Key papers

• MemoGuard: An Adaptive Runtime for Guarding Against Memory Traps in Communication-Limited Robot Navigation (2026)
  Rajat Bhattacharjya et al.
  6.88
• Dynamic Rowhammer Threshold Management:Temperature-Aware Threshold Degradation for In-DRAM Defenses (2026)
  Aziz Alajmi et al.
  1.94
• Isolation Failure From Shared Storage: Characterizing and Exploiting Page-Cache SCA Leakage Across Containers and VMs (2026)
  Alon Abudraham (Bar-Ilan University) et al.
  1.94
• SMARM+: Analyzing and Enhancing Shuffled Measurements for Remote Attestation in Real-Time IoT Settings (2026)
  Amarin Laohajirapan et al.
  1.94
• Beyond Edge Coverage: Per-Task Data-Flow Extraction at Kernel Function Boundaries via LLVM (2026)
  Yunseong Kim
  1.89
• AgileOS: A GPU Operating System Layer for Protected CUDA Services (2026)
  Zhuoping Yang and Yiyu Shi and Alex Jones and Peipei Zhou
  1.89
• Sandlock: Confining AI Agent Code with Unprivileged Linux Primitives (2026)
  Cong Wang et al.
  1.83
• Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives (2026)
  Daeyeon Son
  1.78
• AgenTEE: Confidential LLM Agent Execution on Edge Devices (2026)
  Sina Abdollahi et al.
  1.78
• An AI Agent Execution Environment to Safeguard User Data (2026)
  Robert Stanley et al.
  1.78
• A TEE-Based Architecture for Confidential and Dependable Process Attestation in Authorship Verification (2026)
  David Condrey
  1.72
• Sharing is caring: Attestable and Trusted Workflows out of Distrustful Components (2026)
  Amir Al Sadi et al.
  1.72
• Improved Leakage Abuse Attacks in Searchable Symmetric Encryption with eBPF Monitoring (2026)
  Chinecherem Dimobi
  1.72
• Trust Nothing: RTOS Security without Run-Time Software TCB (Extended Version) (2026)
  Eric Ackermann et al.
  1.72
• FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolation (2026)
  Yinpeng Wu et al.
  1.72
• Tock: From Research to Securing 10 Million Computers (2026)
  Leon Schuermann et al.
  1.72
• Hardening the OSv Unikernel with Efficient Address Randomization: Design and Performance Evaluation (2026)
  Alex Wollman et al.
  1.67
• Right to History: A Sovereignty Kernel for Verifiable AI Agent Execution (2026)
  Jing Zhang
  1.67
• Evolution of Android's Permission-based Security Model and Challenges (2026)
  Rajendra Kumar Solanki et al.
  1.61
• OAMAC: Origin-Aware Mandatory Access Control for Practical Post-Compromise Attack Surface Reduction (2026)
  Omer Abdelmajeed Idris Mohammed et al.
  1.61
• Rhea: Detecting Privilege-Escalated Evasive Ransomware Attacks Using Format-Aware Validation in the Cloud (2026)
  Beom Heyn Kim et al.
  1.61
• CAEC: Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA (2025)
  Sina Abdollahi et al.
  1.56
• NecoFuzz: Effective Fuzzing of Nested Virtualization via Fuzz-Harness Virtual Machines (2025)
  Reima Ishii et al.
  1.56
• Supply Chain Exploitation of Secure ROS 2 Systems: A Proof-of-Concept on Autonomous Platform Compromise via Keystore Exfiltration (2025)
  Tahmid Hasan Sakib et al.
  1.50
• eBPF-PATROL: Protective Agent for Threat Recognition and Overreach Limitation using eBPF in Containerized and Virtualized Environments (2025)
  Sangam Ghimire et al.
  1.50
• Rethinking Provenance Completeness with a Learning-Based Linux Scheduler (2025)
  Jinsong Mao et al.
  1.44
• Hazel: Secure and Efficient Disaggregated Storage (2025)
  Marcin Chrapek et al.
  1.44
• Sockeye: a language for analyzing hardware documentation (2025)
  Ben Fiedler et al.
  1.44
• Safe Sharing of Fast Kernel-Bypass I/O Among Nontrusting Applications (2025)
  Alan Beadle et al.
