176,021 research outputs found
Assessing Racism in Philadelphia, c. 1684 - c. 1850 through Protestants' Rejection and Roman Catholics' Acceptance of Black Burials / Celeste A. Morello, MS, MA.
No full textTowards Secure MicroPython on Morello (WIP)
No full textThe Arm Morello platform is a prototype system that supports hardware capabilities for improving runtime security. Although Morello is a server class compute component, there is ongoing work aimed at bringing architectural capabilities to embedded scale devices. For this reason, we are porting the MicroPython framework to Morello. Our intention is to understand the impact of hardware capabilities on lightweight runtime execution environments, like MicroPython, that target embedded devices. In this work-in-progress report, we describe the minimal modifications required to compile the C source code of MicroPython for Morello. We show that this approach gives a working, but not necessarily more secure, version of MicroPython. Our paper proceeds to outline how capabilities could be used to improve runtime system security for MicroPython runtime and hosted applications
Morello MicroPython: A Python Interpreter for CHERI
No full textArm Morello is a prototype system that supports CHERI hardware capabilities for improving runtime security. As Morello becomes more widely available, there is a growing effort to port open source code projects to this novel platform. Although high-level applications generally need minimal code refactoring for CHERI compatibility, low-level systems code bases require significant modification to comply with the stringent memory safety constraints that are dynamically enforced by Morello. In this paper, we describe our work on porting the MicroPython interpreter to Morello with the CheriBSD OS. Our key contribution is to present a set of generic lessons for adapting managed runtime execution environments to CHERI, including (1) a characterization of necessary source code changes, (2) an evaluation of runtime performance of the interpreter on Morello, and (3) a demonstration of pragmatic memory safety bug detection. Although MicroPython is a lightweight interpreter, mostly written in C, we believe that the changes we have implemented and the lessons we have learned are more widely applicable. To the best of our knowledge, this is the first published description of meaningful experience for scripting language runtime engineering with CHERI and Morello
Verified Security for the Morello Capability-enhanced Prototype Arm Architecture
No full textMemory safety bugs continue to be a major source of security vulnerabilities in our critical infrastructure. The CHERI project has proposed extending conventional architectures with hardware-supported capabilities to enable fine-grained memory protection and scalable compartmentalisation, allowing historically memory-unsafe C and C++ to be adapted to deterministically mitigate large classes of vulnerabilities, while requiring only minor changes to existing system software sources. Arm is currently designing and building Morello, a CHERI-enabled prototype architecture, processor, SoC, and board, extending the high-performance Neoverse N1, to enable industrial evaluation of CHERI and pave the way for potential mass-market adoption. However, for such a major new security-oriented architecture feature, it is important to establish high confidence that it does provide the intended protections, and that cannot be done with conventional engineering techniques.In this paper we put the Morello architecture on a solid mathematical footing from the outset. We define the fundamental security property that Morello aims to provide, reachable capability monotonicity, and prove that the architecture definition satisfies it. This proof is mechanised in Isabelle/HOL, and applies to a translation of the official Arm specification of the Morello instruction-set architecture (ISA) into Isabelle. The main challenge is handling the complexity and scale of a production architecture: 62,000 lines of specification, translated to 210,000 lines of Isabelle. We do so by factoring the proof via a narrow abstraction capturing essential properties of arbitrary CHERI ISAs, expressed above a monadic intra-instruction semantics. We also develop a model-based test generator, which generates instruction-sequence tests that give good specification coverage, used in early testing of the Morello implementation and in Morello QEMU development, and we use Arm’s internal test suite to validate our model.This gives us machine-checked mathematical proofs of whole-ISA security properties of a full-scale industry architecture, at design-time. To the best of our knowledge, this is the first demonstration that that is feasible, and it significantly increases confidence in Morello
Recommended from our members
The Arm Morello Evaluation Platform—Validating CHERI-Based Security in a High-Performance System
No full textMemory safety issues are a persistent source of security vulnerabilities, with conventional architectures and the C/C++ codebase chronically prone to exploitable errors. The Capability Hardware Enhanced RISC Instructions (CHERI) research project has explored a novel architectural approach to ameliorate such issues using unforgeable hardware capabilities to implement pointers. Morello is an Arm experimental platform for evaluation of CHERI in the Arm architecture context to explore its potential for mass-market adoption. This article describes the Morello Evaluation Platform, covering the motivation and functionality of the Morello architectural hardware extensions; their potential for fine-grained memory safety and software compartmentalization; formally proven security properties; impact on the microarchitecture of the high-performance, out-of-order multiprocessor Arm Morello processor; and the software-enablement program by Arm, the University of Cambridge, and Linaro. Together, this allows a wide range of researchers in both industry and academia to explore and assess the Morello platform
21st Century Milan: using new image processing techniques to assess the environmental quality of the Milan Trade Fair masterplan
No full text
Signaling Pathways in Inflammation and Its Resolution: New Insights and Therapeutic Challenges
No full text: Tissue inflammation is a dynamic process that develops step by step, in response to an injury, to preserve tissue integrity [...]
