Cover Image

Tock: From Research to Securing 10 Million Computers

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Schuermann, Leon, Campbell, Brad, Ghena, Branden, Levis, Philip, Levy, Amit, Pannuto, Pat
Format:	Preprint
Published:	2026
Subjects:	Operating Systems Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Securing Monolithic Kernels using Compartmentalization
by: Lim, Soo Yee, et al.
Published: (2024)

The Android Platform Security Model (2023)
by: Mayrhofer, René, et al.
Published: (2019)

Analysis of Security in OS-Level Virtualization
by: Ketha, Krishna Sai, et al.
Published: (2025)

Automatic ISA analysis for Secure Context Switching
by: Kalani, Neelu S., et al.
Published: (2025)

Security, extensibility, and redundancy in the Metabolic Operating System
by: King, Samuel T.
Published: (2023)

Securing Cloud File Systems with Trusted Execution
by: Burke, Quinn, et al.
Published: (2023)

Evolution of Android's Permission-based Security Model and Challenges
by: Solanki, Rajendra Kumar, et al.
Published: (2026)

BULKHEAD: Secure, Scalable, and Efficient Kernel Compartmentalization with PKS
by: Guo, Yinggang, et al.
Published: (2024)

Case Study: Securing MMU-less Linux Using CHERI
by: Almatary, Hesham, et al.
Published: (2023)

WebAssembly Based Portable and Secure Sensor Interface for Internet of Things
by: Ou, Botong, et al.
Published: (2026)

Confidential Serverless Computing
by: Sabanic, Patrick, et al.
Published: (2025)

Contextualizing Security and Privacy of Software-Defined Vehicles: A Literature Review and Industry Perspectives
by: De Vincenzi, Marco, et al.
Published: (2024)

CRISP: Confidentiality, Rollback, and Integrity Storage Protection for Confidential Cloud-Native Computing
by: Hartono, Ardhi Putra Pratama, et al.
Published: (2024)

Secure and Efficient Access Control for Computer-Use Agents via Context Space
by: Gong, Haochen, et al.
Published: (2025)

Threadbox: Sandboxing for Modular Security
by: Alhindi, Maysara, et al.
Published: (2025)

Biting the CHERI bullet: Blockers, Enablers and Security Implications of CHERI in Defence
by: Faily, Shamal
Published: (2025)

Sharing is caring: Attestable and Trusted Workflows out of Distrustful Components
by: Sadi, Amir Al, et al.
Published: (2026)

AgenTEE: Confidential LLM Agent Execution on Edge Devices
by: Abdollahi, Sina, et al.
Published: (2026)

Sandlock: Confining AI Agent Code with Unprivileged Linux Primitives
by: Wang, Cong, et al.
Published: (2026)

OAMAC: Origin-Aware Mandatory Access Control for Practical Post-Compromise Attack Surface Reduction
by: Mohammed, Omer Abdelmajeed Idris, et al.
Published: (2026)

Ringmaster: How to juggle high-throughput host OS system calls from TrustZone TEEs
by: Habeeb, Richard, et al.
Published: (2026)

Rethinking Provenance Completeness with a Learning-Based Linux Scheduler
by: Mao, Jinsong, et al.
Published: (2025)

Plug. Play. Persist. Inside a Ready-to-Go Havoc C2 Infrastructure
by: Di Santo, Alessio
Published: (2025)

SoK: Software Compartmentalization
by: Lefeuvre, Hugo, et al.
Published: (2024)

B-Side: Binary-Level Static System Call Identification
by: Thévenon, Gaspard, et al.
Published: (2024)

CAEC: Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA
by: Abdollahi, Sina, et al.
Published: (2025)

UPSS: a User-centric Private Storage System with its applications
by: Bozorgi, Arastoo, et al.
Published: (2024)

Retrofitting XoM for Stripped Binaries without Embedded Data Relocation
by: Luo, Chenke, et al.
Published: (2024)

To Unpack or Not to Unpack: Living with Packers to Enable Dynamic Analysis of Android Apps
by: Asghari, Mohammad Hossein, et al.
Published: (2025)

The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches
by: Zhang, Chuqi, et al.
Published: (2024)

Beyond Control: Exploring Novel File System Objects for Data-Only Attacks on Linux Systems
by: Zhou, Jinmeng, et al.
Published: (2024)

Sync+Sync: A Covert Channel Built on fsync with Storage
by: Jiang, Qisheng, et al.
Published: (2023)

Goldilocks Isolation: High Performance VMs with Edera
by: Moore, Marina, et al.
Published: (2025)

Fight Hardware with Hardware: System-wide Detection and Mitigation of Side-Channel Attacks using Performance Counters
by: Carnà, Stefano, et al.
Published: (2024)

Lazarus Group Targets Crypto-Wallets and Financial Data while employing new Tradecrafts
by: Di Santo, Alessio
Published: (2025)

Exploiting Page Faults for Covert Communication
by: Swaminathan, Sathvik
Published: (2025)

NecoFuzz: Effective Fuzzing of Nested Virtualization via Fuzz-Harness Virtual Machines
by: Ishii, Reima, et al.
Published: (2025)

pokiSEC: A Multi-Architecture, Containerized Ephemeral Malware Detonation Sandbox
by: Avina, Alejandro, et al.
Published: (2025)

Adaptive and Efficient Dynamic Memory Management for Hardware Enclaves
by: Dhanraj, Vijay, et al.
Published: (2025)

ZeroOS: A Universal Modular Library OS for zkVMs
by: Zou, Guangxian, et al.
Published: (2025)