English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Isolating sensitive state and data can increase the security and robustnessof many applications. Examples include protecting cryptographic keys againstexploits like OpenSSL's Heartbleed bug or protecting a language runtime fromnative libraries written in unsafe languages. When runtime references acrossisolation boundaries occur relatively infrequently, then conventionalpage-based hardware isolation can be used, because the cost of kernel- orhypervisor-mediated domain switching is tolerable. However, some applications,such as the isolation of cryptographic session keys in network-facing services,require very frequent domain switching. In such applications, the overhead ofkernel- or hypervisor-mediated domain switching is prohibitive.  In this paper, we present ERIM, a novel technique that provideshardware-enforced isolation with low overhead on x86 CPUs, even at highswitching rates (ERIM's measured overhead is less than 1% for 100,000 switchesper second). The key idea is to combine protection keys (MPKs), a featurerecently added to x86 that allows protection domain switches in userspace, withbinary inspection to prevent circumvention. We show that ERIM can be appliedwith little effort to new and existing applications, doesn't require compilerchanges, can run on a stock Linux kernel, and has low runtime overhead even athigh domain switching rates.

ERIM: Secure, Efficient In-process Isolation with Memory Protection Keys (MPK)