U prezantua versioni p\u00ebrfundimtar i specifikimit t\u00eb platform\u00ebs softuerike-harduerike CHERIoT 1.0 (Capability Hardware Extension to RISC-V for Internet of Things), i cili p\u00ebrcakton zgjerimin e setit t\u00eb komandave (ISA) p\u00ebr krijimin e pajisjeve t\u00eb sigurta. CHERIoT ofron mund\u00ebsi harduerike p\u00ebr monitorimin e qasjes n\u00eb memorie, verifikimin e korrekt\u00ebsis\u00eb s\u00eb pun\u00ebs me tregues dhe sigurimin e izolimit t\u00eb blloqeve t\u00eb kodit. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, \u00ebsht\u00eb publikuar nj\u00eb version stabil i modelit formal referenc\u00eb t\u00eb CHERIoT ISA, i p\u00ebrcaktuar n\u00eb gjuh\u00ebn Sail. <\/p>\n
Projekti CHERIoT \u00ebsht\u00eb krijuar nga kompania Microsoft p\u00ebr t\u00eb zgjidhur problemet e siguris\u00eb n\u00eb kodin ekzistues n\u00eb gjuh\u00ebt C dhe C++ dhe p\u00ebr t\u00eb mbrojtur k\u00ebt\u00eb kod pa e p\u00ebrshtatur at\u00eb. Mbrojtja realizohet p\u00ebrmes p\u00ebrdorimit t\u00eb nj\u00eb kompilatori t\u00eb modifikuar, q\u00eb p\u00ebrdor nj\u00eb set t\u00eb zgjeruar t\u00eb instrukcioneve t\u00eb procesorit (ISA) p\u00ebr t\u00eb siguruar integritetin e treguesve, kontrollin e kufijve gjat\u00eb pun\u00ebs me memorie dhe parandalimin e qasjes n\u00eb memorie t\u00eb liruar. N\u00eb vitin 2023, zhvillimet e CHERIoT u hap\u00ebn dhe u transformuan n\u00eb nj\u00eb projekt t\u00eb p\u00ebrbashk\u00ebt, n\u00eb t\u00eb cilin u bashkuan edhe kompani t\u00eb tjera. <\/p>\n
\u0410\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b CHERIoT \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u044b \u0432 \u0432\u0438\u0434\u0435 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b RISC-V, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u0443\u044e \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CHERI (Capability Hardware Extension to RISC-V) c \u043c\u043e\u0434\u0435\u043b\u044c\u044e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 «capability» (\u043a\u0430\u0436\u0434\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0443\u0435\u0442\u0441\u044f). \u041d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432 CHERIoT \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u043d\u0430\u0431\u043e\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 (ISA) \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c, \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0430\u044f \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438. <\/p>\n
Ky model softuerik mbrojtjeje reflektohet drejtp\u00ebrdrejt n\u00eb modelin gjuh\u00ebsor C\/C++, q\u00eb lejon aplikimin e tij p\u00ebr aplikacionet ekzistuese, p\u00ebr mbrojtjen e t\u00eb cilave k\u00ebrkohet vet\u00ebm rikompilim dhe ekzekutimi n\u00eb harduer q\u00eb mb\u00ebshtet ISA CHERIoT. P\u00ebr shembull, aplikimi i CHERIoT lejon realizimin e kontrollit automatike t\u00eb kufijve, monitorimin e koh\u00ebs s\u00eb jet\u00ebs s\u00eb territoreve t\u00eb memories dhe sigurimin e integritetit t\u00eb treguesve n\u00eb komponent\u00ebt q\u00eb p\u00ebrpunojn\u00eb t\u00eb dh\u00ebna t\u00eb pasiguruara, pa b\u00ebr\u00eb ndryshime n\u00eb kod. <\/p>\n
Mes problemeve q\u00eb bllokohen me ndihm\u00ebn e CHERIoT: <\/p>\n
P\u00ebrve\u00e7 specifikimit dhe modelit formal, projekti zhvillon nj\u00eb implementim referenc\u00eb t\u00eb CPU 32-bit RISC-V Ibex me mb\u00ebshtetje p\u00ebr ISA CHERIoT dhe nj\u00eb mjet t\u00eb modifikuar LLVM. Shkemat e prototipit t\u00eb CPU dhe p\u00ebrshkrimet e blloqeve harduerike n\u00eb gjuh\u00ebn Verilog shp\u00ebrndahen n\u00ebn licenc\u00ebn Apache 2.0. Si baz\u00eb p\u00ebr CPU \u00ebsht\u00eb p\u00ebrdorur b\u00ebrthama Ibex nga projekti lowRISC. N\u00eb baz\u00eb t\u00eb b\u00ebrtham\u00ebs CHERIoT Ibex po p\u00ebrgatiten p\u00ebr prodhim masiv \u00e7ipat ICENI, prurja e t\u00eb cilave \u00ebsht\u00eb planifikuar p\u00ebr vitin e ardhsh\u00ebm. Ndryshe, kompania Microsoft \u00ebsht\u00eb duke zhvilluar mikro-kontrollerin Kudu me mb\u00ebshtetje p\u00ebr ISA CHERIoT. Ibex dhe Kudu tashm\u00eb mb\u00ebshtesin plot\u00ebsisht specifikimin CHERIoT 1.0. Po punojn\u00eb p\u00ebr standardizimin e zgjerimeve CHERI p\u00ebr procesor\u00ebt RISC-V n\u00eb organizat\u00ebn RISC-V International. <\/p>\n
P\u00ebr m\u00eb tep\u00ebr, po zhvillohet nj\u00eb emulator platforme n\u00eb baz\u00eb t\u00eb FPGA dhe nj\u00eb kontejner Docker p\u00ebr zhvilluesit me mjetin e instaluar dhe simulatorin e CPU Ibex, i realizuar me ndihm\u00ebn e Verilator. Gjithashtu, n\u00eb baz\u00eb t\u00eb CHERIoT \u00ebsht\u00eb p\u00ebrgatitur nj\u00eb prototip i sistemit operativ n\u00eb koh\u00eb reale CHERIoT RTOS, i cili ofron mund\u00ebsin\u00eb e izolimit t\u00eb compartments (compartment) edhe n\u00eb sisteme t\u00eb integruara me 256 MB RAM. Kodi i CHERIoT RTOS \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C++ dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn MIT. Pjes\u00ebt baz\u00eb t\u00eb OS, si\u00e7 jan\u00eb bootloader, planifikuesi dhe sistemi i shp\u00ebrndarjes s\u00eb memories, jan\u00eb formuar n\u00eb form\u00eb compartments. <\/p>\n