{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T10:03:58Z","timestamp":1781258638032,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":109,"publisher":"ACM","funder":[{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["FA8750-10-C-0237"],"award-info":[{"award-number":["FA8750-10-C-0237"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["HR0011-22-C-0110"],"award-info":[{"award-number":["HR0011-22-C-0110"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006602","name":"Air Force Research Laboratory","doi-asserted-by":"publisher","award":["FA8750-24-C-B047"],"award-info":[{"award-number":["FA8750-24-C-B047"]}],"id":[{"id":"10.13039\/100006602","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006041","name":"Innovate UK","doi-asserted-by":"publisher","award":["105694"],"award-info":[{"award-number":["105694"]}],"id":[{"id":"10.13039\/501100006041","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100014013","name":"UK Research and Innovation","doi-asserted-by":"publisher","award":["UKRI3001"],"award-info":[{"award-number":["UKRI3001"]}],"id":[{"id":"10.13039\/100014013","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000266","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","award":["EP\/V000292\/1"],"award-info":[{"award-number":["EP\/V000292\/1"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006785","name":"Google","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006785","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000038","name":"Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,13]]},"DOI":"10.1145\/3731569.3764844","type":"proceedings-article","created":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T12:43:24Z","timestamp":1759322604000},"page":"67-84","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["CHERIoT RTOS: An OS for Fine-Grained Memory-Safe Compartments on Low-Cost Embedded Devices"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-2679-6504","authenticated-orcid":false,"given":"Saar","family":"Amar","sequence":"first","affiliation":[{"name":"Apple, Cupertino, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-9204-7047","authenticated-orcid":false,"given":"Tony","family":"Chen","sequence":"additional","affiliation":[{"name":"Microsoft, Redmond, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6060-0153","authenticated-orcid":false,"given":"David","family":"Chisnall","sequence":"additional","affiliation":[{"name":"SCI Semiconductor, Cambridge, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-9698-1503","authenticated-orcid":false,"given":"Nathaniel Wesley","family":"Filardo","sequence":"additional","affiliation":[{"name":"SCI Semiconductor, Cambridge, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3490-3473","authenticated-orcid":false,"given":"Ben","family":"Laurie","sequence":"additional","affiliation":[{"name":"Google, London, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9547-7458","authenticated-orcid":false,"given":"Hugo","family":"Lefeuvre","sequence":"additional","affiliation":[{"name":"The University of British Columbia, Vancouver, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-2071-6750","authenticated-orcid":false,"given":"Kunyan","family":"Liu","sequence":"additional","affiliation":[{"name":"Microsoft, Redmond, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2806-495X","authenticated-orcid":false,"given":"Simon W.","family":"Moore","sequence":"additional","affiliation":[{"name":"University of Cambridge, Cambridge, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6095-6405","authenticated-orcid":false,"given":"Robert","family":"Norton-Wright","sequence":"additional","affiliation":[{"name":"SCI Semiconductor, Cambridge, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2165-4658","authenticated-orcid":false,"given":"Margo","family":"Seltzer","sequence":"additional","affiliation":[{"name":"The University of British