Software Fault Isolation with Api Integrity and Multi-Principal Modules

The security of many applications relies on the kernel being secure, but history suggests that kernel vulnerabilities are routinely discovered and exploited. In particular, exploitable vulnerabilities in kernel modules are common. This paper proposes LXFI, a system which isolates kernel modules from...

Full description

Bibliographic Details
Main Authors: Mao, Yandong, Chen, Haogang, Zhou, Dong, Wang, Xi, Zeldovich, Nickolai, Kaashoek, M. Frans
Other Authors: Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
Format: Article
Language:en_US
Published: Association for Computing Machinery (ACM) 2012
Online Access:http://hdl.handle.net/1721.1/72580
https://orcid.org/0000-0003-0238-2703
https://orcid.org/0000-0002-2898-1686
https://orcid.org/0000-0001-7098-586X