{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,9]],"date-time":"2026-01-09T03:14:45Z","timestamp":1767928485414,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":73,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100006374","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["EXC 2092 CASA - 390781972"],"award-info":[{"award-number":["EXC 2092 CASA - 390781972"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006374","name":"European Commission","doi-asserted-by":"publisher","award":["101070374"],"award-info":[{"award-number":["101070374"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006374","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["2048499"],"award-info":[{"award-number":["2048499"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006374","name":"European Research Council","doi-asserted-by":"publisher","award":["Starting Grant SECOMP (715753)"],"award-info":[{"award-number":["Starting Grant SECOMP (715753)"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3670288","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"1061-1075","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["SECOMP: Formally Secure Compilation of Compartmentalized C Programs"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-5112-3269","authenticated-orcid":false,"given":"J\u00e9r\u00e9my","family":"Thibault","sequence":"first","affiliation":[{"name":"Max Planck Institute for Security and Privacy (MPI-SP), Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1017-0391","authenticated-orcid":false,"given":"Roberto","family":"Blanco","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Security and Privacy (MPI-SP), Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2576-1220","authenticated-orcid":false,"given":"Dongjae","family":"Lee","sequence":"additional","affiliation":[{"name":"Seoul National University, Seoul, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-5544-6417","authenticated-orcid":false,"given":"Sven","family":"Argo","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum, Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9916-6614","authenticated-orcid":false,"given":"Arthur","family":"Azevedo de Amorim","sequence":"additional","affiliation":[{"name":"Rochester Institute of Technology, Rochester, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5951-4642","authenticated-orcid":false,"given":"A\u00efna Linn","family":"Georges","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Software Systems (MPI-SWS), Saarbr\u00fccken, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8919-8081","authenticated-orcid":false,"given":"C\u0103t\u0103lin","family":"Hri\u0163cu","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Security and Privacy (MPI-SP), Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0748-2044","authenticated-orcid":false,"given":"Andrew","family":"Tolmach","sequence":"additional","affiliation":[{"name":"Portland State University, Portland, OR, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"The WebAssembly component model."},{"key":"e_1_3_2_1_2_1","volume-title":"Access control based on execution history","author":"Abadi M.","year":"2003","unstructured":"M. Abadi and C. Fournet. Access control based on execution history. NDSS. The Internet Society, 2003."},{"key":"e_1_3_2_1_3_1","volume-title":"Protection in programming-language translations. Secure Internet Programming","author":"Abadi M.","year":"1999","unstructured":"M. Abadi. Protection in programming-language translations. Secure Internet Programming. 1999."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243745"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460860"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2019.00025"},{"key":"e_1_3_2_1_7_1","volume-title":"Secure compilation to modern processors. CSF","author":"Agten P.","year":"2012","unstructured":"P. Agten, R. Strackx, B. Jacobs, and F. Piessens. Secure compilation to modern processors. CSF. 2012."