Durham University

Prof David Oswald’s group led CAP-TEE project (EPSRC grant EP/V000454/1), funded under the UKRI Digital Security by Design Challenge. The project used capability architectures to protect Trusted Execution Environments (TEEs) against state-of-the-art attacks, addressing threats ranging from software vulnerabilities such as buffer overflows to hardware attacks. This project resulted in a number of research outputs using and extending CHERI. Following on from that, the group now contributes to CHERI-Zephyr, a fork of the widely used Zephyr RTOS adapted to incorporate CHERI capability support. The repository has reached version 0.3.0 (released February 2026) with active ongoing development.