{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,20]],"date-time":"2026-06-20T04:51:19Z","timestamp":1781931079279,"version":"3.54.5"},"reference-count":39,"publisher":"Information Processing Society of Japan","issue":"0","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Journal of Information Processing"],"published-print":{"date-parts":[[2026]]},"DOI":"10.2197\/ipsjjip.34.514","type":"journal-article","created":{"date-parts":[[2026,6,14]],"date-time":"2026-06-14T22:11:18Z","timestamp":1781475078000},"page":"514-524","source":"Crossref","is-referenced-by-count":0,"title":["GEnclave: User\/Kernel-Level Enclave within Confidential VMs"],"prefix":"10.2197","volume":"34","author":[{"given":"Terufumi","family":"Hata","sequence":"first","affiliation":[{"name":"Keio University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kenta","family":"Ishiguro","sequence":"additional","affiliation":[{"name":"Keio University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kenji","family":"Kono","sequence":"additional","affiliation":[{"name":"Keio University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1012","reference":[{"key":"1","doi-asserted-by":"crossref","unstructured":"[1] Ahmad, A., Joe, B., Xiao, Y., Zhang, Y., Shin, I. and Lee, B.: OBFUSCURO: A Commodity Obfuscation Engine on Intel SGX, 26th Annual Network and Distributed System Security Symposium<\/i>, NDSS 2019<\/i>, The Internet Society (2019) (online), available from <https:\/\/www.ndss-symposium.org\/ndss-paper\/obfuscuro-a-commodity-obfuscation-engine-on-intel-sgx\/>.","DOI":"10.14722\/ndss.2019.23513"},{"key":"2","doi-asserted-by":"crossref","unstructured":"[2] Ahmad, A., Ou, B., Liu, C., Zhang, X. and Fonseca, P.: Veil: A Protected Services Framework for Confidential Virtual Machines, Proc. 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems<\/i>, Volume 4<\/i>, ASPLOS '23<\/i>, pp.378-393, Association for Computing Machinery (online), DOI: 10.1145\/3623278.3624763(2024).","DOI":"10.1145\/3623278.3624763"},{"key":"3","doi-asserted-by":"crossref","unstructured":"[3] Ahn, J., Lee, K., Park, C., Moon, H. and Kwon, Y.: SwiftSweeper: Defeating Use-After-Free Bugs Using Memory Sweeper Without Stop-the-World, 2025 IEEE Symposium on Security and Privacy<\/i> (SP<\/i>), pp.793-809 (online), DOI: 10.1109\/SP61157.2025.00131(2025).","DOI":"10.1109\/SP61157.2025.00131"},{"key":"4","unstructured":"[4] Amazon Web Services, I.: Nitro Enclaves (2023), available from <https:\/\/aws.amazon.com\/ec2\/nitro\/nitro-enclaves\/>."},{"key":"5","unstructured":"[5] Amazon Web Services, I.: AMD SEV-SNP for Amazon EC2 instances (2025), available from <https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/sev-snp.html>."},{"key":"6","unstructured":"[6] AnandP: Intel and Google Cloud Announce Confidential VMs for the Masses (2024), available from <https:\/\/community.intel.com\/t5\/Blogs\/Products-and-Solutions\/Security\/Intel-and-Google-Cloud-Announce-Confidential-VMs-for-the-Masses\/post\/1634718>."},{"key":"7","unstructured":"[7] Bahmani, R., Brasser, F., Dessouky, G., Jauernig, P., Klimmek, M., Sadeghi, A.-R. and Stapf, E.: CURE: A Security Architecture with CUstomizable and Resilient Enclaves, 30th USENIX Security Symposium<\/i> (USENIX Security 21<\/i>), pp.1073-1090, USENIX Association (2021) (online), available from <https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/bahmani>."},{"key":"8","doi-asserted-by":"crossref","unstructured":"[8] Bai, Y., Li, P., Huang, Y., Huang, M.C., Zhao, S., Zhao, L., Zhang, F., Meng, D. and Hou, R.: HyperTEE: A Decoupled TEE Architecture with Secure Enclave Management, 2024 57th IEEE\/ACM International Symposium on Microarchitecture<\/i> (MICRO<\/i>), pp.105-120 (online), DOI: 10.1109\/MICRO61859.2024.00018(2024).","DOI":"10.1109\/MICRO61859.2024.00018"},{"key":"9","unstructured":"[9] Belay, A., Bittau, A., Mashtizadeh, A., Terei, D., Mazi\u2018eres, D. and Kozyrakis, C.: Dune: Safe User-level Access to Privileged CPU Features, 10th USENIX Symposium on Operating Systems Design and Implementation<\/i> (OSDI 12<\/i>), pp.335-348, USENIX Association (2012) (online), available from <https:\/\/www.usenix.org\/conference\/osdi12\/technical-sessions\/presentation\/belay>."