},{"key":"e_1_3_2_1_8_1","volume-title":"Formalizing stack safety as a security property. CSF","author":"Anderson S. N.","year":"2023","unstructured":"S. N. Anderson, R. Blanco, L. Lampropoulos, B. C. Pierce, and A. Tolmach. Formalizing stack safety as a security property. CSF. 2023."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3632916"},{"key":"e_1_3_2_1_10_1","volume-title":"Micro-policies: Formally verified, tag-based security monitors. Oakland S&P","author":"de Amorim A. Azevedo","year":"2015","unstructured":"A. Azevedo de Amorim, M. D\u00e9n\u00e8s, N. Giannarakis, C. Hritcu, B. C. Pierce, A. Spector-Zabusky, and A. Tolmach. Micro-policies: Formally verified, tag-based security monitors. Oakland S&P. 2015."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3371075"},{"key":"e_1_3_2_1_12_1","volume-title":"Structured leakage and applications to cryptographic constant-time and cost. CCS","author":"Barthe G.","year":"2021","unstructured":"G. Barthe, B. Gr\u00e9goire, V. Laporte, and S. Priya. Structured leakage and applications to cryptographic constant-time and cost. CCS. 2021."},{"key":"e_1_3_2_1_13_1","volume-title":"Verified security for the Morello capability-enhanced prototype Arm architecture. ESOP","author":"Bauereiss T.","year":"2022","unstructured":"T. Bauereiss, B. Campbell, T. Sewell, A. Armstrong, L. Esswood, I. Stark, G. Barnes, R. N. M. Watson, and P. Sewell. Verified security for the Morello capability-enhanced prototype Arm architecture. ESOP. 2022."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-17184-1_18"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2019.00023"},{"key":"e_1_3_2_1_16_1","volume-title":"USENIX NSDI","author":"Bittau A.","year":"2008","unstructured":"A. Bittau, P. Marchenko, M. Handley, and B. Karp. Wedge: Splitting applications into reduced-privilege compartments. USENIX NSDI, 2008."},{"key":"e_1_3_2_1_17_1","volume-title":"Provably-safe multilingual software sand-boxing using WebAssembly. USENIX Security","author":"Bosamiya J.","year":"2022","unstructured":"J. Bosamiya, W. S. Lim, and B. Parno. Provably-safe multilingual software sand-boxing using WebAssembly. USENIX Security. 2022."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3470534"},{"key":"e_1_3_2_1_19_1","volume-title":"Towards end-to-end verified TEEs via verified interface conformance and certified compilers. CSF","author":"Derakhshan F.","year":"2023","unstructured":"F. Derakhshan, Z. Zhang, A. Vasudevan, and L. Jia. Towards end-to-end verified TEEs via verified interface conformance and certified compilers. CSF. 2023."},{"key":"e_1_3_2_1_20_1","first-page":"1","article-title":"Parametricity versus the universal type","volume":"38","author":"Devriese D.","year":"2018","unstructured":"D. Devriese, M. Patrignani, and F. Piessens. Parametricity versus the universal type. PACMPL, 2(POPL):38:1--38:23, 2018.","journal-title":"PACMPL, 2(POPL)"},{"key":"e_1_3_2_1_21_1","volume-title":"Modular, fully-abstract compilation by approximate back-translation. LMCS, 13(4)","author":"Devriese D.","year":"2017","unstructured":"D. Devriese, M. Patrignani, F. Piessens, and S. Keuchel. Modular, fully-abstract compilation by approximate back-translation. LMCS, 13(4), 2017."},{"key":"e_1_3_2_1_22_1","volume-title":"Architectural support for software-defined metadata processing. ASPLOS","author":"Dhawan U.","year":"2015","unstructured":"U. Dhawan, C. Hritcu, R. Rubin, N. Vasilakis, S. Chiricescu, J. M. Smith, T. F. Knight, Jr., B. C. Pierce, and A. DeHon. Architectural support for software-defined metadata processing. ASPLOS. 2015."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF54842.2022.9919680"},{"key":"e_1_3_2_1_24_1","volume-title":"CapablePtrs: Securely compiling partial programs using the pointers-as-capabilities principle. CSF","author":"El-Korashy A.","year":"2021","unstructured":"A. El-Korashy, S. Tsampas, M. Patrignani, D. Devriese, D. Garg, and F. Piessens. CapablePtrs: Securely compiling partial programs using the pointers-as-capabilities principle. CSF. 2021."