Author: Phil Hodgers

New Secure Hardware Lab announced at RISE Annual Conference in London 

Hardware security experts gathered at Prince Philip House to explore the latest research challenges and celebrate innovation in secure hardware and embedded systems security. 

Hardware security experts, researchers and industry leaders gathered at Prince Philip House in London on Friday 6 November 2026 for the annual conference of the Research Institute for Secure Hardware and Embedded Systems (RISE), bringing together the UK’s hardware security community to discuss the latest research challenges, emerging technologies and opportunities to strengthen the security and resilience of critical systems. 

A key highlight of the conference was the announcement of a new Secure Hardware Lab, unveiled during the keynote address by Martin Jackson, Director of Silicon Engineering at lowRISC. 

The Government-funded initiative, delivered in collaboration with lowRISC and two Innovation and Knowledge Centres (IKCs), the Centre for Secure Information Technologies (CSIT) and the Centre for Heterogeneous Integrated MicroElectroncis and Semiconductor Systems (CHIMES2), will focus on improving the security and resilience of critical technologies. The lab aims to accelerate semiconductor security research, reduce the time needed to translate the research into commercial applications, and provide a dedicated open-source platform for collaboration across the hardware security community. 

The conference also showcased the next generation of hardware security research and innovation through talks on the EPSRC-funded RISE affiliated projects in addition to the RISE Impact Competition winners, who delivered short pitches highlighting their exciting research and its potential real-world applications. 

This year’s Impact Competition winners were: 

  • Marius Muench, University of Birmingham 
  • Dr Shancang Li, Cardiff University 
  • Dr Mohammed Eissa, University of Sheffield 

Their work demonstrated the breadth of innovative research taking place across the UK and the potential to address important challenges in hardware and embedded systems security. 

The programme also featured invited talks from Dr Patrik Ekdahl of Ericsson and Bridgette Bigmore, Director of Cybersecurity, Semiconductor & Advanced Connectivity Technologies at Innovate UK, bringing valuable industry perspectives to discussions on the evolving hardware security landscape. 

A further highlight was the series of lightning talks, which gave researchers from universities across the UK the opportunity to showcase their emerging research, share new ideas and engage with colleagues working at the forefront of the field.

UK’s Digital Security by Design Showcase 2025

The “UK’s Digital Security by Design Showcase 2025” offers a unique opportunity to witness the transformative progress being achieved by businesses through innovative strategies and ground-breaking technologies such as CHERI. These advancements are poised to significantly reduce the economic impact of cyber security breaches, delivering far-reaching benefits for the economy and society.

The showcase will provide the opportunity to meet and discuss these pioneering technologies with organisations that have been pivotal to delivering the aims of the UK Government’s Digital Security by Design Programme to make the UK the safest place to live and work online.

This showcase will be held on Tuesday 11th February in, 8 Northumberland Ave.

The exhibition hall will open for showcase exhibitors from 2pm and for delegates from 4pm, with a Ministerial Address and other addresses starting at 5.00pm, followed by drinks and canapés with continued networking and exhibits until 7.00pm.

UK Research and Innovation and the supporters of this showcase encourage you to register your interest to attend this event.

Showcase Registration

This event is presented by the UKRI Digital Security by Design programme and ecosystem.

Supported by

and delivered by

RISE Annual Summer School Unveils Landmark Report on Security in the Era of Global Semiconductor Initiatives

Birmingham, UK – July 31, 2024 – Today, at the RISE Annual Summer School held at the University of Birmingham, a significant report titled “Security in the Era of Global Semiconductor Initiatives” was launched.

The report outlines a strategic overview of the current challenges and emergent opportunities in semiconductor security, spurred by the insights from a workshop on Security in the Era of Global Semiconductor Initiatives, which was held in November 2023 in Washington DC, co-chaired by Professor Maire O’Neill, Queen’s University Belfast and Professor Mark Tehranipoor, University of Florida.

