URL
BibTeX DOI
Abstract. Application compartmentalisation decomposes software into sandboxed components in order to mitigate security vulnerabilities, and has proven effective in limiting the impact of compromise. However, experience has shown that adapting existing C-language software is difficult, often leading to problems with correctness, performance, complexity, and most critically, security. Security-Oriented Analysis of Application Programs (SOAAP) is an in-progress research project into new semi-automated techniques to support compartmentalisation. SOAAP employs a variety of static and dynamic approaches, driven by source code annotations termed compartmentalisation hypotheses, to help programmers evaluate strategies for compartmentalising existing software.
Authors. Khilan Gudka, Robert M Watson, Steven Hand, Ben Laurie and Anil Madhavapeddy
See Also. This publication was part of the Unikernels and Information Flow for Trusted Execution projects.
News Updates
» Part 3 / «» Part 2 / «» Delivered the distinguished seminar series at St Andrews on rebuilding Operating Systems with functional principles.» DockerCon talk on unikernels and MirageOS.» Interviewed by The New Stack at OSCON in Austin, Texas / «
» Updated the MirageOS community about the 2016 hack retreat.» Announced HyperKit, VPNKit and DataKit for the Docker ecosystem.» Announced that Unikernel Systems is now part of Docker.» Invited talk at NetPL on Immutable Distributed Infrastructure with Unikernels.» Talk at Esper on functional programming with unikernels.» Updated the OCaml community on annual OCaml Labs activities for 2014.» Gave BOB 2015 keynote on functional Operating Systems.» New Directions in Operating Systems talk on Jitsu.» At the Xen Summit speaking about branch consistency for Xen Stub Domains.» Gave Haskell Symposium 2014 Keynote on functional OS design.» Announced the release of MirageOS 1.2, and a roadmap towards MirageOS 2.0 / «» Announced the long-awaited release of MirageOS 2.0 / «» Appeared on FLOSS Weekly 302 about Open Mirage.» Appeared on SE Radio Episode 204 about Mirage and OCaml.» Note on the discussions around my recent CACM article on unikernels.» MirageOS and XAPI project update at XenSummit / «» Note on integrating Docker and opam more effectively.» Mirage Developer Preview 1 screencast.» Discussing how we disaggregated MirageOS into opam packages.» Paper on control flow analysis to break up applications into compartments / «» Note on how to build XenStore stub domains using MirageOS.» Note on using ARM Dreamplugs with OCaml published.» At the OCaml Meeting 2011 speaking about MirageOS.» Liveblog on the talks at CUFP 2011.» Note discussing an OCaml interface to our new CIEL dataflow engine / «» Published a note on delimited continuations vs Lwt in OCaml for MirageOS.» Announced that the MirageOS website now self-hosted on MirageOS! / «» At LinkedIn giving tech talk about Mirage.» At HotCloud for the first talk about MirageOS.