{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:40:23Z","timestamp":1755823223936,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":76,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,11,15]],"date-time":"2023-11-15T00:00:00Z","timestamp":1700006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"NSF","award":["CNS-2245442"],"award-info":[{"award-number":["CNS-2245442"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,11,15]]},"DOI":"10.1145\/3576915.3623070","type":"proceedings-article","created":{"date-parts":[[2023,11,21]],"date-time":"2023-11-21T12:35:13Z","timestamp":1700570113000},"page":"2989-3002","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Splice: Efficiently Removing a User's Data from In-memory Application State"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1374-153X","authenticated-orcid":false,"given":"Xueyuan","family":"Han","sequence":"first","affiliation":[{"name":"Wake Forest University, Winston-Salem, NC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-7296-5185","authenticated-orcid":false,"given":"James","family":"Mickens","sequence":"additional","affiliation":[{"name":"Harvard University, Cambridge, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4272-3293","authenticated-orcid":false,"given":"Siddhartha","family":"Sen","sequence":"additional","affiliation":[{"name":"Microsoft Research, New York, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,11,21]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Accessed 19th September 2023. pppd. https:\/\/linux.die.net\/man\/8\/pppd."},{"key":"e_1_3_2_1_2_1","unstructured":"Accessed 19th September 2023. Signal. https:\/\/signal.org."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.22"},{"volume-title":"Proceedings of the Conference on Mass Storage Systems and Technologies","author":"Barker Austen","key":"e_1_3_2_1_4_1","unstructured":"Austen Barker, Yash Gupta, Sabrina Au, Eugene Chou, Ethan L. Miller, and Darrell D. E. Long. 2020. Artifice: Data in Disguise. In Proceedings of the Conference on Mass Storage Systems and Technologies (Santa Clara, CA)."},{"volume-title":"Redis in Action","author":"Carlson Josiah L.","key":"e_1_3_2_1_5_1","unstructured":"Josiah L. Carlson. 2013. Redis in Action. Manning Publications Co."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2014.66"},{"key":"e_1_3_2_1_7_1","unstructured":"Shell Chan. 2021. SSTP Server. https:\/\/github.com\/sorz\/sstp-server."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2006.158"},{"key":"e_1_3_2_1_9_1","volume-title":"Proceedings of the 14th Conference on USENIX Security Symposium","author":"Chow Jim","year":"2005","unstructured":"Jim Chow, Ben Pfaff, Tal Garfinkel, and Mendel Rosenblum. 2005. Shredding Your Garbage: Reducing Data Lifetime through Secure Deallocation. In Proceedings of the 14th Conference on USENIX Security Symposium (Baltimore, MD)."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2509136.2509557"},{"key":"e_1_3_2_1_11_1","volume-title":"DELF: Safeguarding Deletion Correctness in Online Social Networks. In 29th USENIX Security Symposium","author":"Cohn-Gordon Katriel","year":"2020","unstructured":"Katriel Cohn-Gordon, Georgios Damaskinos, Divino Neto, Joshi Cordova, Beno\u00eet Reitz, Benjamin Strahs, Daniel Obenshain, Paul Pearce, and Ioannis Papagiannis. 2020. DELF: Safeguarding Deletion Correctness in Online Social Networks. In 29th USENIX Security Symposium (Boston, MA)."},{"volume-title":"Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems (Espoo, Finland). 210--222.","author":"Conti Juan Jos\u00e9","key":"e_1_3_2_1_12_1","unstructured":"Juan Jos\u00e9 Conti and Alejandro Russo. 2010. A Taint Mode for Python via a Library. In Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems (Espoo, Finland). 210--222."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/357775.357777"},{"key":"e_1_3_2_1_14_1","volume-title":"Proceedings of the USENIX Workshop on Hot Topics in Security","author":"Czeskis Alexei","year":"2008","unstructured":"Alexei Czeskis, David J. St. Hilaire, Karl Koscher, Steven D. Gribble, Tadayoshi Kohno, and Bruce Schneier. 