{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:25:08Z","timestamp":1783787108643,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":92,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,11,19]]},"DOI":"10.1145\/3719027.3744849","type":"proceedings-article","created":{"date-parts":[[2025,11,22]],"date-time":"2025-11-22T23:32:38Z","timestamp":1763854358000},"page":"1514-1528","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["<scp>BASTAG:<\/scp>\n                    Byte-level Access Control on Shared Memory using ARM Memory Tagging Extension"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1539-229X","authenticated-orcid":false,"given":"Junseung","family":"You","sequence":"first","affiliation":[{"name":"Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1848-750X","authenticated-orcid":false,"given":"Jiwon","family":"Seo","sequence":"additional","affiliation":[{"name":"Department of Cybersecurity, Dankook University, Yongin, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6716-2915","authenticated-orcid":false,"given":"Kyeongryong","family":"Lee","sequence":"additional","affiliation":[{"name":"Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7842-1719","authenticated-orcid":false,"given":"Yeongpil","family":"Cho","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Hanyang University, Seoul, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6412-2926","authenticated-orcid":false,"given":"Yunheung","family":"Paek","sequence":"additional","affiliation":[{"name":"Department of ECE &amp; ISRC, Seoul National University, Seoul, Republic of Korea and Core Trust Link, Seoul, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,11,22]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proceedings of the 18th Conference on USENIX Security Symposium","author":"Akritidis Periklis","year":"2009","unstructured":"Periklis Akritidis, Manuel Costa, Miguel Castro, and Steven Hand. 2009. Baggy bounds checking: an efficient and backwards-compatible defense against out-of-bounds errors. In Proceedings of the 18th Conference on USENIX Security Symposium (Montreal, Canada) (SSYM'09). USENIX Association, USA, 51\u201366."},{"key":"e_1_3_2_1_2_1","volume-title":"Arm Memory Tagging Extension. https:\/\/source.android.com\/docs\/security\/test\/memory-safety\/arm-mte. [Online","year":"2023","unstructured":"Android. 2023. Arm Memory Tagging Extension. https:\/\/source.android.com\/docs\/security\/test\/memory-safety\/arm-mte. [Online; accessed May-2023]."},{"key":"e_1_3_2_1_3_1","unstructured":"Android Open Source Project. 2023a. Bootloader Support for Memory Safety. https:\/\/source.android.com\/docs\/security\/test\/memory-safety\/bootloader-support. Accessed: 2025-05-05."},{"key":"e_1_3_2_1_4_1","unstructured":"Android Open Source Project. 2023b. Tagged Pointers. https:\/\/source.android.com\/docs\/security\/test\/tagged-pointers. Accessed: May-2023."},{"key":"e_1_3_2_1_5_1","volume-title":"https:\/\/developer.arm.com\/Processors\/Cortex-A510. [Online","year":"2023","unstructured":"arm. 2023a. Cortex-A510. https:\/\/developer.arm.com\/Processors\/Cortex-A510. [Online; accessed Nov-2023]."},{"key":"e_1_3_2_1_6_1","volume-title":"https:\/\/developer.arm.com\/Processors\/Cortex-A715. [Online","year":"2023","unstructured":"arm. 2023b. Cortex-A715. https:\/\/developer.arm.com\/Processors\/Cortex-A715. [Online; accessed Nov-2023]."},{"key":"e_1_3_2_1_7_1","unstructured":"Arm Ltd. 2022. CNTVCT_EL0 - Counter-timer Virtual Count Register. https:\/\/developer.arm.com\/documentation\/ddi0601\/2022-12\/AArch64-Registers\/CNTVCT-EL0-Counter-timer-Virtual-Count-register. Accessed: 2025-06-18. From: ARMv8-A Architecture Reference Manual DDI 0601 (2022-12)."},{"key":"e_1_3_2_1_8_1","unstructured":"Arm Ltd. 2023. AArch64 Crypto Library. https:\/\/github.com\/ARM-software\/AArch64cryptolib. Accessed: 2025-05-05."},{"key":"e_1_3_2_1_9_1","unstructured":"Arm Ltd. 2024a. Arm Development Tools for Architecture Exploration. https:\/\/developer.arm.com\/downloads\/-\/exploration-tools. Accessed: May-2024."},{"key":"e_1_3_2_1_10_1","unstructured":"Arm Ltd. 2024b. The Memory Management Unit: Memory Attributes \u2013 Domains. https:\/\/developer.arm.com\/documentation\/den0013\/d\/The-Memory-Management-Unit\/Memory-attributes\/Domains. Accessed: May-2023. ARM Architecture Reference Manual ARMv7-A and ARMv7-R edition."