Efficient Linkage-Based Compartmentalization on CHERI

arXiv:2609.36731 · cs.CR, cs.AR, cs.OS · Submitted 2026-09-29 · Read on arXiv

cs.CR, cs.AR, cs.OS

Submitted: 2026-09-29

Updated: 2026-09-29

Code: https://github.com/microsoft/MSRC-Security-Research

Terminology

Benchmark — 11× in this paper · explained in 2 episodes
Core — 7× in this paper · explained in 2 episodes
IEEE Symposium on Security and Privacy — 3× in this paper
Abstraction — 2× in this paper · explained in 1 episode
Adaptation — 2× in this paper · explained in 1 episode
Trace — 2× in this paper · explained in 2 episodes
Access-Control List — 1× in this paper
Benchmarking — 1× in this paper · explained in 3 episodes
Computer Security Foundations Symposium — 1× in this paper
Data Plane Development Kit — 1× in this paper
Decode — 1× in this paper · explained in 2 episodes
Defense Advanced Research Projects Agency — 1× in this paper
Edge Devices — 1× in this paper · explained in 2 episodes
Formal Verification — 1× in this paper · explained in 2 episodes
Intel Memory Protection Keys — 1× in this paper
International Conference on Computer Design — 1× in this paper
Page Table Entry — 1× in this paper
Program Counter Capability5 — 1× in this paper
Provenance — 1× in this paper · explained in 3 episodes
Storage Performance Development Kit — 1× in this paper
Trusted Computing Base — 1× in this paper
Verification — 1× in this paper · explained in 2 episodes

Sources

CompartOS: CHERI Compartmentalization for Embedded Systems

Related papers