{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:32:16Z","timestamp":1783791136785,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":51,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T00:00:00Z","timestamp":1757289600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2244937, CNS-2244938, CNS-2148374, and CNS-2401979"],"award-info":[{"award-number":["CNS-2244937, CNS-2244938, CNS-2148374, and CNS-2401979"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100016682","name":"VMware","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100016682","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100002418","name":"Intel Corporation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100002418","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100012894","name":"Linux Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100012894","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,9,8]]},"DOI":"10.1145\/3757347.3759137","type":"proceedings-article","created":{"date-parts":[[2025,8,28]],"date-time":"2025-08-28T16:24:42Z","timestamp":1756398282000},"page":"69-84","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Adaptive and Efficient Dynamic Memory Management for Hardware Enclaves"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-6536-0789","authenticated-orcid":false,"given":"Vijay","family":"Dhanraj","sequence":"first","affiliation":[{"name":"Intel Corporation and Qualcomm"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-1428-6926","authenticated-orcid":false,"given":"Harpreet Singh","family":"Chawla","sequence":"additional","affiliation":[{"name":"Texas A&M University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-8918-6687","authenticated-orcid":false,"given":"Daniel","family":"Manila","sequence":"additional","affiliation":[{"name":"The University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-2694-6133","authenticated-orcid":false,"given":"Eric Thomas","family":"Schneider","sequence":"additional","affiliation":[{"name":"Virginia Tech and The University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-2866-2619","authenticated-orcid":false,"given":"Erica","family":"Fu","sequence":"additional","affiliation":[{"name":"The University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9804-0857","authenticated-orcid":false,"given":"Donald E.","family":"Porter","sequence":"additional","affiliation":[{"name":"The University of North Carolina at Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0016-6487","authenticated-orcid":false,"given":"Chia-Che","family":"Tsai","sequence":"additional","affiliation":[{"name":"Texas A&M University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5309-0391","authenticated-orcid":false,"given":"Mona","family":"Vij","sequence":"additional","affiliation":[{"name":"Intel Corporation"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,9,8]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Alibaba. 2020. Alibaba Cloud Released Industry's First Trusted and Virtualized Instance with Support for SGX 2.0 and TPM. https:\/\/www.alibabacloud.com\/blog\/alibabacloud-released-industrys-first-trusted-and-virtualized-instance-with-support-for-sgx-2-0-and-tpm_596821. (October 2020)."},{"key":"e_1_3_2_1_2_1","volume-title":"Instance Type Families, Overview. https:\/\/www.alibabacloud.com\/help\/doc-detail\/60576.htm?spm=a2c63.p38356.b99.95.32ae1160CQKT0I. (August","author":"Cloud Alibaba","year":"2023","unstructured":"Alibaba. 2023. Alibaba Cloud, Elastic Compute Services, Instance Type Families, Overview. https:\/\/www.alibabacloud.com\/help\/doc-detail\/60576.htm?spm=a2c63.p38356.b99.95.32ae1160CQKT0I. (August 2023)."},{"key":"e_1_3_2_1_3_1","unstructured":"AMD. [n. d.]. AMD Secure Encrypted Virtualization (SEV). https:\/\/developer.amd.com\/sev\/. ([n. d.])."},{"key":"e_1_3_2_1_4_1","unstructured":"AMD. 2020. White PaperAMD SEV-SNP: Strengthening VM Isolationwith Integrity Protection and More. https:\/\/www.amd.com\/system\/files\/TechDocs\/SEV-SNP-strengthening-vm-isolation-with-integrity-protection-and-more.pdf. (2020)."},{"key":"e_1_3_2_1_5_1","unstructured":"ARM. [n. d.]. ARM Secure IP. https:\/\/developer.arm.com\/ip-products\/security-ip. ([n. d.])."},{"key":"e_1_3_2_1_6_1","volume-title":"Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation (OSDI'16)","author":"Arnautov Sergei","year":"2016","unstructured":"Sergei Arnautov, Bohdan Trach, Franz Gregor, Thomas Knauth, Andre Martin, Christian Priebe, Joshua Lind, Divya Muthukumaran, Dan O'Keeffe, Mark L. Stillwell, David Goltzsche, David Eyers, R\u00fcdiger Kapitza, Peter Pietzuch, and Christof Fetzer. 2016. SCONE: Secure Linux Containers with Intel SGX. In Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation (OSDI'16). USENIX Association, Berkeley, CA, USA, 689--703. http:\/\/dl.acm.org\/citation.cfm?id=3026877.3026930"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/2685048.2685070"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2988336.2988350"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.14778\/3364324.3364331"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134106"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3065913.3065915"},{"key":"e_1_3_2_1_12_1","volume-title":"High-Resolution Side Channels for Untrusted Operating Systems. In 2017 USENIX Annual Technical Conference (USENIX ATC 17)","author":"H\u00e4hnel Marcus","year":"2017","unstructured":"Marcus H\u00e4hnel, Weidong Cui, and Marcus Peinado. 