Publications related to Sandbox (computer security)

Creating Trust by Abolishing Hierarchies

Mathias Josef Payer, Edouard Bugnion, Evangelos Marios Kogias, Adrien Ghosn, Charly Nicolas Lucien Castes, Neelu Shivprakash Kalani, Yuchen Qian

Software is going through a trust crisis. Privileged code is no longer trusted and processes insufficiently protect user code from unverified libraries. While usually treated separately, confidential computing and program compartmentalization are both symp ...

Association for Computing Machinery2023

A RISC-V Extension to Minimize Privileges of Enclave Runtimes

Edouard Bugnion, Neelu Shivprakash Kalani

In confidential computing, the view of the system software is Manichean: the host operating system is untrusted and the TEE runtime system is fully trusted. However, the runtime system is often as complex as a full operating system, and thus is not free fr ...

ACM2023

Enclosure: Language-Based Restriction of Untrusted Libraries

James Richard Larus, Mathias Josef Payer, Edouard Bugnion, Evangelos Marios Kogias, Adrien Ghosn

Programming languages and systems have failed to address the security implications of the increasingly frequent use of public libraries to construct modern software. Most languages provide tools and online repositories to publish, import, and use libraries ...

2021

Secured Routines: Language-based Construction of Trusted Execution Environments

James Richard Larus, Edouard Bugnion, Adrien Ghosn

Trusted Execution Environments (TEEs), such as Intel SGX enclaves, use hardware to ensure the confidentiality and integrity of operations on sensitive data. While the technology is available on many processors, the complexity of its programming model and i ...

USENIX ASSOC2019

Revisiting Multivariate Lattices for Encrypted Signal Processing

Juan Ramón Troncoso-Pastoriza

Multimedia contents are inherently sensitive signals that must be protected when processed in untrusted environments. The field of Secure Signal Processing addresses this challenge by developing methods which enable operating with sensitive signals in a pr ...

ASSOC COMPUTING MACHINERY2019

Practical Private Range Search in Depth

Odysseas Papapetrou, Ioannis Demertzis

We consider a data owner that outsources its dataset to an untrusted server. The owner wishes to enable the server to answer range queries on a single attribute, without compromising the privacy of the data and the queries. There are several schemes on “pr ...

2018

Scalable Bias-Resistant Distributed Randomness

Bryan Alexander Ford, Linus Gasser, Eleftherios Kokoris Kogias, Philipp Svetolik Jovanovic, Nicolas Gailly, Ismail Khoffi

Bias-resistant public randomness is a critical component in many (distributed) protocols. Existing solutions do not scale to hundreds or thousands of participants, as is needed in many decentralized systems. We propose two large-scale distributed protocols ...

Ieee2017

Practical Private Range Search Revisited

Odysseas Papapetrou, Ioannis Demertzis

2016

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Sandbox (computer security)

Secure Interface Design Leveraging Hardware/Software Support

Creating Trust by Abolishing Hierarchies

A RISC-V Extension to Minimize Privileges of Enclave Runtimes

Enclosure: Language-Based Restriction of Untrusted Libraries

Trust as a Programming Primitive

Secured Routines: Language-based Construction of Trusted Execution Environments

Revisiting Multivariate Lattices for Encrypted Signal Processing

Practical Private Range Search in Depth

Scalable Bias-Resistant Distributed Randomness

Practical Private Range Search Revisited

Graph Chatbot

Chat with Graph Search

Secure Interface Design Leveraging Hardware/Software Support

Trust as a Programming Primitive

A RISC-V Extension to Minimize Privileges of Enclave Runtimes

Secured Routines: Language-based Construction of Trusted Execution Environments

Practical Private Range Search in Depth

Scalable Bias-Resistant Distributed Randomness

Enclosure: Language-Based Restriction of Untrusted Libraries

Practical Private Range Search Revisited

Revisiting Multivariate Lattices for Encrypted Signal Processing

Creating Trust by Abolishing Hierarchies