[LINK] The CheriBSD operating system

[Stephen Loosley]

FreeBSD Foundation hands out Beacon gongs for safer software

Multiple CHERI-related projects win money for important research that prizes safety over speed

By Liam Proven  Tue 26 Mar 2024 https://www.theregister.com/2024/03/26/beacon_awards_freebsd/


The inaugural Beacon Awards has handed three prizes to projects working on safer software for CHERI-enabled hardware running on the CheriBSD operating system.

For the uninitiated, CHERI is an abbreviation of Capability Hardware Enhanced RISC Instructions.

The Beacon Awards is a fresh scheme from the FreeBSD Foundation, in partnership with the UK government's Digital Security by Design initiative, to reward efforts at safer software.

The Digital Security by Design initiative has been around for some six years now, and it funds multiple projects in the broader security R&D field.

The Register reported on Arm jumping on board in early 2019. It worked: It was awarded £36 million ($45.43 million) at the gongs last week. Naturally, there were talks about much more money… but it's good to know that some real technological developments have come out of this.

We've been reporting on the FreeBSD project's involvement for some years now.

One notable achievement was getting the whole KDE stack running, as we covered in 2022, including a recap of the CHERI architecture. CHERI started at the University of Cambridge and there are versions for multiple architectures, including Arm's Morello program.

One grand prize went to the Mojo JVM. This is a memory-secure Java runtime that "can run existing Java applications with no or minimal code changes," according to the awards page.

Java isn't trendy any more and applets in web pages disappeared years ago, but it remains very significant in internal business-process apps in many large companies. Its development is sponsored by The Hut Group, an etailer which occasionally pops up on the Register. The team has a 17-minute Youtube video explaining how CHERI can bring greater memory-safety to the OpenJDK JVM.

Another grand prize went to Intravisor, a new form of virtualization host for cloud software, which can run various kinds of VMs with greater isolation on CHERI-enabled hardware. This includes its own lightweight ones and unmodified Linux environments.

There's more info on the GitHub page, and there was a talk about Intravisor at the 2022 FOSDEM conference.

The third grand prize went to the appropriately named Capabilities Limited for its work refactoring 1.7 million lines of existing C++ web services software to CheriBSD on Morello.