+Collaborative Research: CPA-CSA:BlueChip: Security Defenses for Misbehaving Hardware

BlueChip项目的目标是开发针对恶意硬件的安全防御。硬件和软件在功能上是等同的。迄今为止，计算机安全问题通常是对软件系统的攻击或利用。然而，现在硬件系统的复杂性和复杂性已经足够大，以至于从设计到实现的过程中存在许多恶意的机会。该项目将首次展示智能恶意处理器（IMP）的可行性。初步调查表明，小的硬件改动可以用来引导许多种类的恶意行为，例如硬件支持的特权操作访问。这种行为不端的硬件具有超大的系统效应，因为软件设计者依赖于（即，信任）硬件正确执行，因此不防御恶意硬件。原则上，可以通过严格控制从设计到实现（有时称为“供应链”）的路径中的每个步骤和交接来解决这些问题。一个上级解决方案是假设攻击者将克服这些技术和程序障碍，并建立防御。BlueChip将开发新的架构方法来防御各种恶意硬件。例如，BlueChip将为处理器开发一系列异常检测方案，可以检测恶意硬件并触发补救措施。

The goal of the BlueChip project is to develop security defenses against malicious hardware. Hardware and software are functional equivalents. To date, computer security problems have generally been attacks or exploitations of software systems. However, the sophistication and complexity of hardware systems is now great enough that many opportunities for malice exist in the path from design to realization. This project will be the first to demonstrate the feasibility of Intelligent Malicious Processors (IMPs). Initial investigations indicate that small hardware alterations can be used to bootstrap many varieties of malicious behavior into existence, such as hardware supported access to privileged operation. Such misbehaving hardware has outsized system effects, because software designers depend on (i.e., trust) hardware to perform correctly, and therefore do not defend against malicious hardware. One may address these problems, in principle, by tightly controlling each step and handoff in the path from design to realization (sometimes called the "supply chain''). A superior solution is to presume that attackers will overcome these technical and procedural hurdles, and to build defenses. BlueChip will develop new architectural approaches to defending against a wide variety of malicious hardware. For example, BlueChip will develop a family of anomaly detection schemes for processors that can detect malicious hardware and trigger remediations.