Showing cs.CRShow all
2 papers · 1 filter
cs.CR2024
SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions
Soo Yee Lim, Tanya Prasad, Xueyuan Han +1
The eBPF framework enables execution of user-provided code in the Linux kernel. In the last few years, a large ecosystem of cloud services has leveraged eBPF to enhance container s…
cs.CR2024
Securing Monolithic Kernels using Compartmentalization
Soo Yee Lim, Sidhartha Agrawal, Xueyuan Han +3
Monolithic operating systems, where all kernel functionality resides in a single, shared address space, are the foundation of most mainstream computer systems. However, a single fl…