Columbia, Vancouver, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-2055-8092","authenticated-orcid":false,"given":"Yucong","family":"Tao","sequence":"additional","affiliation":[{"name":"Microsoft, Redmond, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8139-8783","authenticated-orcid":false,"given":"Robert N. M.","family":"Watson","sequence":"additional","affiliation":[{"name":"University of Cambridge, Cambridge, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8047-899X","authenticated-orcid":false,"given":"Hongyan","family":"Xia","sequence":"additional","affiliation":[{"name":"ARM Ltd., Cambridge, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,10,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n. d.]. CheriBSD. https:\/\/www.cheribsd.org\/. Accessed 2025-08-11."},{"key":"e_1_3_2_1_2_1","unstructured":"[n. d.]. CHERIoT open-source repositories. https:\/\/github.com\/CHERIoT-Platform\/. Accessed 2025-07-22."},{"key":"e_1_3_2_1_3_1","unstructured":"[n. d.]. CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition. https:\/\/cwe.mitre.org\/about\/index.html. Accessed 2025-03-04."},{"key":"e_1_3_2_1_4_1","unstructured":"[n. d.]. Document Rust's stance on \/proc\/self\/mem. https:\/\/github.com\/rust-lang\/rust\/pull\/97837. Accessed 2025-08-11."},{"key":"e_1_3_2_1_5_1","unstructured":"[n. d.]. FreeRTOS: Real-time operating system for microcontrollers and small microprocessors. https:\/\/github.com\/FreeRTOS\/FreeRTOS. Accessed 2023-04-17."},{"key":"e_1_3_2_1_6_1","unstructured":"[n. d.]. seL4 Verification: What the Proofs Assume. https:\/\/www.sel4.systems\/Verification\/assumptions.html. Accessed 2025-08-15."},{"key":"e_1_3_2_1_7_1","unstructured":"[n. d.]. The Tock Book: Capsule Isolation. https:\/\/github.com\/tock\/book\/blob\/master\/src\/doc\/threat_model\/capsule_isolation.md. Accessed 2025-08-11."},{"key":"e_1_3_2_1_8_1","volume-title":"Watson","author":"Almatary Hesham","year":"2022","unstructured":"Hesham Almatary, Michael Dodson, Jessica Clarke, Peter Rugg, Ivan Gomes, Michal Podhradsky, Peter G. Neumann, Simon W. Moore, and Robert N. M. Watson. 2022. CompartOS: CHERI Compartmentalization for Embedded Systems. (2022). https:\/\/arxiv.org\/abs\/2206.02852"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3613424.3614266"},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings of the 26th USENIX Security Symposium (USENIX Security'17)","author":"Antonakakis Manos","year":"2017","unstructured":"Manos Antonakakis, Tim April, Michael Bailey, Matt Bernhard, Elie Bursztein, Jaime Cochran, Zakir Durumeric, J. Alex Halderman, Luca Invernizzi, Michalis Kallitsis, Deepak Kumar, Chaz Lever, Zane Ma, Joshua Mason, Damian Menscher, Chad Seaman, Nick Sullivan, Kurt Thomas, and Yi Zhou. 2017. Understanding the Mirai Botnet. In Proceedings of the 26th USENIX Security Symposium (USENIX Security'17). USENIX Association, Vancouver, BC, 1093\u20131110. https:\/\/www.usenix.org\/conference\/usenixsecurity17\/technical-sessions\/presentation\/antonakakis"},{"key":"e_1_3_2_1_11_1","unstructured":"ARM Ltd. [n. d.]. Armv8-M Memory Model and Memory Protection User Guide: Memory Protection Unit. https:\/\/developer.arm.com\/documentation\/107565\/0101\/Memory-protection\/Memory-Protection-Unit. Accessed 2025-03-04."},{"key":"e_1_3_2_1_12_1","unstructured":"ARM Ltd. 2019. Determining the Stack Usage of Applications (Keil Application Note 316). https:\/\/developer.arm.com\/documentation\/kan316\/1-3\/?lang=en. Accessed 2025-03-04."},{"key":"e_1_3_2_1_13_1","unstructured":"ARM Ltd. 2025. TrustZone Hardware Architecture: Secure interrupts. https:\/\/developer.arm.com\/documentation\/PRD29-GENC-009492\/c\/TrustZone-Hardware-Architecture\/Processor-architecture\/Secure-interrupts. Accessed 2025-03-04."},{"key":"e_1_3_2_1_14_1","volume-title":"Proceedings of the 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI'20)","author":"Boos Kevin","year":"2020","unstructured":"Kevin Boos, Namitha Liyanage, Ramla Ijaz, and Lin Zhong. 