How to Secure Unique Ecosystem Shipping 1 Billion+ Cores?

Overview: Security research has been focused on securing well-known, widely replicated ecosystems where problems and solutions are shared across the industry. But what happens when you build something no one else has? How do you secure an architecture that's both proprietary and deployed at billion-core scale? In 2016, NVIDIA began transitioning its internal Falcon microprocessor, used in nearly all GPU products, to a RISC-V based architecture. Today, each chipset has 10-40 cores, and in 2024, NVIDIA surp

Key Topics: assed 1 billion RISC-V cores shipped. This success came with unique security challenges, ones that existing models couldn't solve. To address them, we created a custom SW and HW security architecture from scratch. Including a purpose-built Separation Kernel SW, novel RISC-V ISA extensions like Pointer Masking, IOPMP (later ratified), and unique secure boot and attestation solution. But how do you future-proof a proprietary ecosystem against tomorrow's threats? In this talk, we'll share what we learned, and what's next. From HW-assisted memory safety (HWASAN, MTE) to control-flow integrity (CFI) and CHERI-like models, we'll explore how NVIDIA

Takeaways: evolving threat landscape. If you care about real-world security at an unprecedented scale, this is a journey you won't want to miss. References: - RISC-V Pointer Masking extension - RISC-V CFI Extension - RISC-V CHERI - RISC-V HFI - RISC-V Privileged spec - Systematically Securing the RISCV - Secure Foundation for Embedded Functionality - Marko Mitic, NVIDIA