{"id":"https://openalex.org/W7213319025","doi":"https://doi.org/10.48456/tr-951","title":"Capability Hardware Enhanced RISC Instructions: CHERI Instruction-Set Architecture (Version 8)","display_name":"Capability Hardware Enhanced RISC Instructions: CHERI Instruction-Set Architecture (Version 8)","publication_year":2021,"publication_date":"2021-04-12","ids":{"openalex":"https://openalex.org/W7213319025","doi":"https://doi.org/10.48456/tr-951","mag":"3119047464"},"language":"en","primary_location":{"id":"doi:10.48456/tr-951","doi":"https://doi.org/10.48456/tr-951","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-951","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48456/tr-951","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013006563","display_name":"Robert N. M. Watson","orcid":"https://orcid.org/0000-0001-8139-8783","observed_orcids":["https://orcid.org/0000-0001-8139-8783"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert N. M. Watson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151801015","display_name":"Peter G. Neumann","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter G. Neumann","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136101822","display_name":"Jonathan Woodruff","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jonathan Woodruff","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Michael Roe","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Michael Roe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008338356","display_name":"Hesham Almatary","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hesham Almatary","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062925499","display_name":"Jonathan Anderson","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jonathan Anderson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151747651","display_name":"John Baldwin","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"John Baldwin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024373219","display_name":"Graeme Barnes","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Graeme Barnes","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003350033","display_name":"David Chisnall","orcid":"https://orcid.org/0000-0001-6060-0153","observed_orcids":["https://orcid.org/0000-0001-6060-0153"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David Chisnall","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019517318","display_name":"Jessica Clarke","orcid":"https://orcid.org/0000-0001-8157-5567","observed_orcids":["https://orcid.org/0000-0001-8157-5567"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jessica Clarke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048690334","display_name":"Brooks Davis","orcid":"https://orcid.org/0009-0006-6256-0419","observed_orcids":["https://orcid.org/0009-0006-6256-0419"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Brooks Davis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151875695","display_name":"Lee Eisen","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee Eisen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026202020","display_name":"Nathaniel Wesley Filardo","orcid":"https://orcid.org/0009-0002-9698-1503","observed_orcids":["https://orcid.org/0009-0002-9698-1503"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nathaniel Wesley Filardo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006545282","display_name":"Richard Grisenthwaite","orcid":"https://orcid.org/0000-0002-0594-3206","observed_orcids":["https://orcid.org/0000-0002-0594-3206"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Richard Grisenthwaite","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026528066","display_name":"Alexandre Joannou","orcid":"https://orcid.org/0000-0002-3161-2638","observed_orcids":["https://orcid.org/0000-0002-3161-2638"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alexandre Joannou","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151780184","display_name":"Ben Laurie","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ben Laurie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086006620","display_name":"A. Theodore Markettos","orcid":"https://orcid.org/0009-0008-4411-2318","observed_orcids":["https://orcid.org/0009-0008-4411-2318"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"A. Theodore Markettos","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041439799","display_name":"Simon W. Moore","orcid":"https://orcid.org/0000-0002-2806-495X","observed_orcids":["https://orcid.org/0000-0002-2806-495X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Simon W. Moore","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011443512","display_name":"Steven J. Murdoch","orcid":"https://orcid.org/0000-0002-8744-1575","observed_orcids":["https://orcid.org/0000-0002-8744-1575"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Steven J. Murdoch","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018775869","display_name":"Kyndylan Nienhuis","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kyndylan Nienhuis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151727828","display_name":"Robert Norton","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert Norton","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017365974","display_name":"Alexander Richardson","orcid":"https://orcid.org/0000-0002-6372-217X","observed_orcids":["https://orcid.org/0000-0002-6372-217X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alexander Richardson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021838848","display_name":"Peter Rugg","orcid":"https://orcid.org/0009-0000-2976-0474","observed_orcids":["https://orcid.org/0009-0000-2976-0474"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter