We introduce Hardware-assisted Fault Isolation (HFI), a simple extension to existing
processors to support secure, flexible, and efficient in-process isolation. HFI addresses the …

Kernel memory allocators maintain several metadata structures optimized for efficiently
managing system memory. However, existing implementations adopt either weak or no …

Software sandboxing or software-based fault isolation (SFI) is a lightweight approach to
building secure systems out of untrusted components. Mozilla, for example, uses SFI to …

Software libraries can freely access the program's entire address space, and also inherit its
system-level privileges. This lack of separation regularly leads to security-critical incidents …

Software based fault isolation (SFI) is a powerful approach to reduce the impact of security
vulnerabilities in large C/C++ applications like Firefox and Apache. Unfortunately, practical …

Dynamic random-access memory (DRAM) consists of several banks, which are shared
resources among cores. Memory interference is caused by sharing with banks among cores …

The applications we use today are developed as a combination of first-party code and code
borrowed from third-parties. This has allowed developers to build large applications with rich …

Lua je programovací jazyk, který lze použít pro rozšíření **é aplikace o skriptovací prostředí.
Tato práce se zabývá izolací Lua scriptů od citlivých částí aplikace. Sandboxing se používá …