SBIR Phase II: Prospect: A Hardware Security Verification Tool

SBIR第二阶段：展望：硬件安全验证工具

• 批准号: 1534602
• 负责人: Jason Oberg
• 金额: $ 74.98万
• 依托单位: Tortuga Logic, Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-15 至 2019-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1534602&HistoricalAwards=false
• 关键词: SBIR; Phase; II; Prospect; Hardware

The broader impact/commercial potential of this Small Business Innovation Research (SBIR) Phase II project is a dramatic increase in the security of modern computer hardware. This project presents a security verification software suite that detects security vulnerabilities in electronic hardware designs. Current state-of-the-art methods for detecting security vulnerabilities in hardware designs are very informal, consisting of security teams searching for these vulnerabilities through manual code review and committee discussion. This has already been shown to be ineffective in obtaining adequate security coverage, with security vulnerabilities remaining undetected and exploitable by malicious entities. With the unprecedented growth in the number of connected devices being developed for the Internet-of-Things (IoT), the number of security vulnerabilities will increase dramatically. The broader societal impact of this SBIR Phase II project is the increased security of computing systems, leading to more effective management of personal information and increased data privacy. The commercial impact is a unique software offering to semiconductor companies to help detect and prevent security vulnerabilities that could be used to compromise an IoT device. This greatly reduces the resources necessary to achieve high security coverage and eliminates long-term liabilities that can debilitate an entire company.This Small Business Innovation Research (SBIR) Phase II project focuses on the technical development of a software suite for verifying security properties of hardware designs. The technology improves on the current methods in semiconductor companies that use manual audits in attempts to find security vulnerabilities in chip designs. It provides a systematic platform for verifying the security properties specified by the security teams on the actual hardware within these companies. This greatly improves the security coverage while reducing the time spent performing security audits. This SBIR Phase II project will develop the features requested directly by customers and perform the essential R&D efforts of the company's underlying information flow analysis technology in order to adequately solve customers' problems. The end result of this Phase II project will be a commercial grade product fit to detect and resolve security issues in modern electronic hardware designs.

这个小型企业创新研究（SBIR）第二阶段项目的更广泛的影响/商业潜力是现代计算机硬件安全性的急剧增加。本项目提出了一个安全验证软件套件，检测电子硬件设计中的安全漏洞。目前用于检测硬件设计中的安全漏洞的最先进方法是非常非正式的，由安全团队通过手动代码审查和委员会讨论来搜索这些漏洞。这已经被证明在获得足够的安全覆盖方面是无效的，安全漏洞仍然未被发现并可被恶意实体利用。随着为物联网（IoT）开发的连接设备数量的空前增长，安全漏洞的数量将急剧增加。SBIR第二阶段项目的更广泛的社会影响是提高计算系统的安全性，从而更有效地管理个人信息和提高数据隐私。商业影响是为半导体公司提供的独特软件，以帮助检测和防止可能用于危害物联网设备的安全漏洞。这大大减少了实现高安全覆盖率所需的资源，并消除了可能削弱整个公司的长期负债。这个小型企业创新研究（SBIR）第二阶段项目的重点是技术开发一个软件套件，用于验证硬件设计的安全属性。该技术改进了半导体公司目前使用人工审计的方法，试图找到芯片设计中的安全漏洞。它提供了一个系统平台，用于验证这些公司内实际硬件上的安全团队指定的安全属性。这大大提高了安全覆盖率，同时减少了执行安全审计所花费的时间。该SBIR第二阶段项目将开发客户直接要求的功能，并对公司的底层信息流分析技术进行必要的研发工作，以充分解决客户的问题。第二阶段项目的最终结果将是一个商业级产品，适合检测和解决现代电子硬件设计中的安全问题。