3 papers
cs.CR2026
PRISM: Lightweight Enclave Isolation with Prismatic Capabilities
Merve Gülmez, Adam Caulfield, Hakan Englund +2
Trusted execution environments (TEEs) protect sensitive code and data from external interference, but lack inherent memory safety. CHERI can enforce spatial memory safety at the ob…
cs.CR2026
PICASSO: Scaling CHERI Use-After-Free Protection to Millions of Allocations using Colored Capabilities
Merve Gülmez, Ruben Sturm, Hossam ElAtali +4
While the CHERI instruction-set architecture extensions for capabilities enable strong spatial memory safety, CHERI lacks built-in temporal safety, particularly for heap allocation…
cs.CR2024
Mon CHÉRI: Mitigating Uninitialized Memory Access with Conditional Capabilities
Merve Gülmez, Håkan Englund, Jan Tobias Mühlberg +1
Up to 10% of memory-safety vulnerabilities in languages like C and C++ stem from uninitialized variables. This work addresses the prevalence and lack of adequate software mitigatio…