How Secure Are Printed Circuit Boards Against Trojan Attacks?
How Secure Are Printed Circuit Boards Against Trojan Attacks?
复制标题
DOI：
10.1109/mdat.2014.2347918
复制
发表时间：
2015-03-01
影响因子：
2
通讯作者：
Bhunia, Swarup
中科院分区：
文献类型：
--
作者：
Ghosh, Swaroop;Basak, Abhishek;Bhunia, Swarup
近年来，集成电路(IC)级别的硬件特洛伊木马攻击被广泛研究。研究人员分析了这些攻击的影响，并探索了针对IC的可能对策。然而，在更高级别的系统抽象中，例如在印刷电路板(PCB)级别上，关于硬件特洛伊木马攻击的漏洞尚未被报道。以前的研究已经涵盖了多氯联苯的安全性，以防止盗版和各种制造后篡改攻击。JTAG(联合测试访问组)和其他现场可编程性功能，例如探针针、未使用的插座和USB，已被黑客广泛利用，以获取设计的内部功能以及窥探密钥、收集测试响应和操纵JTAG测试针。一个实例表明，可以通过使用JTAG禁用数字版权管理(DRM)策略来攻击Xbox。印刷电路板设计和制造的新兴商业模式支持在印刷电路板生命周期中广泛外包和集成不可信的组件/实体，以降低制造成本，这使得在印刷电路板中进行硬件特洛伊木马攻击具有很高的可行性。
Hardware Trojan attacks at the integrated circuit (IC) level have been studied extensively in recent times. Researchers have analyzed the impact of these attacks and explored possible countermeasures for ICs. However, vulnerability with respect to hardware Trojan attacks at higher levels of system abstraction, e.g., at printed circuit board (PCB) level, have not been reported earlier. Previous studies have covered security of PCBs against piracy and various post-fabrication tampering attacks. JTAG (Joint Test Access Group) and other field programmability features, e.g., probe pins, unused sockets and USB have been extensively exploited by hackers to gain access to internal features of the designs as well as snooping of secret key, collection of test responses, and manipulating JTAG test pins. One instance demonstrated that Xbox can be hacked by disabling the Digital Rights Management (DRM) policy using JTAG. The emerging business model of PCB design and fabrication that favors extensive outsourcing and integration of untrusted components/entities in the PCB life-cycle to lower manufacturing cost, makes hardware Trojan attacks in PCBs highly feasible.