CHERI JNI
Abstract
Java provides security and robustness by building a high-level security model atop the foundation of memory protection. Unfortunately, any native code linked into a Java program -- including the million lines used to implement the standard library -- is able to bypass both the memory protection and the higher-level policies. We present a hardware-assisted implementation of the Java native code interface, which extends the guarantees required for Java's security model to native code.
Document Details
- Document Type
- Pub Defense Publication
- Publication Date
- Apr 04, 2017
- Source ID
- 10.1145/3093336.3037725
Entities
People
- A. Theodore Markettos
- Alexandre Joannou
- Ben Laurie
- Brooks Davis
- David Brazdil
- David Chisnall
- J. Edward Maste
- Jonathan Woodruff
- Khilan Gudka
- Michael Roe
- Peter G. Neumann
- Robert N.m. Watson
- Robert Norton
- Simon W. Moore
- Stacey Son
Organizations
- Defense Advanced Research Projects Agency
- Engineering and Physical Sciences Research Council
- Isaac Newton Trust
- SRI International
- University of Cambridge