{"id":21646,"date":"2018-01-09T03:15:39","date_gmt":"2018-01-09T03:15:39","guid":{"rendered":"http:\/\/www.kurzweilai.net\/?p=307853"},"modified":"2018-01-11T07:55:10","modified_gmt":"2018-01-11T07:55:10","slug":"darpa-funded-unhackable-computer-could-avoid-future-flaws-like-spectre-and-meltdown","status":"publish","type":"post","link":"https:\/\/hoo.central12.com\/fugic\/2018\/01\/09\/darpa-funded-unhackable-computer-could-avoid-future-flaws-like-spectre-and-meltdown\/","title":{"rendered":"DARPA-funded &lsquo;unhackable&rsquo; computer could avoid future flaws like Spectre and Meltdown"},"content":{"rendered":"<div id=\"attachment_307863\" class=\"wp-caption aligncenter\" style=\"width: 330px;  border: 1px solid #dddddd; background-color: #f3f3f3; padding-top: 4px; margin: 10px; text-align:center; display: block; margin-right: auto; margin-left: auto;\"><img class=\" wp-image-307863\" title=\"MORPHEUS\" src=\"http:\/\/www.kurzweilai.net\/images\/MORPHEUS.jpg\" alt=\"\" width=\"320\" height=\"278\" \/><p style=' padding: 0 4px 5px; margin: 0;'  class=\"wp-caption-text\">(credit: University of Michigan)<\/p><\/div>\n<p>A University of Michigan (U-M) team has announced plans to develop an &#8220;unhackable&#8221; computer, funded by a new $3.6 million grant from the Defense Advanced Research Projects Agency (DARPA).<\/p>\n<p>The goal of the project, called MORPHEUS, is to design computers that avoid the vulnerabilities of most current microprocessors, such as the Spectre and Meltdown flaws <a href=\"https:\/\/www.pcmag.com\/news\/358286\/how-to-protect-your-devices-against-meltdown-spectre-bugs\" >announced<\/a>\u00a0 last week.*<\/p>\n<p>The\u00a0$50 million <a href=\"https:\/\/www.darpa.mil\/news-events\/2017-04-10\" >DARPA System Security Integrated Through Hardware and Firmware (SSITH) program<\/a> aims to build security right into chips\u2019 microarchitecture, instead of relying on software patches.*<\/p>\n<p>The U-M grant is one of nine that DARPA has recently funded through SSITH.<\/p>\n<p><strong>Future-proofing<\/strong><\/p>\n<p>The idea is to protect against future threats that have yet to be identified. &#8220;Instead of relying on software Band-Aids to hardware-based security issues, we are aiming to remove those hardware vulnerabilities in ways that will disarm a large proportion of today&#8217;s software attacks,&#8221; said Linton Salmon, manager of DARPA&#8217;s System Security Integrated Through Hardware and Firmware program.<\/p>\n<p>Under MORPHEUS, the location of passwords would constantly change, for example. And even if an attacker were quick enough to locate the data, secondary defenses in the form of encryption and domain enforcement would throw up additional roadblocks.<\/p>\n<p>More than 40 percent of the &#8220;software doors&#8221; that hackers have available to them today would be closed if researchers could eliminate seven classes of hardware weaknesses**, according to DARPA.<\/p>\n<p>DARPA is aiming to render these attacks impossible within five years. &#8220;If developed, MORPHEUS could do it now,&#8221; said <a href=\"http:\/\/web.eecs.umich.edu\/~taustin\/\">Todd Austin<\/a>, U-M professor of computer science and engineering, who leads the project. Researchers at The University of Texas and Princeton University are also working with U-M.<\/p>\n<p><em>* Apple released <\/em><em>today (Jan. 8) <\/em>iOS 11.2.2 and macOS 10.13.2 updates with Spectre fix for Safari and WebKit, according to <a href=\"https:\/\/www.macworld.com\/article\/3246269\/ios\/apple-releases-ios-11-2-2-with-spectre-fix-for-safari-and-webkit.html\" >MacWorld<\/a>. Threatpost<em> has an <a href=\"https:\/\/threatpost.com\/experts-weigh-in-on-spectre-patch-challenges\/129337\/\" >update<\/a> (as of Jan. 7) on efforts by Intel and others in dealing with Meltdown and Spectre processor vulnerabilities .<br \/>\n<\/em><\/p>\n<p><em>** Permissions and privileges, buffer errors, resource management, information leakage, numeric errors, crypto errors, and code injection.<\/em><\/p>\n<p><em><strong>UPDATE 1\/9\/2018<\/strong>: BLUE-SCREEN ALERT: Read this if you have a Windows computer with an AMD processor: Microsoft <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4073707\/windows-os-security-update-block-for-some-amd-based-devices\" >announced<\/a> today it has temporarily paused sending some Windows operating system updates (intended to protect against Spectre and Meltdown <\/em><em>chipset vulnerabilities<\/em>) to devices that have impacted AMD processors. &#8220;Microsoft has received\u00a0reports of some AMD devices getting into an unbootable state after installation of\u00a0recent Windows operating system\u00a0security updates.&#8221;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A University of Michigan (U-M) team has announced plans to develop an &ldquo;unhackable&rdquo; computer, funded by a new $3.6 million grant from the Defense Advanced Research Projects Agency (DARPA). The goal of the project, called MORPHEUS, is to design computers that avoid the vulnerabilities of most current microprocessors, such as the Spectre and Meltdown flaws [&#8230;]<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47,43,50],"tags":[],"class_list":["post-21646","post","type-post","status-publish","format-standard","hentry","category-computersinfotechui","category-news","category-survivaldefense"],"_links":{"self":[{"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/posts\/21646"}],"collection":[{"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/comments?post=21646"}],"version-history":[{"count":4,"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/posts\/21646\/revisions"}],"predecessor-version":[{"id":21691,"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/posts\/21646\/revisions\/21691"}],"wp:attachment":[{"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/media?parent=21646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/categories?post=21646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hoo.central12.com\/fugic\/wp-json\/wp\/v2\/tags?post=21646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}