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/0304-3975(85)90028-3"},{"key":"e_1_3_2_1_26_1","volume-title":"Principles of Capability Languages workshop","author":"Gao D.","year":"2024","unstructured":"D. Gao. Compartmentalisation models. Principles of Capability Languages workshop, 2024."},{"key":"e_1_3_2_1_27_1","volume-title":"Efficient and provable local capability revocation using uninitialized capabilities. PACMPL, 5(POPL):1--30","author":"Georges A. L.","year":"2021","unstructured":"A. L. Georges, A. Gu\u00e9neau, T. V. Strydonck, A. Timany, A. Trieu, S. Huyghebaert, D. Devriese, and L. Birkedal. Efficient and provable local capability revocation using uninitialized capabilities. PACMPL, 5(POPL):1--30, 2021."},{"key":"e_1_3_2_1_28_1","volume-title":"Le temps des cerises: efficient temporal stack safety on capability machines using directed capabilities. PACMPL, 6(OOPSLA):1--30","author":"Georges A. L.","year":"2022","unstructured":"A. L. Georges, A. Trieu, and L. Birkedal. Le temps des cerises: efficient temporal stack safety on capability machines using directed capabilities. PACMPL, 6(OOPSLA):1--30, 2022."},{"key":"e_1_3_2_1_29_1","volume-title":"Clean application compartmentalization with SOAAP. CCS","author":"Gudka K.","year":"2015","unstructured":"K. Gudka, R. N. M. Watson, J. Anderson, D. Chisnall, B. Davis, B. Laurie, I. Marinos, P. G. Neumann, and A. Richardson. Clean application compartmentalization with SOAAP. CCS. 2015."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3062341.3062363"},{"key":"e_1_3_2_1_31_1","volume-title":"Formalizing, verifying and applying ISA security guarantees as universal contracts. CCS","author":"Huyghebaert S.","year":"2023","unstructured":"S. Huyghebaert, S. Keuchel, C. D. Roover, and D. Devriese. Formalizing, verifying and applying ISA security guarantees as universal contracts. CCS. 2023."},{"key":"e_1_3_2_1_32_1","volume-title":"Purity of an ST monad: full abstraction by semantically typed back-translation. PACMPL, 6(OOPSLA1):1--27","author":"Jacobs K.","year":"2022","unstructured":"K. Jacobs, D. Devriese, and A. Timany. Purity of an ST monad: full abstraction by semantically typed back-translation. PACMPL, 6(OOPSLA1):1--27, 2022."},{"key":"e_1_3_2_1_33_1","volume-title":"CSF","author":"Juglaret Y.","year":"2016","unstructured":"Y. Juglaret, C. Hritcu, A. Azevedo de Amorim, B. Eng, and B. C. Pierce. Beyond good and evil: Formalizing the security guarantees of compartmentalizing compilation. CSF, 2016."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2837614.2837642"},{"key":"e_1_3_2_1_35_1","volume-title":"A library for partitioning applications. USENIX FREENIX","author":"Kilpatrick D.","year":"2003","unstructured":"D. Kilpatrick. Privman: A library for partitioning applications. USENIX FREENIX. 2003."},{"key":"e_1_3_2_1_36_1","volume-title":"CompCertO: compiling certified open C components. PLDI","author":"Koenig J.","year":"2021","unstructured":"J. Koenig and Z. Shao. CompCertO: compiling certified open C components. PLDI. 2021."},{"key":"e_1_3_2_1_37_1","volume-title":"Portable software fault isolation. CSF","author":"Kroll J.","year":"2014","unstructured":"J. Kroll, G. Stewart, and A. Appel. Portable software fault isolation. CSF. 2014."},{"key":"e_1_3_2_1_38_1","volume-title":"CompCert: Practical experience on integrating and qualifying a formally verified optimizing compiler. ERTS","author":"K\u00e4stner D.","year":"2018","unstructured":"D. K\u00e4stner, U. W\u00fcnsche, J. Barrho, M. Schlickling, B. Schommer, M. Schmidt, C. Ferdinand, X. Leroy, and S. Blazy. CompCert: Practical experience on integrating and qualifying a formally verified optimizing compiler. ERTS. 2018."},{"key":"e_1_3_2_1_39_1","volume-title":"1985 Munich","author":"Lamport L.","year":"1984","unstructured":"L. Lamport and F. B. Schneider. Formal foundation for specification and verification. In Distributed Systems: Methods and Tools for Specification, An Advanced Course, April 3--12, 1984 and April 16--25, 1985 Munich, 1984."