Figure 2 - uploaded by Jonathan S. Shapiro
Content may be subject to copyright.
Network stack with ethernet driver, protocol stack, and application in separated protection domains.
Source publication
Objective of EROS-Based Confined Capability Client Project is to demonstrate that systems constructed using capability-based protection can be organized in a way that makes it defensible from hostile internet content. This was accomplished by constructing of a single exemplar application, a web browser using capability-based structuring techniques,...
Context in source publication
Context 1
... achieve separation of concerns, we chose to implement our own low-level network driver. This allowed us to establish a multi-level defensible network stack (Figure 2). In the long term it should be possible to build an encapsulation environment for Linux ethernet drivers in general, as has been done in OSKit ...
