CAREER: Toward Power Delivery Network-aware Hardware Security

电子计算硬件构成了我们信息系统和网络基础设施的基础。计算机芯片的物理安全威胁及其对策已经得到了广泛的研究。然而，能够物理访问系统的对手仍然可以绕过传统防御并威胁系统的安全。例子包括篡改计算机芯片的印刷电路板或移除其封装以读出存储在其上的密钥。此类攻击源自微电子供应链的各个阶段，由于缺乏对发生在硬件级别的事件的认识，传统的软件安全保护无法单独解决。本项目研究可以保护电子计算硬件免受源自微电子供应链各个阶段的复杂物理攻击。该项目的核心是更好地理解计算机的物理层，即，其电力输送网络（PDN）及其在实现安全和可信硬件方面的作用。有三个研究重点要研究：（1）融合用于分析基于PDN的签名的现有统计度量，实现非侵入性、整体、无黄金和根本原因感知的篡改检测;（2）使用信息理论概念来研究基于PDN的侧信道攻击的强度（即，阻抗分析）和制定对策;（3）创建基于PDN的传感器和指纹来监控物理完整性系统。该项目的成功成果将大大提高计算硬件的安全性。此外，该项目还包括各种推广活动，如组织特别会议和教程，开放源代码基准，让高中生了解基本电路概念和简单的电气诊断工具。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Electronic computing hardware forms the foundation of our information systems and cyberinfrastructure. The threats to the physical security of computer chips and countermeasures have been widely researched. However, adversaries with physical access to the system can still bypass conventional defenses and threaten the systems’ security. Examples include tampering with the printed circuit board of a computer chip or removing its package to read out secret keys stored on it. Such attacks, originating at various stages of the microelectronics supply chain, cannot be addressed solely by conventional software security protections due to the lack of awareness about the events occurring at the hardware level.This project investigates technologies that can secure electronic computing hardware against sophisticated physical attacks originating at various stages of the microelectronics supply chain. Central to this project is a better understanding of the computing machine's physical layer, i.e., its power delivery network (PDN) and its role in achieving secure and trusted hardware. There are three research thrusts to investigate: (1) Fusing the existing statistical metrics used for the analysis of PDN-based signatures, enabling non-invasive, holistic, golden-free, and root cause-aware tamper detection; (2) Using information-theoretic notions to investigate the strength of PDN-based side-channel attacks (i.e., impedance analysis) and developing countermeasures; (3) Creating the PDN-based sensors and fingerprints to monitor the physical integrity system. Successful outcomes of this project will significantly improve the security of computing hardware. Moreover, this project includes various outreach activities, such as organizing special sessions and tutorials, open-sourcing benchmarks, and exposing high school students to basic circuit concepts and simple electrical diagnosis tools.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.