Undefined behavior in C often causes devastating security vulnerabilities. One practical
mitigation is compartmentalization, which allows developers to structure large programs into …

With the scale of the Internet of Things (IoT) system growing constantly, node failures
frequently occur due to device malfunctions or cyberattacks. Existing robust network …

Up to 10% of memory-safety vulnerabilities in languages like C and C++ stem from
uninitialized variables. This work addresses the prevalence and lack of adequate software …

Decomposing large systems into smaller components with limited privileges has long been
recognized as an effective means to minimize the impact of exploits. Despite historical roots …

Memory safety concerns continue to be a major source of security vulnerabilities. The
CHERI architecture, as instantiated in prototype CHERI-RISC-V cores, the Arm Morello …

The memory-safe Capability Hardware Enhanced RISC Instructions (CHERI) C and C++
languages build on architectural capabilities in the CHERI protection model. With the …

Protecting data in memory from attackers continues to be a concern in computing systems.
CHERI is a promising approach to achieve such protection, by providing and enforcing fine …

Although eBPF (Extended Berkeley Packet Filter) started as a virtualization technology used
in the Linux kernel to allow for executing user code inside the kernel in a safe way, it is a …

The ubiquity of digital systems across all aspects of modern society, while beneficial, has
simultaneously exposed a lucrative attack surface for potential adversaries and attackers …

The memory-safe CHERI C and C++ languages build on architectural capabilities in the
CHERI protection model. With the development of two industrial CHERI-enabled processors …