Rugg","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083405043","display_name":"Peter Sewell","orcid":"https://orcid.org/0000-0001-9352-1013","observed_orcids":["https://orcid.org/0000-0001-9352-1013"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter Sewell","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151835815","display_name":"Stacey Son","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Stacey Son","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5045554783","display_name":"Hongyan Xia","orcid":"https://orcid.org/0000-0002-8047-899X","observed_orcids":["https://orcid.org/0000-0002-8047-899X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hongyan Xia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.0026000000070780516,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cheri","display_name":"CHERI","score":0.906000018119812},{"id":"https://openalex.org/keywords/instruction-set-architecture","display_name":"instruction set architecture","score":0.75},{"id":"https://openalex.org/keywords/bounds-checking","display_name":"bounds checking","score":0.753000020980835},{"id":"https://openalex.org/keywords/least-privilege","display_name":"least privilege","score":0.6200000047683716},{"id":"https://openalex.org/keywords/trusted-computing-base","display_name":"trusted computing base","score":0.621999979019165},{"id":"https://openalex.org/keywords/separation-kernel","display_name":"separation kernel","score":0.9070000052452087},{"id":"https://openalex.org/keywords/hypervisor","display_name":"hypervisor","score":0.9700000286102295},{"id":"https://openalex.org/keywords/operating-system-kernel","display_name":"operating system kernel","score":0.8349999785423279},{"id":"https://openalex.org/keywords/formal-verification","display_name":"formal verification","score":0.31299999356269836}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8180999755859375},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5672000050544739},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.49309998750686646},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4564000070095062},{"id":"https://openalex.org/C147346212","wikidata":"https://www.wikidata.org/wiki/Q5492632","display_name":"Trusted computing base","level":4,"score":0.4478999972343445},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.4410000145435333},{"id":"https://openalex.org/C150202949","wikidata":"https://www.wikidata.org/wiki/Q107602","display_name":"Pointer (user interface)","level":2,"score":0.4278999865055084},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4205999970436096},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.4059999883174896},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.4009000062942505},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.3686999976634979},{"id":"https://openalex.org/C65232700","wikidata":"https://www.wikidata.org/wiki/Q5656403","display_name":"Hardware architecture","level":3,"score":0.3598000109195709},{"id":"https://openalex.org/C34165917","wikidata":"https://www.wikidata.org/wiki/Q188267","display_name":"Programming paradigm","level":2,"score":0.3490999937057495},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.32899999618530273},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.31540000438690186},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.31290000677108765},{"id":"https://openalex.org/C134277064","wikidata":"https://www.wikidata.org/wiki/Q878206","display_name":"Transactional memory","level":3,"score":0.3005000054836273},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.2964000105857849},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.29159998893737793},{"id":"https://openalex.org/C35869016","wikidata":"https://www.wikidata.org/wiki/Q846636","display_name":"Software architecture","level":3,"score":0.29100000858306885},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2896000146865845},{"id":"https://openalex.org/C76518257","wikidata":"https://www.wikidata.org/wiki/Q271680","display_name":"Software framework","level":5,"score":0.28949999809265137},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.28780001401901245},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.2741999924182892},{"id":"https://openalex.org/C74912251","wikidata":"https://www.wikidata.org/wiki/Q6815727","display_name":"Memory footprint","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C201410400","wikidata":"https://www.wikidata.org/wiki/Q1064412","display_name":"Multithreading","level":3,"score":0.2678999900817871},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.2551000118255615},{"id":"https://openalex.org/C140006998","wikidata":"https://www.wikidata.org/wiki/Q2499307","display_name":"Dynamic program analysis","level":3,"score":0.25119999051094055}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.48456/tr-951","doi":"https://doi.org/10.48456/tr-951","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-951","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},{"id":"mag:3119047464","doi":null,"is_oa":false,"landing_page_url":"https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-951.