Securing Monolithic Kernels using Compartmentalization

arXiv:2404.08716v1 Announce Type: new
Abstract: Monolithic operating systems, where all kernel functionality resides in a single, shared address space, are the foundation of most mainstream computer systems. However, a single flaw, even in a non-essential part of the kernel (e.g., device drivers), can cause the entire operating system to fall under an attacker's control. Kernel hardening techniques might prevent certain types of vulnerabilities, but they fail to address a fundamental weakness: the lack of intra-kernel security that safely isolates different …

address arxiv attacker can computer control cs.cr csos device device drivers drivers flaw foundation kernel mainstream non operating system operating systems single space system systems under