A microcontroller uses hardware protection to prevent memory-related security flaws and stop software failures or attacks from spreading across systems.
SCI Semiconductor, pioneering cyber-resilient microcontrollers (MCUs) for security-critical applications, has announced the first silicon availability of its ICENI cybersecure MCU family. The company describes ICENI as the world’s first commercial implementation of CHERI in silicon.
Memory-safety vulnerabilities account for approximately 70% of all reported security flaws in embedded software. ICENI is designed to eliminate this class of vulnerability at the hardware level while improving system resilience through the compartmentalisation of software functions. The architecture is intended to provide operational integrity for critical national infrastructure (CNI) applications.
ICENI achieves memory safety through CHERI’s hardware-enforced capability model, which replaces traditional pointers with unforgeable, bounded capabilities. These capabilities contain metadata defining the specific memory regions and permissions granted to them. By restricting software components to accessing only the memory explicitly assigned to them, the MCU enforces spatial memory safety by design and prevents entire classes of exploits before they can occur.
The architecture also extends hardware-enforced memory safety to software compartmentalisation. Fine-grained capabilities enable tightly bounded software compartments and component-level isolation that can scale across a system. This approach helps contain faults and security compromises and prevents them from spreading laterally between components. It also avoids the complexity and performance penalties associated with the traditional coarse, region-based protection models used by legacy memory protection units (MPUs).
By incorporating CHERI architectural extensions into production silicon, ICENI brings decades of academic research into commercially deployable cybersecure hardware. The platform is designed to support next-generation digital transformation across critical national infrastructure, industrial systems, defence, and high-assurance Internet of Things (IoT) applications, where security and resilience are critical.
Click here for the original announcement.
