Cover Image

BULKHEAD: Secure, Scalable, and Efficient Kernel Compartmentalization with PKS

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Guo, Yinggang, Wang, Zicheng, Bai, Weiheng, Zeng, Qingkai, Lu, Kangjie
Format:	Preprint
Published:	2024
Subjects:	Cryptography and Security Operating Systems
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

When eBPF Meets Machine Learning: On-the-fly OS Kernel Compartmentalization
by: Wang, Zicheng, et al.
Published: (2024)

Securing Monolithic Kernels using Compartmentalization
by: Lim, Soo Yee, et al.
Published: (2024)

SoK: Software Compartmentalization
by: Lefeuvre, Hugo, et al.
Published: (2024)

SyzParam: Introducing Runtime Parameters into Kernel Driver Fuzzing
by: Sun, Yue, et al.
Published: (2025)

MOAT: Towards Safe BPF Kernel Extension
by: Lu, Hongyi, et al.
Published: (2023)

SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions
by: Lim, Soo Yee, et al.
Published: (2024)

Safe Sharing of Fast Kernel-Bypass I/O Among Nontrusting Applications
by: Beadle, Alan, et al.
Published: (2025)

Pomegranate: A Lightweight Compartmentalization Architecture using Virtualization Extensions
by: Raja, Shriram, et al.
Published: (2026)

The Android Platform Security Model (2023)
by: Mayrhofer, René, et al.
Published: (2019)

Analysis of Security in OS-Level Virtualization
by: Ketha, Krishna Sai, et al.
Published: (2025)

The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches
by: Zhang, Chuqi, et al.
Published: (2024)

Automatic ISA analysis for Secure Context Switching
by: Kalani, Neelu S., et al.
Published: (2025)

Security, extensibility, and redundancy in the Metabolic Operating System
by: King, Samuel T.
Published: (2023)

Securing Cloud File Systems with Trusted Execution
by: Burke, Quinn, et al.
Published: (2023)

Evolution of Android's Permission-based Security Model and Challenges
by: Solanki, Rajendra Kumar, et al.
Published: (2026)

Tock: From Research to Securing 10 Million Computers
by: Schuermann, Leon, et al.
Published: (2026)

Case Study: Securing MMU-less Linux Using CHERI
by: Almatary, Hesham, et al.
Published: (2023)

WebAssembly Based Portable and Secure Sensor Interface for Internet of Things
by: Ou, Botong, et al.
Published: (2026)

Contextualizing Security and Privacy of Software-Defined Vehicles: A Literature Review and Industry Perspectives
by: De Vincenzi, Marco, et al.
Published: (2024)

Adaptive and Efficient Dynamic Memory Management for Hardware Enclaves
by: Dhanraj, Vijay, et al.
Published: (2025)

CAEC: Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA
by: Abdollahi, Sina, et al.
Published: (2025)

A Survey of Operating System Kernel Fuzzing
by: Xu, Jiacheng, et al.
Published: (2025)

Secure and Efficient Access Control for Computer-Use Agents via Context Space
by: Gong, Haochen, et al.
Published: (2025)

Sync+Sync: A Covert Channel Built on fsync with Storage
by: Jiang, Qisheng, et al.
Published: (2023)

Sandlock: Confining AI Agent Code with Unprivileged Linux Primitives
by: Wang, Cong, et al.
Published: (2026)

Threadbox: Sandboxing for Modular Security
by: Alhindi, Maysara, et al.
Published: (2025)

Supply Chain Exploitation of Secure ROS 2 Systems: A Proof-of-Concept on Autonomous Platform Compromise via Keystore Exfiltration
by: Sakib, Tahmid Hasan, et al.
Published: (2025)

Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives
by: Son, Daeyeon
Published: (2026)

FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolation
by: Wu, Yinpeng, et al.
Published: (2026)

Biting the CHERI bullet: Blockers, Enablers and Security Implications of CHERI in Defence
by: Faily, Shamal
Published: (2025)

B-Side: Binary-Level Static System Call Identification
by: Thévenon, Gaspard, et al.
Published: (2024)

UPSS: a User-centric Private Storage System with its applications
by: Bozorgi, Arastoo, et al.
Published: (2024)

Retrofitting XoM for Stripped Binaries without Embedded Data Relocation
by: Luo, Chenke, et al.
Published: (2024)

Beyond Control: Exploring Novel File System Objects for Data-Only Attacks on Linux Systems
by: Zhou, Jinmeng, et al.
Published: (2024)

CRISP: Confidentiality, Rollback, and Integrity Storage Protection for Confidential Cloud-Native Computing
by: Hartono, Ardhi Putra Pratama, et al.
Published: (2024)

Fight Hardware with Hardware: System-wide Detection and Mitigation of Side-Channel Attacks using Performance Counters
by: Carnà, Stefano, et al.
Published: (2024)

Blindfold: Confidential Memory Management by Untrusted Operating System
by: Li, Caihua, et al.
Published: (2024)

Physical Memory Attacks and a Memory Safe Management System for Memory Defense
by: Hillel-Tuch, Alon, et al.
Published: (2024)

Sharing is caring: Attestable and Trusted Workflows out of Distrustful Components
by: Sadi, Amir Al, et al.
Published: (2026)

Rethinking Provenance Completeness with a Learning-Based Linux Scheduler
by: Mao, Jinsong, et al.
Published: (2025)