项目作者: nickboucher

项目描述 :
An extension of Software Fault Isolation (SFI) which supports multiple isolation domains
高级语言: TeX
项目地址: git://github.com/nickboucher/Multi-Domain-SFI.git
创建时间: 2019-04-28T20:36:28Z
项目社区:https://github.com/nickboucher/Multi-Domain-SFI

开源协议:

下载


Multi-Domain SFI

An extension of Software Fault Isolation (SFI) which supports multiple isolation domains

Nicholas Boucher, Harvard University

Overview

Software Fault Isolation, or SFI, is a set of well-defined, assembly-language-specific application binary restrictions which provide certain security guarantees. Specifically, SFI allows a single virtual address space to be partitioned into two domains such that each domain can only access memory within itself or via specific trampolines to the opposite domain. Multi-Domain SFI is a generalization of SFI that allows for up to O(n) unique isolation domains for any n-bit virtual address space.

Paper

The paper fully describing multi-domain SFI can be found here.

Implementation

Work is underway to implement multi-domain SFI as a set of LLVM passes for the clang compiler. This work is in its early stages and is not suitable for production. The ongoing work can be found in the compiler passes directory of this repository.

If you are interested in getting involved, please reach out via the contact tool on the author’s personal website.