\/blob\/main\/docs\/design\/host-cgroups.md.  2022. Host cgroup management. https:\/\/github.com\/kata-containers\/kata-containers\/blob\/main\/docs\/design\/host-cgroups.md."},{"key":"e_1_3_2_1_4_1","unstructured":"2022. Linux Container Configuration. https:\/\/github.com\/opencontainers\/runtime-spec\/blob\/main\/config-linux.md#control-groups.  2022. Linux Container Configuration. https:\/\/github.com\/opencontainers\/runtime-spec\/blob\/main\/config-linux.md#control-groups."},{"key":"e_1_3_2_1_5_1","unstructured":"2022. Linux Test Project. https:\/\/linux-test-project.github.io\/.  2022. Linux Test Project. https:\/\/linux-test-project.github.io\/."},{"key":"e_1_3_2_1_6_1","unstructured":"2022. LLVM Value Tracking Analysis. https:\/\/llvm.org\/doxygen\/ValueTracking_8cpp.html.  2022. LLVM Value Tracking Analysis. https:\/\/llvm.org\/doxygen\/ValueTracking_8cpp.html."},{"key":"e_1_3_2_1_7_1","unstructured":"2022. The new cgroup slab memory controller. https:\/\/lwn.net\/Articles\/824216\/.  2022. The new cgroup slab memory controller. https:\/\/lwn.net\/Articles\/824216\/."},{"key":"e_1_3_2_1_8_1","unstructured":"2022. New Linux Memory Controller. https:\/\/thenewstack.io\/a-new-linux-memory-controller-promises-to-save-lots-of-ram\/.  2022. New Linux Memory Controller. https:\/\/thenewstack.io\/a-new-linux-memory-controller-promises-to-save-lots-of-ram\/."},{"key":"e_1_3_2_1_9_1","unstructured":"2022. What is AWS Fargate?https:\/\/docs.aws.amazon.com\/AmazonECS\/latest\/userguide\/what-is-fargate.html.  2022. What is AWS Fargate?https:\/\/docs.aws.amazon.com\/AmazonECS\/latest\/userguide\/what-is-fargate.html."},{"key":"e_1_3_2_1_10_1","unstructured":"2022. Whole Program LLVM. https:\/\/github.com\/travitch\/whole-program-llvm.  2022. Whole Program LLVM. https:\/\/github.com\/travitch\/whole-program-llvm."},{"key":"e_1_3_2_1_11_1","unstructured":"AWS. 2022. AWS Management Console. https:\/\/aws.amazon.com\/console\/.  AWS. 2022. AWS Management Console. https:\/\/aws.amazon.com\/console\/."},{"key":"e_1_3_2_1_12_1","unstructured":"Gaurav Banga Peter Druschel and Jeffrey\u00a0C Mogul. 1999. Resource containers: A new facility for resource management in server systems. In OSDI Vol.\u00a099. 45\u201358.  Gaurav Banga Peter Druschel and Jeffrey\u00a0C Mogul. 1999. Resource containers: A new facility for resource management in server systems. In OSDI Vol.\u00a099. 45\u201358."},{"key":"e_1_3_2_1_13_1","volume-title":"Xen and the art of virtualization. ACM SIGOPS operating systems review 37, 5","author":"Barham Paul","year":"2003","unstructured":"Paul Barham , Boris Dragovic , Keir Fraser , Steven Hand , Tim Harris , Alex Ho , Rolf Neugebauer , Ian Pratt , and Andrew Warfield . 2003. Xen and the art of virtualization. ACM SIGOPS operating systems review 37, 5 ( 2003 ), 164\u2013177. Paul Barham, Boris Dragovic, Keir Fraser, Steven Hand, Tim Harris, Alex Ho, Rolf Neugebauer, Ian Pratt, and Andrew Warfield. 2003. Xen and the art of virtualization. ACM SIGOPS operating systems review 37, 5 (2003), 164\u2013177."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250789"},{"key":"e_1_3_2_1_15_1","unstructured":"IBM Cloud. 2022. IBM Cloud Functions. https:\/\/www.ibm.com\/cloud\/functions.  IBM Cloud. 2022. IBM Cloud Functions. https:\/\/www.ibm.com\/cloud\/functions."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/286942.286944"},{"key":"e_1_3_2_1_17_1","unstructured":"Docker. 2022. Runtime metrics. https:\/\/docs.docker.com\/config\/containers\/runmetrics\/.  Docker. 2022. Runtime metrics. https:\/\/docs.docker.com\/config\/containers\/runmetrics\/."},{"key":"e_1_3_2_1_18_1","unstructured":"Docker. 2022. Seccomp security profiles for Docker. https:\/\/docs.docker.com\/engine\/security\/seccomp\/.  Docker. 2022. Seccomp security profiles for Docker. https:\/\/docs.docker.com\/engine\/security\/seccomp\/."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378512"},{"key":"e_1_3_2_1_20_1","volume-title":"Detecting Kernel Memory Leaks in Specialized Modules with Ownership Reasoning. In In Proceedings of the 2021 Annual Network and Distributed System Security Symposium (NDSS\u201921)","author":"Emamdoost Navid","year":"2021","unstructured":"Navid Emamdoost , Qiushi Wu , Kangjie Lu , and Stephen McCamant . 