156 citations · 198 across the 7 of their papers we have counts for
8 papers
Programmable System Call Security with eBPF
Jinghao Jia, YiFei Zhu, Dan Williams +7
System call filtering is a widely used security mechanism for protecting a shared OS kernel against untrusted user applications. However, existing system call filtering techniques…
SFIP: Coarse-Grained Syscall-Flow-Integrity Protection in Modern Systems
Claudio Canella, Sebastian Dorn, Daniel Gruss +1
Growing code bases of modern applications have led to a steady increase in the number of vulnerabilities. Control-Flow Integrity (CFI) is one promising mitigation that is more and…
Systematic Analysis of Programming Languages and Their Execution Environments for Spectre Attacks
Amir Naseredini, Stefan Gast, Martin Schwarzl +5
In this paper, we analyze the security of programming languages and their execution environments (compilers and interpreters) with respect to Spectre attacks. The analysis shows th…
Domain Page-Table Isolation
Claudio Canella, Andreas Kogler, Lukas Giner +2
Modern applications often consist of different security domains that require isolation from each other. While several solutions exist, most of them rely on specialized hardware, ha…
Automating Seccomp Filter Generation for Linux Applications
Claudio Canella, Mario Werner, Daniel Gruss +1
Software vulnerabilities in applications undermine the security of applications. By blocking unused functionality, the impact of potential exploits can be reduced. While seccomp pr…
ConTExT: Leakage-Free Transient Execution
Michael Schwarz, Robert Schilling, Florian Kargl +3
Out-of-order execution and speculative execution are among the biggest contributors to performance and efficiency of modern processors. However, they are inconsiderate, leaking sec…