Cover Image

OAMAC: Origin-Aware Mandatory Access Control for Practical Post-Compromise Attack Surface Reduction

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Mohammed, Omer Abdelmajeed Idris, Orak, Ilhami M.
Format:	Preprint
Published:	2026
Subjects:	Cryptography and Security Operating Systems
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Beyond Control: Exploring Novel File System Objects for Data-Only Attacks on Linux Systems
by: Zhou, Jinmeng, et al.
Published: (2024)

Access Control Threatened by Quantum Entanglement
by: Zhang, Zhicheng, et al.
Published: (2025)

Physical Memory Attacks and a Memory Safe Management System for Memory Defense
by: Hillel-Tuch, Alon, et al.
Published: (2024)

Enhancing Attack Resilience in Real-Time Systems through Variable Control Task Sampling Rates
by: Sain, Arkaprava, et al.
Published: (2024)

Fight Hardware with Hardware: System-wide Detection and Mitigation of Side-Channel Attacks using Performance Counters
by: Carnà, Stefano, et al.
Published: (2024)

Testing Access-Control Configuration Changes for Web Applications
by: Xiang, Chengcheng, et al.
Published: (2025)

Supply Chain Exploitation of Secure ROS 2 Systems: A Proof-of-Concept on Autonomous Platform Compromise via Keystore Exfiltration
by: Sakib, Tahmid Hasan, et al.
Published: (2025)

Secure and Efficient Access Control for Computer-Use Agents via Context Space
by: Gong, Haochen, et al.
Published: (2025)

Case Study: Securing MMU-less Linux Using CHERI
by: Almatary, Hesham, et al.
Published: (2023)

AgenTEE: Confidential LLM Agent Execution on Edge Devices
by: Abdollahi, Sina, et al.
Published: (2026)

Sharing is caring: Attestable and Trusted Workflows out of Distrustful Components
by: Sadi, Amir Al, et al.
Published: (2026)

WebAssembly Based Portable and Secure Sensor Interface for Internet of Things
by: Ou, Botong, et al.
Published: (2026)

Sandlock: Confining AI Agent Code with Unprivileged Linux Primitives
by: Wang, Cong, et al.
Published: (2026)

Evolution of Android's Permission-based Security Model and Challenges
by: Solanki, Rajendra Kumar, et al.
Published: (2026)

Ringmaster: How to juggle high-throughput host OS system calls from TrustZone TEEs
by: Habeeb, Richard, et al.
Published: (2026)

Tock: From Research to Securing 10 Million Computers
by: Schuermann, Leon, et al.
Published: (2026)

Rethinking Provenance Completeness with a Learning-Based Linux Scheduler
by: Mao, Jinsong, et al.
Published: (2025)

Contextualizing Security and Privacy of Software-Defined Vehicles: A Literature Review and Industry Perspectives
by: De Vincenzi, Marco, et al.
Published: (2024)

Plug. Play. Persist. Inside a Ready-to-Go Havoc C2 Infrastructure
by: Di Santo, Alessio
Published: (2025)

Securing Monolithic Kernels using Compartmentalization
by: Lim, Soo Yee, et al.
Published: (2024)

SoK: Software Compartmentalization
by: Lefeuvre, Hugo, et al.
Published: (2024)

B-Side: Binary-Level Static System Call Identification
by: Thévenon, Gaspard, et al.
Published: (2024)

BULKHEAD: Secure, Scalable, and Efficient Kernel Compartmentalization with PKS
by: Guo, Yinggang, et al.
Published: (2024)

The Android Platform Security Model (2023)
by: Mayrhofer, René, et al.
Published: (2019)

CAEC: Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA
by: Abdollahi, Sina, et al.
Published: (2025)

UPSS: a User-centric Private Storage System with its applications
by: Bozorgi, Arastoo, et al.
Published: (2024)

Automatic ISA analysis for Secure Context Switching
by: Kalani, Neelu S., et al.
Published: (2025)

Retrofitting XoM for Stripped Binaries without Embedded Data Relocation
by: Luo, Chenke, et al.
Published: (2024)

To Unpack or Not to Unpack: Living with Packers to Enable Dynamic Analysis of Android Apps
by: Asghari, Mohammad Hossein, et al.
Published: (2025)

The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches
by: Zhang, Chuqi, et al.
Published: (2024)

Sync+Sync: A Covert Channel Built on fsync with Storage
by: Jiang, Qisheng, et al.
Published: (2023)

CRISP: Confidentiality, Rollback, and Integrity Storage Protection for Confidential Cloud-Native Computing
by: Hartono, Ardhi Putra Pratama, et al.
Published: (2024)

Goldilocks Isolation: High Performance VMs with Edera
by: Moore, Marina, et al.
Published: (2025)

Security, extensibility, and redundancy in the Metabolic Operating System
by: King, Samuel T.
Published: (2023)

Lazarus Group Targets Crypto-Wallets and Financial Data while employing new Tradecrafts
by: Di Santo, Alessio
Published: (2025)

Exploiting Page Faults for Covert Communication
by: Swaminathan, Sathvik
Published: (2025)

NecoFuzz: Effective Fuzzing of Nested Virtualization via Fuzz-Harness Virtual Machines
by: Ishii, Reima, et al.
Published: (2025)

pokiSEC: A Multi-Architecture, Containerized Ephemeral Malware Detonation Sandbox
by: Avina, Alejandro, et al.
Published: (2025)

Adaptive and Efficient Dynamic Memory Management for Hardware Enclaves
by: Dhanraj, Vijay, et al.
Published: (2025)

ZeroOS: A Universal Modular Library OS for zkVMs
by: Zou, Guangxian, et al.
Published: (2025)