A μ-kernel is an operating system (OS) paradigm that facilitates a strong cybersecurity
posture for embedded systems. Unlike a monolithic OS such as Linux, a μ-kernel reduces …

Decomposing large systems into smaller components with limited privileges has long been
recognized as an effective means to minimize the impact of exploits. Despite historical roots …

Device driver isolation is a promising approach for protecting the kernel from faulty or
malicious drivers, but the actual security provided by such frameworks is often not well …

The endless stream of vulnerabilities urgently calls for principled mitigation to confine the
effect of exploitation. However, the monolithic architecture of commodity OS kernels, like the …

Software is everywhere: healthcare, transportation, finance, energy, defence,
communications, agriculture, and more. Through this vast deployment, promised to go on in …