2017. High-Resolution Side Channels for Untrusted Operating Systems. In 2017 USENIX Annual Technical Conference (USENIX ATC 17). USENIX Association, Santa Clara, CA, 299--312. https:\/\/www.usenix.org\/conference\/atc17\/technical-sessions\/presentation\/hahnel"},{"key":"e_1_3_2_1_13_1","volume-title":"IBM Cloud Data Shield Now Generally Available. https:\/\/www.ibm.com\/blog\/announcement\/ibm-cloud-data-shield-now-generally-available\/. (April","author":"IBM.","year":"2020","unstructured":"IBM. 2020. IBM Cloud Data Shield Now Generally Available. https:\/\/www.ibm.com\/blog\/announcement\/ibm-cloud-data-shield-now-generally-available\/. (April 2020)."},{"key":"e_1_3_2_1_14_1","volume-title":"Provisioning a bare metal server with Intel\u00ae Software Guard Extension architecture. https:\/\/cloud.ibm.com\/docs\/bare-metal?topic=bare-metal-bm-server-provision-sgx. (January","author":"IBM.","year":"2023","unstructured":"IBM. 2023. Provisioning a bare metal server with Intel\u00ae Software Guard Extension architecture. https:\/\/cloud.ibm.com\/docs\/bare-metal?topic=bare-metal-bm-server-provision-sgx. (January 2023)."},{"key":"e_1_3_2_1_15_1","unstructured":"Intel. 2021. Intel\u00ae Hardware Shield-Intel\u00ae Total Memory Encryption. https:\/\/www.intel.com\/content\/dam\/www\/central-libraries\/us\/en\/documents\/whitepaper-inteltme.pdf. (2021)."},{"key":"e_1_3_2_1_16_1","unstructured":"Intel. 2022. Asynchronous Enclave Exit Notify and the EDECCSSA User Leaf Function. https:\/\/cdrdv2.intel.com\/v1\/dl\/getContent\/736463?explicitVersion=true. (2022)."},{"key":"e_1_3_2_1_17_1","unstructured":"Intel. 2022. Intel Trust Domain Extensions. https:\/\/cdrdv2.intel.com\/v1\/dl\/getContent\/690419. (2022)."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419111.3421282"},{"key":"e_1_3_2_1_19_1","volume-title":"14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17)","author":"Kim Seongmin","year":"2017","unstructured":"Seongmin Kim, Juhyeng Han, Jaehyeong Ha, Taesoo Kim, and Dongsu Han. 2017. Enhancing Security and Privacy of Tor's Ecosystem by Using Trusted Execution Environments. In 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17). USENIX Association, Boston, MA, 145--161. https:\/\/www.usenix.org\/conference\/nsdi17\/technical-sessions\/presentation\/kim-seongmin"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3302424.3303951"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3007788.3007793"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/VLSID64188.2025.00060"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3387532"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3505253.3505257"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3423211.3425673"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2948618.2954331"},{"key":"e_1_3_2_1_27_1","volume-title":"Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy (HASP 13)","author":"McKeen Frank","unstructured":"Frank McKeen, Ilya Alexandrovich, Alex Berenzon, Carlos V. Rozas, Hisham Shafi, Vedvyas Shanbhogue, and Uday R. Savagaonkar. 2013. Innovative Instructions and Software Model for Isolated Execution. In Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy (HASP 13). ACM. http:\/\/doi.acm.org\/10.1145\/2487726.2488368"},{"key":"e_1_3_2_1_28_1","volume-title":"https:\/\/learn.microsoft.com\/en-us\/azure\/virtual-machines\/dcv3-series. (January","year":"2023","unstructured":"Microsoft. 2023. DCsv3 and DCdsv3-series. https:\/\/learn.microsoft.com\/en-us\/azure\/virtual-machines\/dcv3-series. (January 2023)."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00045"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3387541"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064219"},{"key":"e_1_3_2_1_32_1","volume-title":"CoSMIX: A Compiler-based System for Secure Memory Instrumentation and Execution in Enclaves. In 2019 USENIX Annual Technical Conference (USENIX ATC 19)","author":"Orenbach Meni","year":"2019","unstructured":"Meni Orenbach, Yan Michalevsky, Christof Fetzer, and Mark Silberstein. 2019. CoSMIX: A Compiler-based System for Secure Memory Instrumentation and Execution in Enclaves. In 2019 USENIX Annual Technical Conference (USENIX ATC 19). USENIX Association, Renton, WA, 555--570. https:\/\/www.usenix.org\/conference\/atc19\/presentation\/orenbach"},{"key":"e_1_3_2_1_33_1","unstructured":"Samuele Pedroni Hans Boehm John Ellis and Pete Kovac. 2018. GCBench. https:\/\/github.com\/mozillazg\/pypy\/blob\/40795dcad7e1b0be53d2f95a94f0278086d2d448\/rpython\/translator\/goal\/gcbench.py. (2018)."