{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,7]],"date-time":"2026-01-07T22:56:18Z","timestamp":1767826578717,"version":"3.49.0"},"reference-count":23,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2023,6,23]],"date-time":"2023-06-23T00:00:00Z","timestamp":1687478400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Queue"],"published-print":{"date-parts":[[2023,6,23]]},"abstract":"<jats:p>CXL, a new interconnect standard for cache-coherent memory sharing, is becoming a reality - but its security leaves something to be desired. Decentralized capabilities are flexible and resilient against malicious actors, and should be considered while CXL is under active development.<\/jats:p>","DOI":"10.1145\/3606014","type":"journal-article","created":{"date-parts":[[2023,7,5]],"date-time":"2023-07-05T22:38:03Z","timestamp":1688596683000},"page":"54-64","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["How Flexible is CXL's Memory Protection?"],"prefix":"10.1145","volume":"21","author":[{"given":"Samuel W.","family":"Stark","sequence":"first","affiliation":[{"name":"University of Cambridge"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A. Theodore","family":"Markettos","sequence":"additional","affiliation":[{"name":"University of Cambridge"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Simon W.","family":"Moore","sequence":"additional","affiliation":[{"name":"University of Cambridge"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,7,5]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Advanced Micro Devices Inc. 2022. Offering unmatched performance leadership energy efficiency and next-generation architecture AMD brings 4th gen AMD EPYC processors to the modern data center; https:\/\/www.amd.com\/en\/pressreleases\/2022-11-10-offering-unmatched-performanceleadership-energy-efficiency-and-next."},{"key":"e_1_2_1_2_1","volume-title":"The security design of the AWS Nitro System. AWS whitepaper","author":"Amazon Web Services","unstructured":"Amazon Web Services. 2023. The security design of the AWS Nitro System. AWS whitepaper; Error! Hyperlink reference not valid.."},{"key":"e_1_2_1_3_1","unstructured":"Amazon Web Services; https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/install-nvidia-driver.html."},{"key":"e_1_2_1_4_1","unstructured":"AMD Meet the Experts Webinars. How AM5 DDR5 memory and PCIe 5.0 support pave the way for next-gen gaming experiences; https:\/\/webinars.amd.com\/wcc\/eh\/3751456\/lp\/3915027\/ how-am5-ddr5-memory-and-pcie-50-support-pave-the-way-for-next-gen-gaming-experiences."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629579"},{"key":"e_1_2_1_6_1","unstructured":"Beingessner A. 2022. Rust's unsafe pointer types need an overhaul. Faultlore; https:\/\/faultlore.com\/blah\/fix-rust-pointers\/."},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23212"},{"key":"e_1_2_1_8_1","unstructured":"CXL Consortium. 2022. Compute Express Link (CXL) Specification revision 3.0 version 1.0. https:\/\/www.computeexpresslink.org\/download-the-specification."},{"key":"e_1_2_1_9_1","volume-title":"Capability-based access control for cyber physical systems. Thesis","author":"Dodson M. G.","unstructured":"Dodson, M. G. 2021. Capability-based access control for cyber physical systems. Thesis, University of Cambridge, Computer Laboratory; https:\/\/www.repository.cam.ac.uk\/items\/784cbc11-00ad-448d-96c0-a9ccaa451f4b."},{"key":"e_1_2_1_10_1","volume-title":"IEEE Symposium on Security and Privacy, 608?625","author":"Filardo N. W.","year":"2020","unstructured":"Filardo, N. W. 2020. Cornucopia: temporal safety for CHERI heaps. In IEEE Symposium on Security and Privacy, 608?625. https:\/\/ieeexplore.ieee.org\/document\/9152640."