Charly Castes

Charly Castes

Charly is a PhD candidate at EPFL focusing on confidential computing, virtualization, and system security in general.
He worked on blocking transient-execution attacks on ARM CCA as part of the System Research group at Google, on a new and portable security monitor for x86 and RISC-V platforms, and on data migration for Intel SGX enclaves. Most recently, he his looking into firmware security and how firmware can be trusted by less privileged software.

Everything Old is New Again: Virtualizing Firmware on RISC-V

The concept of virtualization is almost as old as computer science itself, with a rich history of intertwined software and hardware evolution. Today virtualization is ubiquitous, and serves as the building block of software deployment and isolation.

This talk explores a wild idea: what if we tried to virtualize the firmware? Is it possible? What does virtualizing the firmware even mean? How can it be useful?

While we walk down the memory lane answering those questions, we will rediscover old theorems, clever software tricks, and the limitations of hardware. We will explore the virtualization of M-mode firmware on RISC-V, and present the design of Miralis, a security monitor that virtualizes RISC-V firmware.