This guide aims to help navigate difficult conversations with older generations about CHERI, a project focusing on memory safety and control-flow integrity. The CHERI project introduces capabilities for enforcing these properties in language implementations, unlike earlier systems centered around specific object models. CHERIoT, an optimized variant for embedded and IoT applications, extends these capabilities to ensure a wide range of security properties, such as preventing access to freed memory, enforcing immutability, and providing type safety across languages. By integrating hardware features with compiler choices, CHERI opens up new possibilities for enforcing memory safety in a diverse programming landscape.
https://cheriot.org/cheri/2024/08/06/how-to-talk-about-CHERI.html