Deian Stefan

Retrofitting Fine Grain Isolation in the Firefox Renderer (Extended Version)

2020 · arXiv (Cornell University)

Firefox and other major browsers rely on dozens of third-party libraries to render audio, video, images, and other content. These libraries are a frequent source of vulnerabilities. To mitigate this threat, we are migrating Firefox …

WaVe: a verifiably secure WebAssembly sandboxing runtime

2023

The promise of software sandboxing is flexible, fast and portable isolation; capturing the benefits of hardwarebased memory protection without requiring operating system involvement. This promise is reified in WebAssembly (Wasm), a popular portable bytecode whose …