CAREER: Hardware/Software Codesign for Secure Embedded Systems: Methods and Education

帕特里克Schaumont弗吉尼亚理工学院和州立大学职业：安全嵌入式系统的硬件/软件协同设计：方法和教育0644070小组ID：070111摘要在智能卡的嵌入式电子设备中实现安全密码可能有大量的弱点，这些弱点与密码的加密强度无关。侧信道信息泄漏可能会通过密码的功耗、执行时间和其他物理实现效果来泄露内部秘密。这些漏洞影响到硬件和软件，表明一个安全的嵌入式系统并不比它最薄弱的环节更强大。这个项目创建了一个系统的设计方法，迭代地将嵌入式系统划分为安全关键和非关键部分。划分跨越硬件和软件的边界，并由侧信道估计器指导。然后使用安全的硬件-软件接口安全地集成分区的组件。其结果是一个灵活而安全的系统设计，结合了软件的灵活性和硬件的鲁棒性。该项目的智力价值是安全的嵌入式系统设计的设计方法。该方法补充了传统的嵌入式设计方法，侧重于性能和设计成本，而不是在安全和侧通道信息leaks.The项目培训计算机工程师在本科阶段的硬件/软件协同设计，并在研究生阶段的安全嵌入式系统设计。本课程的培训软件构成了安全设计流程的基础，并以CD-ROM形式免费分发。该软件为其他建立类似本科课程的学术机构提供服务。这种安全的方法使嵌入式系统设计人员和密码学家之间能够进行协作，并帮助他们构建不易受到攻击和欺诈的嵌入式系统。

Patrick SchaumontVirginia Polytechnic Institute and State UniversityCAREER: Hardware/Software Codesign for Secure Embedded Systems: Methods and Education0644070Panel ID: 070111AbstractThe implementation of a secure cipher within the embedded electronics of a smart-card can have a large number of weak points, which are unrelated to the cryptographic strength of that cipher. Side-channel information leaks may disclose internal secrets through the cipher's power consumption, execution time, and other physical implementation effects. Affecting hardware as well as software, these leaks show that a secure embedded system is no stronger than its weakest link.This project creates a systematic design approach that iteratively partitions an embedded system into a security-critical and a non-critical part. The partitioning goes across the boundaries of hardware and software and is guided by side-channel estimators. The partitioned components are then safely integrated using secure hardware-software interfaces. The result is a flexible yet secure system design, that combines the flexibility of software with the robustness of hardware.The project's intellectual merit is a design methodology for secure embedded system design. The methodology complements a traditional embedded design approach that focuses on performance and design-cost but not on security and side-channel information leaks.The project trains computer engineers at the undergraduate level in hardware/software codesign, and at the graduate level in secure embedded systems design. The training software from this course forms the basis of the secure design flow, and it is freely distributed on CD-ROM. The software is serving other academic institutions that establish similar undergraduate courses. The secure methodology enables collaboration between embedded system designers and cryptographers, and helps them to build embedded systems that are less prone to attacks and fraud.