Poison and Remedy of VMAs Instead of Guards
Explore the intricacies of using VMAs instead of guards, examining both drawbacks and solutions in Linux memory management.
Linux Memory Management at Scale
Explore advanced Linux memory management techniques for reliable, efficient multi-container systems at scale. Learn key concepts, misconceptions, and cutting-edge technologies used in production environments.
Zephyr OS Memory Protection
Explore MPU-based memory protection in Zephyr RTOS, covering security domains, permission management, object allocation, system calls, and IPC mechanisms for embedded systems.
Libmpk - Software Abstraction for Intel Memory Protection Keys
Explore libmpk, a software abstraction enhancing Intel MPK's security and scalability. Learn about its implementation, benefits, and applications in OpenSSL, JavaScript JIT, and Memcached.
Divide et Impera - MemoryRanger Runs Drivers in Isolated Kernel Spaces
Explore Windows 10 kernel memory protection, its vulnerabilities, and MemoryRanger's innovative approach to isolating drivers for enhanced security against malware attacks.
Security Analysis of CHERI ISA
Explore CHERI ISA's memory-protection features for C/C++, its security guarantees, and how it enhances memory safety in legacy code through architectural and compiler innovations.
On-Chip Randomization for Memory Protection Against Hardware Supply Chain Attacks to DRAM
Explore innovative techniques for safeguarding DRAM against hardware supply chain attacks through on-chip randomization, enhancing memory protection in modern computing systems.
Kubernetes on Cgroup v2
Explore cgroups v2 in Kubernetes: new features, OCI spec changes, and container runtime adaptations for improved resource management and OOM handling.
Static Analysis for CHERI - SOAP 2024
Explore custom static analyses supporting C/C++ code transition to CHERI hardware, enhancing memory protection and software compartmentalization for RISC-V and AArch64 architectures.
Sonata: Low-Cost CHERI Hardware for Embedded Systems
Explore low-cost CHERI hardware for embedded systems with Sonata, enhancing security and efficiency in resource-constrained environments.
Emulating Hyper-V's Virtual Secure Mode with QEMU and KVM
Explore innovative VSM emulation in KVM using Companion VMs. Learn about progress, design challenges, and potential applications in confidential computing and device emulation security.
Advanced ROP Framework - Pushing Return-Oriented Programming to Its Limits
Discover advanced return-oriented programming techniques with ROP ROCKET framework, featuring syscall bypassing, cross-architecture exploitation, and innovative bad byte handling for enhanced security testing.
The State of Morello and CHERI
Explore the current status and advancements of Morello and CHERI technologies in computer architecture and security.
SeaK - Rethinking the Design of a Secure Allocator for OS Kernel
Explore a novel approach to kernel heap security through SeaK, featuring atomic alleviation strategy that enhances protection while maintaining performance and efficiency in Linux systems.
Intellectual Property Exposure: Subverting and Securing Intellectual Property Encapsulation in Texas Instruments Microcontrollers
Explore security vulnerabilities in Texas Instruments MSP430 microcontrollers' IPE technology and learn practical attack scenarios plus proposed hardware solutions for enhanced protection.
DMAAUTH: A Lightweight Pointer Integrity-based Secure Architecture to Defeat DMA Attacks
Explore a lightweight pointer integrity-based architecture that provides enhanced DMA attack protection while maintaining performance, demonstrated through FPGA implementation and cross-architecture evaluation.