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1002\/9781119058397.ch12"},{"key":"e_1_3_2_1_12_1","volume-title":"Ground Up: AArch64. https:\/\/binary.ninja\/2021\/04\/05\/groundup-aarch64.html. Accessed: May-2023.","author":"Team Binary Ninja","year":"2021","unstructured":"Binary Ninja Team. 2021. Ground Up: AArch64. https:\/\/binary.ninja\/2021\/04\/05\/groundup-aarch64.html. Accessed: May-2023."},{"key":"e_1_3_2_1_13_1","first-page":"309","volume-title":"5th USENIX Symposium on Networked Systems Design and Implementation (NSDI). USENIX Association","author":"Bittau Andrea","year":"2008","unstructured":"Andrea Bittau, Petr Marchenko, Mark Handley, and Brad Karp. 2008. Wedge: Splitting Applications into Reduced-Privilege Compartments. In 5th USENIX Symposium on Networked Systems Design and Implementation (NSDI). USENIX Association, San Francisco, CA, USA, 309-322."},{"key":"e_1_3_2_1_14_1","unstructured":"Brian Aker and contributors. 2024. libmemcached: C Client Library for memcached. https:\/\/libmemcached.org\/libMemcached.html. Accessed: May-2024."},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the 13th Conference on USENIX Security Symposium","author":"Brumley David","year":"2004","unstructured":"David Brumley and Dawn Song. 2004. Privtrans: automatically partitioning programs for privilege separation. In Proceedings of the 13th Conference on USENIX Security Symposium (San Diego, CA). USENIX Association, USA, 5."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00076"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629581"},{"key":"e_1_3_2_1_18_1","first-page":"56","volume-title":"Shreds: Fine-Grained Execution Units with Private Memory. In 2016 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society","author":"Chen Yaohui","year":"2016","unstructured":"Yaohui Chen, Sebassujeen Reymondjohnson, Zhichuang Sun, and Long Lu. 2016. Shreds: Fine-Grained Execution Units with Private Memory. In 2016 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society, Los Alamitos, CA, USA, 56-71."},{"key":"e_1_3_2_1_19_1","volume-title":"Cisco Systems","author":"Inc.","year":"2021","unstructured":"Inc. Cisco Systems. 2021a. CVE-2020-3347 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-3347. [Online; accessed May-2023]."},{"key":"e_1_3_2_1_20_1","volume-title":"Cisco Systems","author":"Inc.","year":"2021","unstructured":"Inc. Cisco Systems. 2021b. CVE-2021-34758 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-34758. [Online; accessed May-2023]."},{"key":"e_1_3_2_1_21_1","volume-title":"Memory protection keys. https:\/\/lwn.net\/Articles\/643797\/. [Online","author":"Corbet Jonathan","year":"2023","unstructured":"Jonathan Corbet. 2015. Memory protection keys. https:\/\/lwn.net\/Articles\/643797\/. [Online; accessed May-2023]."},{"key":"e_1_3_2_1_22_1","unstructured":"National Vulnerability Database. 2016. CVE-2016-8633 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2016-8633."},{"key":"e_1_3_2_1_23_1","unstructured":"National Vulnerability Database. 2021. CVE-2021-21309 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-21309."},{"key":"e_1_3_2_1_24_1","unstructured":"National Vulnerability Database. 2022a. CVE-2022-21765 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-21765."},{"key":"e_1_3_2_1_25_1","unstructured":"National Vulnerability Database. 2022b. CVE-2022-21769 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-21769."},{"key":"e_1_3_2_1_26_1","unstructured":"National Vulnerability Database. 2022c. CVE-2022-48198 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-48198."},{"key":"e_1_3_2_1_27_1","unstructured":"National Vulnerability Database. 2023. CVE-2023-2008 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-2008."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560681"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2611765.2611773"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623079"},{"key":"e_1_3_2_1_31_1","first-page":"2281","volume-title":"Holistic Control-Flow Protection on Real-Time Embedded Systems with Kage. In 31st USENIX Security Symposium (USENIX Security 22)","author":"Du Yufei","year":"2022","unstructured":"Yufei Du, Zhuojia Shen, Komail Dharsee, Jie Zhou, Robert J. Walls, and John Criswell. 2022. Holistic Control-Flow Protection on Real-Time Embedded Systems with Kage. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 2281-2298."