The report, available here, provides an in-depth analysis of the semiconductor sector, covering key areas such as technological innovations, challenges and opportunities, policy frameworks, and global market trends. It serves as an essential resource for industry professionals, policymakers, researchers, and investors seeking to understand and navigate the rapidly evolving semiconductor landscape.

Key Highlights of the Report:

  • Technological Innovations: Insight into cutting-edge semiconductor technologies driving the next generation of electronic devices.
  • Challenges and Opportunities: Analysis of the current challenges and opportunities within the global semiconductor supply chain.
  • Policy Frameworks: Examination of government policies and their impact on the semiconductor industry across different regions.
  • Market Trends: Comprehensive overview of global market trends and their implications for future growth.

The launch event at the University of Birmingham brought together thought leaders, industry experts, and academic researchers to discuss the findings of the report and explore collaborative opportunities to advance the semiconductor field. The RISE Annual Summer School, renowned for fostering innovation and knowledge exchange, provided the perfect platform for this significant announcement.

Professor Máire O’Neill, Director of RISE, stated, “The semiconductor industry is at the heart of modern technology, influencing everything from consumer electronics to advanced computing. This report is a testament to the collaborative efforts of researchers, key government stakeholders and industry leaders from the US and UK. It provides a roadmap for future research, innovation, and growth, ensuring that we stay at the forefront of this critical sector.”

The report highlights the importance of international cooperation and strategic investments in research and development to address the current challenges and future demands of the semiconductor industry.

For more information about the “Security in the Era of Global Semiconductor Initiatives” report or to download a copy, please visit UK RISE.

About RISE: The Research Institute for Secure Hardware and Embedded Systems (RISE), which is hosted at the Centre for Secure Information Technologies (CSIT), Queen’s University Belfast, seeks to identify and address key issues that underpin our understanding of Hardware Security. Funded since 2017 by the Engineering and Physical Sciences Research Council (EPSRC) and the National Cyber Security Centre (NCSC), RISE is one of four cyber security institutes in the UK and aims to be a global hub for research and innovation in hardware security.

Contact: Helen Lappin, Marketing Executive, RISE, Email: h.lappin@qub.ac.uk

For further details and to stay updated on future events and publications, follow RISE on social media:

  • X: @UK_RISE
  • LinkedIn: UK RISE

The UK Product Security and Telecommunications Infrastructure (Product Security) regime

The UK Product Security and Telecommunications Infrastructure (PSTI) regime has come into force, effective from 29th April 2024. The regulations apply to businesses that manufacturer, import or distribute connectable products in the UK, i.e. products that connect over the internet or can be networked with other devices.

The Security Requirements 

The security requirements are actions that relevant businesses in the supply chain must take, or requirements that a product must meet, to address a security problem or eliminate a potential security vulnerability. 

Schedule 1 to the 2023 Regulations sets out the specific requirements that must be complied with in relation to relevant connectable products.

1. Passwords  

Passwords must be unique per product; or capable of being defined by the user of the product.  

They must not be based on incremental counters; based on or derived from publicly available information; based on or derived from unique product identifiers, such as a serial number unless this is done using an encryption method, or keyed hashing algorithm, that is accepted as part of good industry practice; or otherwise easily guessable. 

2. Information on how to report security issues  

The manufacturer must provide information on how to report to them security issues about their product. The manufacturer must also provide information on the timescales within which an acknowledgment of the receipt of the report and status updates until the resolution of the reported security issues can be expected by person making the report.  

This information should be made available without prior request in English, free of charge. It should also be accessible, clear and transparent. 

3. Information on minimum security update periods  

Information on minimum security update periods must be published and made available to the consumer in a clear accessible and transparent manner. This must be the minimum length of time security updates will be provided along with an end date.  

This information should be available without prior request in English, free of charge and in a such a way that is understandable for a reader without prior technical knowledge.  

Exceptions

There are exceptions to the regime, which are listed in Schedule 3 of the regulations. For example charge points for electric vehicles, medical devices, desktop, laptop PC’s, or tablets without internet connectivity are excepted from the regulations (but notably not those which are targeted for children under 14).

