Research / EuroS&P 2026

Tyche

Composable Isolation as a Foundation to Manage Trust in the Cloud

Tyche is a Rust security monitor that makes composable isolation a first-class cloud abstraction. It uses capabilities to control access to machine resources, allowing mutually distrustful components to build nested, attestable isolation boundaries.

The prototype runs on commodity x86 hardware, with a RISC-V prototype demonstrating portability.

Read the EuroS&P 2026 publication Read the author PDF EuroS&P 2026 slides

The earlier position paper, Creating Trust by Abolishing Hierarchies, appeared at HotOS 2023. Download that PDF.

A future hands-on playground

An interactive capabilities terminal could live on this page, loaded only when a visitor chooses to launch it.

The interactive demo is not available yet. The planned integration is a browser terminal connected to a separate service running a fresh capabilities CLI session per visitor, with reset and crash recovery.