14 citations · 29 across the 6 of their papers we have counts for
6 papers · 1 filter
SoK: Software Compartmentalization
Hugo Lefeuvre, Nathan Dautenhahn, David Chisnall +1
Decomposing large systems into smaller components with limited privileges has long been recognized as an effective means to minimize the impact of exploits. Despite historical root…
Making 'syscall' a Privilege not a Right
Fangfei Yang, Anjo Vahldiek-Oberwagner, Chia-Che Tsai +2
Browsers, Library OSes, and system emulators rely on sandboxes and in-process isolation to emulate system resources and securely isolate untrusted components. All access to system…
Crypto-Ransomware and Their Defenses: In-depth Behavioral Characterization, Discussion of Deployability, and New Insights
Wenjia Song, Sanjula Karanam, Ya Xiao +6
Crypto-ransomware has caused an unprecedented scope of impact in recent years with an evolving level of sophistication. An extensive range of studies have been on defending against…
Assessing the Impact of Interface Vulnerabilities in Compartmentalized Software
Hugo Lefeuvre, Vlad-Andrei Bădoiu, Yi Chien +3
Least-privilege separation decomposes applications into compartments limited to accessing only what they need. When compartmentalizing existing software, many approaches neglect se…
The Endokernel: Fast, Secure, and Programmable Subprocess Virtualization
Bumjin Im, Fangfei Yang, Chia-Che Tsai +3
Commodity applications contain more and more combinations of interacting components (user, application, library, and system) and exhibit increasingly diverse tradeoffs between isol…
The Design and Implementation of a Verified File System with End-to-End Data Integrity
Daniel W. Song, Konstantinos Mamouras, Ang Chen +2
Despite significant research and engineering efforts, many of today's important computer systems suffer from bugs. To increase the reliability of software systems, recent work has…