Rack-Scale Capabilities: Fine-Grained Protection for Large-Scale Memories

Rack-scale systems with large, shared, disaggregated, and persistent memory need solid protection and authorization techniques. Our solution uses a memoryside capability enforcement processor that gates memory accesses through extended capabilities, enables finegrained access control beyond a single address space, and minimally disrupts the programming model.