Experimental Methodology
Xok vs. OpenBSD and FreeBSD:
- Xok uses OpenBSD device drivers
- Shares large code base (libc, most apps)
Main experimental caveat:
- Some structures aren’t fully protected
- Estimate cost of full protection by performing all checks and adding 3 extra system calls per reference