Motivated by contemporary security challenges, we reevaluate and refine capability-based
addressing for the RISC era. We present CHERI, a hybrid capability model that extends the …

When protecting a computer system, it is often necessary to isolate an untrusted component
into a separate protection domain and provide only controlled interaction between the …

RedLeaf is a new operating system developed from scratch in Rust to explore the impact of
language safety on operating system organization. In contrast to commodity systems …

The operation system kernel is the foundation of the whole system and is often the de facto
trusted computing base for many higher level security mechanisms. Unfortunately, kernel …

Data-oriented attacks manipulate non-control data to alter a program's benign behavior
without violating its control-flow integrity. It has been shown that such attacks can cause …

Monolithic operating system designs undermine the security of computing systems by
allowing single exploits anywhere in the kernel to enjoy full supervisor privilege. The nested …

Rust is a new system programming language that offers a practical and safe alternative to C.
Rust is unique in that it enforces safety without runtime overhead, most importantly, without …

This paper describes the implementation and evaluation of a system to implement complex
congestion control functions by placing them in a separate agent outside the datapath. Each …

Researchers have shown that recent CPU extensions support practical, low-overhead driver
isolation to protect kernels from defects and vulnerabilities in device drivers. With …

Library OSs have been proposed to deploy applications isolated inside containers, VMs, or
trusted execution environments. They often follow a highly modular design in which third …