Software Compartmentalisation: Further Readings

• Lefeuvre et al., SoK: Software Compartmentalisation. Modern and high-level overview of the field. Heavily inspired this week’s content. References 250+ compartmentalisation paper.
• Kilpatrick, Privman: A Library for Partitioning Applications. Seminal work on compartmentalisation.
• Provos et al., Preventing Privilege Escalation. Another seminal work.
• Watson et al., CHERI: A hybrid capability-system architecture for scalable software compartmentalization. An isolation mechanism tailored for efficient - compartmentalisation. More on CHERI in the hardware part of the unit.
• Lefeuvre et al., Assessing the Impact of Interface Vulnerabilities in Compartmentalized Software. Explores the problem of securing cross-compartment interfaces.
• Watson et al., Capsicum: practical capabilities for UNIX.