CAREER: Flexible Multi-Core Substrate for Trustworthy Computing Systems

职业：用于值得信赖的计算系统的灵活多核基板

• 批准号: 0746913
• 负责人: Gookwon Suh
• 金额: $ 42.5万
• 依托单位: Cornell University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-02-01 至 2015-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0746913&HistoricalAwards=false
• 关键词: CAREER; Flexible; Multi; Core; Substrate

Multi-core architecture with 4 to 8 cores on a die is a reality today and future generations of processors are expected to contain even more cores per chip. This project targets to realize the full potential of large-scale multi-core processors as a secure and trustworthy computing substrate. First, in "many-core" processors, the availability of a large number of processing elements together with constraints on power consumption alleviates the need for heavy time-sharing of resources, which often results in various types of side-channels. This change enables the use of more dedicated and statically allocated resources in this project to provide strong isolation and a simplified trusted software base. Second, many programmable processing elements in large-scale multi-cores can serve as a general substrate for various types of fine-grained inspection. This project is developing a flexible architecture framework for various run-time checks with minimal overheads in order to automatically detect, diagnose, and recover from malicious software attacks. Finally, the project extends the architectural framework to other aspects of trust beyond security, focusing on post-silicon verification, where the dynamic inspection can ensure various correctness properties. The research will deliver the benefits of hardware support in security and verification without requiring dedicated resources for a single fixed mechanism. Users can use each "extended core" for various security purposes, for verification and reliability purposes, or even for general computing. At the same time, the research will also enable highly secure execution environments where critical software components can be better protected.

如今，芯片上包含 4 至 8 个核心的多核架构已成为现实，未来几代处理器预计每个芯片将包含更多核心。该项目的目标是充分发挥大规模多核处理器作为安全可靠的计算基础的潜力。首先，在“多核”处理器中，大量处理元件的可用性以及对功耗的限制减轻了对资源的大量时间共享的需求，这通常会导致各种类型的侧通道。此更改允许在此项目中使用更多专用和静态分配的资源，以提供强大的隔离和简化的可信软件基础。其次，大规模多核中的许多可编程处理元件可以作为各种类型细粒度检查的通用基底。该项目正在开发一个灵活的架构框架，以最小的开销进行各种运行时检查，以便自动检测、诊断恶意软件攻击并从中恢复。最后，该项目将架构框架扩展到安全之外的信任的其他方面，重点关注硅后验证，其中动态检查可以确保各种正确性属性。该研究将带来安全和验证方面硬件支持的优势，而无需为单一固定机制提供专用资源。用户可以将每个“扩展核心”用于各种安全目的、验证和可靠性目的，甚至用于通用计算。同时，该研究还将实现高度安全的执行环境，使关键软件组件能够得到更好的保护。