Reviews

The regulations will be reviewed by The Secretary of State periodically, with a requirement for that to be carried out on a minimum of a 5-year schedule.

RISE Embarks on Phase 2 – Addressing Semiconductor Security Challenges

NCSC has approved funding for RISE Phase 2 from 2023-2026, which is hosted under Professor Máire O’Neill at the Centre for Secure information Technology (CSIT), Queen’s University Belfast. 3 new RISE research projects have been funded by EPSRC, bolstering hardware & embedded systems security research.

The National Cyber Security Centre (NCSC) – a part of GCHQ – has approved funding for RISE Phase 2 from 2023-2026, which is hosted under Professor Máire O’Neill at the Centre for Secure Information Technologies (CSIT), Queen’s University Belfast. Three new RISE research projects have also been funded by the Engineering and Physical Sciences Research Council (EPSRC), bolstering hardware and embedded systems security research, innovation, and industry partnerships.

RISE aims to establish itself as a global hub for research and innovation in hardware security, and as part of phase 2, will have a focus on addressing crucial issues in semiconductor security. The institute’s strategy approach includes fostering close engagement with leading industry partners and stakeholders both within the UK and internationally, with a strong focus on translating research outcomes into practical products, services, and business opportunities to bolster the UK economy.

With the publication of the UK’s National Semiconductor Strategy in May 2023, a key focus of which is to build on our hardware strengths to improve cyber security and ensure that ‘cyber security is considered, and more widely prioritised, at the design stage of chips’, RISE stands poised to contribute significantly, enhancing the UK’s international research standing while augmenting economic competitiveness.

Professor Máire O’Neill summarises the key outcomes of the first phase: “We have made excellent progress across our funded research projects, we kicked-off an international collaboration between the core RISE partners and NTU and NUS in Singapore and launched a UK competition targeting final year UG/MSc students, sponsored by ARM, to help stimulate the next generation of UK hardware security experts.”

Significant research outputs to date include:

  • Plundervolt – an attack developed as part of the University of Birmingham funded project which exploited vulnerabilities with Intel’s Software Guard Extensions, leading to errors that could leak secret information such as encryption keys.
  • Thunderclap – research by the University of Cambridge team that identified vulnerabilities with USB and Thunderbolt interface standards, and which provided security recommendations for hardening systems that were incorporated into the USB 4 standard.
  • An Apple Pay vulnerability discovered by the University of Surrey’s RISE project which showed that Apple Pay in Express Transit mode if used with a Visa card could be abused to make an Apple Pay payment to any shop terminal, of any value, without the need for user authentication.
  • A Queen’s University Belfast project led to the first deep-learning based automated Hardware Trojan (HT) detection system based on gate-level netlists to effectively detect HTs without any pre-knowledge of the circuits. HTs are malicious modifications of integrated circuits.
  • A trusted FPGA environment developed by the University of Manchester team that solves two problems; firstly, it uses their FPGADefender virus scanner to help a cloud service provider (CSP) ensure a user bitstream is not malicious, and secondly, it ensures user IP protection by configuring an FPGA only with encrypted configuration bitstreams.

Phase 2 will involve annual RISE conferences; spring/summer schools; early career researcher training and innovation workshops; a UK/US Workshop on Semiconductor Security; and a UK-wide Training Roadshow. Aligned funding from EPSRC supports three new research projects addressing Trustworthy Deep-Learning based Hardware Trojan Detection at Queen’s University Belfast, Securing and Analysing Trusted Execution Beyond the CPU at the Universities of Southampton and Birmingham, and Securing composable hardware platforms at the University of Manchester.

Professor Máire O’Neill emphasizes, “RISE will continue to play its part in conducting research that addresses security throughout a device’s lifecycle, from the initial design and manufacture through to its operational environment. We will also continue to grow the skillsets and community in the UK in this strategically important area.”