Testing next-gen cybersecurity technologies from the University of Cambridge and Arm

The UK authority on advanced digital technology, Digital Catapult, has given 10 companies the opportunity to trial and experiment with potentially game-changing prototype cybersecurity technology through its Digital Security by Design Technology Access Programme.

It is estimated that if implemented, this technology could help stop around two thirds of hacks, cyber attacks and data breaches. The new technology has been co-developed by University of Cambridge researchers (with colleagues at SRI International) in collaboration with Arm.

The Cambridge-SRI research team has redesigned the architecture of a computer’s central processing unit – its brain – to make it less vulnerable to security breaches. This new architecture is called CHERI.

Arm has been collaborating with the Cambridge researchers to integrate CHERI into the Arm architecture since 2014 and has this year launched a prototype system on chip and demonstrator board, containing the prototype architecture, known as Morello. These Morello boards are now being made available to industry for testing.

The Technology Access Programme is part of Digital Security by Design: an initiative supported by the UK government to transform digital technology and create a more resilient, and secure foundation for a safer future. Digital Security by Design is supported by a consortium of world-leading technology industry partners, academics and research institutions, including Arm, University of Cambridge, Google, Thales, University of Edinburgh, Hewlett Packard, University of Oxford, Innovate UK, Microsoft, University of Manchester, Linaro, King's College London and the National Cyber Security Centre (NCSC).

For six months participating companies will have access to the CHERI-enabled Morello prototype board, technical guides and support. The chosen UK-based companies can test and evaluate these technologies within their own businesses and provide findings back to the programme that could influence the design of future, more secure computer systems.

These companies will have access to the technologies as well as up to £15,000 in funding to support their experimentation period.

Participating companies – based right across the UK, from Oldbury to Belfast - include:

DataCore Software UK Surrey

A pioneer in storage virtualisation, DataCore Software delivers the industry’s most flexible, intelligent, and powerful software-defined storage solutions for block, file and object storage - helping more than 10,000 customers worldwide modernise how they store, protect, and access data.

Ioetec Derbyshire

Ioetec has developed a full stack software solution to secure Internet of Things (IoT) devices. This ensures that the data collected from sensors is secure in transit through to the user where it is consumed. Ioetec will use the Morello hardware as a gateway solution for IoT.

Inventia Preston

Based in Sci-Tech Daresbury, Inventia UK is a technology and innovation company providing end-to-end solutions for the telecoms and the IoT sectors. Inventia will develop a server backend using the Morello board for SIM-based localisation services for mobile operators.

RealVNC Cambridge

The original developer and provider of VNC remote access and control software. RealVNC will be porting their Virtual Networking Computing (VNC) solutions to the Morello board.

Riskoa Preston

Riskoa provides digital solutions for water management, assessment, and remote monitoring. Riskoa will be porting existing software for water monitoring sensors to the Morello board.

SensorIT London

SensorIT is a technology provider within the Internet of Things (IoT) sphere that develops prototypes and technologies applicable to a range of different sectors. SensorIT is planning to test the Morello board with its Bicycle Safety Device.

Prof. John Goodacre, Challenge Director, Digital Security by Design, UK Research and Innovation, said: “Digital Security by Design will radically update the foundation of the insecure digital computing infrastructure by creating a new, more secure hardware and software ecosystem. The breadth of companies taking part in this technology access programme is a key step in building a security-first mindset amongst industry.”

Jeremy Silver, CEO of Digital Catapult, said: “Digital Catapult’s unique combination of technology, industry, and innovation expertise puts us in an excellent position to help tackle new market challenges associated with advanced technology adoption.

“Our Technology Access Programme’s first cohort will see 10 businesses get hands on with ground breaking cybersecurity tools from industry leaders - allowing them to build their organisational resilience and provide invaluable feedback to shape the security landscape of the future.”

Roger Singleton, CEO Riskoa, said: “The delivery of clean water is a critical infrastructure, which needs to be secure. Both from a data-protection sense, and a sensor perspective. Ensuring that the systems that monitor water and its levels of chlorine, turbidity, acidity, and pressure, are dependable.

“Participating in the Technology Access Programme allows us to test if this technology works with our current systems, enhance the security of safe water, and differentiate ourselves in a crowded market.”