Intel Software Guard Extensions (SGX) provides a strongly isolated memory space, known
as an enclave, for a user process, ensuring confidentiality and integrity against software and …

This paper describes an operating system (OS) called Theseus. Theseus is the result of
multi-year experimentation to redesign and improve OS modularity by reducing the states …

Android kernel vulnerabilities pose a serious threat to user security and privacy. They allow
attackers to take full control over victim devices, install malicious and unwanted apps, and …

Runtime software patching aims to minimize or eliminate service downtime, user
interruptions and potential data losses while deploying a patch. Due to modern software …

The vulnerability window of a hypervisor regarding a given security flaw is the time between
the identification of the flaw and the integration of a correction/patch in the running …

Well-known defenses exist to detect and mitigate common faults and memory safety
vulnerabilities in software. Yet, many of these mitigations do not address the challenge of …

Many IoT devices are geographically distributed without human administrators, which are
maintained by a remote server to enforce security updates, ideally through machine-to …

Live kernel patching is an increasingly common trend in operating system distributions,
enabling dynamic updates to include new features or to fix vulnerabilities without having to …

Host software updates are critical to ensure the security, reliability and compliance of public
clouds. Many updates require a virtualization component restart or operating system reboot …

Several studies have shown that automated support for different activities of the security
patch management process has great potential for reducing delays in installing security …