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2988336.2988346"},{"key":"e_1_3_2_1_35_1","volume-title":"Proceedings of the 15th USENIX Conference on Networked Systems Design and Implementation (NSDI'18)","author":"Poddar Rishabh","year":"2018","unstructured":"Rishabh Poddar, Chang Lan, Raluca Ada Popa, and Sylvia Ratnasamy. 2018. Safebricks: Shielding Network Functions in the Cloud. In Proceedings of the 15th USENIX Conference on Networked Systems Design and Implementation (NSDI'18). USENIX Association, USA, 201--216."},{"key":"e_1_3_2_1_36_1","volume-title":"Oakland","author":"Priebe Christian","unstructured":"Christian Priebe, Kapil Vaswani, and Manuel Costa. 2018. EnclaveDB --- A Secure Database using SGX. In Oakland. IEEE. https:\/\/www.microsoft.com\/en-us\/research\/publication\/enclavedb-a-secure-database-using-sgx\/"},{"key":"e_1_3_2_1_37_1","unstructured":"Redis. 2023. Redis benchmark. https:\/\/redis.io\/docs\/management\/optimization\/benchmarks\/. (2023)."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.10"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378469"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3177155"},{"key":"e_1_3_2_1_41_1","volume-title":"Nehal Bandi, Bhushan Jain, William Jannen, Jitin John, Harry A. Kalodner, Vrushali Kulkarni, Daniela Oliveira, and Donald E. Porter.","author":"Tsai Chia-Che","year":"2014","unstructured":"Chia-Che Tsai, Kumar Saurabh Arora, Nehal Bandi, Bhushan Jain, William Jannen, Jitin John, Harry A. Kalodner, Vrushali Kulkarni, Daniela Oliveira, and Donald E. Porter. 2014. Cooperation and Security Isolation of Library OSes for Multi-Process Applications. In EuroSys."},{"key":"e_1_3_2_1_42_1","volume-title":"Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX. In 2017 USENIX Annual Technical Conference (USENIX ATC 17)","author":"Tsai Chia-Che","year":"2017","unstructured":"Chia-Che Tsai, Donald E. Porter, and Mona Vij. 2017. Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX. In 2017 USENIX Annual Technical Conference (USENIX ATC 17). USENIX Association, Santa Clara, CA, 645--658. https:\/\/www.usenix.org\/conference\/atc17\/technical-sessions\/presentation\/tsai"},{"key":"e_1_3_2_1_43_1","volume-title":"Raluca Ada Popa, and Donald E. Porter","author":"Tsai Chia-Che","year":"2020","unstructured":"Chia-Che Tsai, Jeongseok Son, Bhushan Jain, John McAvey, Raluca Ada Popa, and Donald E. Porter. 2020. Civet: An Efficient Java Partitioning Framework for Hardware Enclaves. In USENIX Security."},{"key":"e_1_3_2_1_44_1","unstructured":"Simon Urbanek and Philippe Grosjean. 2008. R Benchmark. https:\/\/mac.r-project.org\/benchmarks\/. (2008)."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3152701.3152706"},{"key":"e_1_3_2_1_46_1","volume-title":"26th { USENIX} Security Symposium ({USENIX} Security 17). 1041--1056.","author":"Bulck Jo Van","unstructured":"Jo Van Bulck, Nico Weichbrodt, R\u00fcdiger Kapitza, Frank Piessens, and Raoul Strackx. 2017. Telling your secrets without page faults: Stealthy page table-based attacks on enclaved execution. In 26th { USENIX} Security Symposium ({USENIX} Security 17). 1041--1056."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/2948618.2954330"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.45"},{"key":"e_1_3_2_1_49_1","unstructured":"Yahoo. 2019. Yahoo! Cloud Serving Benchmark. https:\/\/ycsb.site. (2019)."},{"key":"e_1_3_2_1_50_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Yu Jason Zhijingcheng","year":"2022","unstructured":"Jason Zhijingcheng Yu, Shweta Shinde, Trevor E Carlson, and Prateek Saxena. 2022. Elasticlave: An efficient memory model for enclaves. In 31st USENIX Security Symposium (USENIX Security 22). 4111--4128."},{"key":"e_1_3_2_1_51_1","volume-title":"Google's Shielded VM is now default. https:\/\/www.zdnet.com\/article\/cloud-security-microsoft-azures-sgx-vms-hit-ga-googles-shielded-vm-is-now-default\/. (April","year":"2020","unstructured":"ZDNet. 2020. Cloud security: Microsoft Azure's SGX VMs hit GA, Google's Shielded VM is now default. https:\/\/www.zdnet.com\/article\/cloud-security-microsoft-azures-sgx-vms-hit-ga-googles-shielded-vm-is-now-default\/. (April 2020)."}],"event":{"name":"SYSTOR '25: The 18th ACM International Systems and Storage Conference","location":"Virtual Israel","acronym":"SYSTOR '25","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems","Technion Israel Institute of Technology"]},"container-title":["Proceedings of the 18th ACM International Systems and Storage Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3757347.3759137","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3757347.3759137","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T14:13:19Z","timestamp":1760019199000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3757347.3759137"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,8]]},"references-count":51,"alternative-id":["10.1145\/3757347.3759137","10.1145\/3757347"],"URL":"https:\/\/doi.org\/10.1145\/3757347.3759137","relation":{},"subject":[],"published":{"date-parts":[[2025,9,8]]},"assertion":[{"value":"2025-09-08","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}