4 papers
Threadbox: Sandboxing for Modular Security
Maysara Alhindi, Joseph Hallett
There are many sandboxing mechanisms provided by operating systems to limit what resources applications can access, however, sometimes the use of these mechanisms requires develope…
Not quite a piece of CHERI-cake: Are new digital security by design architectures usable?
Maysara Alhindi, Joseph Hallett
A digital security-by-design computer architecture, like CHERI, lets you program without fear of buffer overflows or other memory safety errors, but CHERI also rewrites some of the…
Playing in the Sandbox: A Study on the Usability of Seccomp
Maysara Alhindi, Joseph Hallett
Sandboxing restricts what applications do, and prevents exploited processes being abused; yet relatively few applications get sandboxed: why? We report a usability trial with 7 exp…
Sandboxing Adoption in Open Source Ecosystems
Maysara Alhindi, Joseph Hallett
Sandboxing mechanisms allow developers to limit how much access applications have to resources, following the least-privilege principle. However, it's not clear how much and in wha…