CHERI C Converter
CHERI C Converter
批准号:
10068075
负责人:
金额:
$6.37万
依托单位:
依托单位国家:
英国
项目类别:
Collaborative R&D
财政年份:
2023
资助国家:
英国
项目状态:
已结题
起止时间:
2023 至 --
中文摘要
70%的操作系统漏洞是由于内存安全问题_(Microsoft_2019)_,因为流行的50年前的编程语言C/C++提供低级内存访问。加上指针等功能,会增加错误导致漏洞/漏洞的风险,从而导致网络攻击(_Google Blog__2021)。_一半的内存安全问题是_在释放_Bugs之后使用(_Google‘s__Chromium,2022)。_代码重用的遗产意味着许多主要的操作系统/应用程序都使用这些语言。通过引入_内存保护和_分区设计数字安全(DSbD)技术来解决上述挑战_(美国国家安全局(NSA),2022)_比较网站和市场ProtectBox(使用人工智能)快速而智能地在线评估买家的网络安全风险头寸,然后让买家使用个性化、折扣的解决方案捆绑包来改善它,这些解决方案适合他们的办公室/家庭。此外,可持续发展评级和抵消/消除碳影响购买的安全不仅仅是植树。语音识别、与盲文的兼容性、助听器、Alexa等将于2023年4月开始添加到Next(包含创新)拨款中,这提供了一个机会,使ProtectBox的决策AI/ML(围绕神经网络构建的知识表示和推理(KRR)系统)能够将旧的C代码转换为Cheri C代码,而开发人员几乎不需要直接手动修改代码。社会影响包括碳节约(通过将全球温室气体排放量减半,节省英国GDP/年_(埃森哲/微软)_);软件提供商转向NetZero的途径,实现政府目标(英国政府的国家人工智能战略和政府创新战略(支柱4);COVID恢复战略和绿色工业革命的十点计划;欧盟地平线挑战;英国产业战略挑战基金(ISCF)的挑战和5个联合国可持续发展目标(SDGs)),并为客户增加了(88%_(影响报告2021年)_)商机/收入。12项奖项获得者,包括2022年小微企业;2020年S网络安全最佳人工智能;2022年-2018年S入围英国科技界最具影响力女性名单和2017年有线安全初创企业展示。入围40多项其他奖项,包括著名的地球射击奖提名(由威尔士亲王和王妃发起),并被选为英国政府气候变化领袖和气候承诺/联合国零技术竞赛、TechZero工作组和英国政府中小企业气候承诺的成员。作为北爱尔兰国际贸易部CPTPP和英国-印度自由贸易协定(FTA)谈判的案例研究。
英文摘要
70% of operating system vulnerabilities are due to memory safety issues _(Microsoft_ _2019)_ because the popular 50-year old programming languages C/C++ offer low-level memory access. Plus features such as pointers, increase risk of mistakes causing bugs/vulnerabilities, resulting in cyberattack (_Google Blog_ _2021)._ Half of memory safety issues are _use-after-free_ bugs (_Google's_ _Chromium,2022)._ Legacy of code reuse means that many major operating systems/applications are in these languages.By introducing _memory protection_ and _compartmentalisation_ Digital Security by Design (DSbD) technologies address the above challenges _(US National Security Agency (NSA), 2022)_Comparison website and marketplace ProtectBox quickly and smartly (using AI) assesses a buyer's cybersecurity risk position online then lets the buyer improve it, using personalised, discounted bundles of solutions risk-fitted to their office/home. Along with sustainability ratings and offsetting/removing carbon impact of security purchased that go beyond just treeplanting. Voice recognition, compatibility with Braille, hearing aids, Alexa etc being added in next (Inclusive Innovation) Grant starting in April 2023.Presenting an opportunity to adapt ProtectBox's decision-making AI/ML (a Knowledge Representation & Reasoning (KRR) system built around neural networks) to convert legacy C code to CHERI C with little to no manual modifications directly to the code by the developer. Catching Morello-specific exceptions a normal C-compiler wouldn't be able to get, making our AI/ML more trustworthy.Societal impacts include carbon savings (by halving 3.7% of global GHG emissions, saving 1% of UK GDP/year _(Accenture/Microsoft)_); route to NetZero for software providers, achieving government targets (UK government's National AI Strategy & Government Innovation Strategy (Pillar 4); COVID Recovery Strategy and Ten Point Plan for a Green Industrial Revolution; EU Horizon challenges; UK's Industrial Strategy Challenge Fund (ISCF) challenges and 5 UN Sustainable Development Goals (SDGs)) and increased (88% _(Impact Reporting 2021)_) business opportunities/revenues for clients.Winner of 12 Awards, incl SmallBiz100 2022; CogX 2020's Best AI in Cybersecurity; 2022-2018's Most Influential Women in UK Technology longlists & 2017 Wired Security's Start-Up showcase.Finalist in 40+ other Awards including a nomination for the prestigious Earthshot Prize (launched by the Prince and Princess of Wales) and picked as a UK government \#TogetherForOurPlanet Business Climate Leader and members of The Climate Pledge/UN's Race to Zero, TechZero taskforce and UK government's SME Climate Commitment. Showcased as Northern Ireland case study for the Department for International Trade's CPTPP and UK-India Free Trade Agreement (FTA) negotiations.
期刊论文(0)
专著(0)
科研奖励(0)
会议论文
海外基金