SaTC: TTP: Medium: Collaborative: RESULTS: Reverse Engineering Solutions on Ubiquitous Logic for Trustworthiness and Security

由于集成电路(IC)供应链的全球化、制造成本的降低以及对更短上市时间的需求，商业现成IC现在在现代电子系统中很普遍。然而，此类组件的广泛使用引发了重大的安全和信任问题。验证这些组件的安全性和可信性极具挑战性，因为最终用户无法访问设计细节。此外，修补硬件级设计缺陷和/或硬件特洛伊木马的成本总是高于修补最终的软件漏洞。该项目开发了一个自动可信度和安全分析框架，通过重建商业现成IC的行为描述并分析此类描述来识别和检测设计缺陷和/或潜在插入的硬件特洛伊木马和后门，帮助最终用户解决他们的担忧。该工具套件提供一体式技术，使工程师能够通过数据路径和状态寄存器识别、状态转换图构建和分解、数据流恢复、高级行为设计重构以及基于白名单和黑名单的功能确定和硬件木马/后门检测，快速从物理电路结构/网表到行为/规范，并验证任何数字IC的安全性和可信性。作为过渡到实践(TTP)项目，研究团队还与一家行业合作伙伴密切合作，开发、集成和验证工具套件，以提供全面的、以实践为导向的硬件安全工具套件，以保护IC供应链。

Due to the globalization of the integrated circuit (IC) supply chain, the reduction of manufacturing costs and the need for shorter time to market, commercial-off-the-shelf ICs are now prevalent in modern electronic systems. However, the wide usage of such components breeds major security and trust concerns. Validating the security and trustworthiness of these components is extremely challenging since the end user does not have access to the design details. Furthermore, the cost to patch hardware level design flaws and/or hardware Trojans always costs more than patching eventual software vulnerabilities.This project develops an automated trustworthiness and security analysis framework to help end-users address their concerns by reconstructing the behavioral description of commercial-off-the-shelf ICs and analyzing such description for functionality identification and detection of design flaws and/or potentially inserted hardware Trojans and backdoors. This tool suite offers an all-in-one technology to allow engineers to quickly go from physical circuit structure/netlists to behavior/specification and validate the security and trustworthiness of any digital ICs, through data-path and state register identification, state transition graph construction and decomposition, data flow recovery, high-level behavioral design reconstruction, and whitelist- and blacklist-based functionality determination and hardware Trojan/backdoor detection. As a Transition to Practice (TTP) project, the research team is also closely collaborating with an industrial partner in developing, integrating, and validating the tool suite, so that a holistic and practice-oriented hardware security tool suite is provided for protecting the IC supply chain.