CCRI: ENS: Enhancement of Trust-Hub, a Web-based Portal to support the Cybersecurity Research Community

CCRI：ENS：增强 Trust-Hub，这是一个支持网络安全研究社区的基于 Web 的门户网站

• 批准号: 2016624
• 负责人: Mark Tehranipoor
• 金额: $ 98.07万
• 依托单位: University of Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-07-15 至 2024-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2016624&HistoricalAwards=false
• 关键词: CCRI; ENS; Enhancement; Trust; Hub

Concerns about electronic hardware and supply chain security have received a tremendous amount of attention over the past decade or so. Although researchers have offered solutions and security mechanisms to mitigate the issues, they do not still evaluate their effectiveness in a systematic manner. Some research is still being carried out in an ad-hoc fashion where the published results rely on figures of merit that limit objective cross-field comparisons. However, this has become vital as system-on-chips (SoCs) become pervasive in virtually every application (mobile, internet of things (IoT), and critical systems). This project aims to build platforms to validate benchmarks, develop tools and metrics to validate SoC security, and create a web-portal to disseminate and promote research and development in securing electronics devices and systems. The intellectual merits of this project include development of (i) a comprehensive SoC vulnerability database, (ii) a comprehensive set of metrics based on the vulnerability database, (iii) SoC security validation tool suite, and (iv) SoC benchmarking. This project leads a community-wide framework, called the Trust-Hub, toward stronger assurances in SoCs, computational platforms, and the electronics supply chain. Based on the demonstrated success of information sharing, Trust-Hub will serve as an important web-based repository for benchmarks, tools, databases, platforms, evaluation software, source codes, and much more.The results will interest major semiconductor companies, US government agencies and university researchers worldwide. The broader impacts include benefits to the society by building secure and trustworthy electronic devices and systems for healthcare, defense, military, space, finance, transportation, automotive and other critical applications. The scientific results will be presented to the hardware and electronics security community, and to semiconductor companies and government agencies. Students will use the benchmarks and tools in the annual competitions. Finally, this project will support development of a workforce who understand the much-needed protection of electronics supply chain and intellectual property (IP).This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

在过去的十年左右的时间里，人们对电子硬件和供应链安全的担忧受到了广泛的关注。尽管研究人员提供了解决问题的解决方案和安全机制，但他们仍未以系统的方式评估其有效性。一些研究仍在以临时的方式进行，在该方式中，已发表的结果取决于限制客观跨场比较的功绩数字。但是，随着片上系统（SOC）在几乎每个应用程序（移动，物联网（IoT）和关键系统）中普遍存在，这变得至关重要。该项目旨在建立平台，以验证基准，开发工具和指标来验证SOC安全性，并创建一个网络门户，以传播和促进在保护电子设备和系统方面的研究和开发。该项目的智力优点包括开发（i）全面的SOC脆弱性数据库，（ii）基于脆弱性数据库，（iii）SOC Seculy验证工具套件的全面指标，以及（iv）SOC基准测试。该项目带领一个名为Trust-Hub的社区范围内的框架，在SOC，计算平台和电子供应链中更强大的保证。基于信息共享的成功成功，Trust-Hub将作为基于Web的重要存储库，用于基准，工具，数据库，平台，评估软件，源代码等等。结果将使主要的半导体公司，美国政府机构和全球大学研究人员感兴趣。更广泛的影响包括通过建立安全且值得信赖的电子设备以及用于医疗保健，国防，军事，太空，金融，运输，汽车和其他关键应用程序的系统的好处。科学结果将介绍给硬件和电子安全界，半导体公司和政府机构。学生将在年度比赛中使用基准和工具。最后，该项目将支持一名劳动力的发展，该劳动力了解电子供应链和知识产权（IP）急需的保护。该奖项反映了NSF的法定任务，并被认为是通过基金会的知识分子优点和更广泛的影响审查标准的评估来通过评估来获得支持的。

项目成果

Adaptable and Divergent Synthetic Benchmark Generation for Hardware Security

硬件安全的适应性和发散性综合基准生成

• 发表时间: 2020
• 期刊: IEEE/ACM International Conference on Computer-Aided Design (ICCAD
• 作者: Amir, Sarah;Forte, Domenic
• 通讯作者: Forte, Domenic

PATRON: A Pragmatic Approach for Encoding LFI Resistant FSMs

PATRON：编码抗 LFI FSM 的实用方法

• 发表时间: 2021
• 期刊: Automation and Test in Europe (DATE
• 作者: Choudhury, Muhtadi;Tajik, Shahin;Forte, Domenic
• 通讯作者: Forte, Domenic

Hardware Vulnerability Description, Sharing and Reporting: Challenges and Opportunities

硬件漏洞描述、分享和报告：挑战与机遇

• 发表时间: 2021
• 期刊: GOMACTech
• 作者: Bellay, Jeremy;Forte, Domenic;Martin, Robert;Taylor, Christopher
• 通讯作者: Taylor, Christopher

EXERTv2: Exhaustive Integrity Analysis for Information Flow Security with FSM Integration

• DOI: 10.1007/s41635-023-00141-3
• 发表时间: 2023-12
• 期刊: Journal of Hardware and Systems Security
• 作者: Jiaming Wu;Domenic Forte