Intel Memory Protection Keys (MPK) is a new hardware primitive to support thread-local
permission control on groups of pages without requiring modification of page tables. …

File systems, a basic building block of an OS, are too big and too complex to be bug free.
Nevertheless, file systems rely on regular stress-testing tools and formal checkers to find bugs, …

Memory corruption vulnerabilities are the root cause of many modern attacks. Existing defense
mechanisms are inadequate; in general, the software-based approaches are not efficient …

Persistent key-value stores (KVSs) are fundamental building blocks of modern software
products. A KVS stores persistent states for the products in the form of objects associated with …

In this paper, we present Vigilare system, a kernel integrity monitor that is architected to
snoop the bus traffic of the host system from a separate independent hardware. This snoop-…

External hardware-based kernel integrity monitors have been proposed to mitigate kernel-level
malwares. However, the existing external approaches have been limited to monitoring …

Rust was invented to help developers build highly safe systems. It comes with a variety of
programming constructs that put emphasis on safety and control of memory layout. Rust …

TFHE is a fully homomorphic encryption (FHE) scheme that evaluates Boolean gates, which
we will hereafter call Tgates, over encrypted data. TFHE is considered to have higher …

An operating system kernel has the highest privilege in most computer systems, making its
code integrity critical to the entire system’s security. Failure to protect the kernel code integrity …

Data-oriented attacks are gaining traction thanks to advances in code-centric mitigation
techniques for memory corruption vulnerabilities. Previous work on mitigating data-oriented …