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"doi:10.48456/tr-951","doi":"https://doi.org/10.48456/tr-951","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-951","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7213266460","https://openalex.org/W7213316036","https://openalex.org/W4388667448","https://openalex.org/W7214197657","https://openalex.org/W2499491173","https://openalex.org/W7213304200","https://openalex.org/W4388667356","https://openalex.org/W4388667216","https://openalex.org/W2978621079","https://openalex.org/W7099372218"],"abstract_inverted_index":{"This":[0,23,166],"technical":[1],"report":[2],"describes":[3],"CHERI":[4,11,42,140,201,241,364,432,434],"ISAv8,":[5],"the":[6,10,19,90,99,171,176,204,260,380],"eighth":[7],"version":[8],"of":[9,21,28,92,101,106,214,246,276,352,379,411],"architecture":[12],"being":[13],"developed":[14],"by":[15,82,170],"SRI":[16],"International":[17],"and":[18,35,39,66,78,95,109,120,137,159,178,216,230,237,255,262,284,323,332,335,346,355,385,400],"University":[20],"Cambridge.":[22],"design":[24],"captures":[25],"ten":[26],"years":[27],"research,":[29],"development,":[30],"experimentation,":[31],"refinement,":[32],"formal":[33,135],"analysis,":[34],"validation":[36],"through":[37],"hardware":[38],"software":[40,71,80,102,121,133,268,313,338],"implementation.":[41],"introduces":[43],"an":[44,147],"architecture-neutral":[45],"capability-based":[46],"protection":[47,77,247],"model,":[48,174],"which":[49],"has":[50],"been":[51],"instantiated":[52],"in":[53,98,155,225,300],"various":[54],"commodity":[55],"base":[56],"architectures":[57,195],"to":[58,72,88,162,185,242,258,286,360,370],"give":[59],"CHERI-MIPS,":[60],"CHERI-RISC-V,":[61,401],"Arm\u2019s":[62],"prototype":[63],"Morello":[64],"architecture,":[65],"(sketched)":[67],"CHERI-x86-64.":[68],"It":[69],"enables":[70],"efficiently":[73],"implement":[74],"fine-grained":[75,212],"memory":[76,127,145,161,292],"scalable":[79],"compartmentalization,":[81,134],"providing":[83,290],"strong,":[84],"non-probabilistic,":[85],"efficient":[86],"mechanisms":[87],"support":[89],"principles":[91],"least":[93],"privilege":[94],"intentional":[96],"use":[97,287],"execution":[100],"at":[103],"multiple":[104],"levels":[105],"abstraction,":[107],"preventing":[108],"mitigating":[110],"vulnerabilities.":[111],"Design":[112],"goals":[113],"include":[114,311],"incremental":[115,274],"adoptability":[116],"from":[117,249],"current":[118],"ISAs":[119],"stacks,":[122],"low":[123],"performance":[124,130,177],"overhead":[125],"for":[126,132,220,267,420],"protection,":[128,293],"significant":[129],"improvements":[131],"grounding,":[136],"programmer-friendly":[138],"underpinnings.":[139],"blends":[141],"traditional":[142],"paged":[143],"virtual":[144],"with":[146,438],"in-address-space":[148],"capability":[149,153,157,164,235],"model":[150],"that":[151,181,196,302],"includes":[152],"values":[154],"registers,":[156],"instructions,":[158],"tagged":[160],"enforce":[163],"integrity.":[165],"hybrid":[167,271],"approach,":[168],"inspired":[169],"Capsicum":[172],"security":[173],"addresses":[175],"robustness":[179],"issues":[180],"arise":[182],"when":[183],"trying":[184],"express":[186,243],"more":[187],"secure":[188],"programming":[189],"models,":[190],"minimising":[191],"privilege,":[192],"above":[193],"conventional":[194],"provide":[197],"only":[198,304],"MMU-based":[199],"protection.":[200],"builds":[202],"on":[203,430],"C-language":[205,252],"fat-pointer":[206],"literature:":[207],"its":[208],"capabilities":[209,288,399],"can":[210,217,281],"describe":[211],"regions":[213],"memory,":[215],"be":[218,282,295],"substituted":[219],"data":[221,229,342,362],"or":[222,294],"code":[223,358],"pointers":[224],"generated":[226],"code,":[227],"protecting":[228],"improving":[231],"control-flow":[232],"robustness.":[233],"Strong":[234],"integrity":[236],"monotonicity":[238],"properties":[239],"allow":[240],"a":[244,367,409,421,428],"variety":[245],"idioms,":[248],"enforcing":[250],"valid":[251],"pointer":[253],"provenance":[254],"bounds":[256],"checking":[257],"implementing":[259],"isolation":[261],"controlled":[263,305],"communication":[264],"structures":[265],"required":[266],"compartmentalization.":[269],"CHERI\u2019s":[270],"approach":[272],"allows":[273],"adoption":[275],"capability-oriented":[277],"design:":[278],"critical":[279],"components":[280],"ported":[283],"recompiled":[285],"throughout,":[289],"fine-grain":[291],"largely":[296],"unmodified":[297],"but":[298],"encapsulated":[299],"ways":[301],"permit":[303],"interaction.":[306],"Potential":[307],"early":[308],"deployment":[309],"scenarios":[310],"low-level":[312],"Trusted":[314],"Computing":[315],"Bases":[316],"(TCBs)":[317],"such":[318,328,340,396],"as":[319,329,341,397],"separation":[320],"kernels,":[321,325],"hypervisors,":[322],"operating-system":[324],"userspace":[326],"TCBs":[327],"language":[330],"runtimes":[331],"web":[333],"browsers,":[334],"particularly":[336],"high-risk":[337],"libraries":[339],"compression,":[343],"protocol":[344],"parsing,":[345],"image":[347],"processing":[348],"(which":[349],"are":[350,390,402],"concentrations":[351],"both":[353],"complex":[354],"historically":[356],"vulnerability-prone":[357],"exposed":[359],"untrustworthy":[361],"sources).":[363],"ISAv8":[365,435],"is":[366,376,436],"substantial":[368],"enhancement":[369],"prior":[371],"ISA":[372],"versions.":[373],"Capability":[374],"compression":[375],"now":[377,403],"part":[378],"abstract":[381],"model.":[382,424],"Both":[383],"32-bit":[384],"64-bit":[386],"architectural":[387],"address":[388],"sizes":[389],"supported.":[391],"Various":[392],"previously":[393],"experimental":[394],"features,":[395],"sentry":[398],"considered":[404],"mature.":[405],"We":[406,425],"have":[407,426],"defined":[408],"number":[410],"new":[412],"temporal":[413],"memory-safety":[414],"acceleration":[415],"features":[416],"including":[417],"MMU":[418],"assistance":[419],"load-side-barrier":[422],"revocation":[423],"added":[427],"chapter":[429],"practical":[431],"microarchitecture.":[433],"synchronized":[437],"Arm":[439],"Morello.":[440]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":5}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-09-16T00:00:00"}