2020. Theseus: an Experiment in Operating System Structure and State Management. In Proceedings of the 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI'20). USENIX Association."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064205"},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of the 6th USENIX Conference on Operating Systems Design and Implementation (OSDI'04)","author":"Candea George","year":"2004","unstructured":"George Candea, Shinichi Kawamoto, Yuichi Fujiki, Greg Friedman, and Armando Fox. 2004. Microreboot \u2013 a technique for cheap recovery. In Proceedings of the 6th USENIX Conference on Operating Systems Design and Implementation (OSDI'04). USENIX Association."},{"key":"e_1_3_2_1_17_1","unstructured":"Thomas Claburn. 2024. Malicious SSH backdoor sneaks into xz Linux world's data compression library. https:\/\/www.theregister.com\/2024\/03\/29\/malicious_backdoor_xz\/. Accessed 2025-08-11."},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 27th USENIX Security Symposium (USENIX Security'18)","author":"Clements Abraham A.","year":"2018","unstructured":"Abraham A. Clements, Naif Saleh Almakhdhub, Saurabh Bagchi, and Mathias Payer. 2018. ACES: Automatic Compartments for Embedded Systems. In Proceedings of the 27th USENIX Security Symposium (USENIX Security'18). USENIX Association, Baltimore, MD, 65\u201382."},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of the 1st USENIX Workshop on Industrial Experiences with Systems Software (WIESS'00)","author":"de Dinechin Christophe","year":"2000","unstructured":"Christophe de Dinechin. 2000. C++ Exception Handling for IA64. In Proceedings of the 1st USENIX Workshop on Industrial Experiences with Systems Software (WIESS'00). USENIX Association, San Diego, CA. https:\/\/www.usenix.org\/conference\/wiess-2000\/c-exception-handling-ia64"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/365230.365252"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3676536.3676841"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2517349.2522720"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.48456\/tr-961"},{"key":"e_1_3_2_1_24_1","unstructured":"Federal Bureau of Investigation. 2024. People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations. https:\/\/media.defense.gov\/2024\/Sep\/18\/2003547016\/-1\/-1\/0\/CSA-PRC-LINKED-ACTORS-BOTNET.PDF. Accessed 2025-03-04."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00098"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620665.3640416"},{"key":"e_1_3_2_1_27_1","first-page":"479","volume-title":"Futexes and Furwocks: Fast Userlevel Locking in Linux. In Ottowa Linux Symposium 2002","author":"Franke Hubertus","year":"2002","unstructured":"Hubertus Franke, Rusty Russel, and Matthew Kirkwood. 2002. Fuss, Futexes and Furwocks: Fast Userlevel Locking in Linux. In Ottowa Linux Symposium 2002. https:\/\/www.kernel.org\/doc\/ols\/2002\/ols2002-pages-479-495.pdf"},{"key":"e_1_3_2_1_28_1","volume-title":"GNOSIS: A Prototype Operating System for the 1990's.","author":"Frantz Bill","year":"1979","unstructured":"Bill Frantz, Norm Hardy, Jay Jonekait, and Charlie Landau. 1979. GNOSIS: A Prototype Operating System for the 1990's. (1979). http:\/\/www.cap-lore.com\/Agorics\/Library\/KeyKos\/gnosisShare.html"},{"key":"e_1_3_2_1_29_1","unstructured":"Free Software Foundation Inc. 2025. GCC 15.2 Manual. Chapter 6.4.1.1 Common Function Attributes ifunc (\"resolver\"). https:\/\/gcc.gnu.org\/onlinedocs\/gcc-15.2.0\/gcc\/Common-Function-Attributes.html#index-ifunc-function-attribute Accessed 2025-08-11."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD63220.2024.00063"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS48715.2020.000-9"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3434287"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3527318"},{"key":"e_1_3_2_1_34_1","unstructured":"Dan Goodin. 