{"id":"W2105528199","doi":"10.1145/1165389.945463","title":"Implementing an untrusted operating system on trusted hardware","year":2003,"lang":"en","type":"article","venue":"ACM SIGOPS Operating Systems Review","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":79,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Computer science; Operating system; Embedded system; Trusted Computing; Trusted Platform Module; Embedded operating system; Context (archaeology); Memory protection; Architecture; Direct Anonymous Attestation; Context switch; Computer hardware; Virtual memory; Software; Memory management; Overlay","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003085414,0.000448375,0.0004727201,0.0005841397,0.0006657845,0.001893402,0.00177944,0.0006307933,0.001413497],"category_scores_gemma":[0.01060105,0.000649853,0.0005593264,0.0003878551,0.00147451,0.004006052,0.001958688,0.001759892,0.0008030923],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008810288,"about_ca_system_score_gemma":0.002054287,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001068682,"about_ca_topic_score_gemma":0.0008011524,"domain_scores_codex":[0.9957067,0.001177572,0.000302139,0.0002752059,0.002026862,0.0005114942],"domain_scores_gemma":[0.9911378,0.001957439,0.001027551,0.004216454,0.00143144,0.0002292817],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.002249097,0.0005918413,0.01991219,0.001016113,0.0003808997,0.002213287,0.003220691,0.1890635,0.1857723,0.2253066,0.008727878,0.3615455],"study_design_scores_gemma":[0.0003451791,0.001186611,0.00345153,0.0003130678,0.0002882759,0.0009676521,0.0002966964,0.6977476,0.2165563,0.03185642,0.04687845,0.0001123169],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4136006,0.001001017,0.5607339,0.0006258092,0.0002949047,0.0003081773,0.00005586478,0.009418928,0.01396092],"genre_scores_gemma":[0.8347155,0.0006116692,0.1604746,0.0001183136,0.00007416101,0.0001026933,0.00007945049,0.000453123,0.003370526],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.003085414,"threshold_uncertainty_score":0.01631743,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05117373143572124,"score_gpt":0.3171586654917876,"score_spread":0.2659849340560663,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}