Noah Mauthe, Eric Ackermann, and Sven Bugiel, CISPA Helmholtz Center for Information Security
Capability operating systems have existed for six decades, yet we do not have a systematic way to compare them and their different design aspects. We even lack a consensus on the purpose of capabilities in these systems. Given the recent resurgence of interest in capability systems in different domains, we provide a definition of such systems and a set of characteristics to describe and distinguish them. Applying our characteristics to seminal capability systems, we then provide a taxonomy of fundamental design approaches that emerged over the last sixty years. Our results lead us to discuss further research in this field and highlight open challenges in creating pure object-capability systems.
USENIX Security '26 Open Access Sponsored by
King Abdullah University of Science and Technology (KAUST)
Open Access Media
USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.
author = {Noah Mauthe and Eric Ackermann and Sven Bugiel},
title = {{SoK}: Capability Operating Systems: Is the Future Finally Here?},
booktitle = {35th USENIX Security Symposium (USENIX Security 26)},
year = {2026},
isbn = {978-1-939133-58-8},
address = {Baltimore, MD},
pages = {3715--3734},
url = {https://www.usenix.org/conference/usenixsecurity26/presentation/mauthe},
publisher = {USENIX Association},
month = aug
}
