Commodity operating system kernels remain monolithic for practical and historical reasons.
All kernel code shares a single address space, executes with elevated processor privileges …

When protecting a computer system, it is often necessary to isolate an untrusted component
into a separate protection domain and provide only controlled interaction between the …

The promise of software sandboxing is flexible, fast and portable isolation; capturing the
benefits of hardwarebased memory protection without requiring operating system …

Many applications, from the Web to smart contracts, need to safely execute untrusted code.
We observe that WebAssembly (Wasm) is ideally positioned to support such applications …

End-host runtime monitors (eg, CFI, system call IDS) flag processes in response to
symptoms of a possible attack. Unfortunately, the symptom (eg, invalid control transfer) may …

Recent advances in hardware design have demonstrated mechanisms allowing a wide
range of low-level security policies (or micro-policies) to be expressed using rules on …

Software sandboxing or software-based fault isolation (SFI) is a lightweight approach to
building secure systems out of untrusted components. Mozilla, for example, uses SFI to …

WebAssembly (Wasm) is a platform-independent bytecode that offers both good
performance and runtime isolation. To implement isolation, the compiler inserts safety …

We propose a new formal criterion for evaluating secure compilation schemes for unsafe
languages, expressing end-to-end security guarantees for software components that may …

Information leakage vulnerabilities (or simply info leaks) such as out-of-bounds/uninitialized
reads in the architectural or speculative domain pose a significant security threat, allowing …