{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T00:05:33Z","timestamp":1755907533285,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":52,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690247","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"198-212","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Interstellar: Fully Partitioned and Efficient Security Monitoring Hardware Near a Processor Core for Protecting Systems against Attacks on Privileged Software"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4562-5528","authenticated-orcid":false,"given":"YongHo","family":"Song","sequence":"first","affiliation":[{"name":"Korea Advanced Institute of Science and Technology & CySecuLab, Daejeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-3339-4923","authenticated-orcid":false,"given":"Byeongsu","family":"Woo","sequence":"additional","affiliation":[{"name":"Korea Advanced Institute of Science and Technology & CySecuLab, Daejeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-9651-064X","authenticated-orcid":false,"given":"Youngkwang","family":"Han","sequence":"additional","affiliation":[{"name":"Korea Advanced Institute of Science and Technology & CySecuLab, Daejeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8984-1006","authenticated-orcid":false,"given":"Brent ByungHoon","family":"Kang","sequence":"additional","affiliation":[{"name":"Korea Advanced Institute of Science and Technology & CySecuLab, Daejeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2013. big.LITTLE Technology: Making very high performance available in a mobile envelope without sacrificing energy efficiency. https:\/\/armkeil.blob.c ore.windows.net\/developer\/Files\/pdf\/white-paper\/big-little-technology-thefuture-of-mobile.pdf. Published: 2013."},{"key":"e_1_3_2_1_2_1","unstructured":"2020 Jan. AMD SEV-SNP: Strengthening VM Isolation with Integrity Protection and More. https:\/\/www.amd.com\/system\/files\/TechDocs\/SEV-SNP-strengthenin g-vm-isolation-with-integrity-protection-and-more.pdf."},{"key":"e_1_3_2_1_3_1","unstructured":"2020 Jun. RISCV-BOOMDocumentation. https:\/\/docs.boom-core.org\/_\/downloa ds\/en\/stable\/pdf\/. Accessed: 2023-08--11."},{"key":"e_1_3_2_1_4_1","unstructured":"2022 Jul. Chipyard Documentation. https:\/\/chipyard.readthedocs.io\/_\/download s\/en\/1.7.1\/pdf\/. Accessed: 2023-08--11."},{"key":"e_1_3_2_1_5_1","unstructured":"2022 Oct. Learn the architecture - An introduction to AMBA AXI. https:\/\/develo per.arm.com\/documentation\/102202\/0300\/Channel-transfers-and-transactions."},{"key":"e_1_3_2_1_6_1","unstructured":"2023 Nov. AMD Virtex 7 FPGA VC707 Evaluation Kit. https:\/\/www.xilinx.com\/p roducts\/boards-and-kits\/ek-v7-vc707-g.html\/#information."},{"key":"e_1_3_2_1_7_1","unstructured":"2023 Nov. AMD Vivado - Vivado Design Suite. https:\/\/www.xilinx.com\/product s\/design-tools\/vivado.html."},{"key":"e_1_3_2_1_8_1","unstructured":"2023 Nov. Fast and Effortless FPGA-accelerated Hardware Simulation with On-Prem and Cloud Flexibility. https:\/\/fires.im\/. Accessed: 2023--11--27."},{"key":"e_1_3_2_1_9_1","unstructured":"2023 Nov. LMbench - Tools for Performance Analysis. https:\/\/lmbench.sourcefo rge.net\/. Accessed: 2023--11--27."},{"key":"e_1_3_2_1_10_1","unstructured":"2023 Nov. MiBench Version 1.0. https:\/\/vhosts.eecs.umich.edu\/mibench\/."},{"volume-title":"Nov. SPEC CPU 2006","year":"2006","key":"e_1_3_2_1_11_1","unstructured":"2023 Nov. SPEC CPU 2006. https:\/\/www.spec.org\/cpu2006\/."},{"key":"e_1_3_2_1_12_1","unstructured":"2024 Jan. Busybox. https:\/\/busybox.net\/. Accessed: 2024-01-09."},{"key":"e_1_3_2_1_13_1","unstructured":"Advanced Micro Devices Inc. 2016. BIOS and Kernel Developer's Guide (BKDG) for AMD Family 16h Models 30h-3Fh Processors. https:\/\/www.amd.com\/content\/ dam\/amd\/en\/documents\/archived-tech-docs\/programmer-references\/52740_1 6h_Models_30h-3Fh_BKDG.pdf Revision: 3.06."},{"key":"e_1_3_2_1_14_1","volume-title":"Side-channel attacks on RISC-V processors: Current progress, challenges, and opportunities. arXiv preprint arXiv:2106.08877","author":"Ahmadi Mahya Morid","year":"2021","unstructured":"Mahya Morid Ahmadi, Faiq Khalid, and Muhammad Shafique. 2021. Side-channel attacks on RISC-V processors: Current progress, challenges, and opportunities. arXiv preprint arXiv:2106.08877 (2021)."},{"key":"e_1_3_2_1_15_1","volume-title":"Tech. Rep. UCB\/EECS-2016--17 4","author":"Asanovic Krste","year":"2016","unstructured":"Krste Asanovic, Rimas Avizienis, Jonathan Bachrach, Scott Beamer, David Biancolin, Christopher Celio, Henry Cook, Daniel Dabbelt, John Hauser, Adam Izraelevitz, et al. 2016. The rocket chip generator. EECS Department, University of California, Berkeley, Tech. Rep. UCB\/EECS-2016--17 4 (2016), 6--2."