PDNPulse: Sensing PCB Anomaly With the Intrinsic Power Delivery Network
PDNPulse: Sensing PCB Anomaly With the Intrinsic Power Delivery Network
复制标题
DOI：
10.1109/tifs.2023.3285490
复制
发表时间：
2022-04
影响因子：
6.8
通讯作者：
Huifeng Zhu;Haoqi Shan;Dean Sullivan;Xiaolong Guo;Yier Jin;Xuan Zhang
中科院分区：
文献类型：
--
作者：
Huifeng Zhu;Haoqi Shan;Dean Sullivan;Xiaolong Guo;Yier Jin;Xuan Zhang
在现代电子系统和嵌入式设备中无处不在的印刷电路板（PCB）使其完整性成为最高的安全性，以利用规模的经济性，当今的PCB设计和制造业经常由全球供应商执行此外，对于分段的PCB供应链中的许多安全漏洞，PCB设计的复杂性也增加了董事会级别的攻击将在PCB寿命的每个阶段实施，威胁到本文的许多电子设备，我们建议使用PCB的PCB异常检测框架PDNPulse（PDNPulse）恶意修改PDNPulse通过检测到PCB的修改不可避免地会影响PDN的特征。在黄金模型和使用基于距离的异常检测算法的情况下，PDNPulse可以使用PDNPulse在整个系统上稳健而成功地识别恶意修改。不同的威胁模型和七种不同的异常类型。防御。
The ubiquitous presence of printed circuit boards (PCBs) in modern electronic systems and embedded devices makes their integrity a top security concern. To take advantage of the economies of scale, today’s PCB design and manufacturing are often performed by suppliers around the globe, exposing them to many security vulnerabilities along the segmented PCB supply chain. Moreover, the increasing complexity of the PCB designs also leaves ample room for numerous sneaky board-level attacks to be implemented throughout each stage of a PCB’s lifetime, threatening many electronic devices. In this paper, we propose PDNPulse, a power delivery network (PDN) based PCB anomaly detection framework that can identify a wide spectrum of board-level malicious modifications. PDNPulse leverages the fact that the PDN’s characteristics are inevitably affected by modifications to the PCB. By detecting changes to the PDN impedance profile against the golden model and using the Frechet distance-based anomaly detection algorithms, PDNPulse can robustly and successfully discern malicious modifications across the system. Using PDNPulse, we conduct extensive experiments on seven commercial-off-the-shelf PCBs, covering different design scales, different threat models, and seven different anomaly types. The results confirm that PDNPulse creates an effective security asymmetry between attack and defense.