BT joins CHERI Alliance to drive secure hardware adoption

BT Group has joined the CHERI Alliance in a move aimed at furthering the adoption of hardware memory safety technologies to address core cybersecurity concerns.

The CHERI Alliance is an international membership organisation focused on promoting the uptake of Capability Hardware Enhanced RISC Instructions (CHERI) technology. This technology seeks to address memory safety vulnerabilities, which are commonly identified as the root cause of a significant proportion of cyberattacks, by introducing hardware-level protections to computer systems.

The inclusion of BT, a major operator in telecommunications and digital infrastructure, is considered by the Alliance as a step towards broader deployment of the technology across industries. BT Group brings a history of experience in network resilience and secure communications, and its participation is expected to contribute additional perspective and technical insights to ongoing efforts within the Alliance.

The Alliance consists of organisations from a variety of sectors, including companies ranging from startups to multinational technology firms such as Google. Academic research centres and government-related bodies are also part of the consortium, which aims to expedite widespread use of memory safety features in future hardware platforms.

The working model of the Alliance involves collaborative groups that generate recommendations, develop tools and open-source software, and create documentation to support technology adoption. By fostering knowledge-sharing and providing resources to developers, the Alliance is aiming to create a stronger ecosystem around memory safety technologies.

Mike Eftimakis, Founding Director of the CHERI Alliance, highlighted the significance of BT Group's membership, stating:

"BT's leadership in secure communications is unparalleled, and their involvement in the CHERI Alliance marks a significant step forward for our mission. Together, we can ensure that CHERI technology is adopted widely, making systems safer and more resilient for everyone."

BT has a history of engagement in cybersecurity innovation, integrating secure digital products and services across its global operations. By joining the CHERI Alliance, the company is expected to increase its participation in cross-sector initiatives focused on advancing the security of fundamental infrastructure.

Dave Harcourt, Chief Security Authority and Automation Director at BT Group, commented on the decision to join the Alliance. He said:

"As a global leader in telecommunications, BT recognises the critical importance of securing the digital infrastructure that underpins our economy and society. Joining the CHERI Alliance allows us to work with like-minded organizations to push the boundaries of what's possible in hardware-enabled cybersecurity."

The Alliance's recent appointment as a partner of the British government reflects wider policy support for the adoption of more secure hardware architectures. Activities within the Alliance's working groups include awareness campaigns, the release of open-source initiatives, and the sharing of guidance aimed at simplifying technology integration across industry sectors.

With BT Group's addition, the CHERI Alliance's membership is further diversified and strengthened, supporting collaborative work that targets the foundational risks associated with memory safety. This approach is founded on the premise that vulnerabilities resulting from unsafe memory usage are among the main factors exploited in major security breaches and cyberattacks.