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359661"},{"key":"e_1_3_2_1_17_1","volume-title":"DAC Design Automation Conference","author":"Bachrach J.","year":"2012","unstructured":"J. Bachrach, H. Vo, B. Richards, Y. Lee, A. Waterman, R Aviienis, J. Wawrzynek, and K. Asanovic. 2012. Chisel: Constructing hardware in a Scala embedded language. In DAC Design Automation Conference 2012. 1212--1221."},{"key":"e_1_3_2_1_18_1","volume-title":"27th USENIX Security Symposium, USENIX Security 2018","author":"Biondo Andrea","year":"2018","unstructured":"Andrea Biondo, Mauro Conti, Lucas Davi, Tommaso Frassetto, and Ahmad-Reza Sadeghi. 2018. The Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGX. In 27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15--17, 2018. USENIX Association, 1213--1227."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1966913.1966919"},{"key":"e_1_3_2_1_20_1","volume-title":"11th USENIX Workshop on Offensive Technologies.","author":"Brasser Ferdinand","year":"2017","unstructured":"Ferdinand Brasser, Urs M\u00fcller, Alexandra Dmitrienko, Kari Kostiainen, Srdjan Capkun, and Ahmad-Reza Sadeghi. 2017. Software grand exposure: SGX cache attacks are practical. In 11th USENIX Workshop on Offensive Technologies."},{"key":"e_1_3_2_1_21_1","volume-title":"27th USENIX Security Symposium, USENIX Security 2018","author":"Bulck Jo Van","year":"2018","unstructured":"Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F. Wenisch, Yuval Yarom, and Raoul Strackx. 2018. Foreshadow: Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution. In 27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15--17, 2018. USENIX Association, 991--1008."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00076"},{"key":"e_1_3_2_1_23_1","volume-title":"23rd USENIX Security Symposium (SEC' 14)","author":"Carlini Nicholas","year":"2014","unstructured":"Nicholas Carlini and David Wagner. 2014. ROP is still dangerous: Breaking modern defenses. In 23rd USENIX Security Symposium (SEC' 14). 385--399."},{"key":"e_1_3_2_1_24_1","volume-title":"ReZone: Disarming TrustZone with TEE Privilege Reduction. In 31st USENIX Security Symposium, USENIX Security","author":"Cerdeira David","year":"2022","unstructured":"David Cerdeira, Jos\u00e9 Martins, Nuno Santos, and Sandro Pinto. 2022. ReZone: Disarming TrustZone with TEE Privilege Reduction. In 31st USENIX Security Symposium, USENIX Security 2022. USENIX Association, 2261--2279."},{"key":"e_1_3_2_1_25_1","volume-title":"ROPecker: A Generic and Practical Approach For Defending Against ROP Attacks. In 21st Annual Network and Distributed System Security Symposium, NDSS 2014","author":"Cheng Yueqiang","year":"2014","unstructured":"Yueqiang Cheng, Zongwei Zhou, Miao Yu, Xuhua Ding, and Robert H. Deng. 2014. ROPecker: A Generic and Practical Approach For Defending Against ROP Attacks. In 21st Annual Network and Distributed System Security Symposium, NDSS 2014, San Diego, California, USA, February 23--26, 2014. The Internet Society."},{"key":"e_1_3_2_1_26_1","unstructured":"Victor Costan and Srinivas Devadas. 2016. Intel SGX Explained. IACR Cryptol. ePrint Arch. (2016) 86. http:\/\/eprint.iacr.org\/2016\/086"},{"key":"e_1_3_2_1_27_1","volume-title":"Sanctum: Minimal Hardware Extensions for Strong Software Isolation. In 25th USENIX Security Symposium, USENIX Security 16","author":"Costan Victor","year":"2016","unstructured":"Victor Costan, Ilia A. Lebedev, and Srinivas Devadas. 2016. Sanctum: Minimal Hardware Extensions for Strong Software Isolation. In 25th USENIX Security Symposium, USENIX Security 16. USENIX Association, 857--874."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00021"},{"key":"e_1_3_2_1_29_1","volume-title":"Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow Integrity Protection. In 23rd USENIX Security Symposium (SEC' 14)","author":"Davi Lucas","year":"2014","unstructured":"Lucas Davi, Ahmad-Reza Sadeghi, Daniel Lehmann, and Fabian Monrose. 2014. Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow Integrity Protection. In 23rd USENIX Security Symposium (SEC' 14). 401--416."},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 29th USENIX Conference on Security Symposium. 807--824","author":"Delshadtehrani Leila","year":"2020","unstructured":"Leila Delshadtehrani, Sadullah Canakci, Boyou Zhou, Schuyler Eldridge, Ajay Joshi, and Manuel Egele. 2020. PHMon: A programmable hardware monitor and its security use cases. In Proceedings of the 29th USENIX Conference on Security Symposium. 807--824."