2

CHERIoT: Rethinking security for low-cost embedded systems

 1 year ago
source link: https://www.microsoft.com/en-us/research/publication/cheriot-rethinking-security-for-low-cost-embedded-systems/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

CHERIoT: Rethinking security for low-cost embedded systems

MSR-TR-2023-6 | February 2023

Published by Microsoft

Small embedded cores have little area to spare for security features and yet must often run code written in unsafe languages and, increasingly, are exposed to the hostile Internet. CHERIoT  (Capability Hardware Extension to RISC-V for Internet of Things) builds on top of CHERI and RISC-V to provide an ISA and software model that lets software depend on object-granularity spatial memory safety, deterministic use-after-free protection, and lightweight compartmentalization exposed directly to the C/C++ language model. This can run existing embedded software components on a clean-slate RTOS that scales up to large numbers of isolated (yet securely communicating) compartments, even on systems with under 256 KiB of SRAM.

This technical report is accompanied by three open source releases:

The RTOS and software stack

The formal specification of the ISA

The reference implementation of the ISA


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK