SaTC: CORE: Medium: Introducing DIVOT: A Novel Architecture for Runtime Anti-Probing/Tampering on I/O Buses

该项目引入了一种新的安全技术，可以保护计算机系统中的数据机密性、数据完整性和正确性。具体地说，这项新技术能够立即检测到恶意硬件攻击，以便采取适当的行动，防止信息在计算机系统内部组件之间传输时被窃取和篡改。这项新技术可以用一个简单的数字硬件作为计算机系统的一部分来实现。这个项目的目标之一是设计、开发和实现未来安全计算机中包含的新硬件结构。该项目的直接成果是从新安全体系结构的理论研究和实验实施中获得的基本知识，称为传输线的阻抗和变化检测。Didvot是适用于任何计算机系统的通用、可扩展和低开销的安全解决方案。它是由几个新概念实现的，包括模拟到概率转换(APC)和概率密度调制(PDM)。在这个项目中，将设计、实现和测试一个运行时可访问的、与CMOS兼容的、集成了I/O的Divot硬件结构。将除草技术与各种互联传输线相结合，将产生一个变革性的安全可信的架构，大大减少攻击面。除草架构的更广泛影响是显著的。它代表了对抗许多物理探测/篡改威胁的通用对策，并显著增强了从服务器到移动设备和物联网(IoT)中的嵌入式计算机等各种计算平台的硬件安全性。此外，该项目的成果为许多其他未来的应用铺平了道路，包括智能电网安全、医疗保健安全、机器人安全等。将产生许多创新的架构设计和安全协议，这些设计和安全协议可能会发表或转移到计算机行业。研究成果将被纳入我们的计算机工程课程。实验数据将以ASCII格式存储，源代码将以C语言存储，FPGA实现将以Verilog或VHDL语言格式，技术论文/报告将以PDF格式存储。除了技术出版物外，年度和最终报告将提交给NSF，介绍研究进展和发现。所有数据将在项目结束后在PIS的网站上保留至少四年：www.ele.uri.edu/~wei和www.ele.uri.edu/~qyang。这一奖项反映了NSF的法定使命，并已通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

This project introduces a new security technology that protects data confidentiality, data integrity, and correctness in computer systems. Specifically, the new technology is able to instantly detect malicious hardware attacks so that appropriate actions can be taken to prevent information from stolen and alteration when information is transmitted between components inside a computer system. The new technology can be realized using a simple digital hardware as part of a computer system. One of the objectives of this project is to design, develop, and implement the new hardware structure to be incorporated in future secure computers. The direct outcome of this project is fundamental knowledge gained from theoretical study and experimental implementation of the new security architecture, referred to as DIVOT (Detecting Impedance Variation Of Transmission-lines).  DIVOT is a generic, scalable, and low-overhead security solution for any computer system. It is made possible by several new concepts including analog-to-probability conversion (APC) and probability density modulation (PDM). A runtime-accessible, CMOS-compatible, and I/O-integrated DIVOT hardware structure will be designed, implemented, and tested in this project. Integrating DIVOT with a variety of interconnecting transmission-lines will lead to a transformative secure and trustworthy architecture that substantially reduces attack surface.The broader impact of DIVOT architecture is significant.  It represents a universal countermeasure to fight against many physical probing/tampering threats and significantly enhances hardware security of various computing platforms ranging from servers to embedded computers in mobile devices and IoTs (Internet of things). Moreover, the outcomes of the project pave the way for many other future applications, including smart grid security, health care security, robotics security, etc. Many innovative architecture designs and security protocols will be generated that are likely to be published or transferred to the computer industry. Research results will be incorporated into our computer engineering curriculum.Experimental data will be stored in ASCII format, source codes will be in C language, FPGA implementation will be in Verilog or VHDL format, and technical papers/reports will be in PDF format. Besides technical publications, annual and final reports will be presented to NSF on research progress and discoveries. All the data will be retained for at least four years after conclusion of the project on PIs’ website: www.ele.uri.edu/~wei and www.ele.uri.edu/~qyang.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.