Software Fault Isolation with Api Integrity and Multi-Principal Modules
The security of many applications relies on the kernel being secure, but history suggests that kernel vulnerabilities are routinely discovered and exploited. In particular, exploitable vulnerabilities in kernel modules are common. This paper proposes LXFI, a system which isolates kernel modules from...
Main Authors: | Mao, Yandong, Chen, Haogang, Zhou, Dong, Wang, Xi, Zeldovich, Nickolai, Kaashoek, M. Frans |
---|---|
Other Authors: | Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory |
Format: | Article |
Language: | en_US |
Published: |
Association for Computing Machinery (ACM)
2012
|
Online Access: | http://hdl.handle.net/1721.1/72580 https://orcid.org/0000-0003-0238-2703 https://orcid.org/0000-0002-2898-1686 https://orcid.org/0000-0001-7098-586X |
Similar Items
-
Linux Kernel Vulnerabilities: State-of-the-Art Defenses and Open Problems
by: Chen, Haogang, et al.
Published: (2012) -
Security bugs in embedded interpreters
by: Chen, Haogang, et al.
Published: (2014) -
The K2 Architecture for Trustworthy Hardware Security Modules
by: Athalye, Anish, et al.
Published: (2023) -
Retroactive auditing
by: Wang, Xi, et al.
Published: (2012) -
A Software Approach to Unifying Multicore Caches
by: Boyd-Wickizer, Silas, et al.
Published: (2011)