2025. Massive botnet that appeared overnight is delivering record-size DDoSes. https:\/\/arstechnica.com\/security\/2025\/03\/massive-botnet-that-appeared-overnight-is-delivering-record-size-ddoses\/. Accessed 2025-04-10."},{"key":"e_1_3_2_1_35_1","unstructured":"Andy Greenberg. 2025. CyberAv3ngers: The Iranian Saboteurs Hacking Water and Gas Systems Worldwide. https:\/\/www.wired.com\/story\/cyberav3ngers-iran-hacking-water-and-gas-industrial-systems\/. Accessed 2025-04-17."},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of the 2018 USENIX Annual Technical Conference (ATC'18)","author":"Hardin Taylor","year":"2018","unstructured":"Taylor Hardin, Ryan Scott, Patrick Proctor, Josiah Hester, Jacob Sorber, and David Kotz. 2018. Application Memory Isolation on Ultra-Low-Power MCUs. In Proceedings of the 2018 USENIX Annual Technical Conference (ATC'18). USENIX Association, Boston, MA, 127\u2013132. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/hardin"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/858336.858337"},{"key":"e_1_3_2_1_38_1","article-title":"The Confused Deputy: (Or Why Capabilities Might Have Been Invented)","volume":"22","author":"Hardy Norm","year":"1988","unstructured":"Norm Hardy. 1988. The Confused Deputy: (Or Why Capabilities Might Have Been Invented). SIGOPS Oper. Syst. Rev. 22, 4 (1988).","journal-title":"SIGOPS Oper. Syst. Rev."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/336460.336472"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3691621.3694943"},{"key":"e_1_3_2_1_41_1","unstructured":"Galen Hunt Jim Larus Martin Abadi Mark Aiken Paul Barham Manuel Fahndrich Chris Hawblitzel Orion Hodson Steven Levi Nick Murphy Bjarne Steensgaard David Tarditi Ted Wobber and Brian Zill. 2005. An Overview of the Singularity Project. Technical Report MSR-TR-2005-135. 44 pages. https:\/\/www.microsoft.com\/en-us\/research\/publication\/an-overview-of-the-singularity-project\/"},{"key":"e_1_3_2_1_42_1","unstructured":"Michael Hunter. [n. d.]. Microvium Javascript engine. https:\/\/github.com\/coder-mike\/microvium. Accessed 2023-04-17."},{"key":"e_1_3_2_1_43_1","volume-title":"Steven Keuchel, and Dominique Devriese.","author":"Huyghebaert Sander","year":"2020","unstructured":"Sander Huyghebaert, Thomas Van Strydonck, Steven Keuchel, and Dominique Devriese. 2020. Uninitialized Capabilities. (2020). arXiv:2006.01608 [cs.PL] https:\/\/arxiv.org\/abs\/2006.01608"},{"key":"e_1_3_2_1_44_1","unstructured":"Anita Katherine Jones. 1973. Protection in Programmed Systems. Ph. D. Dissertation."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179285"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23107"},{"key":"e_1_3_2_1_47_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security'20)","author":"Kim Taegyu","year":"2020","unstructured":"Taegyu Kim, Chung Hwan Kim, Altay Ozen, Fan Fei, Zhan Tu, Xiangyu Zhang, Xinyan Deng, Dave (Jing) Tian, and Dongyan Xu. 2020. From Control Model to Program: Investigating Robotic Aerial Vehicle Accidents with MAYDAY. In Proceedings of the 29th USENIX Security Symposium (USENIX Security'20). USENIX Association, 913\u2013930. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/kim"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240563"},{"key":"e_1_3_2_1_50_1","unstructured":"Nick Kossifidis Joe Xie Bill Huffman Allen Baum Greg Favor Tariq Kurd and Fumio Arakawa. 2021. PMP Enhancements for Memory Access and Execution Prevention on Machine Mode (Smepmp). https:\/\/raw.githubusercontent.com\/riscv\/riscvtee\/main\/Smepmp\/Smepmp.pdf. Accessed 2025-03-04."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.00010"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24117"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00075"},{"key":"e_1_3_2_1_54_1","volume-title":"Proceedings of the 2001 USENIX Annual Technical Conference (ATC'01)","author":"Lemon Jonathan","year":"2001","unstructured":"Jonathan Lemon. 2001. Kqueue - A Generic and Scalable Event Notification Facility. In Proceedings of the 2001 USENIX Annual Technical Conference (ATC'01). 