CompartOS: CHERI Compartmentalization for Embedded Systems. (arXiv:2206.02852v1 [cs.CR])

Existing high-end embedded systems face frequent security attacks. Software
compartmentalization is one technique to limit the attacks' effects to the
compromised compartment and not the entire system. Unfortunately, the existing
state-of-the-art embedded hardware-software solutions do not work well to
enforce software compartmentalization for high-end embedded systems. MPUs are
not fine-grained and suffer from significant scalability limitations as they
can only protect a small and fixed number of memory regions. On the other hand,
MMUs suffer from non-determinism and coarse-grained protection. …

embedded embedded systems systems