+Collaborative Research: CPA-CSA:BlueChip: Security Defenses for Misbehaving Hardware

蓝筹项目的目标是开发针对恶意硬件的安全防御系统。硬件和软件在功能上是等价的。到目前为止，计算机安全问题通常是对软件系统的攻击或利用。然而，硬件系统的复杂性和复杂性现在已经足够大，以至于在从设计到实现的过程中存在许多恶意攻击的机会。该项目将是第一个展示智能恶意处理器(IMPS)可行性的项目。初步调查表明，小的硬件更改可用于引导多种恶意行为的存在，例如硬件支持对特权操作的访问。这种行为不端的硬件具有过大的系统影响，因为软件设计者依赖(即信任)硬件来正确执行，因此不能防御恶意硬件。原则上，人们可以通过严格控制从设计到实现(有时称为“供应链”)过程中的每一步和移交来解决这些问题。更好的解决方案是假设攻击者将克服这些技术和程序障碍，并建立防御措施。蓝筹股将开发新的架构方法来防御各种各样的恶意硬件。例如，蓝筹股将为处理器开发一系列异常检测方案，可以检测恶意硬件并触发补救。

The goal of the BlueChip project is to develop security defenses against malicious hardware. Hardware and software are functional equivalents. To date, computer security problems have generally been attacks or exploitations of software systems. However, the sophistication and complexity of hardware systems is now great enough that many opportunities for malice exist in the path from design to realization. This project will be the first to demonstrate the feasibility of Intelligent Malicious Processors (IMPs). Initial investigations indicate that small hardware alterations can be used to bootstrap many varieties of malicious behavior into existence, such as hardware supported access to privileged operation. Such misbehaving hardware has outsized system effects, because software designers depend on (i.e., trust) hardware to perform correctly, and therefore do not defend against malicious hardware. One may address these problems, in principle, by tightly controlling each step and handoff in the path from design to realization (sometimes called the "supply chain''). A superior solution is to presume that attackers will overcome these technical and procedural hurdles, and to build defenses. BlueChip will develop new architectural approaches to defending against a wide variety of malicious hardware. For example, BlueChip will develop a family of anomaly detection schemes for processors that can detect malicious hardware and trigger remediations.