141\u2013153."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132786"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3124680.3124717"},{"key":"e_1_3_2_1_57_1","volume-title":"Capability-based computer systems","author":"Levy Henry M.","unstructured":"Henry M. Levy. 1984. Capability-based computer systems. Digital Press, Burlington, Chapter 6. The Hydra System. https:\/\/homes.cs.washington.edu\/~levy\/capabook\/Chapter6.pdf"},{"key":"e_1_3_2_1_58_1","volume-title":"Proceedings of the 34th USENIX Security Symposium (USENIX Security'25)","author":"Li Ao","year":"2025","unstructured":"Ao Li, Jinwen Wang, and Ning Zhang. 2025. Software Availability Protection in Cyber-Physical Systems. In Proceedings of the 34th USENIX Security Symposium (USENIX Security'25). https:\/\/www.usenix.org\/conference\/usenixsecurity25\/presentation\/li-ao"},{"key":"e_1_3_2_1_59_1","volume-title":"Proc. ACM Program. Lang. 9, OOPSLA2 (2025","author":"Liu Zixi","year":"2025","unstructured":"Zixi Liu, Yang Feng, Yunbo Ni, Shaohua Li, Xizhe Yin, Qingkai Shi, Baowen Xu, and Zhendong Su. 2025. An Empirical Study of Bugs in the rustc Compiler. Proc. ACM Program. Lang. 9, OOPSLA2 (2025). https:\/\/2025.splashcon.org\/details\/OOPSLA\/204\/An-Empirical-Study-of-Bugs-in-the-rustc-Compiler"},{"key":"e_1_3_2_1_60_1","unstructured":"lowRISC CIC. 2025. The Ibex RISC-V Core. https:\/\/github.com\/lowRISC\/ibex. Accessed 2025-03-04."},{"key":"e_1_3_2_1_61_1","unstructured":"Jessica Lyons. 2024. Iran-linked crew used custom 'cyberweapon' in US critical infrastructure attacks: IOCONTROL targets IoT and OT devices from a ton of makers apparently. https:\/\/www.theregister.com\/2024\/12\/13\/iran_cyberweapon_us_attacks\/. Accessed 2025-03-04."},{"key":"e_1_3_2_1_62_1","volume-title":"Proceedings of the 17th Annual Network & Distributed System Security Symposium (NDSS'10)","author":"Mettler Adrian","year":"2010","unstructured":"Adrian Mettler, David A. Wagner, and Tyler Close. 2010. Joe-E: A Security-Oriented Subset of Java. In Proceedings of the 17th Annual Network & Distributed System Security Symposium (NDSS'10). 357\u2013374."},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2004.8"},{"key":"e_1_3_2_1_64_1","unstructured":"Microsoft. [n. d.]. TPM 2.0 Reference Implementation. https:\/\/github.com\/Microsoft\/ms-tpm-20-ref\/. Accessed 2023-04-17."},{"key":"e_1_3_2_1_65_1","unstructured":"Mark Samuel Miller. 2006. Robust Composition: Towards a Unified Approach to Access Control and Concurrency Control. Ph.D. Dissertation. http:\/\/jhir.library.jhu.edu\/handle\/1774.2\/873"},{"key":"e_1_3_2_1_66_1","unstructured":"Mark S. Miller Mike Samuel Ben Laurie Ihab Awad and Mike Stay. 2008. Caja: Safe active content in sanitized JavaScript. Technical Report 2008-06-07. Google. https:\/\/google-code-archive-downloads.storage.googleapis.com\/v2\/code.google.com\/google-caja\/caja-spec-2008-06-06.pdf"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/361932.361937"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.5555\/3489212.3489252"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/11636.003.0009"},{"key":"e_1_3_2_1_70_1","unstructured":"Lily Hay Newman. 2023. Panasonic Warns That Internet-of-Things Malware Attack Cycles Are Accelerating. https:\/\/www.wired.com\/story\/panasonic-iot-malware-honeypots\/. Accessed 2025-03-04."},{"key":"e_1_3_2_1_71_1","unstructured":"NeXT Computer Inc. 1994. OpenStep Specification. https:\/\/www.gnustep.org\/resources\/OpenStepSpec.pdf.gz. Accessed 2025-03-04."},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00055"},{"key":"e_1_3_2_1_73_1","volume-title":"Intelligence Report","year":"2024","unstructured":"Nokia. 2024. Threat Intelligence Report 2024. https:\/\/www.nokia.com\/asset\/214202. Accessed 2025-03-04."},{"key":"e_1_3_2_1_74_1","unstructured":"Open Policy Agent. 