Collaborative Research: Architectural Support for Security and Privacy Protection on Uni- and Multi- Processors

合作研究：单处理器和多处理器安全和隐私保护的架构支持

• 批准号: 0429986
• 负责人: Youtao Zhang
• 金额: $ 2.6万
• 依托单位: University of Texas at Dallas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2004
• 资助国家: 美国
• 起止时间: 2004-11-01 至 2005-10-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0429986&HistoricalAwards=false
• 关键词: Collaborative; Research; Architectural; Support; Security

Software programs executing on a broad range of internet systems are constantly subject to maliciousattacks in various forms. Program execution behavior might be altered as a result causing substantial damage, data may become corrupted and privacy can be greatly compromised.The objective is to develop a secure processor model which secure applications can easily be built on. The proposed designs can protect the privacy of the processor owner through diversifying the representation of its identity.Intellectual MeritTo achieve our goals, we will augment the existing microprocessor architecture to incorporate new features. The proposed architectural components address a broad range of attacks on uniprocessor and multiprocessor architectures. In particular, we will develop novel techniques as follows.Architecture Support for Enhancing Uniprocessor Security. The confidentiality and integrity of such a microarchitecture are maintained through encryption and decryption of the code and data transferred across the chip.While the efficiency of encryption has been solved successfully by PIs and others, the computation intensive nature of crypto operations has led the verification of inbound traffic being delayed. Such delay imposes vulnerability as one can peek critical data on-chip during this time. This project designs a strong verification engine with which information leakage of on-chip data is prevented,Broader ImpactAccomplishing the proposed research objectives can significantly impact the research community, processor industry, and academic education. The secure processor model in this proposal is a reliable computing base on which higher levels of secure systems may be built. Since applications are encrypted differently, OS security and user application security are separated. Compromising the OS does not necessarily weaken the user program or data. Higher levels security protocols can thus take advantage of the secure architectural components. Techniques proposed in this proposal are also very practical. Many of them are ready to be synthesized and integrated into real processors.The education component in this proposal seeks to better prepare the students for the coming challenges in computer system design. The research projects included in this proposal offer the students great opportunities in terms of class projects, Master or Doctoral theses, and other valuable practical experience.

在广泛的互联网系统上执行的软件程序经常受到各种形式的恶意攻击。本文的目标是建立一个安全的处理器模型，使安全的应用程序可以很容易地建立在这个模型上。所提出的设计可以通过多样化的身份表示来保护处理器所有者的隐私。知识产权为了实现我们的目标，我们会加强现有的微处理器架构，加入新的功能。建议的架构组件解决了广泛的单处理器和多处理器架构上的攻击。特别是，我们将开发新的技术如下：增强单处理器安全性的体系结构支持。这种微体系结构的机密性和完整性通过对芯片上传输的代码和数据进行加密和解密来维护。虽然加密的效率已经通过PI和其他方法成功解决，但加密操作的计算密集性导致了对入站流量的验证被延迟。这种延迟会带来漏洞，因为在此期间可以窥视芯片上的关键数据。该项目设计了一个强大的验证引擎，可以防止片上数据的信息泄漏，更广泛的影响实现拟议的研究目标可以显着影响研究界，处理器行业和学术教育。该方案中的安全处理器模型是一个可靠的计算基础，在此基础上可以构建更高级别的安全系统。由于应用程序的加密方式不同，因此操作系统安全和用户应用程序安全是分开的。损害操作系统并不一定会削弱用户程序或数据。因此，更高级别的安全协议可以利用安全架构组件。该提案中提出的技术也非常实用。他们中的许多人准备合成和集成到真实的处理器中。本提案中的教育部分旨在为学生更好地准备迎接即将到来的计算机系统设计挑战。本提案中的研究项目为学生提供了课堂项目，硕士或博士论文以及其他宝贵的实践经验的巨大机会。