},{"key":"e_1_3_2_1_32_1","unstructured":"ESnet. 2024. iPerf3: A TCP UDP and SCTP Network Bandwidth Measurement Tool. https:\/\/github.com\/esnet\/iperf. Accessed: May-2024."},{"key":"e_1_3_2_1_33_1","volume-title":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2017-1087. [Online","author":"Detail BSD.","year":"2023","unstructured":"FreeBSD. 2019. CVE-2017-1087 Detail. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2017-1087. [Online; accessed May-2023]."},{"key":"e_1_3_2_1_34_1","volume-title":"Meet Pixel 8 and Pixel 8 Pro, our newest phones. https:\/\/blog.google\/products\/pixel\/google-pixel-8-pro\/. [Online; accessed Nov-2023].","year":"2023","unstructured":"Google. 2023. Meet Pixel 8 and Pixel 8 Pro, our newest phones. https:\/\/blog.google\/products\/pixel\/google-pixel-8-pro\/. [Online; accessed Nov-2023]."},{"key":"e_1_3_2_1_35_1","first-page":"489","volume-title":"Hodor: Intra-Process Isolation for High-Throughput Data Plane Libraries. In 2019 USENIX Annual Technical Conference (USENIX ATC 19)","author":"Hedayati Mohammad","year":"2019","unstructured":"Mohammad Hedayati, Spyridoula Gravani, Ethan Johnson, John Criswell, Michael L. Scott, Kai Shen, and Mike Marty. 2019. Hodor: Intra-Process Isolation for High-Throughput Data Plane Libraries. In 2019 USENIX Annual Technical Conference (USENIX ATC 19). USENIX Association, Renton, WA, 489-504."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978327"},{"key":"e_1_3_2_1_37_1","first-page":"613","volume-title":"KSplit: Automating Device Driver Isolation. In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22)","author":"Huang Yongzhe","year":"2022","unstructured":"Yongzhe Huang, Vikram Narayanan, David Detweiler, Kaiming Huang, Gang Tan, Trent Jaeger, and Anton Burtsev. 2022. KSplit: Automating Device Driver Isolation. In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22). USENIX Association, Carlsbad, CA, 613-631."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317843"},{"key":"e_1_3_2_1_39_1","unstructured":"Jens Axboe and fio contributors. 2024. fio: Flexible I\/O Tester. https:\/\/git.kernel.dk\/cgit\/fio\/. Accessed: May-2024."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690184"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00039"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3399742"},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of the 2014 IEEE 27th Computer Security Foundations Symposium (CSF '14)","author":"Kroll Joshua A.","unstructured":"Joshua A. Kroll, Gordon Stewart, and Andrew W. Appel. 2014. Portable Software Fault Isolation. In Proceedings of the 2014 IEEE 27th Computer Security Foundations Symposium (CSF '14). IEEE Computer Society, USA, 18\u201332."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620665.3640391"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3357033"},{"key":"e_1_3_2_1_46_1","first-page":"49","volume-title":"Light-Weight Contexts: An OS Abstraction for Safety and Performance. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16)","author":"Litton James","year":"2016","unstructured":"James Litton, Anjo Vahldiek-Oberwagner, Eslam Elnikety, Deepak Garg, Bobby Bhattacharjee, and Peter Druschel. 2016. Light-Weight Contexts: An OS Abstraction for Safety and Performance. In 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16). USENIX Association, Savannah, GA, 49-64."},{"key":"e_1_3_2_1_47_1","unstructured":"LLVM Project. 2020. LLVM 10.0.0 Release Notes. https:\/\/releases.llvm.org\/10.0.0\/docs\/ReleaseNotes.html. Accessed: May-2023."},{"key":"e_1_3_2_1_48_1","unstructured":"LLVM Project. 2024. Clang Compiler User's Manual: Toolchain. https:\/\/clang.llvm.org\/docs\/Toolchain.html. Accessed: May-2024."},{"key":"e_1_3_2_1_49_1","volume-title":"Technical Report","author":"Ltd Arm","unstructured":"Arm Ltd., 2019. ARMv8.5-A Memory Tagging Extension. Technical Report. Arm Architecture Design Group. https:\/\/developer.arm.com\/documentation\/102925\/latest\/ White Paper."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043568"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24026"},{"key":"e_1_3_2_1_52_1","volume-title":"Memcached: A Distributed Memory Object Caching System. https:\/\/memcached.org\/. Accessed: May-2023.","author":"Team Memcached Development","year":"2024","unstructured":"Memcached Development Team. 2024. Memcached: A Distributed Memory Object Caching System. https:\/\/memcached.org\/. Accessed: May-2023."