EAGER: A Generalized Framework for Securing Heterogeneous Multicore Architectures

该项目设想了一个混合安全系统，其中一些组件是可信的，而其他组件是不可信的。这包括硬件和软件。目标硬件平台是异构的多核单片系统，其中一些硬件核是可信的，而另一些是不可信的。在这个多核基板上执行的应用程序类似地由一些任务组成，其中一些任务需要安全执行，而其他任务可能不安全。这个问题与由可信和不可信组件构建的所谓“物联网”系统高度相关。提出了一种混合安全计算框架，该框架实现了在异构混合信任多核片上系统上执行的用户定义安全策略。考虑了四个硬件信任“区域”，从高度信任、一定程度信任、不信任到未知；属于应用程序的任务可以根据其安全需求相应地执行。该项目将调查软件定义的安全策略，并开发硬件挂钩来支持软件定义的安全目标。在其他更广泛的影响中，PI正在开发新的教材，并将试点硬件面向网络安全的硬件软件协同设计课程。这个项目也将有助于教育方面的努力。

This project envisions a mixed-security system where some components are trusted while others are not-trusted. This includes both hardware and software. The target hardware platform is a heterogeneous multicore system-on-a-chip where some hardware cores are trusted and other cores are untrusted. The applications executing on this multicore substrate are similarly made out of tasks where some tasks require secure execution and other tasks may be unsecured. The problem is highly relevant to so-called "Internet of Things" systems built from trusted and untrusted components. This proposal conceptualizes a mixed security computing framework that implements user-defined security policies executing on a heterogeneous mixed-trust multicore system-on-a-chip. Four hardware trust "zones" are considered, ranging from highly trusted, somewhat trusted, untrusted to unknown; tasks belonging to an application may execute accordingly based on its security requirement. The project will investigate software-defined security policies and develop hardware hooks to support the software defined security goals. Among other broader impacts, the PI is developing new teaching materials and will pilot a hardware-software co-design course on Hardware-Oriented Cyber Security. This project will also help in that educational effort.