Okapi: Efficient Hardware-Assisted Sandboxing to Mitigate Transient Execution Side-Channel Attacks

Okapi is a novel hardware-software architecture that efficiently enforces sandboxing for speculative execution, providing protection against Transient Execution Side-Channel (TES) attacks, including Spectre variants, in modern computing systems.