2025. The Rego Policy Language. https:\/\/www.openpolicyagent.org\/docs\/v1.2.0\/policy-language\/. Accessed 2025-03-04."},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS54340.2022.00015"},{"key":"e_1_3_2_1_76_1","volume-title":"Zscaler Report: Mobile, IoT, and OT Cyber Threats Surge in 2024. https:\/\/www.techrepublic.com\/article\/zscaler-2024-mobile-iot-ot-cyber-threat-report\/. Accessed 2025-03-04.","author":"Pernet Cedric","year":"2024","unstructured":"Cedric Pernet. 2024. Zscaler Report: Mobile, IoT, and OT Cyber Threats Surge in 2024. https:\/\/www.techrepublic.com\/article\/zscaler-2024-mobile-iot-ot-cyber-threat-report\/. Accessed 2025-03-04."},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2019.00032"},{"key":"e_1_3_2_1_78_1","unstructured":"Louis-Emile Ploix Alasdair Armstrong Tom Melham Ray Lin Haolong Wang and Anastasia Courtney. 2025. Comprehensive Formal Verification of Observational Correctness for the CHERIoT-Ibex Processor. arXiv:2502.04738 [cs.AR] https:\/\/arxiv.org\/abs\/2502.04738"},{"key":"e_1_3_2_1_79_1","unstructured":"Thomas Pornin. 2025. BearSSL: a smaller SSL\/TLS library. https:\/\/www.bearssl.org\/. Accessed 2025-03-04."},{"key":"e_1_3_2_1_80_1","unstructured":"Raspberry Pi Ltd. 2025. RP2350 Datasheet: A microcontroller by Raspberry Pi. https:\/\/datasheets.raspberrypi.com\/rp2350\/rp2350-datasheet.pdf. Accessed 2025-03-04."},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00036"},{"key":"e_1_3_2_1_82_1","volume-title":"Developing Safety-Critical Software \u2013 A Practical Guide for Aviation Software and DO-178C Compliance","author":"Rierson Leanna","unstructured":"Leanna Rierson. 2013. Developing Safety-Critical Software \u2013 A Practical Guide for Aviation Software and DO-178C Compliance. CRC Press."},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/3471621.3471839"},{"key":"e_1_3_2_1_84_1","unstructured":"Katie Rogers. 2024. Biden Hardens Protection Against Cybersecurity Threats to Ports. https:\/\/www.nytimes.com\/2024\/02\/21\/us\/politics\/cybersecurity-ports.html. Accessed 2025-04-10."},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"e_1_3_2_1_86_1","unstructured":"David E. Sanger Madeleine Ngo and Jack Ewing. 2024. Biden Administration Proposes Ban on Chinese Software in Vehicles. https:\/\/www.nytimes.com\/2024\/09\/23\/us\/politics\/chinese-software-ban-cars-biden.html. Accessed 2025-04-10."},{"key":"e_1_3_2_1_87_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security'20)","author":"Schrammel David","year":"2020","unstructured":"David Schrammel, Samuel Weiser, Stefan Steinegger, Martin Schwarzl, Michael Schwarz, Stefan Mangard, and Daniel Gruss. 2020. Donky: Domain Keys \u2013 Efficient In-Process Isolation for RISC-V and x86. In Proceedings of the 29th USENIX Security Symposium (USENIX Security'20). USENIX Association, 1677\u20131694."},{"key":"e_1_3_2_1_88_1","unstructured":"SCI Semiconductor. 2025. ICENI Device Family. https:\/\/www.scisemi.com\/products\/iceni-device-family\/"},{"key":"e_1_3_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.1145\/319151.319163"},{"key":"e_1_3_2_1_90_1","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690275"},{"key":"e_1_3_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2011.2161529"},{"key":"e_1_3_2_1_92_1","volume-title":"Proceedings of the 18th USENIX WOOT Conference on Offensive Technologies (WOOT'24)","author":"Tan Xi","year":"2024","unstructured":"Xi Tan, Zheyuan Ma, Sandro Pinto, Le Guan, Ning Zhang, Jun Xu, Zhiqiang Lin, Hongxin Hu, and Ziming Zhao. 2024. SoK: Where's the \"up\"?! A Comprehensive (bottom-up) Study on the Security of Arm Cortex-M Systems. In Proceedings of the 18th USENIX WOOT Conference on Offensive Technologies (WOOT'24). USENIX Association, Philadelphia, PA, 149\u2013169. https:\/\/www.usenix.org\/conference\/woot24\/presentation\/tan"},{"key":"e_1_3_2_1_93_1","unstructured":"The Standard Performance Evaluation Corporation (SPEC). 2025. The CoreMark Benchmark. https:\/\/www.eembc.org\/coremark\/. Accessed 2025-03-04."