CHERI: A Hybrid Capability-System Architecture for Scalable Software Compartmentalization
Preventing Privilege Escalation