Side-channel attack resilience through route randomisation in secure real-time Networks-on-Chip
Side-channel attack resilience through route randomisation in secure real-time Networks-on-Chip
复制标题
通过安全实时片上网络中的路由随机化实现侧信道攻击弹性
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Martha Johanna Sepúlveda
中科院分区：
文献类型：
--
作者：
L. Indrusiak;J. Harbin;Martha Johanna Sepúlveda
安全性可以被视为NoC资源管理中的优化目标，并且因此对其他目标（例如实时可扩展性）进行权衡。在本文中，我们将展示如何增加NoC的弹性对一个具体类型的安全攻击，命名为侧信道攻击，利用特定的非功能属性（如数据包延迟和路由，在NoC的情况下）之间的相关性来推断安全应用程序的功能行为。例如，通过NoC的给定链路传输数据包可能会提示缓存未命中，攻击者可以使用该缓存未命中来猜测秘密加密密钥的特定部分，从而有效地削弱它。因此，我们提出了分组路由随机化作为一种机制来增加NoC对侧信道攻击的弹性，特别关注这种方法对硬实时系统的潜在影响，其中可互换性是至关重要的设计要求。使用进化优化方法，我们展示了如何有效地应用路由随机化，以这样一种方式，它可以增加NoC的安全性，同时控制其对硬实时性能保证的影响。基于分析和模拟模型的大量实验证据支持我们的研究结果。
Security can be seen as an optimization objective in NoC resource management, and as such poses trade-offs against other objectives such as real-time schedulability. In this paper, we show how to increase NoC resilience against a concrete type of security attack, named side-channel attack, which exploit the correlation between specific non-functional properties (such as packet latencies and routes, in the case of NoCs) to infer the functional behaviour of secure applications. For instance, the transmission of a packet over a given link of the NoC may hint on a cache miss, which can be used by an attacker to guess specific parts of a secret cryptographic key, effectively weakening it. We therefore propose packet route randomization as a mechanism to increase NoC resilience against side-channel attacks, focusing specifically on the potential impact of such an approach upon hard real-time systems, where schedulability is a vital design requirement. Using an evolutionary optimization approach, we show how to effectively apply route randomization in such a way that it can increase NoC security while controlling its impact on hard real-time performance guarantees. Extensive experimental evidence based on analytical and simulation models supports our findings.
片上虫洞交换网络时延和链路动态功耗建模算法的性能比较评估
影响因子：
4.5
作者：
Harbin J
通讯作者：
Harbin J