},{"key":"10","doi-asserted-by":"crossref","unstructured":"[10] Brasser, F., Gens, D., Jauernig, P., Ahmad-Reza, Sadeghi, Emmanuel and Stapf: SANCTUARY: ARMing TrustZone with User-space Enclaves, 26th Annual Network and Distributed System Security Symposium<\/i>, NDSS 2019<\/i>, The Internet Society (2019) (online), available from <https:\/\/www.ndss-symposium.org\/ndss-paper\/sanctuary-arming-trustzone-with-user-space-enclaves\/>.","DOI":"10.14722\/ndss.2019.23448"},{"key":"11","doi-asserted-by":"crossref","unstructured":"[11] Chen, X., Garfinkel, T., Lewis, E.C., Subrahmanyam, P., Waldspurger, C.A., Boneh, D., Dwoskin, J. and Ports, D.R.: Overshadow: A Virtualization-Based Approach to Retrofitting Protection in Commodity Operating Systems, Proc. 13th International Conference on Architectural Support for Programming Languages and Operating Systems<\/i>, ASPLOS XIII<\/i>, pp.2-13, Association for Computing Machinery (online), DOI: 10.1145\/1346281.1346284(2008).","DOI":"10.1145\/1346281.1346284"},{"key":"12","unstructured":"[12] Costan, V., Lebedev, I. and Devadas, S.: Sanctum: Minimal Hardware Extensions for Strong Software Isolation, 25th USENIX Security Symposium<\/i> (USENIX Security 16<\/i>), pp.857-874, USENIX Association (2016) (online), available from <https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/presentation\/costan>."},{"key":"13","unstructured":"[13] Devices, A.M.: CONFIDENTIAL GUEST SERVICES WITH SECURE VM SERVICE MODULE ON SEV-SNP (2022), available from <https:\/\/kvm-forum.qemu.org\/2022\/SEV-SNP-Confidential-Guest-Services-with-SVSM.pdf>."},{"key":"14","unstructured":"[14] Feng, E., Lu, X., Du, D., Yang, B., Jiang, X., Xia, Y., Zang, B. and Chen, H.: Scalable Memory Protection in the PENGLAI Enclave, 15th USENIX Symposium on Operating Systems Design and Implementation<\/i> (OSDI 21<\/i>), pp.275-294, USENIX Association (2021) (online), available from <https:\/\/www.usenix.org\/conference\/osdi21\/presentation\/feng>."},{"key":"15","doi-asserted-by":"crossref","unstructured":"[15] Ferraiuolo, A., Baumann, A., Hawblitzel, C. and Parno, B.: Komodo: Using Verification to Disentangle Secure-Enclave Hardware from Software, Proc. 26th Symposium on Operating Systems Principles<\/i>, SOSP \u201917<\/i>, pp.287-305, Association for Computing Machinery (online), DOI: 10.1145\/3132747.3132782(2017).","DOI":"10.1145\/3132747.3132782"},{"key":"16","doi-asserted-by":"crossref","unstructured":"[16] Gorter, F., Koning, K., Bos, H. and Giuffrida, C.: DangZero: Efficient Use-After-Free Detection via Direct Page Table Access, Proc. 2022 ACM SIGSAC Conference on Computer and Communications Security<\/i>, CCS '22<\/i>, pp.1307-1322, Association for Computing Machinery (online), DOI: 10.1145\/3548606.3560625(2022).","DOI":"10.1145\/3548606.3560625"},{"key":"17","unstructured":"[17] Gu, J., Wu, X., Zhu, B., Xia, Y., Zang, B., Guan, H. and Chen, H.: Enclavisor: A Hardware-Software Co-Design for Enclaves on Untrusted Cloud, IEEE Trans. Computers<\/i>, Vol.70, No.10, pp.1598-1611 (online), DOI: 10.1109\/TC.2020.3019704(2021)."