2008. Defeating Encrypted and Deniable File Systems: TrueCrypt v5.1a and the Case of the Tattling OS and Applications. In Proceedings of the USENIX Workshop on Hot Topics in Security (San Jose, CA)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"Leonardo de Moura and Nikolaj Bj\u00f8rner. 2008. Z3: An Efficient SMT Solver. In Tools and Algorithms for the Construction and Analysis of Systems. 337--340.","DOI":"10.1007\/978-3-540-78800-3_24"},{"key":"e_1_3_2_1_16_1","unstructured":"Jeff Dean and Sanjay Ghemawat. 2011. LevelDB: A Fast Persistent Key-Value Store. https:\/\/opensource.googleblog.com\/2011\/07\/leveldb-fast-persistent-key-value-store.html."},{"key":"e_1_3_2_1_17_1","volume-title":"Puppeteer: Headless Chrome Node.js API. https:\/\/github. com\/puppeteer\/puppeteer.","author":"DevTools Chrome","year":"2021","unstructured":"Chrome DevTools. 2021. Puppeteer: Headless Chrome Node.js API. https:\/\/github. com\/puppeteer\/puppeteer."},{"key":"e_1_3_2_1_18_1","volume-title":"LFS: Lightening Fast Shop. https:\/\/github.com\/diefenbach\/ django-lfs.","author":"Diefenbach Kai","year":"2021","unstructured":"Kai Diefenbach. 2021. LFS: Lightening Fast Shop. https:\/\/github.com\/diefenbach\/ django-lfs."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251375.1251396"},{"key":"e_1_3_2_1_20_1","unstructured":"Django Software Foundation. 2023. Security in Django. https:\/\/docs. djangoproject.com\/en\/4.2\/topics\/security\/."},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of the 25th USENIX Security Symposium","author":"Elnikety Eslam","year":"2016","unstructured":"Eslam Elnikety, Aastha Mehta, Anjo Vahldiek-Oberwagner, Deepak Garg, and Peter Druschel. 2016. Thoth: Comprehensive Policy Compliance in Data Retrieval Systems. In Proceedings of the 25th USENIX Security Symposium (Austin, TX). 637--654."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"e_1_3_2_1_23_1","volume-title":"Towards Practical Taint Tracking. EECS Department","author":"Ermolinskiy Andrey","year":"2010","unstructured":"Andrey Ermolinskiy, Sachin Katti, Scott Shenker, L Fowler, and Murphy McCauley. 2010. Towards Practical Taint Tracking. EECS Department, University of California, Berkeley, Tech. Rep. UCB\/EECS-2010-92 (2010)."},{"key":"e_1_3_2_1_24_1","unstructured":"ExpressVPN. 2023. ExpressVPN: High-speed Secure and Anonymous VPN Service. https:\/\/www.expressvpn.com."},{"volume-title":"Python Web Development with Django","author":"Forcier Jeff","key":"e_1_3_2_1_25_1","unstructured":"Jeff Forcier, Paul Bissex, and Wesley J Chun. 2008. Python Web Development with Django. Addison-Wesley Professional."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236030"},{"volume-title":"Proceedings of the 18th USENIX Security Symposium","author":"Geambasu Roxana","key":"e_1_3_2_1_27_1","unstructured":"Roxana Geambasu, Tadayoshi Kohno, Amit A. Levy, and Henry M. Levy. 2009. Vanish: Increasing Data Privacy with Self-Destructing Data. In Proceedings of the 18th USENIX Security Symposium (Montreal, Canada). 299--316."},{"key":"e_1_3_2_1_28_1","unstructured":"Lennart Grahl. 2015. SaltyRTC an End-to-end Encrypted Signalling Protocal. https:\/\/saltyrtc.org."},{"volume-title":"Proceedings of the ACM Symposium on Cloud Computing","author":"Gunawi Haryadi S.","key":"e_1_3_2_1_29_1","unstructured":"Haryadi S. Gunawi, Mingzhe Hao, Riza O. Suminto, Agung Laksono, Anang D. Satria, Jeffry Adityatama, and Kurnia J. Eliazar. 2016. Why Does the Cloud Stop Computing? Lessons from Hundreds of Service Outages. In Proceedings of the ACM Symposium on Cloud Computing (Santa Clara, CA). 1--16."},{"key":"e_1_3_2_1_30_1","volume-title":"Failure Recovery: When the Cure Is Worse Than the Disease. In 14th Workshop on Hot Topics in Operating Systems (Santa Ana Pueblo, NM).","author":"Guo Zhenyu","year":"2013","unstructured":"Zhenyu Guo, Sean McDirmid, Mao Yang, Li Zhuang, Pu Zhang, Yingwei Luo, Tom Bergan, Peter Bodik, Madan Musuvathi, Zheng Zhang, and Lidong Zhou. 2013. Failure Recovery: When the Cure Is Worse Than the Disease. In 14th Workshop on Hot Topics in Operating Systems (Santa Ana Pueblo, NM)."},{"key":"e_1_3_2_1_31_1","volume-title":"Proceedings of the IEEE International Symposium on Secure Software Engineering","volume":"1","author":"Halfond William G","year":"2006","unstructured":"William G Halfond, Jeremy Viegas, Alessandro Orso, et al. 2006. A Classification of SQL-injection Attacks and Countermeasures. In Proceedings of the IEEE International Symposium on Secure Software Engineering, Vol. 1. 