IOTEE: Securing and analysing trusted execution beyond the CPU

IOTEE：保护和分析 CPU 之外的可信执行

• 批准号: EP/X037320/1
• 负责人: Ahmad Atamli
• 金额: $ 58.27万
• 依托单位: University of Southampton
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 未结题
• 来源: https://gtr.ukri.org/projects?ref=EP%2FX037320%2F1
• 关键词: IOTEE; Securing; analysing; trusted; execution

Trusted Execution Environments (TEEs) allow users to run their software in a secure enclave while assuring the integrity and confidentiality of data and applications. However, cloud computing these days relies heavily on peripherals such as GPUs, NICs, and FPGAs. Extending the security guarantees of CPU TEEs to such accelerators is currently not possible. New technologies are being proposed to address this, notably the PCIe Trusted Device Interface Security Protocol (TDISP).IOTEE is aims to evaluate the security guarantees of this new PCIe standard and its ability to provide trusted execution against strong adversaries. This will involve developing an emulator for the protocol, the use of formal modelling, as well as researching countermeasures against various software and hardware attacks.

可信执行环境（TEE）允许用户在安全区域中运行其软件，同时确保数据和应用程序的完整性和机密性。然而，如今的云计算在很大程度上依赖于GPU、GPU和FPGA等外围设备。将CPU TEE的安全保证扩展到这样的加速器目前是不可能的。正在提出新的技术来解决这个问题，特别是PCIe可信设备接口安全协议（TDISP）。IOTEE旨在评估这个新PCIe标准的安全保证及其针对强大对手提供可信执行的能力。这将涉及为该协议开发一个仿真器，使用正式建模，以及研究针对各种软件和硬件攻击的对策。

项目成果

Hardware Trojan Detection and High-Precision Localization in NoC-based MPSoC using Machine learning

• DOI: 10.1145/3566097.3567922
• 发表时间: 2023-01
• 期刊: 2023 28th Asia and South Pacific Design Automation Conference (ASP-DAC)
• 作者: Haoyu Wang;Basel Halak