{"id":"W3140837477","doi":"10.1145/945445.945463","title":"Implementing an untrusted operating system on trusted hardware","year":2003,"lang":"en","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":154,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Computer science; Operating system; Trusted Computing; Embedded system; Embedded operating system; Context (archaeology); Trusted Platform Module; Memory protection; Architecture; Direct Anonymous Attestation; Tamper resistance; Context switch; Hardware architecture; Computer hardware; Memory management; Virtual memory; Software; Computer security; Overlay","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002225383,0.0005111792,0.0004571292,0.0004584562,0.0006602473,0.001660984,0.001735885,0.0005723223,0.001607409],"category_scores_gemma":[0.008516488,0.0006389639,0.000529429,0.0003097538,0.001487691,0.003559903,0.001880144,0.001547663,0.0006898814],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007747174,"about_ca_system_score_gemma":0.001554879,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0009273603,"about_ca_topic_score_gemma":0.0007024521,"domain_scores_codex":[0.9969652,0.0007549594,0.0002273491,0.0002451366,0.001403549,0.0004037356],"domain_scores_gemma":[0.9928883,0.001596257,0.0008201199,0.003500956,0.0009864751,0.0002079886],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.003146534,0.0006661228,0.02450066,0.0007602038,0.0003518565,0.00244328,0.003479348,0.263417,0.2688934,0.1678292,0.006724151,0.2577883],"study_design_scores_gemma":[0.0002526085,0.0009655051,0.002806342,0.0001421921,0.0001815448,0.0005921902,0.0002017649,0.7282256,0.2286992,0.01720842,0.02063953,0.00008510247],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5386137,0.0004044389,0.4398222,0.0003477363,0.0001966083,0.0002360122,0.00005959783,0.01021603,0.01010367],"genre_scores_gemma":[0.8777259,0.0002045941,0.11918,0.00006452543,0.00003648362,0.00007054124,0.00006864007,0.000446572,0.002202692],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.002225383,"threshold_uncertainty_score":0.01176912,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03508068956660935,"score_gpt":0.2828035630620673,"score_spread":0.2477228734954579,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}