13--15."},{"volume-title":"Proceedings of the International Conference on World Wide Web","author":"He Ruining","key":"e_1_3_2_1_32_1","unstructured":"Ruining He and Julian J. McAuley. 2016. Ups and Downs: Modeling the Visual Evo-lution of Fashion Trends with One-Class Collaborative Filtering. In Proceedings of the International Conference on World Wide Web (Montreal, Canada). 507--517."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516704"},{"key":"e_1_3_2_1_34_1","volume-title":"Garbage Collection: Algorithms for Automatic Dynamic Memory Management","author":"Jones Richard","year":"1996","unstructured":"Richard Jones and Rafael Lins. 1996. Garbage Collection: Algorithms for Automatic Dynamic Memory Management. John Wiley & Sons, Inc."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_4"},{"volume-title":"The Art of Computer Programming, Volume 1: Fundamental Algorithms","author":"Knuth Donald E.","key":"e_1_3_2_1_36_1","unstructured":"Donald E. Knuth. 1973. The Art of Computer Programming, Volume 1: Fundamental Algorithms. Addison-Wesley."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-33752-0_2"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00778-019-00555-y"},{"key":"e_1_3_2_1_39_1","unstructured":"Dan Luu and Yao Yue. 2022. A decade of major cache incidents at Twitter. https:\/\/danluu.com\/cache-incidents\/."},{"key":"e_1_3_2_1_40_1","unstructured":"Nick Mathewson Azat Khuzhin and Niels Provos. 2017. libevent - an event notification library. https:\/\/libevent.org."},{"key":"e_1_3_2_1_41_1","unstructured":"Microsoft. 2021. MS-SSTP: Secure Socket Tunneling Protocol (SSTP). https: \/\/docs.microsoft.com\/en-us\/openspecs\/windows_protocols\/ms-sstp\/."},{"key":"e_1_3_2_1_42_1","volume-title":"Proceedings of the 24th USENIX Security Symposium (Washington, D.C.). 65--80","author":"Ming Jiang","year":"2015","unstructured":"Jiang Ming, Dinghao Wu, Gaoyao Xiao, Jun Wang, and Peng Liu. 2015. TaintPipe: Pipelined Symbolic Taint Analysis. In Proceedings of the 24th USENIX Security Symposium (Washington, D.C.). 65--80."},{"key":"e_1_3_2_1_43_1","unstructured":"MITRE Corporation. 2022. CVE-2022--41318. https:\/\/cve.mitre.org\/cgi-bin\/ cvename.cgi?name=CVE-2022--41318."},{"key":"e_1_3_2_1_44_1","unstructured":"MITRE Corporation. 2022. CVE-2022-42905. https:\/\/cve.mitre.org\/cgi-bin\/ cvename.cgi?name=CVE-2022-42905."},{"key":"e_1_3_2_1_45_1","unstructured":"MITRE Corporation. 2023. CVE-2022--46143. https:\/\/cve.mitre.org\/cgi-bin\/ cvename.cgi?name=CVE-2022-46143."},{"key":"e_1_3_2_1_46_1","unstructured":"MITRE Corporation. 2023. CVE-2023--24565. https:\/\/cve.mitre.org\/cgi-bin\/ cvename.cgi?name=CVE-2023-24565."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/380752.380844"},{"key":"e_1_3_2_1_48_1","unstructured":"Sverker Nilsson and YiFei Zhu. 2019. Guppy 3: A Python Programming Environment and Heap Analysis Toolset. https:\/\/zhuyifei1999.github.io\/guppy3\/."},{"key":"e_1_3_2_1_49_1","unstructured":"Nord Security. 2023. NordVPN: The best online VPN service for speed and security. https:\/\/nordvpn.com\/."},{"key":"e_1_3_2_1_50_1","unstructured":"Tavis Ormandy. 2017. Issue 1139: cloudflare: Cloudflare Reverse Proxies are Dumping Uninitialized Memory. https:\/\/bugs.chromium.org\/p\/project-zero\/ issues\/detail?id=1139."},{"key":"e_1_3_2_1_51_1","unstructured":"OWASP Foundation. 2023. Web Application Security Testing: Input Validation Testing. https:\/\/owasp.org\/www-project-web-security-testing-guide\/stable\/4-Web_Application_Security_Testing\/07-Input_Validation_Testing\/README."},{"key":"e_1_3_2_1_52_1","unstructured":"Pallets. 2010. Flask. https:\/\/flask.palletsprojects.com\/en\/2.0.x\/."},{"key":"e_1_3_2_1_53_1","unstructured":"Pallets. 2016. MiniTwit. https:\/\/github.com\/pallets\/flask\/tree\/0.12.x\/examples\/ minitwit."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3127479.3129249"},{"volume-title":"Proceedings of the 22nd Network and Distributed System Security Symposium","author":"Peters Timothy","key":"e_1_3_2_1_55_1","unstructured":"Timothy Peters, Mark A. Gondree, and Zachary N. J. Peterson. 2015. DEFY: A Deniable, Encrypted File System for Log-Structured Storage. In Proceedings of the 22nd Network and Distributed System Security Symposium (San Diego, CA)."