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542504"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3582016.3582023"},{"key":"e_1_3_2_1_55_1","first-page":"269","volume-title":"LXDs: Towards Isolation of Kernel Subsystems. In 2019 USENIX Annual Technical Conference (USENIX ATC 19)","author":"Narayanan Vikram","year":"2019","unstructured":"Vikram Narayanan, Abhiram Balasubramanian, Charlie Jacobsen, Sarah Spall, Scott Bauer, Michael Quigley, Aftab Hussain, Abdullah Younis, Junjie Shen, Moinak Bhattacharyya, and Anton Burtsev. 2019. LXDs: Towards Isolation of Kernel Subsystems. In 2019 USENIX Annual Technical Conference (USENIX ATC 19). USENIX Association, Renton, WA, 269-284."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3381052.3381328"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/1254810.1254820"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"e_1_3_2_1_59_1","unstructured":"Open Source Robotics Foundation. 2024a. ROS 2 Humble: DDS Implementations. https:\/\/docs.ros.org\/en\/humble\/Installation\/DDS-Implementations.html. Accessed: May-2023."},{"key":"e_1_3_2_1_60_1","unstructured":"Open Source Robotics Foundation. 2024b. ROS 2: The Robot Operating System. https:\/\/github.com\/ros2. Accessed: May-2023."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2020.3012647"},{"key":"e_1_3_2_1_62_1","volume-title":"Proceedings of the 12th Conference on USENIX Security Symposium -","volume":"12","author":"Provos Niels","year":"2003","unstructured":"Niels Provos, Markus Friedl, and Peter Honeyman. 2003. Preventing privilege escalation. In Proceedings of the 12th Conference on USENIX Security Symposium - Volume 12 (Washington, DC) (SSYM'03). USENIX Association, USA, 16."},{"key":"e_1_3_2_1_63_1","unstructured":"PX4 Autopilot Contributors. 2024a. PX4 Middleware Architecture. https:\/\/docs.px4.io\/main\/en\/middleware\/. Accessed: May-2023."},{"key":"e_1_3_2_1_64_1","unstructured":"PX4 Autopilot Contributors. 2024b. uORB Graph Visualization. https:\/\/docs.px4.io\/main\/en\/middleware\/uorb_graph.html. Accessed: May-2024."},{"key":"e_1_3_2_1_65_1","unstructured":"PX4 Autopilot Contributors. 2024c. uORB Messaging Architecture. https:\/\/docs.px4.io\/main\/en\/middleware\/uorb.html. Accessed: May-2024."},{"key":"e_1_3_2_1_66_1","unstructured":"Rich Felker and musl contributors. 2024. musl libc: Lightweight fast simple free-as-in-libc. https:\/\/musl.libc.org\/. Accessed: May-2024."},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.5555\/1929820.1929822"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3579856.3590341"},{"key":"e_1_3_2_1_69_1","first-page":"12","article-title":"ARM memory tagging extension and how it improves C\/C memory safety","volume":"44","author":"Serebryany Kostya","year":"2019","unstructured":"Kostya Serebryany. 2019. ARM memory tagging extension and how it improves C\/C memory safety. The Usenix Magazine, Vol. 44, 2 (2019), 12-16.","journal-title":"The Usenix Magazine"},{"key":"e_1_3_2_1_70_1","volume-title":"Proceedings of the 2012 USENIX Conference on Annual Technical Conference (Boston, MA) (USENIX ATC'12). USENIX Association, USA, 28","author":"Serebryany Konstantin","year":"2012","unstructured":"Konstantin Serebryany, Derek Bruening, Alexander Potapenko, and Dmitry Vyukov. 2012. AddressSanitizer: a fast address sanity checker. In Proceedings of the 2012 USENIX Conference on Annual Technical Conference (Boston, MA) (USENIX ATC'12). USENIX Association, USA, 28."},{"key":"e_1_3_2_1_71_1","unstructured":"Kostya Serebryany Evgenii Stepanov Aleksey Shlyapnikov Vlad Tsyrklevich and Dmitry Vyukov. 2018. Memory Tagging and how it improves C\/C memory safety. arXiv:1802.09517 [cs.CR] https:\/\/arxiv.org\/abs\/1802.09517"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.9"},{"key":"e_1_3_2_1_73_1","article-title":"Salus: Kernel Support for Secure Process Compartments","volume":"2","author":"Strackx Raoul","year":"2015","unstructured":"Raoul Strackx, Pieter Agten, Niels Avonds, and Frank Piessens. 2015. Salus: Kernel Support for Secure Process Compartments. EAI Endorsed Transactions on Security and Safety, Vol. 2, 3 (01 2015).","journal-title":"EAI Endorsed Transactions on Security and Safety"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/2892208.2892235"},{"key":"e_1_3_2_1_75_1","unstructured":"The OpenSSL Project. 