The Center for Education and Research in Information Assurance and Security (CERIAS)

The Center for Education and Research in
Information Assurance and Security (CERIAS)
Center for Education and Research in Information Assurance and Security

Zero Cost Spatial Memory Safety

Research Areas: End System Security

Principal Investigator: Aravind Machiry

We intend to fuse the goodness of Checked-C and RL Sandboxing to make C more secure than ever. While Microsoft's Checked-C already takes care of Spatial safety by encapsulating C code to Checked-C regions. What about "Unchecked" regions?, How can we guarantee spatial safety for unchecked regions?

Thats where we intend to use RLBOX Sandboxing. With a fusion of the above two, we intend to kick Legacy C's memory safety and security issues to the curb.

Specifically, our plan is to encapsulate unchecked regions of code into a RLBOX sandbox and allow transparent communication between checked and unchecked regions.