},{"key":"18","doi-asserted-by":"crossref","unstructured":"[18] Han, S. and Jang, J.: MyTEE: Own the Trusted Execution Environment on Embedded Devices, 30th Annual Network and Distributed System Security Symposium<\/i>, NDSS 2023<\/i>, The Internet Society (2023) (online), available from <https:\/\/www.ndss-symposium.org\/ndss-paper\/mytee-own-the-trusted-execution-environment-on-embedded-devices\/>.","DOI":"10.14722\/ndss.2023.23041"},{"key":"19","unstructured":"[19] Hof, A.V. and Nieh, J.: BlackBox: A Container Security Monitor for Protecting Containers on Untrusted Operating Systems, 16th USENIX Symposium on Operating Systems Design and Implementation<\/i> (OSDI 22<\/i>), pp.683-700, USENIX Association (2022) (online), available from <https:\/\/www.usenix.org\/conference\/osdi22\/presentation\/vant-hof>."},{"key":"20","unstructured":"[20] Intel Corporation: Intel\u00ae Software Guard Extensions (Intel\u00ae SGX) (2023), available from <https:\/\/www.intel.com\/content\/www\/us\/en\/architecture-and-technology\/software-guard-extensions.html>."},{"key":"21","unstructured":"[21] Intel Corporation: Intel\u00ae Trust Domain Extensions (Intel\u00ae TDX) Module Base Architecture Specification (2025), available from <https:\/\/cdrdv2.intel.com\/v1\/dl\/getContent\/853287?fileName=intel-tdx-module-base-spec-348549006.change-marks.pdf>."},{"key":"22","unstructured":"[22] Jia, Y., Liu, S., Wang, W., Chen, Y., Zhai, Z., Yan, S. and He, Z.: HyperEnclave: An Open and Cross-platform Trusted Execution Environment, 2022 USENIX Annual Technical Conference<\/i> (USENIX ATC 22<\/i>), pp.437-454, USENIX Association (2022) (online), available from <https:\/\/www.usenix.org\/conference\/atc22\/presentation\/jia-yuekai>."},{"key":"23","unstructured":"[23] Lee, D., Kohlbrenner, D., Shinde, S., Asanovi\u0107, K. and Song, D.: Keystone: An Open Framework for Architecting Trusted Execution Environments, Proc. 15th European Conference on Computer Systems<\/i>, EuroSys '20<\/i>, Association for Computing Machinery (online), DOI: 10.1145\/3342195.3387532(2020)."},{"key":"24","unstructured":"[24] Mayer, U.F.: Linux\/Unix nbench (2017), available from <https:\/\/www.math.utah.edu\/mayer\/linux\/bmark.html>."},{"key":"25","doi-asserted-by":"crossref","unstructured":"[25] McCune, J.M., Li, Y., Qu, N., Zhou, Z., Datta, A., Gligor, V. and Perrig, A.: TrustVisor: Efficient TCB Reduction and Attestation, 2010 IEEE Symposium on Security and Privacy<\/i>, pp.143-158 (online), DOI: 10.1109\/SP.2010.17(2010).","DOI":"10.1109\/SP.2010.17"},{"key":"26","unstructured":"[26] Microsoft: Azure confidential computing (2023), available from <https:\/\/azure.microsoft.com\/en-us\/solutions\/confidential-compute\/#overview>."},{"key":"27","doi-asserted-by":"crossref","unstructured":"[27] Narayanan, V., Carvalho, C., Ruocco, A., Almasi, G., Bottomley, J., Ye, M., Feldman-Fitzthum, T., Buono, D., Franke, H. and Burtsev, A.: Remote attestation of confidential VMs using ephemeral vTPMs, Proc. 39th Annual Computer Security Applications Conference<\/i>, ACSAC '23<\/i>, pp.732-743, Association for Computing Machinery (online), DOI: 10.1145\/3627106.3627112(2023).","DOI":"10.1145\/3627106.3627112"},{"key":"28","unstructured":"[28] Perez-Vargas, C.: Confidential VMs on Azure (2023), available from <https:\/\/techcommunity.microsoft.com\/t5\/windows-os-platform-blog\/confidential-vms-on-azure\/ba-p\/3836282>."},{"key":"29","unstructured":"[29] Redis: Redis - The Real-time Data Platform (2025), available from <https:\/\/redis.io\/>."},{"key":"30","unstructured":"[30] Suh, G.E., Clarke, D., Gassend, B., van Dijk, M. and Devadas, S.: AEGIS: Architecture for tamper-evident and tamper-resistant processing, ACM International Conference on Supercomputing 25th Anniversary Volume<\/i>, pp.357-368, Association for Computing Machinery (online), DOI: 10.1145\/2591635.2667184(2003)."},{"key":"31","unstructured":"[31] Ta-Min, R., Litty, L. and Lie, D.: Splitting interfaces: Making trust between applications and operating systems configurable, Proc. 7th Symposium on Operating Systems Design and Implementation<\/i>, OSDI '06<\/i>, pp.279-292, USENIX Association (2006)."