The common perception in both academic literature and industry today is that virtual
machines offer better security, whereas containers offer better performance. However, a …

CHERI extends a conventional RISC Instruction-Set Architecture, compiler, and operating
system to support fine-grained, capability-based memory protection to mitigate memory …

Motivated by contemporary security challenges, we reevaluate and refine capability-based
addressing for the RISC era. We present CHERI, a hybrid capability model that extends the …

C remains central to our computing infrastructure. It is notionally defined by ISO standards,
but in reality the properties of C assumed by systems code and those implemented by …

This technical report describes CHERI ISAv7, the seventh version of the Capability
Hardware Enhanced RISC Instructions (CHERI) Instruction-Set Architecture (ISA) being …

We present CHERI Concentrate, a new fat-pointer compression scheme applied to CHERI,
the most developed capability-pointer system at present. Capability fat pointers are a …

We propose a new memory-safe interpretation of the C abstract machine that provides
stronger protection to benefit security and debugging. Despite ambiguities in the …

At design time, modern operating systems are locked in a specific safety and isolation
strategy that mixes one or more hardware/software protection mechanisms (eg user/kernel …

We propose and study StkTokens: a new calling convention that provably enforces well-
bracketed control flow and local state encapsulation on a capability machine. The calling …

The Boehm-Demers-Weiser Garbage Collector (BDWGC) is a widely used, production-
quality memory management framework for C and C++ applications. In this work, we …