2021 . Detecting Kernel Memory Leaks in Specialized Modules with Ownership Reasoning. In In Proceedings of the 2021 Annual Network and Distributed System Security Symposium (NDSS\u201921) . Navid Emamdoost, Qiushi Wu, Kangjie Lu, and Stephen McCamant. 2021. Detecting Kernel Memory Leaks in Specialized Modules with Ownership Reasoning. In In Proceedings of the 2021 Annual Network and Distributed System Security Symposium (NDSS\u201921)."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.64"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354227"},{"key":"e_1_3_2_1_23_1","unstructured":"Red Hat. 2022. Red Hat OpenShift. https:\/\/www.redhat.com\/en\/technologies\/cloud-computing\/openshift.  Red Hat. 2022. Red Hat OpenShift. https:\/\/www.redhat.com\/en\/technologies\/cloud-computing\/openshift."},{"key":"e_1_3_2_1_24_1","volume-title":"Kata Containers: The speed of containers, the security of VMs. https:\/\/katacontainers.io\/.","year":"2022","unstructured":"katacontainers. 2022 . Kata Containers: The speed of containers, the security of VMs. https:\/\/katacontainers.io\/. katacontainers. 2022. Kata Containers: The speed of containers, the security of VMs. https:\/\/katacontainers.io\/."},{"key":"e_1_3_2_1_25_1","volume-title":"Proceedings of the Linux symposium, Vol.\u00a01. Dttawa","author":"Kivity Avi","year":"2007","unstructured":"Avi Kivity , Yaniv Kamay , Dor Laor , Uri Lublin , and Anthony Liguori . 2007 . kvm: the Linux virtual machine monitor . In Proceedings of the Linux symposium, Vol.\u00a01. Dttawa , Dntorio, Canada, 225\u2013230. Avi Kivity, Yaniv Kamay, Dor Laor, Uri Lublin, and Anthony Liguori. 2007. kvm: the Linux virtual machine monitor. In Proceedings of the Linux symposium, Vol.\u00a01. Dttawa, Dntorio, Canada, 225\u2013230."},{"key":"e_1_3_2_1_26_1","volume-title":"2014 USENIX Annual Technical Conference (USENIX ATC 14)","author":"Kivity Avi","year":"2014","unstructured":"Avi Kivity , Dor Laor , Glauber Costa , Pekka Enberg , Nadav Har\u2019El , Don Marti , and Vlad Zolotarov . 2014 . OSv\u2014optimizing the operating system for virtual machines . In 2014 USENIX Annual Technical Conference (USENIX ATC 14) . 61\u201372. Avi Kivity, Dor Laor, Glauber Costa, Pekka Enberg, Nadav Har\u2019El, Don Marti, and Vlad Zolotarov. 2014. OSv\u2014optimizing the operating system for virtual machines. In 2014 USENIX Annual Technical Conference (USENIX ATC 14). 61\u201372."},{"key":"e_1_3_2_1_27_1","volume-title":"PCA: Memory Leak Detection Using Partial Call-Path Analysis(ESEC\/FSE","author":"Li Wen","year":"2020","unstructured":"Wen Li , Haipeng Cai , Yulei Sui , and David Manz . 2020 . PCA: Memory Leak Detection Using Partial Call-Path Analysis(ESEC\/FSE 2020). Association for Computing Machinery , New York, NY, USA . Wen Li, Haipeng Cai, Yulei Sui, and David Manz. 2020. PCA: Memory Leak Detection Using Partial Call-Path Analysis(ESEC\/FSE 2020). Association for Computing Machinery, New York, NY, USA."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCSW.2010.40"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132763"},{"key":"e_1_3_2_1_30_1","unstructured":"Apache OpenWhisk. 2022. Apache OpenWhisk: Open Source Serverless Cloud Platform. https:\/\/openwhisk.apache.org\/.  Apache OpenWhisk. 2022. Apache OpenWhisk: Open Source Serverless Cloud Platform. https:\/\/openwhisk.apache.org\/."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24267"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950399"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.5555\/829515.830545"},{"key":"e_1_3_2_1_34_1","unstructured":"Rami Rosen. 2016. Namespaces and Cgroups \u2013 the basis of Linux Containers. https:\/\/netdevconf.info\/1.1\/proceedings\/slides\/rosen-namespaces-cgroups-lxc.pdf.  Rami Rosen. 2016. Namespaces and Cgroups \u2013 the basis of Linux Containers. https:\/\/netdevconf.info\/1.1\/proceedings\/slides\/rosen-namespaces-cgroups-lxc.pdf."