},{"key":"32","doi-asserted-by":"crossref","unstructured":"[32] Wang, J., Li, A., Li, H., Lu, C. and Zhang, N.: RT-TEE: Real-time System Availability for Cyber-physical Systems using ARM TrustZone, 2022 IEEE Symposium on Security and Privacy<\/i> (SP<\/i>), pp.352-369 (online), DOI: 10.1109\/SP46214.2022.9833604(2022).","DOI":"10.1109\/SP46214.2022.9833604"},{"key":"33","unstructured":"[33] Wang, S., Wang, P., Liu, X., Zhang, D. and Wu, D.: CacheD: Identifying Cache-Based Timing Channels in Production Software, 26th USENIX Security Symposium<\/i> (USENIX Security 17<\/i>), pp.235-252, USENIX Association (2017) (online), available from <https:\/\/www.usenix.org\/conference\/usenixsecurity17\/technical-sessions\/presentation\/wang-shuai>."},{"key":"34","doi-asserted-by":"crossref","unstructured":"[34] Wang, W., Song, L., Mei, B., Liu, S., Zhao, S., Yan, S., Wang, X., Meng, D. and Hou, R.: The Road to Trust: Building Enclaves within Confidential VMs, 32nd Annual Network and Distributed System Security Symposium<\/i>, NDSS 2025<\/i>, The Internet Society (2025) (online), available from <https:\/\/www.ndss-symposium.org\/ndss-paper\/the-road-to-trust-building-enclaves-within-confidential-vms\/>.","DOI":"10.14722\/ndss.2025.240385"},{"key":"35","unstructured":"[35] Wichelmann, J., P\u00e4tschke, A., Wilke, L. and Eisenbarth, T.: Cipherfix: Mitigating Ciphertext Side-Channel Attacks in Software, 32nd USENIX Security Symposium<\/i> (USENIX Security 23<\/i>), pp.6789-6806, USENIX Association (2023) (online), available from <https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/wichelmann>."},{"key":"36","doi-asserted-by":"crossref","unstructured":"[36] Yang, J. and Shin, K.G.: Using hypervisor to provide data secrecy for user applications on a per-page basis, Proc. 4th ACM SIGPLAN\/SIGOPS International Conference on Virtual Execution Environments<\/i>, VEE '08<\/i>, pp.71-80, Association for Computing Machinery (online), DOI: 10.1145\/1346256.1346267(2008).","DOI":"10.1145\/1346256.1346267"},{"key":"37","doi-asserted-by":"crossref","unstructured":"[37] Zhang, C., Priolkar, R., Jiang, Y., Xiao, Y., Vij, M., Liang, Z. and Ahmad, A.: Erebor: A Drop-In Sandbox Solution for Private Data Processing in Untrusted Confidential Virtual Machines, Proc. 20th European Conference on Computer Systems<\/i>, EuroSys '25<\/i>, pp.1210-1228, Association for Computing Machinery (online), DOI: 10.1145\/3689031.3717464(2025).","DOI":"10.1145\/3689031.3717464"},{"key":"38","unstructured":"[38] Zhang, Y., Hu, Y., Ning, Z., Zhang, F., Luo, X., Huang, H., Yan, S. and He, Z.: SHELTER: Extending Arm CCA with Isolation in User Space, 32nd USENIX Security Symposium<\/i> (USENIX Security 23<\/i>), pp.6257-6274, USENIX Association (2023) (online), available from <https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/zhang-yiming>."},{"key":"39","doi-asserted-by":"crossref","unstructured":"[39] Zhao, S., Li, M., Zhangyz, Y. and Lin, Z.: vSGX: Virtualizing SGX Enclaves on AMD SEV, 2022 IEEE Symposium on Security and Privacy<\/i> (SP<\/i>), pp.321-336 (online), DOI: 10.1109\/SP46214.2022. 9833694(2022).","DOI":"10.1109\/SP46214.2022.9833694"}],"container-title":["Journal of Information Processing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/ipsjjip\/34\/0\/34_514\/_pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,20]],"date-time":"2026-06-20T04:17:38Z","timestamp":1781929058000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/ipsjjip\/34\/0\/34_514\/_article"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":39,"journal-issue":{"issue":"0","published-print":{"date-parts":[[2026]]}},"URL":"https:\/\/doi.org\/10.2197\/ipsjjip.34.514","relation":{},"ISSN":["1882-6652"],"issn-type":[{"value":"1882-6652","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}