CHERI C Converter

奇瑞C转换器

• 批准号: 10068075
• 金额: $ 6.37万
• 依托单位: PROTECTBOX LTD
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10068075
• 关键词: CHERI; Converter

70% of operating system vulnerabilities are due to memory safety issues _(Microsoft_ _2019)_ because the popular 50-year old programming languages C/C++ offer low-level memory access. Plus features such as pointers, increase risk of mistakes causing bugs/vulnerabilities, resulting in cyberattack (_Google Blog_ _2021)._ Half of memory safety issues are _use-after-free_ bugs (_Google's_ _Chromium,2022)._ Legacy of code reuse means that many major operating systems/applications are in these languages.By introducing _memory protection_ and _compartmentalisation_ Digital Security by Design (DSbD) technologies address the above challenges _(US National Security Agency (NSA), 2022)_Comparison website and marketplace ProtectBox quickly and smartly (using AI) assesses a buyer's cybersecurity risk position online then lets the buyer improve it, using personalised, discounted bundles of solutions risk-fitted to their office/home. Along with sustainability ratings and offsetting/removing carbon impact of security purchased that go beyond just treeplanting. Voice recognition, compatibility with Braille, hearing aids, Alexa etc being added in next (Inclusive Innovation) Grant starting in April 2023.Presenting an opportunity to adapt ProtectBox's decision-making AI/ML (a Knowledge Representation & Reasoning (KRR) system built around neural networks) to convert legacy C code to CHERI C with little to no manual modifications directly to the code by the developer. Catching Morello-specific exceptions a normal C-compiler wouldn't be able to get, making our AI/ML more trustworthy.Societal impacts include carbon savings (by halving 3.7% of global GHG emissions, saving 1% of UK GDP/year _(Accenture/Microsoft)_); route to NetZero for software providers, achieving government targets (UK government's National AI Strategy & Government Innovation Strategy (Pillar 4); COVID Recovery Strategy and Ten Point Plan for a Green Industrial Revolution; EU Horizon challenges; UK's Industrial Strategy Challenge Fund (ISCF) challenges and 5 UN Sustainable Development Goals (SDGs)) and increased (88% _(Impact Reporting 2021)_) business opportunities/revenues for clients.Winner of 12 Awards, incl SmallBiz100 2022; CogX 2020's Best AI in Cybersecurity; 2022-2018's Most Influential Women in UK Technology longlists & 2017 Wired Security's Start-Up showcase.Finalist in 40+ other Awards including a nomination for the prestigious Earthshot Prize (launched by the Prince and Princess of Wales) and picked as a UK government \#TogetherForOurPlanet Business Climate Leader and members of The Climate Pledge/UN's Race to Zero, TechZero taskforce and UK government's SME Climate Commitment. Showcased as Northern Ireland case study for the Department for International Trade's CPTPP and UK-India Free Trade Agreement (FTA) negotiations.

70% 的操作系统漏洞是由于内存安全问题_(Microsoft_ _2019)_，因为流行的 50 年历史的编程语言 C/C++ 提供低级内存访问。再加上指针等功能，会增加导致错误/漏洞的错误风险，从而导致网络攻击（_Google 博客_ _2021）。_ 一半的内存安全问题是_use-after-free_ bug（_Google's_ _Chromium，2022）。_ 代码重用的遗留意味着许多主要操作系统/应用程序都使用这些语言。通过引入_内存保护_ 和 _compartmentalization_数字安全设计（DSbD）技术解决了上述挑战_（美国国家安全局（NSA），2022）_比较网站和市场 ProtectBox 快速而智能地（使用人工智能）在线评估买家的网络安全风险状况，然后让买家使用适合其办公室/家庭风险的个性化、折扣解决方案包来改进它。除了可持续性评级和抵消/消除购买的证券的碳影响之外，不仅仅是植树。语音识别、与盲文、助听器、Alexa 的兼容性将于 2023 年 4 月开始的下一个（包容性创新）拨款中添加。提供了一个机会来调整 ProtectBox 的决策 AI/ML（围绕神经网络构建的知识表示和推理 (KRR) 系统），将传统 C 代码转换为 CHERI C，而开发人员几乎不需要直接对代码进行手动修改。捕获普通 C 编译器无法捕获的 Morello 特定异常，使我们的 AI/ML 更值得信赖。社会影响包括碳节约（通过将全球温室气体排放量减半 3.7%，每年节省英国 GDP 的 1%_（埃森哲/微软）_）；软件提供商转向 NetZero 的途径，实现政府目标（英国政府的国家人工智能战略和政府创新战略（支柱 4）；新冠病毒复苏战略和绿色工业革命十点计划；欧盟地平线挑战；英国工业战略挑战基金 (ISCF) 挑战和 5 个联合国可持续发展目标 (SDG)）并增加 (88%_(2021 年影响报告)_) 商业机会/收入 客户。荣获 12 项奖项，包括 SmallBiz100 2022； CogX 2020 年网络安全最佳人工智能；入围 2022-2018 年英国科技领域最具影响力女性入围名单和 2017 年 Wired Security 初创企业展示会。入围 40 多个其他奖项，包括著名的 Earthshot 奖（由威尔士亲王和王妃发起）提名，并被选为英国政府“#TogetherForOurPlanet”商业气候领袖以及气候承诺/联合国向零竞赛、TechZero 工作组和英国政府中小企业的成员 气候承诺。作为国际贸易部 CPTPP 和英国-印度自由贸易协定 (FTA) 谈判的北爱尔兰案例研究。