CHERI C Converter
CHERI C Converter
批准号:
10068075
负责人:
金额:
$6.37万
依托单位:
依托单位国家:
英国
项目类别:
Collaborative R&D
财政年份:
2023
资助国家:
英国
项目状态:
已结题
起止时间:
2023 至 --
中文摘要
70%的操作系统漏洞是由于内存安全问题_(Microsoft_ _2019)_因为流行的50年前的编程语言C/C++提供低级内存访问。加上指针等功能,会增加错误导致错误/漏洞的风险,从而导致网络攻击(_Google博客__2021)。一半的内存安全问题是_use-after-free_ bugs(_Google的__Chromium,2022)。代码重用的传统意味着许多主要的操作系统/应用程序都采用这些语言。通过引入内存保护和分区化设计的数字安全(DSbD)技术,可以解决上述挑战。(美国国家安全局(NSA),2022)_比较网站和市场ProtectBox快速和智能(使用人工智能)在线评估买家的网络安全风险状况,然后让买家使用个性化的、折扣的解决方案包来改善它,这些解决方案包适合他们的办公室/家庭。沿着可持续性评级和抵消/消除碳影响的安全购买超越只是植树。语音识别,与盲文,助听器,Alexa等的兼容性将在2023年4月开始的下一个(包容性创新)补助金中增加。提供了一个机会,可以调整ProtectBox的决策AI/ML(围绕神经网络构建的知识表示和推理(KRR)系统),将传统C代码转换为CHERI C,而开发人员几乎没有直接对代码进行手动修改。捕获普通C编译器无法捕获的Morello特定异常,使我们的AI/ML更值得信赖。社会影响包括碳减排(将全球温室气体排放量减半3.7%,每年节省英国国内生产总值的1%_(埃森哲/微软)_);软件供应商实现NetZero,实现政府目标(英国政府的国家人工智能战略和政府创新战略(支柱4); COVID复苏战略和绿色工业革命十点计划;欧盟地平线挑战;英国工业战略挑战基金(ISCF)的挑战和5个联合国可持续发展目标(SDG)),并增加(88% _(Impact Reporting 2021)_)为客户带来商机/收入。12项大奖的赢家,包括SmallBiz 100 2022; CogX 2020网络安全最佳人工智能; 2022-2018年英国科技界最具影响力女性长名单和2017年Wired Security初创企业展示。在40多个其他奖项中入围,包括着名的Earthshot Prize提名(由威尔士亲王和王妃发起),并被选为英国政府\#TogetherForOurPlanet商业气候领导者和气候承诺/联合国零竞赛的成员,TechZero工作组和英国政府的中小企业气候承诺。作为国际贸易部CPTPP和英国-印度自由贸易协定(FTA)谈判的北方爱尔兰案例研究展示。
英文摘要
70% of operating system vulnerabilities are due to memory safety issues _(Microsoft_ _2019)_ because the popular 50-year old programming languages C/C++ offer low-level memory access. Plus features such as pointers, increase risk of mistakes causing bugs/vulnerabilities, resulting in cyberattack (_Google Blog_ _2021)._ Half of memory safety issues are _use-after-free_ bugs (_Google's_ _Chromium,2022)._ Legacy of code reuse means that many major operating systems/applications are in these languages.By introducing _memory protection_ and _compartmentalisation_ Digital Security by Design (DSbD) technologies address the above challenges _(US National Security Agency (NSA), 2022)_Comparison website and marketplace ProtectBox quickly and smartly (using AI) assesses a buyer's cybersecurity risk position online then lets the buyer improve it, using personalised, discounted bundles of solutions risk-fitted to their office/home. Along with sustainability ratings and offsetting/removing carbon impact of security purchased that go beyond just treeplanting. Voice recognition, compatibility with Braille, hearing aids, Alexa etc being added in next (Inclusive Innovation) Grant starting in April 2023.Presenting an opportunity to adapt ProtectBox's decision-making AI/ML (a Knowledge Representation & Reasoning (KRR) system built around neural networks) to convert legacy C code to CHERI C with little to no manual modifications directly to the code by the developer. Catching Morello-specific exceptions a normal C-compiler wouldn't be able to get, making our AI/ML more trustworthy.Societal impacts include carbon savings (by halving 3.7% of global GHG emissions, saving 1% of UK GDP/year _(Accenture/Microsoft)_); route to NetZero for software providers, achieving government targets (UK government's National AI Strategy & Government Innovation Strategy (Pillar 4); COVID Recovery Strategy and Ten Point Plan for a Green Industrial Revolution; EU Horizon challenges; UK's Industrial Strategy Challenge Fund (ISCF) challenges and 5 UN Sustainable Development Goals (SDGs)) and increased (88% _(Impact Reporting 2021)_) business opportunities/revenues for clients.Winner of 12 Awards, incl SmallBiz100 2022; CogX 2020's Best AI in Cybersecurity; 2022-2018's Most Influential Women in UK Technology longlists & 2017 Wired Security's Start-Up showcase.Finalist in 40+ other Awards including a nomination for the prestigious Earthshot Prize (launched by the Prince and Princess of Wales) and picked as a UK government \#TogetherForOurPlanet Business Climate Leader and members of The Climate Pledge/UN's Race to Zero, TechZero taskforce and UK government's SME Climate Commitment. Showcased as Northern Ireland case study for the Department for International Trade's CPTPP and UK-India Free Trade Agreement (FTA) negotiations.
期刊论文(0)
专著(0)
科研奖励(0)
会议论文
海外基金