Cerise: Program verification on a capability machine in the presence of untrusted code
A capability machine is a type of CPU allowing fine-grained privilege separation using
capabilities, machine words that represent certain kinds of authority. We present a …
capabilities, machine words that represent certain kinds of authority. We present a …
SECOMP: Formally Secure Compilation of Compartmentalized C Programs
Undefined behavior in C often causes devastating security vulnerabilities. One practical
mitigation is compartmentalization, which allows developers to structure large programs into …
mitigation is compartmentalization, which allows developers to structure large programs into …
[PDF][PDF] Proving capability safety in the presence of indirect sentries Technical report
This document explores the impact of extending the CHERI architecture with indirect
sentries on the core security guarantee of CHERI, capability safety. Indirect sentries are a …
sentries on the core security guarantee of CHERI, capability safety. Indirect sentries are a …