Enhanced operating system security through efficient and fine-grained address space randomization

C Giuffrida, A Kuijsten, AS Tanenbaum - 21st USENIX Security …, 2012 - usenix.org
In recent years, the deployment of many application-level countermeasures against memory
errors and the increasing number of vulnerabilities discovered in the kernel has fostered a …

Linux kernel vulnerabilities: State-of-the-art defenses and open problems

H Chen, Y Mao, X Wang, D Zhou, N Zeldovich… - Proceedings of the …, 2011 - dl.acm.org
Avoiding kernel vulnerabilities is critical to achieving security of many systems, because the
kernel is often part of the trusted computing base. This paper evaluates the current state-of …

Treesls: A whole-system persistent microkernel with tree-structured state checkpoint on nvm

F Wu, M Dong, G Mo, H Chen - Proceedings of the 29th Symposium on …, 2023 - dl.acm.org
Whole-system persistence promises simplified application deployment and near-
instantaneous recovery. This can be implemented using single-level store (SLS) through …

Theseus: an experiment in operating system structure and state management

K Boos, N Liyanage, R Ijaz, L Zhong - 14th USENIX Symposium on …, 2020 - usenix.org
This paper describes an operating system (OS) called Theseus. Theseus is the result of
multi-year experimentation to redesign and improve OS modularity by reducing the states …

Software fault isolation with API integrity and multi-principal modules

Y Mao, H Chen, D Zhou, X Wang, N Zeldovich… - Proceedings of the …, 2011 - dl.acm.org
The security of many applications relies on the kernel being secure, but history suggests that
kernel vulnerabilities are routinely discovered and exploited. In particular, exploitable …

{PET}: Prevent discovered errors from being triggered in the linux kernel

Z Wang, Y Chen, Q Zeng - 32nd USENIX Security Symposium (USENIX …, 2023 - usenix.org
The Linux kernel is the backbone of modern society. When a kernel error is discovered, a
quick remediation is needed. Whereas sanitizers greatly facilitate root cause diagnosis …

[PDF][PDF] Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring.

A Kurmus, R Tartler, D Dorneanu, B Heinloth… - NDSS, 2013 - ndss-symposium.org
Kurmus et al., Attack Surface Metrics and Automated Kernel Tailoring Page 1 © 2013 IBM
Corporation 1 Anil Kurmus February 25th, 2013 – NDSS'13 Anil Kurmus, Reinhard Tartler …

Fast in-memory CRIU for docker containers

RS Venkatesh, T Smejkal, DS Milojicic… - Proceedings of the …, 2019 - dl.acm.org
Server systems with large amounts of physical memory can benefit from using some of the
available memory capacity for in-memory snapshots of the ongoing computations. In …

Undo workarounds for kernel bugs

SMS Talebi, Z Yao, AA Sani, Z Qian… - 30th USENIX Security …, 2021 - usenix.org
OS kernels are full of bugs resulting in security, reliability, and usability issues. Several
kernel fuzzers have recently been developed to find these bugs and have proven to be …

Rewind & Discard: Improving software resilience using isolated domains

M Gülmez, T Nyman, C Baumann… - 2023 53rd Annual …, 2023 - ieeexplore.ieee.org
Well-known defenses exist to detect and mitigate common faults and memory safety
vulnerabilities in software. Yet, many of these mitigations do not address the challenge of …