Follow the latest coverage, related explainers and connected technology stories.
David Chisnall explains how the CHERI architecture uses hardware capabilities to protect pointers and enforce memory bounds and permissions, providing spatial and temporal security for software written in C and C++ without extensive rewriting. The presentation connects this mechanism to the possibility of building precise isolation between system components while directly sharing data structures instead of relying entirely on traditional RPC mechanisms.