Análisis descriptivo del proceso de desmonte y habilitación de tierras en el Chaco Argentina
No full textLa República Argentina, aún con las discontinuidades institucionales y altibajos de un país en vías de desarrollo, ha logrado crear y mantener estructuras institucionales reguladoras del patrimonio ambiental a todos los niveles de la administración pública (Morello y Rodríguez, 2007). Hacia fines del siglo xx, los eventos vinculados con el ambiente más relevante a nivel nacional y regional habían sido: a) la creación, entre 1950 y 1975 de grupos de trabajo en ambiente acuático y terrestre auspiciados y financiados por CONICET, INTA y las Univ. Nacionales; b) El creciente interés en el Gran Buenos Aires monitoreo de la contaminación aérea en áreas industriales (partidos Avellaneda, Lanús, Quilmes, La Matanza); c) la elaboración de propuestas de desarrollo sostenible en zonas áridas elaborados por grupos técnico-científicos del INTA y por lo menos 4 universidades: Bahía Blanca, La Pampa, Comahue y Cuyo; d) manejo de sobrepastoreo e incendios en ambiente serrano, Univ. de Córdoba, Univ. de Santiago del Estero; e) análisis de ambiente humano (Fundación Bariloche y desde 1972 la Secretaria de Ambiente y Desarrollo Sustentable (en adelante SAyDS); f) climatología ambiental (SMN, INTA, SAyDS, UBA); g) degradación de ambientes de bosques nativos (Univ. de Córdoba, UNLP, Univ. Misiones, Univ. Tucumán, Instituto Forestal Nacional); h) ambientes agroproductivos y agroecología (UNCO, UBA, Univ. de Cuyo y fundamentalmente INTA); i) ambiente urbano (UNNE, FADU-UBA, Univ. Rosario); j) ambiente de pastizales y arbustales (UBA, Univ. Río Cuarto, INTA, Univ. de Córdoba, Univ. de La Pampa, Univ. de Bahía Blanca); k) ambientes protegidos para conservación de la biodiversidad APN, INTA, SAyDS, Univ. de Cuyo, gobiernos provinciales en especial Santiago del Estero, San Juan y Chubut; l) ambientes de bosque nativo y plantaciones de exóticas (Univ. Comahue, APN); m) restauración de ambientes naturales y seminaturales (APN, UNLP, Univ. de Comahue, Univ. de Córdoba, Univ. Cuyo; Univ. de Tucumán); n) ordenamiento territorial y planificación ambiental, (UNNE, UBA, Univ. de Tucumán); o) estudio y control de procesos erosivos periurbanos y rurales (INTA, APN, UBA, Univ. de Bahía Blanca)...Fil: Morello, Jorge Helios. Consejo Nacional de Investigaciones Científicas y Técnicas. Oficina de Coordinación Administrativa Ciudad Universitaria; Argentina. Universidad de Buenos Aires. Facultad de Arquitectura y Urbanismo. Grupo de Ecología del Paisaje y Medio Ambiente; ArgentinaFil: Rodriguez, Andrea Fernanda. Universidad de Buenos Aires. Facultad de Arquitectura y Urbanismo. Grupo de Ecología del Paisaje y Medio Ambiente; ArgentinaFil: Pengue, Walter Alberto. Consejo Nacional de Investigaciones Científicas y Técnicas. Oficina de Coordinación Administrativa Ciudad Universitaria; Argentina. Universidad de Buenos Aires. Facultad de Arquitectura y Urbanismo. Grupo de Ecología del Paisaje y Medio Ambiente; Argentina. Universidad Nacional de General Sarmiento; Argentin
- …
