Commodity operating system kernels remain monolithic for practical and historical reasons.
All kernel code shares a single address space, executes with elevated processor privileges …

RedLeaf is a new operating system developed from scratch in Rust to explore the impact of
language safety on operating system organization. In contrast to commodity systems …

Inferring aliasing and buffer-size information is important to understanding a C program's
memory layout, which is critical to program analysis and security-related tasks. However …

Researchers have shown that recent CPU extensions support practical, low-overhead driver
isolation to protect kernels from defects and vulnerabilities in device drivers. With …

Today's software programs are bloating and have become extremely complex. As there is
typically no internal isolation among modules in a program, a vulnerability can be exploited …

Global variables in the Linux kernel have been a common target of memory corruption
attacks to achieve privilege escalation. Several potential defense mechanisms can be …

Embedded systems comprise of low-power microcontrollers and constitute computing
systems from IoT nodes to supercomputers. Unfortunately, due to the low power constraint …

Fork has long been the process creation system call for Unix. At its inception, fork was hailed
as an efficient system call due to its use of copy-on-write on memory shared between parent …

Hardware memory domain primitives, such as Intel MPK and ARM Memory Domain, have
been used for efficient in-process memory isolation. However, they can only provide a …

By prioritizing simplicity and portability, least-privilege engineering has been an afterthought
in OS design, resulting in monolithic kernels where any exploit leads to total compromise …