Model Intra-address space mechanisms

[sid-agrawal]

To start off, we will model

1. MPK
2. MD
3. MTE
4. CHERI
5. PAC - This relates to the previous task, too

Look at the following paper from ATC 2024 for a summary of all the features. In principle, this paper should have all the related work we will need to do this part of the project.

• Limitations and Opportunities of Modern Hardware Isolation Mechanisms

Once a mechanisms is picked up, doing it depends on package the needed data in the ELF, for notes on that, look at

• 20

[sid-agrawal]

For MPK: How do we ensure that a malicious use cannot change their code segment to do a wrpkru ?

• Binary Scanning + Trusted Loader
• CFI
• Exec Shield (https://lwn.net/Articles/31032/)

Papers

• libmpk
• ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK)