CCRI: ENS: Enhancement of Trust-Hub, a Web-based Portal to support the Cybersecurity Research Community

在过去十年左右的时间里，对电子硬件和供应链安全的担忧受到了极大的关注。尽管研究人员已经提供了解决方案和安全机制来缓解这些问题，但他们仍然没有系统地评估其有效性。一些研究仍然是以临时方式进行的，其中公布的结果依赖于限制客观跨领域比较的优值。然而，随着片上系统（SoC）在几乎所有应用（移动的、物联网（IoT）和关键系统）中变得普遍，这一点变得至关重要。该项目旨在建立平台来验证基准，开发工具和指标来验证SoC安全性，并创建一个门户网站来传播和促进安全电子设备和系统的研究和开发。该项目的智力价值包括开发（i）全面的SoC漏洞数据库，（ii）基于漏洞数据库的全面指标集，（iii）SoC安全验证工具套件，以及（iv）SoC基准测试。该项目领导了一个名为Trust-Hub的社区范围框架，旨在为SoC、计算平台和电子供应链提供更强的保证。基于信息共享的成功经验，Trust-Hub将成为一个重要的基于网络的基准测试、工具、数据库、平台、评估软件、源代码等资源库，其成果将引起全球主要半导体公司、美国政府机构和大学研究人员的兴趣。更广泛的影响包括通过为医疗保健、国防、军事、太空、金融、交通、汽车和其他关键应用构建安全可靠的电子设备和系统而为社会带来的好处。科学成果将提交给硬件和电子安全社区，以及半导体公司和政府机构。学生将在年度比赛中使用基准和工具。最后，该项目将支持培养一支了解急需的电子供应链和知识产权（IP）保护的员工队伍。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Concerns about electronic hardware and supply chain security have received a tremendous amount of attention over the past decade or so. Although researchers have offered solutions and security mechanisms to mitigate the issues, they do not still evaluate their effectiveness in a systematic manner. Some research is still being carried out in an ad-hoc fashion where the published results rely on figures of merit that limit objective cross-field comparisons. However, this has become vital as system-on-chips (SoCs) become pervasive in virtually every application (mobile, internet of things (IoT), and critical systems). This project aims to build platforms to validate benchmarks, develop tools and metrics to validate SoC security, and create a web-portal to disseminate and promote research and development in securing electronics devices and systems. The intellectual merits of this project include development of (i) a comprehensive SoC vulnerability database, (ii) a comprehensive set of metrics based on the vulnerability database, (iii) SoC security validation tool suite, and (iv) SoC benchmarking. This project leads a community-wide framework, called the Trust-Hub, toward stronger assurances in SoCs, computational platforms, and the electronics supply chain. Based on the demonstrated success of information sharing, Trust-Hub will serve as an important web-based repository for benchmarks, tools, databases, platforms, evaluation software, source codes, and much more.The results will interest major semiconductor companies, US government agencies and university researchers worldwide. The broader impacts include benefits to the society by building secure and trustworthy electronic devices and systems for healthcare, defense, military, space, finance, transportation, automotive and other critical applications. The scientific results will be presented to the hardware and electronics security community, and to semiconductor companies and government agencies. Students will use the benchmarks and tools in the annual competitions. Finally, this project will support development of a workforce who understand the much-needed protection of electronics supply chain and intellectual property (IP).This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.