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10817-009-9155-4"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10817-008-9099-0"},{"key":"e_1_3_2_1_42_1","volume-title":"BlueHat IL","author":"Miller M.","year":"2019","unstructured":"M. Miller. Trends, challenges, and strategic shifts in the software vulnerability mitigation landscape. BlueHat IL, 2019."},{"key":"e_1_3_2_1_43_1","volume-title":"The trusted computing base of the CompCert verified compiler. ESOP","author":"Monniaux D.","year":"2022","unstructured":"D. Monniaux and S. Boulm\u00e9. The trusted computing base of the CompCert verified compiler. ESOP. 2022."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/2254064.2254111"},{"key":"e_1_3_2_1_45_1","volume-title":"seL4: From general purpose to a proof of information flow enforcement","author":"Murray T. C.","year":"2013","unstructured":"T. C. Murray, D. Matichuk, M. Brassil, P. Gammie, T. Bourke, S. Seefried, C. Lewis, X. Gao, and G. Klein. seL4: From general purpose to a proof of information flow enforcement. IEEE S&P. 2013."},{"key":"e_1_3_2_1_46_1","volume-title":"Going beyond the limits of SFI: flexible and secure hardware-assisted in-process isolation with HFI. ASPLOS","author":"Narayan S.","year":"2023","unstructured":"S. Narayan, T. Garfinkel, M. Taram, J. Rudek, D. Moghimi, E. Johnson, C. Fallin, A. Vahldiek-Oberwagner, M. LeMay, R. Sahita, D. M. Tullsen, and D. Stefan. Going beyond the limits of SFI: flexible and secure hardware-assisted in-process isolation with HFI. ASPLOS. 2023."},{"key":"e_1_3_2_1_47_1","volume-title":"Rigorous engineering for hardware security: Formal modelling and proof in the CHERI design and implementation process","author":"Nienhuis K.","year":"2020","unstructured":"K. Nienhuis, A. Joannou, T. Bauereiss, A. C. J. Fox, M. Roe, B. Campbell, M. Naylor, R. M. Norton, S. W. Moore, P. G. Neumann, I. Stark, R. N. M. Watson, and P. Sewell. Rigorous engineering for hardware security: Formal modelling and proof in the CHERI design and implementation process. IEEE S&P. 2020."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2699503"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3280984"},{"key":"e_1_3_2_1_50_1","first-page":"22","article-title":"Fully abstract trace semantics for protected module architectures","volume":"42","author":"Patrignani M.","year":"2015","unstructured":"M. Patrignani and D. Clarke. Fully abstract trace semantics for protected module architectures. CL, 42:22--45, 2015.","journal-title":"CL"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3436809"},{"key":"e_1_3_2_1_52_1","volume-title":"Exorcising spectres with secure compilers. CCS","author":"Patrignani M.","year":"2021","unstructured":"M. Patrignani and M. Guarnieri. Exorcising spectres with secure compilers. CCS. 2021."},{"key":"e_1_3_2_1_53_1","volume-title":"Isolating web programs in modern browser architectures. EuroSys","author":"Reis C.","year":"2009","unstructured":"C. Reis and S. D. Gribble. Isolating web programs in modern browser architectures. EuroSys. 2009."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3571220"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3363519"},{"key":"e_1_3_2_1_56_1","first-page":"e9","article-title":"StkTokens: Enforcing well-bracketed control flow and stack encapsulation using linear capabilities","volume":"31","author":"Skorstengaard L.","year":"2021","unstructured":"L. Skorstengaard, D. Devriese, and L. Birkedal. StkTokens: Enforcing well-bracketed control flow and stack encapsulation using linear capabilities. JFP, 31:e9, 2021.","journal-title":"JFP"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3371091"},{"key":"e_1_3_2_1_58_1","volume-title":"Proving full-system security properties under multiple attacker models on capability machines. CSF","author":"Strydonck T. V.","year":"2022","unstructured":"T. V. Strydonck, A. L. Georges, A. Gu\u00e9neau, A. Trieu, A. Timany, F. Piessens, L. Birkedal, and D. Devriese. Proving full-system security properties under multiple attacker models on capability machines. CSF. 2022."},{"key":"e_1_3_2_1_59_1","volume-title":"Dependent types and multi-monadic effects in F*. POPL","author":"Swamy N.","year":"2016","unstructured":"N. Swamy, C. Hritcu, C. Keller, A. Rastogi, A. Delignat-Lavaud, S. Forest, K. Bhargavan, C. Fournet, P.