一句话：提出 Enclosure，用语言机制限制不可信库，防止公共库引入未审查代码带来的安全风险。
现代软件大量依赖公共库来构建，但语言与系统未能解决这种依赖带来的安全影响：库仓库允许发布、导入和使用库，同时也可能把大量未知、未检查、未验证的代码带入应用，恶意行为者已多次向流行开源库注入恶意软件。论文提出 Enclosure，一种基于语言的不可信库限制方案，旨在从语言层面约束库代码的行为与权限，而非仅依赖仓库审查或人工检查。摘要主要陈述问题动机，未给出具体实现细节、形式化规则或实验评估数据；其核心主张是把库使用带来的安全风险作为语言设计问题来处理。
Programming languages and systems have failed to address the security implications of the increasingly frequent use of public libraries to construct modern software. Most languages provide tools and online repositories to publish, import, and use libraries; however, this double-edged sword can incorporate a large quantity of unknown, unchecked, and unverified code into an application. The risk is real, as demonstrated by malevolent actors who have repeatedly inserted malware into popular open-source libraries.
@inproceedings{paperbot6153,
title = {Enclosure: language-based restriction of untrusted libraries},
author = {Adrien Ghosn and Marios Kogias and Mathias Payer and James R. Larus and Edouard Bugnion},
booktitle = {ASPLOS},
year = {2021},
doi = {10.1145/3445814.3446728}
}