EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 13·5 min read
Adopting Memory-Safety and Fine-Grained Compartmentalisation with CHERI
TL;DR
CHERI introduces a novel approach to memory safety and compartmentalization by utilizing capability-based security, enabling secure communication between workloads. This framework allows for incremental adoption in existing systems without requiring complete rewrites of software.
✦ Why It Matters
Consider adopting CHERI principles to enhance security in your existing software without complete rewrites.
Key Takeaways
- Explore CHERI for improved memory safety in your applications.
- Utilize capabilities to enforce strict access controls on pointers.
- Adopt CHERI incrementally to maintain compatibility with existing binaries.
- Consider CHERI's integration into RISC-V for future-proofing your systems.
How It Works
CHERI treats pointers as capabilities that include bounds and permissions, preventing unauthorized access and ensuring that pointers cannot be created from arbitrary values. This mechanism allows for hardware-enforced memory safety, where any attempt to dereference an invalid pointer results in a trap, thus protecting against common vulnerabilities.