},{"key":"e_1_3_2_1_94_1","unstructured":"Jennifer Pattison Tuohy. 2025. Here's why your smart fridge needs an expiration date. https:\/\/www.theverge.com\/smart-home\/607470\/smart-appliances-expiration-date-security-updates-consumer-reports-survey. Accessed 2025-04-10."},{"key":"e_1_3_2_1_95_1","unstructured":"United States Government Accountability Office. 2024. Improvements Needed in Addressing Risks to Operational Technology. https:\/\/www.gao.gov\/assets\/gao-24-106576.pdf. Accessed 2024-12-12."},{"key":"e_1_3_2_1_96_1","unstructured":"US Cybersecurity and Infrastructure Security Agency. 2023. The Case for Memory Safe Roadmaps. https:\/\/www.cisa.gov\/sites\/default\/files\/2023-12\/The-Case-for-Memory-Safe-Roadmaps-508c.pdf. Accessed 2025-03-04."},{"key":"e_1_3_2_1_97_1","unstructured":"Steven J. Vaughan-Nichols. 2024. The S in IoT stands for security. You'll never secure all the Things: All too many 'smart' devices are security stupid. https:\/\/www.theregister.com\/2024\/03\/09\/opinion_column_security_sjvn\/. Accessed 2025-03-04."},{"key":"e_1_3_2_1_98_1","volume-title":"Richard Grisenthwaite, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, Simon W. Moore, Steven J. Murdoch, Kyndylan Nienhuis","author":"Watson Robert N. M.","year":"2023","unstructured":"Robert N. M. Watson, Peter G. Neumann, Jonathan Woodruff, Michael Roe, Hesham Almatary, Jonathan Anderson, John Baldwin, Graeme Barnes, David Chisnall, Jessica Clarke, Brooks Davis, Lee Eisen, Nathaniel Wesley Filardo, Richard Grisenthwaite, Alexandre Joannou, Ben Laurie, A. Theodore Markettos, Simon W. Moore, Steven J. Murdoch, Kyndylan Nienhuis, Robert Norton, Alexander Richardson, Peter Rugg, Peter Sewell, Stacey Son, and Hongyan Xia. 2023. Capability Hardware Enhanced RISC Instructions: CHERI Instruction-Set Architecture (Version 9). Technical Report UCAM-CL-TR-987. University of Cambridge, Computer Laboratory. https:\/\/www.cl.cam.ac.uk\/techreports\/UCAM-CL-TR-987.pdf"},{"key":"e_1_3_2_1_99_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.9"},{"key":"e_1_3_2_1_100_1","unstructured":"M. V. Wilkes and R. M. Needham. 1979. The Cambridge CAP Computer and Its Operating System. Elsevier. https:\/\/www.cl.cam.ac.uk\/events\/50+5\/assets\/pdf\/cap.pdf"},{"key":"e_1_3_2_1_101_1","doi-asserted-by":"publisher","DOI":"10.1145\/2678373.2665740"},{"key":"e_1_3_2_1_102_1","doi-asserted-by":"publisher","DOI":"10.1145\/355616.364017"},{"key":"e_1_3_2_1_103_1","doi-asserted-by":"publisher","DOI":"10.1145\/3352460.3358288"},{"key":"e_1_3_2_1_104_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2018.00023"},{"key":"e_1_3_2_1_105_1","doi-asserted-by":"publisher","DOI":"10.23919\/3S60530.2024.10592292"},{"key":"e_1_3_2_1_106_1","doi-asserted-by":"publisher","DOI":"10.1145\/2048066.2048092"},{"key":"e_1_3_2_1_107_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3324402"},{"key":"e_1_3_2_1_108_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534366"},{"key":"e_1_3_2_1_109_1","doi-asserted-by":"publisher","DOI":"10.1145\/3492321.3519573"}],"event":{"name":"SOSP '25: ACM SIGOPS 31st Symposium on Operating Systems Principles","location":"Lotte Hotel World Seoul Republic of Korea","acronym":"SOSP '25","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems","USENIX"]},"container-title":["Proceedings of the ACM SIGOPS 31st Symposium on Operating Systems Principles"],"original-title":[],"deposited":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T12:45:23Z","timestamp":1759322723000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3731569.3764844"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,12]]},"references-count":109,"alternative-id":["10.1145\/3731569.3764844","10.1145\/3731569"],"URL":"https:\/\/doi.org\/10.1145\/3731569.3764844","relation":{},"subject":[],"published":{"date-parts":[[2025,10,12]]},"assertion":[{"value":"2025-10-12","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}