Watson, RNM;
Neumann, PG;
Woodruff, J;
Anderson, J;
Anderson, R;
Dave, N;
Laurie, B;
... Saidi, H; + view all
(2012)
CHERI: a research platform deconflating hardware virtualisation and protection.
In: McIlroy, R and Singer, J, (eds.)
(Proceedings) RESoLVE 2012 (Runtime Environments, Systems, Layering and Virtualized Environments) Workshop, 3 March 2012, London, UK.
Preview |
Text
2012resolve-cheri.pdf - Published Version Download (228kB) | Preview |
Abstract
Contemporary CPU architectures conflate virtualization and protection, imposing virtualization-related performance, programmability, and debuggability penalties on software requiring finegrained protection. First observed in micro-kernel research, these problems are increasingly apparent in recent attempts to mitigate software vulnerabilities through application compartmentalisation. Capability Hardware Enhanced RISC Instructions (CHERI) extend RISC ISAs to support greater software compartmentalisation. CHERI’s hybrid capability model provides fine-grained compartmentalisation within address spaces while maintaining software backward compatibility, which will allow the incremental deployment of fine-grained compartmentalisation in both our most trusted and least trustworthy C-language software stacks. We have implemented a 64-bit MIPS research soft core, BERI, as well as a capability coprocessor, and begun adapting commodity software packages (FreeBSD and Chromium) to execute on the platform.
| Type: | Proceedings paper |
|---|---|
| Title: | CHERI: a research platform deconflating hardware virtualisation and protection |
| Event: | RESoLVE 2012 (Runtime Environments, Systems, Layering and Virtualized Environments) Workshop, 3 March 2012, London, UK |
| Location: | London, UK |
| Dates: | 03 March 2012 |
| Open access status: | An open access version is available from UCL Discovery |
| Publisher version: | http://www.dcs.gla.ac.uk/conferences/resolve12/ |
| Language: | English |
| Additional information: | For information on re-use, please refer to the terms and conditions on the workshop website. |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
| URI: | https://discovery.ucl.ac.uk/id/eprint/1476976 |
Archive Staff Only
 |
View Item |
