FMitF: Track I: A Holistic Approach Towards Online Monitoring of Integrated Circuits and Systems

FMITF：第一轨：集成电路和系统在线监控的整体方法

• 批准号: 2319572
• 负责人: Konstantinos Mamouras
• 金额: $ 75万
• 依托单位: William Marsh Rice University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-10-01 至 2027-09-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2319572&HistoricalAwards=false
• 关键词: FMitF; Track; Holistic; Approach; Towards

The ever-increasing complexity of chip design and system integration, the reliance on third-party hardware components, and the untrustworthy global semiconductor supply chains open up the possibility for the introduction of errors. These errors can be unintentional consequences of design bugs and neglected operating conditions or induced by intentional attackers. Recently, it has been shown that even more challenging threats exist where the attackers manipulate the hardware operations via malicious modifications of a hardware design before fabrication. Given the possibility of unintentional errors and maliciously modified hardware components and the difficulty of detecting all these issues, this project develops one last line of defense by monitoring fabricated hardware components during normal deployment and operation. This approach enables the detection of attacks or other conditions that violate the system's integrity and security. The project's novelties are the development of a rigorous approach for monitoring the operation of integrated circuits and the design of a software toolchain and hardware prototype that realizes the monitors. The project's impacts are advances in the reliability, safety and security of the hardware that forms the basis of computing systems.The project develops a novel monitor specification language, called FlowSL, for describing properties that are relevant for the integrity and security of a system. FlowSL goes beyond established approaches based on temporal logic and regular expressions in order to achieve a balance between expressiveness and being amenable to efficient execution on hardware. Principled heuristics and compilation algorithms are designed for the effective translation of monitor specifications into primitive hardware operations. The specification language is co-designed with a programmable hardware accelerator. The project designs highly optimized computational primitives in hardware, which are used for realizing individual operators of FlowSL, and a scalable and programmable pipeline architecture that enables the composition of several primitives to implement the monitors. A full-stack prototype is developed, which is evaluated on representative applications from the domains of hardware security and runtime verification of cyber-physical systems.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

芯片设计和系统集成的复杂性不断增加，对第三方硬件组件的依赖，以及不可信的全球半导体供应链，都为引入错误提供了可能性。这些错误可能是设计错误和被忽视的操作条件的无意后果，也可能是由故意的攻击者引起的。最近，有研究表明，存在更具挑战性的威胁，攻击者在制造之前通过恶意修改硬件设计来操纵硬件操作。考虑到意外错误和恶意修改硬件组件的可能性以及检测所有这些问题的难度，该项目通过在正常部署和操作期间监控制造的硬件组件来开发最后一道防线。这种方法可以检测攻击或其他违反系统完整性和安全性的情况。该项目的新颖之处在于开发了一种严格的方法来监控集成电路的运行，并设计了实现监视器的软件工具链和硬件原型。该项目的影响是在构成计算系统基础的硬件的可靠性、安全性和安全性方面取得进展。该项目开发了一种新的监控规范语言，称为FlowSL，用于描述与系统完整性和安全性相关的属性。FlowSL超越了基于时态逻辑和正则表达式的既定方法，以便在表达性和可在硬件上有效执行之间实现平衡。设计了原则性的启发式和编译算法，以便有效地将监视器规范转换为原始硬件操作。该规范语言与可编程硬件加速器共同设计。该项目在硬件中设计了高度优化的计算基元，用于实现FlowSL的单个操作，以及可扩展和可编程的管道架构，使多个基元的组合能够实现监视器。开发了一个全栈原型，并在网络物理系统硬件安全和运行时验证领域的代表性应用中进行了评估。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。