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/362422.362468"},{"key":"e_1_3_2_1_57_1","volume-title":"Proceedings of the International Andrei Ershov Memorial Conference on Perspectives of Systems Informatics","author":"Sabelfeld Andrei","year":"2009","unstructured":"Andrei Sabelfeld and Alejandro Russo. 2009. From Dynamic to Static and Back: Riding the Roller Coaster of Information-Flow Control Research. In Proceedings of the International Andrei Ershov Memorial Conference on Perspectives of Systems Informatics (Novosibirsk, Russia). 352--365."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/2245276.2232004"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-33752-0_3"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.5555\/3357062.3357068"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.14778\/3384345.3384354"},{"key":"e_1_3_2_1_63_1","unstructured":"Facebook Open Source. 2021. RocksDB: A persistent key-value store for fast storage environments. http:\/\/rocksdb.org."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-93663-1_7"},{"key":"e_1_3_2_1_65_1","unstructured":"M. Stigge H. Plotz W. Muller and J.P. Redlich. 2006. Reversing CRC-Theory and Practice. HU Berlin Public Report: SAR-PR-2006-05."},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/3190508.3190512"},{"key":"e_1_3_2_1_67_1","volume-title":"CleanOS: Limiting Mobile Data Exposure with Idle Eviction. In 10th USENIX Symposium on Operating Systems Design and Implementation","author":"Tang Yang","year":"2012","unstructured":"Yang Tang, Phillip Ames, Sravan Bhamidipati, Ashish Bijlani, Roxana Geambasu, and Nikhil Sarda. 2012. CleanOS: Limiting Mobile Data Exposure with Idle Eviction. In 10th USENIX Symposium on Operating Systems Design and Implementation (Hollywood, CA). 77--91."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2023.23010"},{"volume-title":"Proceedings of the 29th USENIX Security Symposium","author":"Tsai Chia-Che","key":"e_1_3_2_1_69_1","unstructured":"Chia-Che Tsai, Jeongseok Son, Bhushan Jain, John McAvey, Raluca Ada Popa, and Donald E. Porter. 2020. Civet: An Efficient Java Partitioning Framework for Hardware Enclaves. In Proceedings of the 29th USENIX Security Symposium (Boston, MA). 505--522."},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815417"},{"key":"e_1_3_2_1_71_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium","author":"Vogt Philipp","year":"2007","unstructured":"Philipp Vogt, Florian Nentwich, Nenad Jovanovic, Engin Kirda, Christopher Kruegel, and Giovanni Vigna. 2007. Cross-Site Scripting Prevention with Dynamic Data Tainting and Static Analysis. In Proceedings of the Network and Distributed System Security Symposium (San Diego, CA)."},{"key":"e_1_3_2_1_72_1","volume-title":"Proceedings of the 16th USENIX Conference on Networked Systems Design and Implementation","author":"Wang Frank","year":"2019","unstructured":"Frank Wang, Ronny Ko, and James Mickens. 2019. Riverbed: Enforcing User-Defined Privacy Constraints in Distributed Web Services. In Proceedings of the 16th USENIX Conference on Networked Systems Design and Implementation (Boston, MA). 615--630."},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315261"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.5555\/1387589.1387610"},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.5555\/3485849.3485869"},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1145\/1945023.1945039"}],"event":{"name":"CCS '23: ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Copenhagen Denmark","acronym":"CCS '23"},"container-title":["Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3576915.3623070","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3576915.3623070","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T01:42:26Z","timestamp":1755740546000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3576915.3623070"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,15]]},"references-count":76,"alternative-id":["10.1145\/3576915.3623070","10.1145\/3576915"],"URL":"https:\/\/doi.org\/10.1145\/3576915.3623070","relation":{},"subject":[],"published":{"date-parts":[[2023,11,15]]},"assertion":[{"value":"2023-11-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}