{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:BCNRTFXP67NW7PUS55LBDY33WP","short_pith_number":"pith:BCNRTFXP","schema_version":"1.0","canonical_sha256":"089b1996eff7db6fbe92ef5611e37bb3c1ff17524d9aa3476b64b05c5732528c","source":{"kind":"arxiv","id":"2509.03879","version":1},"attestation_state":"computed","paper":{"title":"ShieldMMU: Detecting and Defending against Controlled-Channel Attacks in Shielding Memory System","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SY","eess.SY"],"primary_cat":"cs.CR","authors_text":"Cen Chen, Gang Liu, Ningjie Li","submitted_at":"2025-09-04T04:34:34Z","abstract_excerpt":"Intel SGX and hypervisors isolate non-privileged programs from other software, ensuring confidentiality and integrity. However, side-channel attacks continue to threaten Intel SGX's security, enabling malicious OS to manipulate PTE present bits, induce page faults, and steal memory access traces. Despite extensive research, existing defenses focus on detection or rely on impractical solutions. This paper presents ShieldMMU, a comprehensive solution for mitigating controlled channel attacks, balancing compatibility, performance, and usability. Leveraging a Merkle Tree-inspired Defense Tree (DD-"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2509.03879","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-04T04:34:34Z","cross_cats_sorted":["cs.SY","eess.SY"],"title_canon_sha256":"3700068cd7394ffd7da0f256384156c5d820292781a0e79d31663e1b1273ecee","abstract_canon_sha256":"dac992fdb7194f80e4bcd8e17c20ee69e7c905cb809cb997b21af681d6157945"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:04:48.647380Z","signature_b64":"Ic4NPxn9HJ43Qza0E6KGVwW/OvEuqE02dqb0VNmNr00hMTx9uvCEJDnzuga/s6WuG6OQJj69QVv4yVaIAXEUCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"089b1996eff7db6fbe92ef5611e37bb3c1ff17524d9aa3476b64b05c5732528c","last_reissued_at":"2026-07-05T12:04:48.646870Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:04:48.646870Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"ShieldMMU: Detecting and Defending against Controlled-Channel Attacks in Shielding Memory System","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SY","eess.SY"],"primary_cat":"cs.CR","authors_text":"Cen Chen, Gang Liu, Ningjie Li","submitted_at":"2025-09-04T04:34:34Z","abstract_excerpt":"Intel SGX and hypervisors isolate non-privileged programs from other software, ensuring confidentiality and integrity. However, side-channel attacks continue to threaten Intel SGX's security, enabling malicious OS to manipulate PTE present bits, induce page faults, and steal memory access traces. Despite extensive research, existing defenses focus on detection or rely on impractical solutions. This paper presents ShieldMMU, a comprehensive solution for mitigating controlled channel attacks, balancing compatibility, performance, and usability. Leveraging a Merkle Tree-inspired Defense Tree (DD-"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.03879","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.03879/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2509.03879","created_at":"2026-07-05T12:04:48.646931+00:00"},{"alias_kind":"arxiv_version","alias_value":"2509.03879v1","created_at":"2026-07-05T12:04:48.646931+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.03879","created_at":"2026-07-05T12:04:48.646931+00:00"},{"alias_kind":"pith_short_12","alias_value":"BCNRTFXP67NW","created_at":"2026-07-05T12:04:48.646931+00:00"},{"alias_kind":"pith_short_16","alias_value":"BCNRTFXP67NW7PUS","created_at":"2026-07-05T12:04:48.646931+00:00"},{"alias_kind":"pith_short_8","alias_value":"BCNRTFXP","created_at":"2026-07-05T12:04:48.646931+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP","json":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP.json","graph_json":"https://pith.science/api/pith-number/BCNRTFXP67NW7PUS55LBDY33WP/graph.json","events_json":"https://pith.science/api/pith-number/BCNRTFXP67NW7PUS55LBDY33WP/events.json","paper":"https://pith.science/paper/BCNRTFXP"},"agent_actions":{"view_html":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP","download_json":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP.json","view_paper":"https://pith.science/paper/BCNRTFXP","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2509.03879&json=true","fetch_graph":"https://pith.science/api/pith-number/BCNRTFXP67NW7PUS55LBDY33WP/graph.json","fetch_events":"https://pith.science/api/pith-number/BCNRTFXP67NW7PUS55LBDY33WP/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP/action/timestamp_anchor","attest_storage":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP/action/storage_attestation","attest_author":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP/action/author_attestation","sign_citation":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP/action/citation_signature","submit_replication":"https://pith.science/pith/BCNRTFXP67NW7PUS55LBDY33WP/action/replication_record"}},"created_at":"2026-07-05T12:04:48.646931+00:00","updated_at":"2026-07-05T12:04:48.646931+00:00"}