2023. OpenSSL: Cryptography and SSL\/TLS Toolkit. https:\/\/github.com\/openssl\/openssl. Accessed: 2025-05-05."},{"key":"e_1_3_2_1_76_1","first-page":"1221","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Vahldiek-Oberwagner Anjo","year":"2019","unstructured":"Anjo Vahldiek-Oberwagner, Eslam Elnikety, Nuno O. Duarte, Michael Sammler, Peter Druschel, and Deepak Garg. 2019. ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK, ). In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1221-1238."},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1145\/2678373.2665741"},{"key":"e_1_3_2_1_78_1","volume-title":"Proceedings of the Fourteenth ACM Symposium on Operating Systems Principles","author":"Wahbe Robert","unstructured":"Robert Wahbe, Steven Lucco, Thomas E. Anderson, and Susan L. Graham. 1993. Efficient software-based fault isolation. In Proceedings of the Fourteenth ACM Symposium on Operating Systems Principles (Asheville, North Carolina, USA) (SOSP '93). Association for Computing Machinery, New York, NY, USA, 203\u2013216."},{"key":"e_1_3_2_1_79_1","volume-title":"Proceedings of the 2015 USENIX Conference on Usenix Annual Technical Conference (Santa Clara, CA) (USENIX ATC '15). USENIX Association, USA, 361\u2013373","author":"Wang Jun","year":"2015","unstructured":"Jun Wang, Xi Xiong, and Peng Liu. 2015. Between mutual trust and mutual distrust: practical fine-grained privilege separation in multithreaded applications. In Proceedings of the 2015 USENIX Conference on Usenix Annual Technical Conference (Santa Clara, CA) (USENIX ATC '15). USENIX Association, USA, 361\u2013373."},{"key":"e_1_3_2_1_80_1","volume-title":"Nathaniel Wesley Filardo, et al","author":"Watson Robert NM","year":"2019","unstructured":"Robert NM Watson, Peter G Neumann, Jonathan Woodruff, Michael Roe, Hesham Almatary, Jonathan Anderson, John Baldwin, David Chisnall, Brooks Davis, Nathaniel Wesley Filardo, et al., 2019. Capability hardware enhanced RISC instructions: CHERI instruction-set architecture (version 7). Technical Report. University of Cambridge, Computer Laboratory."},{"key":"e_1_3_2_1_81_1","volume-title":"Timber-v: Tag-isolated memory bringing fine-grained enclaves to risc-v.. In NDSS","author":"Weiser Samuel","year":"2019","unstructured":"Samuel Weiser, Mario Werner, Ferdinand Brasser, Maja Malenko, Stefan Mangard, and Ahmad-Reza Sadeghi. 2019. Timber-v: Tag-isolated memory bringing fine-grained enclaves to risc-v.. In NDSS. NDSS, San Diego, CA, USA, -."},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1145\/605397.605429"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623206"},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1145\/3445814.3446761"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620665.3640408"},{"key":"e_1_3_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.25"},{"key":"e_1_3_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629175.1629203"},{"key":"e_1_3_2_1_88_1","doi-asserted-by":"publisher","DOI":"10.1145\/3652892.3700786"},{"key":"e_1_3_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.5555\/1855741.1855757"},{"key":"e_1_3_2_1_90_1","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304017"},{"key":"e_1_3_2_1_91_1","first-page":"4345","volume-title":"Debloating Address Sanitizer. In 31st USENIX Security Symposium (USENIX Security 22)","author":"Zhang Yuchen","year":"2022","unstructured":"Yuchen Zhang, Chengbin Pang, Georgios Portokalidis, Nikos Triandopoulos, and Jun Xu. 2022. Debloating Address Sanitizer. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA, 4345-4363."},{"key":"e_1_3_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660344"}],"event":{"name":"CCS '25: ACM SIGSAC Conference on Computer and Communications Security","location":"Taipei Taiwan","acronym":"CCS '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3719027.3744849","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T22:09:44Z","timestamp":1766441384000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3719027.3744849"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,19]]},"references-count":92,"alternative-id":["10.1145\/3719027.3744849","10.1145\/3719027"],"URL":"https:\/\/doi.org\/10.1145\/3719027.3744849","relation":{},"subject":[],"published":{"date-parts":[[2025,11,19]]},"assertion":[{"value":"2025-11-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}