-Y. Strub, M. Kohlweiss, J.-K. Zinzindohoue, and S. Zanella-B\u00e9guelin. Dependent types and multi-monadic effects in F*. POPL. 2016."},{"issue":"3","key":"e_1_3_2_1_60_1","first-page":"137","article-title":"Principles and implementation techniques of software-based fault isolation","volume":"1","author":"Tan G.","year":"2017","unstructured":"G. Tan. Principles and implementation techniques of software-based fault isolation. FTSEC, 1(3):137--198, 2017.","journal-title":"FTSEC"},{"key":"e_1_3_2_1_61_1","unstructured":"The Chromium Project. Memory safety. chromium.org."},{"key":"e_1_3_2_1_62_1","volume-title":"Nanopass back-translation of multiple traces for secure compilation proofs","author":"Thibault J.","year":"2021","unstructured":"J. Thibault and C. Hritcu. Nanopass back-translation of multiple traces for secure compilation proofs. PriSC, 2021."},{"key":"e_1_3_2_1_63_1","volume-title":"Temporal safety for stack allocated memory on capability machines. CSF","author":"Tsampas S.","year":"2019","unstructured":"S. Tsampas, D. Devriese, and F. Piessens. Temporal safety for stack allocated memory on capability machines. CSF. 2019."},{"key":"e_1_3_2_1_64_1","volume-title":"ERIM: secure, efficient in-process isolation with protection keys (MPK). USENIX Security","author":"Vahldiek-Oberwagner A.","year":"2019","unstructured":"A. Vahldiek-Oberwagner, E. Elnikety, N. O. Duarte, M. Sammler, P. Druschel, and D. Garg. ERIM: secure, efficient in-process isolation with protection keys (MPK). USENIX Security. 2019."},{"key":"e_1_3_2_1_65_1","volume-title":"WebAssembly Workshop (WAW)","author":"Wagner L.","year":"2024","unstructured":"L. Wagner. What is a WebAssembly component (and why'). WebAssembly Workshop (WAW), 2024."},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/168619.168635"},{"key":"e_1_3_2_1_67_1","first-page":"1","article-title":"An abstract stack based approach to verified compositional compilation to machine code","volume":"62","author":"Wang Y.","year":"2019","unstructured":"Y. Wang, P. Wilke, and Z. Shao. An abstract stack based approach to verified compositional compilation to machine code. PACMPL, 3(POPL):62:1--62:30, 2019.","journal-title":"PACMPL, 3(POPL)"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3428265"},{"key":"e_1_3_2_1_69_1","unstructured":"R. N. M. Watson P. G. Neumann J. Woodruff M. Roe H. Almatary J. Anderson J. Baldwin G. Barnes D. Chisnall J. Clarke B. Davis L. Eisen N. W. Filardo R. Grisenthwaite A. Joannou B. Laurie A. T. Markettos S. W. Moore S. J. Murdoch K. Nienhuis R. Norton A. Richardson P. Rugg P. Sewell S. Son and H. Xia. Capability Hardware Enhanced RISC Instructions: CHERI Instruction-Set Architecture (Version 8). Technical Report UCAM-CL-TR-951 University of Cambridge Computer Laboratory 2020."},{"key":"e_1_3_2_1_70_1","volume-title":"CHERI: A hybrid capability-system architecture for scalable software compartmentalization. S&P","author":"Watson R. N. M.","year":"2015","unstructured":"R. N. M. Watson, J. Woodruff, P. G. Neumann, S. W. Moore, J. Anderson, D. Chisnall, N. H. Dave, B. Davis, K. Gudka, B. Laurie, S. J. Murdoch, R. Norton, M. Roe, S. Son, and M. Vadera. CHERI: A hybrid capability-system architecture for scalable software compartmentalization. S&P. 2015."},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629175.1629203"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/3632914"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/2038642.2038687"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670288","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3670288","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:09:02Z","timestamp":1755842942000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670288"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":73,"alternative-id":["10.1145\/3658644.3670288","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3670288","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}