Conrad Watt

Capstone: A Capability-based Foundation for Trustless Secure Memory Access (Extended Version)

2023 · arXiv (Cornell University)

Capability-based memory isolation is a promising new architectural primitive. Software can access low-level memory only via capability handles rather than raw pointers, which provides a natural interface to enforce security restrictions. Existing architectural capability designs …