CAREER: Architectural Enhancement and Design Methodologies for Secure Processing in Embedded Systems

职业：嵌入式系统安全处理的架构增强和设计方法

• 批准号: 0845871
• 负责人: Rajeev Bansal
• 金额: $ 40.5万
• 依托单位: University of Connecticut
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2009
• 资助国家: 美国
• 起止时间: 2009-09-01 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0845871&HistoricalAwards=false
• 关键词: CAREER; Architectural; Enhancement; Design; Methodologies

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law III-5).With pervasive usage of embedded systems in our daily life and infrastructures, strengthening the security of embedded system in its design and implementation has become a critical priority for the research community. This project targets augmenting the processor architecture for run-time secure processing. Since the architectural support can be made transparent to upper-level software, it cannot be easily circumvented by new software security attacks. Meanwhile, in-processor changes offer great efficiency. We are pursuing three research objectives to address random memory corruption caused by software attacks. First, we explore effective architectural augmentations of embedded processors to monitor code integrity, and incorporate the monitor in a realistic application-specific instruction set processors (ASIPs) design flow. Second, we utilize the embedded speculative architectures of processors as a cache for legitimate behaviors to validate program control flow, protecting control data and decision-making data. The program execution validations are sampled at critical points to reduce the performance degradation. Third, we scale architectural support in a single-core environment up to more sophisticated and increasingly popular multi-core platforms. A suite of CAD design tools will be released to public for free use. Our approach will lead to a real impact on modern secure embedded processor design. The project will also facilitate the integration of research and education across multiple disciplines, and the PI is especially keen on promoting participation of traditionally underrepresented minorities and women in such domains.

该奖项是根据2009年的《美国复苏与再投资法》（公共法第III-5）资助的。在我们的日常生活和基础设施中，嵌入式系统的普遍用法加强了嵌入式系统在其设计和实施中的安全性已成为研究社区的关键优先事项。该项目的目标是增加处理器架构以进行运行时安全处理。由于可以使架构支持可以透明到高级软件，因此新软件安全攻击无法轻易绕过它。同时，处理器内的变化具有很高的效率。我们正在追求三个研究目标，以解决由软件攻击引起的随机内存腐败。首先，我们探索嵌入式处理器的有效体系结构增强以监视代码完整性，并将监视器合并到现实的应用程序特定指令集处理器（ASIPS）设计流中。其次，我们利用处理器的嵌入式投机架构作为合法行为的缓存，以验证程序控制流，保护控制数据和决策数据。在关键点对程序执行验证进行采样，以减少性能降解。第三，我们将单核环境中的体系结构支持扩展到更复杂且越来越流行的多核平台。一套CAD设计工具将免费发布给公众。我们的方法将对现代安全嵌入式处理器设计产生真正的影响。该项目还将促进跨多个学科的研究和教育的整合，PI尤其热衷于促进传统代表性不足的少数民族和妇女参与此类领域。