Demo Data from VLDB 2026 / reviewers in the wild / expert
Songbo Zhu
dblp:255/5653
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Systems and software security · 100% | |
| Software engineering, system software, and programming languages
1 paper |
Operating systems · 100% |
Topics — the 5 heaviest of 5, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Systems and software security › return-oriented programming defense
code reuse attack defense |
0.8 | 1 | 2024 | kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024 |
Systems and software security › memory safety
control-flow integrity |
0.8 | 1 | 2024 | kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024 |
Systems and software security
memory safety |
0.8 | 1 | 2024 | kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024 |
Systems and software security › memory safety
pointer integrity |
0.8 | 1 | 2024 | kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024 |
Operating systems › system security › operating system security
kernel security |
0.2 | 1 | 2024 | kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS Kernels · IEEE Trans. Dependable Secur. Comput. 2024 |
Methods — techniques the papers use, named apart from their topics
merkle tree · 1.5ARM pointer authentication · 1.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS KernelsabstractNowadays, code reuse attacks impose a substantial threat to the security of operating system kernels. Control-flow graph-based CFI techniques, while effective, bring considerable performance overhead, thus limiting their practical adoption in real-world products. As an alternative approach, recent research suggests safeguarding the integrity of sensitive pointers as a countermeasure against manipulation attempts. Unfortunately, existing pointer integrity protection schemes only protect sensitive pointers partially and ignore assembly code, leaving protection gaps. To fill up these protection gaps, we propose a novel security concept namedfull life-cycle integrity, which enforces the integrity of a sensitive pointer at every step on its value flow chain. To realize full life-cycle integrity, we propose three novel techniques, including assembly-aware sensitivity for analyzing assembly code, Merkle PAC tree for protecting interrupt context securely and efficiently, and pointer-grained authentication for defeating spatial substitution attacks. We have developed a practical implementation of comprehensive life-cycle integrity for the Linux kernel, called ”kernel Code Pointer Authentication” (kCPA), which leverages the ARM Pointer Authentication (PAuth) mechanism. This implementation has been extended to the Apple M1 architecture for real-world evaluation on PAuth hardware. Our assessment demonstrates that kCPA effectively mitigates a range of real-world attacks while incurring a minimal 2.5% performance overhead for the Phoronix Test Suite and nearly negligible performance impact for SPEC2017 benchmarks. Yutian Yang, Jinjiang Tu, Wenbo Shen, Songbo Zhu, Yajin Zhou |
IEEE Trans. Dependable Secur. Comput. | 4 |