CHERI Alliance

A big "thank you" to all of you who helped in our mission of accelerating adoption of #CHERI - we made great progress this year and next year will be even more exciting! As they say... every little helps! From just sharing a post to getting involved in a working group, you choose how you want to help create a more secure World!

‘Cybersecurity by Design – from Research to Industry’ conference The following recorded sessions are available: Incentivising future security - Paul Waller - National Cyber Security Centre Digital Security by Design Challenge - Securing the future of computing - John Goodacre - Digital Security by Design (DSbD) CHERI Capability Hardware Enhanced RISC Instructions - Dr Robert Watson - University of Cambridge An Innovation Ecosystem to encourage Cybersecurity by Design? - Reid Derby - CyNam Collaborative engineering - Gavin Ferris - lowRISC CIC Launching the CHERI Alliance - Mike Eftimakis CHERI Standardisation - Prof. Simon Moore - University of Cambridge Porting Software to CHERI - Dr Graeme Jenkinson - Capabilities Limited CHERI Prototyping and Open Source - Gregory Chadwick - lowRISC CIC CHERI Software Ecosystem - Carl Shaw - Codasip 'Cybersecurity by design' Conference Closing Remarks - Gavin Ferris Visit our YouTube channel: https://lnkd.in/dsfHKWrf

On behalf of the Security WG, part of the SEMI Smart Mobility Global Automotive Advisory Council (GAAC), I would like to invite you to contribute to our survey looking at the strategic relevance of cybersecurity along the semiconductor value chain. Survey Link: https://lnkd.in/ea9p6Qcj Grateful to a number of colleagues and institutions who are already shaping our WG activities and are increasingly aligned with this agenda. Marius Ruhnau | Ana Bernardo | Laith Altimime | Pantelitsa M. | Lee Harrison | Konstantinos Papapanagiotou | Luca De Ambroggi | Thomas Heurung | Paul Jarvie | Nick S. | Andreas Aal | Marc Shanker | Richard Shaddick | Rob Potter | Mike Eftimakis | Georgios Papadakis | Charles Sturman | SEMI | Compound Semiconductor Applications (CSA) Catapult | AESIN | Computational Foundry, Swansea University | Siemens EDA (Siemens Digital Industries Software) | CENSUS | CHERI Alliance | Digital Security by Design (DSbD)

The recorded sessions from the ‘Cybersecurity by Design – from Research to Industry’ conference are now available at the CHERI Alliance YouTube channel: https://lnkd.in/dNceT-Qn

At the first CHERI Alliance conference, organised in partnership with CyNam and National Cyber Security Centre, we had a packed out event. Learn more in this report by Gavin Ferris. ‘Cybersecurity by Design – from Research to Industry’ — Conference Report https://lnkd.in/eyGmYQQG

Excerpt from the NCSC annual review: "Memory safety vulnerabilities, for example, are one of the most prevalent types of disclosed software vulnerabilities, and investing in ‘secure by design’ development could drastically reduce onerous patch management and incident response activities." This is where #CHERI can make a difference... and reduce patching costs https://lnkd.in/gS_meCuf

CHERITech24++ is a workshop providing a venue for technical discussion around CHERI infrastructure of all kinds, including hardware, software, verification, and others. Don't miss this! December 4th in Birmingham.

lowRISC is proud to be a founding member of the CHERI Alliance! BusinessWeekly has the latest about its formal launch and the other major partners joining to help tackle #cybersecurity threats at the hardware level: https://lnkd.in/eT3JQ9Bb

📆👏 La conférence C&ESAR by DGA - Direction générale de l'armement continue aujourd'hui ! N'oubliez pas de réserver vos billets, les places sont limitées !   Les participants exploreront les sujets suivants : - RETEX cyber en France : panorama de la menace cyberattaques et tendances criminelles, avec l'Unité nationale cyber de la Gendarmerie nationale • UNCyber - Un SI dans les règles de l’art SSI : une utopie ? avec Olivier M., ANSSI - Agence nationale de la sécurité des systèmes d'information - La CHERI Alliance, avec Mike Eftimakis, CHERI Alliance - Préparer et organiser un grand événement sportif sous l'angle cyber : l'ANSSI et les Jeux Olympiques de Paris 2024, avec Bertrand L., ANSSI - Agence nationale de la sécurité des systèmes d'information - Vers l'utilisation de la matrice DISARM comme levier pour sensibiliser et protéger les publics ciblés par des opérations de désinformation avec Jean-Philippe RIANT, DATASK, your AI & Data Task Force, Pôle d'excellence cyber, Ugo Peyre, DATASK, Pôle d'excellence cyber - Les élections de 2024 dans le collimateur : cybermenaces et opérations d'influence, avec Coline C. et Amaury-Jacques Garçon, Sekoia.io - MIFARE Classic : exposer la variante du nonce chiffré statique... et quelques portes dérobées matérielles, avec Philippe Teuwen, Quarkslab Animés par Gurvan Le Guernic, Frédéric Cuppens, Louis Rilling et Olivier Zendra Pour en savoir plus 👉 https://lnkd.in/dtZd2Yyc Rendez-vous à Rennes du 18 au 21 novembre pour l'European Cyber Week 2024 👉 Inscription ici 👉 https://lnkd.in/gAeZd2n #europeancyberweek #ecw #cybersecurity #cyberdefense #cybersecurite #cybereurope #europecyber #regionbretagne #rennes

Google and other global big-hitters have joined the Cambridge-steered CHERI Alliance CIC (Community Interest Company) on its official launch. The initiative is designed to combat cyber security threats at hardware level. Founding members include global commercial, research and open-source organisations and several UK universities and government entities. Among the extended membership, the body has welcomed Chevin Technology (UK), Critical Technologies (USA), the Defence Science and Technology Laboratory (Dstl, UK), Google (USA), Light Momentum Technology Corporation (Taiwan), National Cyber Security Centre (NCSC, a part of GCHQ, UK), Parvat Infotech Private Limited (India), SRI International (USA), TechWorks (UK), Trusted Computer Center of Excellence (USA), the University of Birmingham (UK), and the University of Glasgow (UK) as founding members. Founded to unite hardware security leaders and system developers, the CHERI Alliance aims to establish CHERI (Capability Hardware Enhanced RISC Instructions) as the new standard for memory safety and scalable software compartmentalisation. Previously announced founding members include Capabilities Limited, Codasip, CyNam, the FreeBSD Foundation, lowRISC CIC, OpenHW Group, SCI Semiconductor, Swansea University, and the University of Cambridge. “Expanding our membership signals growing recognition of CHERI's transformative potential,” said Dr. Robert Watson, Professor, University of Cambridge, Director of the CHERI Alliance, and Director of Capabilities Limited. “After more than a decade of development, it's rewarding to see the CHERI community grow as new members bring their innovation and commitment to the Alliance. We are now well-positioned to advance our mission of delivering scalable, hardware-based security solutions that address critical vulnerabilities.” Ben Laurie, Lead Security Researcher at Google, commented: “Google's interest in CHERI stems from our unwavering commitment to security and privacy. We recognise the potential of CHERI in significantly enhancing system security by mitigating common software vulnerabilities. CHERI offers fine-grained compartmentalisation, which isolates sensitive data into secure compartments, and deterministic memory safety. “In security-critical systems that handle sensitive information and personal data, such as those found in generative AI applications, CHERI helps protect against breaches and ensures robust protection against malicious attacks.” Full article – https://lnkd.in/eT3JQ9Bb