  1.39
• DBOS Network Sensing: A Web Services Approach to Collaborative Awareness (2025)
  Sophia Lockton et al.
  1.39
• To Unpack or Not to Unpack: Living with Packers to Enable Dynamic Analysis of Android Apps (2025)
  Mohammad Hossein Asghari et al.
  1.39
• Exploiting Page Faults for Covert Communication (2025)
  Sathvik Swaminathan
  1.39
• Secure and Efficient Access Control for Computer-Use Agents via Context Space (2025)
  Haochen Gong et al.
  1.39
• RX-INT: A Kernel Engine for Real-Time Detection and Analysis of In-Memory Threats (2025)
  Arjun Juneja
  1.33
• Selective KV-Cache Sharing to Mitigate Timing Side-Channels in LLM Inference (2025)
  Kexin Chu et al.
  1.33
• Plug. Play. Persist. Inside a Ready-to-Go Havoc C2 Infrastructure (2025)
  Alessio Di Santo
  1.28
• Access Control Threatened by Quantum Entanglement (2025)
  Zhicheng Zhang and Mingsheng Ying
  1.28
• Tyche: Composable Isolation as a Foundation to Manage Trust in the Cloud (2025)
  Adrien Ghosn et al.
  1.28
• Under the Hood of BlotchyQuasar: DLL-Based RAT Campaigns Against Latin America (2025)
  Alessio Di Santo
  1.22
• Threadbox: Sandboxing for Modular Security (2025)
  Maysara Alhindi et al.
  1.22
• Testing Access-Control Configuration Changes for Web Applications (2025)
  Chengcheng Xiang et al.
  1.17
• Lazarus Group Targets Crypto-Wallets and Financial Data while employing new Tradecrafts (2025)
  Alessio Di Santo
  1.17
• Guillotine: Hypervisors for Isolating Malicious AIs (2025)
  James Mickens and Sarah Radway and Ravi Netravali
  1.11
• Adaptive and Efficient Dynamic Memory Management for Hardware Enclaves (2025)
  Vijay Dhanraj et al.
  1.11
• Biting the CHERI bullet: Blockers, Enablers and Security Implications of CHERI in Defence (2025)
  Shamal Faily
  1.11
• Confidential Serverless Computing (2025)
  Patrick Sabanic et al.
  1.11
• A Comprehensive Quantification of Inconsistencies in Memory Dumps (2025)
  Andrea Oliveri and Davide Balzarotti
  1.06
• LEMIX: Enabling Testing of Embedded Applications as Linux Applications (Extended Report) (2025)
  Sai Ritvik Tanksalkar et al.
  1.06
• Automatic ISA analysis for Secure Context Switching (2025)
  Neelu S. Kalani (1 and 2) et al.
  1.00
• Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures (2025)
  Almuthanna Alageel and Sergio Maffeis et al.
  1.00
• Analysis of Security in OS-Level Virtualization (2025)
  Krishna Sai Ketha et al.
  0.94
• SPECTRE: A Hybrid System for an Adaptative and Optimised Cyber Threats Detection, Response and Investigation in Volatile Memory (2025)
  Arslan Tariq Syed et al.
  0.94
• Goldilocks Isolation: High Performance VMs with Edera (2025)
  Marina Moore et al.
  0.94
• Fast, Secure, Adaptable: LionsOS Design, Implementation and Performance (2025)
  Gernot Heiser et al.
  0.94
• A Survey of Operating System Kernel Fuzzing (2025)
  Jiacheng Xu et al.
  0.94
• SIMF: Single-Instruction Multiple-Flush Mechanism for Processor Temporal Isolation (2020)
  Tuo Li et al.
  —
• No Crash, No Exploit: Automated Verification of Embedded Kernels (2020)
  Olivier Nicole et al.
  —
• The Design and Implementation of a Verified File System with End-to-End Data Integrity (2020)
  Daniel W. Song et al.
  —
• BPFContain: Fixing the Soft Underbelly of Container Security (2021)
  William Findlay et al.
  —
• A flow-based IDS using Machine Learning in eBPF (2021)
  Maximilian Bachl et al.
  —