The DOI matches its Crossref record; 44 of the 44 references it cites were found in a registry or an index.
CHERI: A Hybrid Capability-System Architecture for Scalable Software Compartmentalization
Open accessAbstract
CHERI extends a conventional RISC Instruction-Set Architecture, compiler, and operating system to support fine-grained, capability-based memory protection to mitigate memory-related vulnerabilities in C-language TCBs. We describe how CHERI capabilities can also underpin a hardware-software object-capability model for application compartmentalization that can mitigate broader classes of attack. Prototyped as an extension to the open-source 64-bit BERI RISC FPGA soft-core processor, Free BSD operating system, and LLVM compiler, we demonstrate multiple orders-of-magnitude improvement in scalability, simplified programmability, and resulting tangible security benefits as compared to compartmentalization based on pure Memory-Management Unit (MMU) designs. We evaluate incrementally deployable CHERI-based compartmentalization using several real-world UNIX libraries and applications.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
LLVM: A compilation framework for lifelong program analysis & transformation
Lattner, C., & Adve, V. (2004) · International Symposium on Code Generation and Optimization, 2004. CGO 2004. · doi:10.1109/cgo.2004.1281665 · Cited by 2,681
Secure Computer System: Unified Exposition and Multics Interpretation
Bell, D. E., & La Padula, L. J. (1976) · doi:10.21236/ada023588 · Cited by 1,916
Integrity Considerations for Secure Computer Systems
Biba, K. J. (1977) · Defense Technical Information Center (DTIC) · Cited by 1,221
Efficient software-based fault isolation
Wahbe, R., Lucco, S., Anderson, T. E., & Graham, S. L. (1993) · Proceedings of the fourteenth ACM symposium on Operating systems principles - SOSP '93 · doi:10.1145/168619.168635 · Cited by 1,214
Mach: A New Kernel Foundation for UNIX Development.
Accetta, M. J., Baron, R., Bolosky, W. J., Golub, D. B., Rashid, R. F., Tevanian, A., & Young, M. W. (1986) · Cited by 944
Control-flow integrity principles, implementations, and applications
Abadi, M., Budiu, M., Erlingsson, Ú., & Ligatti, J. (2009) · ACM Transactions on Information and System Security · doi:10.1145/1609956.1609960 · Cited by 795
Programming semantics for multiprogrammed computations
Dennis, J. B., & Van Horn, E. C. (1983) · Communications of the ACM · doi:10.1145/357980.357993 · Cited by 676
Computer Security Technology Planning Study
Anderson, J. P. (1972) · Cited by 660
Self-citationJim, T., Morrisett, J. G., Grossman, D., Hicks, M., Cheney, J., & Wang, Y.-L. (2002) · Cited by 605
Programming semantics for multiprogrammed computations
Dennis, J. B., & Van Horn, E. C. (1966) · Communications of the ACM · doi:10.1145/365230.365252 · Cited by 575
Metadata
- Authors
- Watson, R. N. M., Woodruff, J., Neumann, P. G., Moore, S. W., Anderson, J., Chisnall, D., Dave, N., Davis, B., Gudka, K., Laurie, B., Murdoch, S. J., Norton, R., Roe, M., Son, S., & Vadera, M.
- Venue
- 2015 IEEE Symposium on Security and Privacy
- Publisher
- IEEE
- Published
- 2015-05
- Pages
- 20-37
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W1904738922
- Cited by
- 270
- References
- 44
- FWCI
- 9.85
- Type
- conference paper
- Language
- en
- Open access
- bronze
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: CHERI: A Hybrid Capability-System Architecture for Scalable Software Compartmentalization. https://app.cochat.ai/papers/10.1109/sp.2015.9
- The paper
- Watson, R. N. M., Woodruff, J., Neumann, P. G., Moore, S. W., Anderson, J., Chisnall, D., Dave, N., Davis, B., Gudka, K., Laurie, B., Murdoch, S. J., Norton, R., Roe, M., Son, S., & Vadera, M. (2015). CHERI: A Hybrid Capability-System Architecture for Scalable Software Compartmentalization. 2015 IEEE Symposium on Security and Privacy. https://doi.org/10.1109/sp.2015.9
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
