FlexC: Flexible Compartmentalization Through Automatic Policy Generation

The single address space in monolithic kernels enables vulnerabilities to compromise the entire kernel and system. An effective approach to prevent and mitigate these vulnerabilities is compartmentalization. Previous work has mostly focused on the enforcement of compartmentalization policies; to dat...

Full description

Bibliographic Details
Main Author: Ortega, Carolina Perez
Other Authors: Shrobe, Howard
Format: Thesis
Published: Massachusetts Institute of Technology 2022
Online Access:https://hdl.handle.net/1721.1/144506