GSoC'22: Shadow Stack This third blog post presents the efforts that were made in the direction of testing and perfecting complex apps (such as SQLite, redis and nginx) on AArch64 using gcc, clang and gcc-12 as compilers.

GSoC'22: Shadow Stack While the previous blog post described the first steps took into the direction of familiarizing myself with Unikraft and an initial attempt to using clang's ShadowCallStack, in this post, we will take a look into some implementations that were tried in the meantime.

GSoC'22: Shadow Stack Objectives While Unikraft provides great security advantages through strong cross-application isolation, traditional means of securing one’s application shouldn’t be overlooked. Following this idea, we introduce the Shadow Stack, a project which aims to adapt LLVM’s / clang’s Shadow Call Stack to Unikraft’s needs, focusing on the AArch64 architecture.