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/LCA.2017.2784416"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3457388.3458657"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3579371.3589050"},{"key":"e_1_3_2_1_34_1","volume-title":"15th USENIX Symposium on Operating Systems Design and Implementation (OSDI' 21)","author":"Feng Erhu","year":"2021","unstructured":"Erhu Feng, Xu Lu, Dong Du, Bicheng Yang, Xueqiang Jiang, Yubin Xia, Binyu Zang, and Haibo Chen. 2021. Scalable memory protection in the PENGLAI enclave. In 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI' 21). 275--294."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179399"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133994"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102454"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1016\/J.COMPELECENG.2022.108546"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3387532"},{"key":"e_1_3_2_1_40_1","volume-title":"26th USENIX Security Symposium, USENIX Security 2017","author":"Lee Jae-Hyuk","year":"2017","unstructured":"Jae-Hyuk Lee, Jin Soo Jang, Yeongjin Jang, Nohyun Kwak, Yeseul Choi, Changho Choi, Taesoo Kim, Marcus Peinado, and Brent ByungHoon Kang. 2017. Hacking in Darkness: Return-oriented Programming against Secure Enclaves. In 26th USENIX Security Symposium, USENIX Security 2017, Vancouver, BC, Canada, August 16--18, 2017. USENIX Association, 523--539."},{"key":"e_1_3_2_1_41_1","volume-title":"Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing. In 26th USENIX Security Symposium, USENIX Security 2017","author":"Lee Sangho","year":"2017","unstructured":"Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, and Marcus Peinado. 2017. Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing. In 26th USENIX Security Symposium, USENIX Security 2017, Vancouver, BC, Canada, August 16--18, 2017. USENIX Association, 557--574."},{"key":"e_1_3_2_1_42_1","volume-title":"ARMageddon: Cache Attacks on Mobile Devices. In 25th USENIX Security Symposium, USENIX Security 16","author":"Lipp Moritz","year":"2016","unstructured":"Moritz Lipp, Daniel Gruss, Raphael Spreitzer, Cl\u00e9mentine Maurice, and Stefan Mangard. 2016. ARMageddon: Cache Attacks on Mobile Devices. In 25th USENIX Security Symposium, USENIX Security 16. USENIX Association, 549--564."},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of the 27th USENIX Conference on Security Symposium (SEC'18)","author":"Lipp Moritz","year":"2018","unstructured":"Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Anders Fogh, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, and Mike Hamburg. 2018. Meltdown: Reading Kernel Memory from User Space. In Proceedings of the 27th USENIX Conference on Security Symposium (SEC'18). USENIX Association, 973--990."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.43"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/GREENCOMP.2010.5598316"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00057"},{"key":"e_1_3_2_1_47_1","unstructured":"Shoei Nashimoto Daisuke Suzuki Rei Ueno and Naofumi Homma. 2020. Bypassing Isolated Execution on RISC-V with Fault Injection. IACR Cryptol. ePrint Arch. (2020) 1193. https:\/\/eprint.iacr.org\/2020\/1193"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/CIC.2016.065"},{"key":"e_1_3_2_1_49_1","volume-title":"Proceedings of the 22th USENIX Security Symposium","author":"Pappas Vasilis","year":"2013","unstructured":"Vasilis Pappas, Michalis Polychronakis, and Angelos D. Keromytis. 2013. Transparent ROP Exploit Mitigation Using Indirect Branch Tracing. In Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14--16, 2013. USENIX Association, 447--462."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20974-1_9"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.45"},{"key":"e_1_3_2_1_52_1","volume-title":"SHELTER: Extending Arm CCA with Isolation in User Space. In 32nd USENIX Security Symposium, USENIX Security","author":"Zhang Yiming","year":"2023","unstructured":"Yiming Zhang, Yuxin Hu, Zhenyu Ning, Fengwei Zhang, Xiapu Luo, Haoyang Huang, Shoumeng Yan, and Zhengyu He. 2023. SHELTER: Extending Arm CCA with Isolation in User Space. In 32nd USENIX Security Symposium, USENIX Security 2023. USENIX Association."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Salt Lake City UT USA","acronym":"CCS '24"},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690247","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690247","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:04:38Z","timestamp":1755842678000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690247"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":52,"alternative-id":["10.1145\/3658644.3690247","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690247","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}