Using CHERI-enabled hardware to tackle part of the threat spectrum faced by space sector service providers
Kaze hypothesised that by incorporating the CHERI architecture into the design of satellites and connecting ground stations, it would reduce the number of exploitative vulnerabilities and bolster digital resilience. As well as helping to maintain essential services, it was hoped that this would offer substantial returns on investment from risk reduction to lower maintenance costs.
Through the innovation programme, the Kaze team conducted a feasibility study on operating satellite ground station software within the CheriBSD Morello architecture. Over six months the team:
- Tested experimental library-based compartmentalisation features for a satellite parsing library – a tool that processes and translates satellite data streams so ground station applications can read and interact with them
- Incorporated CHERI into cyber risk quantification models
- Built significant working relationships with leading academics and other SMEs.
CHERI delivers persistent resilience against over 70% of known vulnerabilities
The Kaze team found that operating ground station software using the CheriBSD Morello technology delivered increased and persistent digital resilience against over 70% of known vulnerabilities. The team recognised that this could be made even more effective using fine-grained compartmentalisation techniques, and testing for a satellite parsing library showed that it offered a strong solution with only a limited performance overhead. This meant that while there was a slight reduction in system speed due to the security architecture, the impact was minimal and an acceptable trade-off for the enhanced security benefits.
These findings show that a benefit of using CheriBSD and Morello is a significant reduction in the attack surface of a system. The elimination of inherent vulnerabilities tangibly reduces cyber risk and potential costs associated with a successful attack. This is a strategic advantage for organisations who want to protect their revenues, reduce the unwanted burden of costs to remediate their systems, and protects the investment in long term digitally enabled assets. As a strategic consultancy working in the defence, central government, space, and energy sectors, Kaze Consulting will be advocating the strategic value of the technology. By connecting with unique organisations like Kaze Consulting, Digital Catapult has helped unlock value that comes through the adoption of deep technologies, with the Kaze team now considering new opportunities for pilot studies using CHERI in domain-specific applications globally.
Delivering technical, practical and collaborative benefits
The hands-on experience of debugging and implementing software within a CHERI environment enabled the Kaze Consulting team to improve their understanding of the technology and enhance their capability in building and debugging the key building blocks of software. The team now practises library fuzzing techniques to test for vulnerabilities and awareness of new security compartmentalisation methods, which will play an important part in cyber resilience testing for client business cases.
The access to facilities, workshops, and expertise offered during the programme has accelerated the Kaze team’s ability to develop, scale, and succeed in competitive markets. As well as ensuring that Kaze had the resources and technical assistance needed to progress efficiently, Digital Catapult connected the R&D team with academics at the University of Cambridge, bridging the gap between academic research and real-world applications of deep tech. Together, both teams collaborated on the science of quantification modelling and how it can be applied effectively to CHERI. The new connections established through the programme have put Kaze in a stronger position to deliver this technology to forward-thinking clients and unlock market opportunities in new sectors.
