Products

The SCI ICENI family represents a worlds-first design paradigm - inherently Memory Safe devices designed for the rigours of modern code design and ferocious code reuse. 

Based on the Microsoft RV32E CHERIoT-Ibex processor the ICENI family have been design for high-performance 32-bit embedded applications, with an architecture that supports efficient fine-grained hardware enforced compartmentalisation with safe object-granularity sharing. This delivers complete spatial and temporal memory-safety guarantees that the hardware enforces. 

This combination enables fearless code reuse by tightly restraining the blast radium of attacks, even in third-party code and without requiring complete rewrites. This also ensures that regulations, such as EU product liability directives, become easier to comply with when most of the reused code can be removed from the end product’s attack surface. 

Memory safety is the most pernicious of attack vectors, with over 70% of modern CVEs being based on software memory misallocation, buffer over flows, and other memory safety issues. These issues are often difficult to identify, even with advanced tools, and they are inherently part of the programming flow, and simple errors can have catastrophic effects. Modern development languages such as Rust & Swift attempt to mitigate these concerns, but again cannot impact the vast swathes of existing code bases. 

 The CHERI architectural extensions, embodies in the low-power deterministic CHERIoT core at the heart of ICENI family set clear guardrails  and excepts on memory allocation , esnuring code can only operate in specific bounds set by the calling function, limiting misconfiguration and programmatic errors. In addition, the compartmentalisation of the memory space and  code has the effect of setting clear, enforceable isolation with fine grained permissions and data sharing, resolving a clear calling chain for program flow., inhibiting vulnerability escalation.