4 papers
PICASSO: Scaling CHERI Use-After-Free Protection to Millions of Allocations using Colored Capabilities
Merve Gülmez, Ruben Sturm, Hossam ElAtali +4
While the CHERI instruction-set architecture extensions for capabilities enable strong spatial memory safety, CHERI lacks built-in temporal safety, particularly for heap allocation…
BLACKOUT: Data-Oblivious Computation with Blinded Capabilities
Hossam ElAtali, Merve Gülmez, Thomas Nyman +1
Lack of memory-safety and exposure to side channels are two prominent, persistent challenges for the secure implementation of software. Memory-safe programming languages promise to…
CacheSquash: Making caches speculation-aware
Hossam ElAtali, N. Asokan
Speculation is key to achieving high CPU performance, yet it enables risks like Spectre attacks which remain a significant challenge to mitigate without incurring substantial perfo…
BliMe Linter
Hossam ElAtali, Xiaohe Duan, Hans Liljestrand +2
Outsourced computation presents a risk to the confidentiality of clients' sensitive data since they have to trust that the service providers will not mishandle this data. Blinded M…