{"doi":"10.1145/2810103.2813611","title":"Clean Application Compartmentalization with SOAAP","abstract":null,"journal":"Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security","year":2015,"id":591208,"datarank":3.1543087452353933,"base_score":4.204692619390966,"endowment":4.204692619390966,"self_citation_contribution":0.6307038929086449,"citation_network_contribution":2.5236048523267485,"self_endowment_contribution":0.6307038929086449,"citer_contribution":2.5236048523267485,"corpus_percentile":null,"corpus_rank":null,"citation_count":66,"citer_count":58,"citers_with_citation_signal":51,"citers_with_endowment":51,"datacite_reuse_total":0,"is_dataset":false,"is_dataset_confidence":null,"is_data_producer":false,"deposit_databanks":null,"is_oa":false,"file_count":0,"downloads":0,"has_version_chain":false,"published_date":null,"fair_score":null,"fair_percentile":null,"algorithm_id":"datarank_citation_only_1hop_v6","ranking_scope":"data_only","authors":[{"id":1512619,"name":"Robert N.M. Watson","orcid":null,"position":1,"is_corresponding":false},{"id":1512620,"name":"Jonathan Anderson","orcid":null,"position":2,"is_corresponding":false},{"id":1512621,"name":"David Chisnall","orcid":null,"position":3,"is_corresponding":false},{"id":1512622,"name":"Brooks Davis","orcid":null,"position":4,"is_corresponding":false},{"id":1512623,"name":"Ben Laurie","orcid":null,"position":5,"is_corresponding":false},{"id":1512624,"name":"Ilias Marinos","orcid":null,"position":6,"is_corresponding":false},{"id":1512625,"name":"Peter G. Neumann","orcid":null,"position":7,"is_corresponding":false},{"id":1512626,"name":"Alex Richardson","orcid":null,"position":8,"is_corresponding":false},{"id":1512618,"name":"Khilan Gudka","orcid":null,"position":0,"is_corresponding":false}],"reference_count":0,"raw_metadata":{"has_enrichment":true,"resolved":true,"title":"Clean Application Compartmentalization with SOAAP","abstract":"Application compartmentalization, a vulnerability mitigation technique employed in programs such as OpenSSH and the Chromium web browser, decomposes software into isolated components to limit privileges leaked or otherwise available to attackers. However, compartmentalizing applications -- and maintaining that compartmentalization -- is hindered by ad hoc methodologies and significantly increased programming effort. In practice, programmers stumble through (rather than overtly reason about) compartmentalization spaces of possible decompositions, unknowingly trading off correctness, security, complexity, and performance. We present a new conceptual framework embodied in an LLVM-based tool: the Security-Oriented Analysis of Application Programs (SOAAP) that allows programmers to reason about compartmentalization using source-code annotations (compartmentalization hypotheses). We demonstrate considerable benefit when creating new compartmentalizations for complex applications, and analyze existing compartmentalized applications to discover design faults and maintenance issues arising from application evolution.","is_dataset_classified":null,"base_score":4.204692619390966,"endowment":4.204692619390966,"datacite_reuse_total":0,"file_count":0,"downloads":0,"views":0,"has_version_chain":false,"is_dataset":false,"is_oa":false,"pmid":"26657633","pmcid":null,"openalex_id":"https://openalex.org/W2060475972","authors":[],"funders":[{"funder_name":"Defense Advanced Research Projects Agency","grant_id":"FA8750-10-C-0237, FA8750-11-C-0249, FA8650-15-C-7558","title":null},{"funder_name":"Natural Sciences and Engineering Research Council of Canada","grant_id":"RGPIN/06048-2015","title":null},{"funder_name":"Engineering and Physical Sciences Research Council","grant_id":"EP/K008528/1","title":"REMS: Rigorous Engineering for Mainstream Systems"},{"funder_name":"Natural Sciences and Engineering Research Council of Canada","grant_id":"unidentified","title":"unidentified"}],"total_grants":4,"fwci":null,"citation_percentile":null,"influential_citations":0,"citation_trend":[{"year":2016,"count":3},{"year":2017,"count":6},{"year":2018,"count":7},{"year":2019,"count":5},{"year":2020,"count":8},{"year":2021,"count":15},{"year":2022,"count":6},{"year":2023,"count":11},{"year":2024,"count":2},{"year":2025,"count":3}],"oa_status":"green","license":"other-oa","oa_locations":[{"url":"https://zenodo.org/record/1136024","host_type":"repository"},{"url":"https://zenodo.org/record/1136024","host_type":"repository"},{"url":"https://dl.acm.org/doi/10.1145/2810103.2813611","host_type":"publisher"},{"url":"https://dl.acm.org/doi/pdf/10.1145/2810103.2813611","host_type":"publisher"},{"url":"https://doi.org/10.1145/2810103.2813611","host_type":""},{"url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.706.5565","host_type":""},{"url":"https://zenodo.org/record/1136024/files/article.pdf","host_type":""},{"url":"https://dx.doi.org/10.1145/2810103.2813611","host_type":""},{"url":"https://zenodo.org/records/1136024","host_type":""},{"url":"http://dx.doi.org/10.1145/2810103.2813611","host_type":""}],"fields_of_study":["Security and Verification in Computing","Advanced Malware Detection Techniques","Web Application Security Vulnerabilities","0202 electrical engineering, electronic engineering, information engineering","02 engineering and technology"],"mesh_terms":[],"keywords":["Compartmentalization (fire protection)","Computer science","Correctness","Software engineering","Vulnerability (computing)","Software","Computer security","Programming language"],"sdg_mappings":[{"sdg_number":0,"sdg_label":"Industry, innovation and infrastructure"}],"linked_datasets":[],"clinical_trials":[],"software_tools":[],"database_accessions":[],"source":"live","citation_network_status":"fetched"},"created_at":"2026-07-25T14:58:49.146161Z","pmid":null,"pmcid":null,"fwci":null,"citation_percentile":null,"influential_citations":0,"oa_status":null,"license":null,"views":0,"total_file_size_bytes":0,"version_count":0,"fair_f":null,"fair_a":null,"fair_i":null,"fair_r":null,"fair_zscore":null,"fair_rationale":null,"fair_model":null,"fair_agent_version":null,"fair_fulltext_source":null,"fair_has_llm":null,"fair_computed_at":null,"clinical_trials":[],"software_tools":[],"db_accessions":[],"linked_datasets":[],"topics":[]}