Hardware-based Security: Gimmick Or Game-Changer? - Mantas Stadnik
Channel: BSides Belfast
Date: 19/03/2024

Abstract:
Hardware-based security has been a high-profile discussion and research topic in recent years, notably with reference to the CHERI (“Capability Hardware Enhanced RISC Instruction Set”) technology which underpins the Digital Security by Design (DSbD) programme supported by the UK government in collaboration with ARM and the University of Cambridge.

Recent research from Microsoft estimates that 70% of all vulnerabilities in the past decade have been memory-safety bugs; the DSbD programme aims to protect against such memory-safety vulnerabilities using CHERI-enabled hardware and software components which support the enhanced instruction set.

This talk will begin by introducing CHERI concepts, use cases and protections, followed by a summary of the state of the Digital Security by Design programme. It will then examine several alternative technology trends which may be perceived as obviating the need for DSbD - and will evaluate the usefulness of the DSbD programme in the light of those trends.
• “Everything’s in the cloud anyway”
• “Just offload to DPU/SmartNIC instead”
• “Rust will solve my memory-safety issues”

Our conclusion is that while these trends are valuable in their own right and will provide security-related benefits, none of them is a replacement for the hardware-based protection provided by DSbD technologies. Rather, they should be seen as distinct and somewhat complementary trends which can combine with DSbD and CHERI to deliver a secure compute infrastructure for the future. 

Bio: 
Software Engineer, Pytillia
Mantas has worked in Pytilia since completing his Computer Science degree from Queen’s University Belfast in 2022.
Since joining Pytilia Mantas has developed and delivered various financial modelling applications, high performance trading systems and enriching unified software solutions for international clients.
In addition to system development, Mantas has taken on a key role in supporting, motivating and mentoring fellow junior team members.
With an active pursuit in exploring new technologies, Mantas aims to deliver a presentation which explores hardware based security technology which posses the ability to enrich the ever changing world of Cyber Security