},{"key":"e_1_2_1_11_1","volume-title":"2019 Usenix Annual Technical Conference, 709?722; Error! Hyperlink reference not valid.","author":"Hille M.","year":"2019","unstructured":"Hille, M., Asmussen, N., Bhatotia, P., H\u00e4rtig, H. 2019. SemperOS: a distributed capability system. In 2019 Usenix Annual Technical Conference, 709?722; Error! Hyperlink reference not valid."},{"key":"e_1_2_1_12_1","volume-title":"Pointers Are Complicated, or: What's in a Byte? Ralf's Ramblings","author":"Jung R.","year":"2018","unstructured":"Jung, R. 2018. Pointers Are Complicated, or: What's in a Byte? Ralf's Ramblings; https:\/\/www.ralfj.de\/blog\/2018\/07\/24\/pointers-and-bytes.html."},{"key":"e_1_2_1_13_1","unstructured":"Kernel Development Community. Virtual memory primer; https:\/\/www.kernel.org\/doc\/html\/latest\/admin-guide\/mm\/concepts.html#virtual-memory-primer."},{"key":"e_1_2_1_14_1","doi-asserted-by":"crossref","unstructured":"Markettos A. T. Baldwin J. Bukin R. Neumann P. G. Moore S. W. Watson R. N. M. 2020. Position paper: defending direct memory access with CHERI capabilities. In Hardware and Architectural Support for Security and Privacy. Article No. 7 1?9; https:\/\/dl.acm.org\/doi\/10.1145\/3458903.3458910.","DOI":"10.1145\/3458903.3458910"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23194"},{"key":"e_1_2_1_16_1","unstructured":"Microsoft. 2021. An introduction to single root I\/O virtualization (SR-IOV); https:\/\/learn.microsoft.com\/en-us\/windows-hardware\/drivers\/network\/single-root-i-o-virtualization--sr-iov-."},{"key":"e_1_2_1_17_1","unstructured":"Nevill M. 2012. An evaluation of capabilities for a multikernel. Master's thesis ETH Zurich; https:\/\/barrelfish.org\/publications\/nevill-mastercapabilities.pdf."},{"key":"e_1_2_1_18_1","unstructured":"Nvidia Magnum IO; https:\/\/www.nvidia.com\/en-us\/data-center\/magnum-io\/."},{"key":"e_1_2_1_19_1","unstructured":"Samsung Semiconductor. 2022. Samsung Electronics introduces industry's first 512GB CXL memory module; https:\/\/news.samsung.com\/global\/samsung-electronicsintroduces-industrys-first-512gb-cxl-memory-module."},{"key":"e_1_2_1_20_1","volume-title":"Capsicum: practical capabilities for Unix. Communications of the ACM 55(3), 97?104","author":"Watson R. N. M.","year":"2093","unstructured":"Watson, R. N. M., Anderson, J., Laurie, B., Kennaway, K. 2012. Capsicum: practical capabilities for Unix. Communications of the ACM 55(3), 97?104; https:\/\/dl.acm.org\/doi\/10.1145\/2093548.2093572."},{"key":"e_1_2_1_21_1","volume-title":"An introduction to CHERI","author":"Watson R. N. M.","unstructured":"Watson, R. N. M., Moore, S. W., Sewell, P., Neumann, P. G. 2019. An introduction to CHERI. University of Cambridge, 43; https:\/\/www.cl.cam.ac.uk\/techreports\/UCAM-CL-TR-941.pdf."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.9"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3352460.3358288"}],"container-title":["Queue"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3606014","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3606014","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:36:19Z","timestamp":1750178179000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3606014"}},"subtitle":["Replacing a sledgehammer with a scalpel"],"short-title":[],"issued":{"date-parts":[[2023,6,23]]},"references-count":23,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2023,6,23]]}},"alternative-id":["10.1145\/3606014"],"URL":"https:\/\/doi.org\/10.1145\/3606014","relation":{},"ISSN":["1542-7730","1542-7749"],"issn-type":[{"value":"1542-7730","type":"print"},{"value":"1542-7749","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,6,23]]},"assertion":[{"value":"2023-07-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}