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304016"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2338965.2336784"},{"key":"e_1_3_2_1_37_1","volume-title":"22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID","author":"Wang Jianqiang","year":"2019","unstructured":"Jianqiang Wang , Siqi Ma , Yuanyuan Zhang , Juanru Li , Zheyu Ma , Long Mai , Tiancheng Chen , and Dawu Gu . 2019 . Nlp-eye: Detecting memory corruptions via semantic-aware memory operation function identification . In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019). 309\u2013321. Jianqiang Wang, Siqi Ma, Yuanyuan Zhang, Juanru Li, Zheyu Ma, Long Mai, Tiancheng Chen, and Dawu Gu. 2019. Nlp-eye: Detecting memory corruptions via semantic-aware memory operation function identification. In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019). 309\u2013321."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029873.1029888"},{"key":"e_1_3_2_1_39_1","volume-title":"Understanding and Detecting Disordered Error Handling with Precise Function Pairing. In 30th USENIX Security Symposium (USENIX Security 21)","author":"Wu Qiushi","year":"2021","unstructured":"Qiushi Wu , Aditya Pakki , Navid Emamdoost , Stephen McCamant , and Kangjie Lu . 2021 . Understanding and Detecting Disordered Error Handling with Precise Function Pairing. In 30th USENIX Security Symposium (USENIX Security 21) . USENIX Association. Qiushi Wu, Aditya Pakki, Navid Emamdoost, Stephen McCamant, and Kangjie Lu. 2021. Understanding and Detecting Disordered Error Handling with Precise Function Pairing. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/1081706.1081728"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2851613.2851773"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484744"},{"key":"e_1_3_2_1_43_1","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Zhang Tong","year":"2019","unstructured":"Tong Zhang , Wenbo Shen , Dongyoon Lee , Changhee Jung , Ahmed\u00a0 M Azab , and Ruowen Wang . 2019 . Pex: A permission check analysis framework for linux kernel . In 28th USENIX Security Symposium (USENIX Security 19) . 1205\u20131220. Tong Zhang, Wenbo Shen, Dongyoon Lee, Changhee Jung, Ahmed\u00a0M Azab, and Ruowen Wang. 2019. Pex: A permission check analysis framework for linux kernel. In 28th USENIX Security Symposium (USENIX Security 19). 1205\u20131220."},{"key":"e_1_3_2_1_44_1","volume-title":"2018 USENIX Annual Technical Conference (USENIXATC 18)","author":"Zhang Yiming","year":"2018","unstructured":"Yiming Zhang , Jon Crowcroft , Dongsheng Li , Chengfen Zhang , Huiba Li , Yaozheng Wang , Kai Yu , Yongqiang Xiong , and Guihai Chen . 2018 . KylinX: a dynamic library operating system for simplified and efficient cloud virtualization . In 2018 USENIX Annual Technical Conference (USENIXATC 18) . 173\u2013186. Yiming Zhang, Jon Crowcroft, Dongsheng Li, Chengfen Zhang, Huiba Li, Yaozheng Wang, Kai Yu, Yongqiang Xiong, and Guihai Chen. 2018. KylinX: a dynamic library operating system for simplified and efficient cloud virtualization. In 2018 USENIX Annual Technical Conference (USENIXATC 18). 173\u2013186."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2006.37"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3165368"}],"event":{"name":"ACSAC: Annual Computer Security Applications Conference","location":"Austin TX USA","acronym":"ACSAC"},"container-title":["Proceedings of the 38th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3564625.3564634","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3564625.3564634","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:09:11Z","timestamp":1750183751000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3564625.3564634"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,12,5]]},"references-count":46,"alternative-id":["10.1145\/3564625.3564634","10.1145\/3564625"],"URL":"https:\/\/doi.org\/10.1145\/3564625.3564634","relation":{},"subject":[],"published":{"date-parts":[[2022,12,5]]},"assertion":[{"value":"2022-12-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}