Automated security analysis of hardware systems

硬件系统的自动化安全分析

• 批准号: 2719108
• 金额: --
• 依托单位: University of Cambridge
• 依托单位国家: 英国
• 项目类别: Studentship
• 财政年份: 2022
• 资助国家: 英国
• 起止时间: 2022 至 无数据
• 项目状态: 未结题
• 来源: https://gtr.ukri.org/projects?ref=studentship-2719108
• 关键词: Automated; security; analysis; hardware; systems

This research project proposes to investigate and create machine learning (ML)-backed tools to perform automatedsecurity analysis of embedded and IoT devices, from both a hardware and software perspective. The main challengesinvolved with analysing embedded systems stem from the diversity and tight coupling of hardware and software involved.Another very real security threat is caused by the supply chain involved in producing these IoT devices. The componentsthat make up these systems are made by a wide range of companies, all with different security standards andguarantees. ML systems have a similar problem due to models being based on a myriad of different software packagesfrom different authors. This outsourcing poses a security risk. An automated security analysis system forhardware/software can alleviate this problem by making it easier for manufacturers to test their products, and by allowingcompanies using these suppliers to test individual components up to a necessary security standard. We propose to usehierarchical reinforcement learning architecture to tackle the problem of vulnerability discovery from 'both ends'. Namely,the bottom-level hierarchy would be responsible for discovery and exploit of low-level vulnerabilities and bugs (such asbuffer-overflow, or use-after-free susceptible chunks of code), while the top-level hierarchy will attempt to link thesetogether to create a more complex exploit.

该研究项目提议研究和创建机器学习（ML）支持的工具，以从硬件和软件的角度对嵌入式和物联网设备进行自动安全分析。分析嵌入式系统的主要挑战来自于所涉及的硬件和软件的多样性和紧密耦合。另一个非常真实的安全威胁来自于生产这些物联网设备的供应链。组成这些系统的组件是由各种各样的公司制造的，它们都有不同的安全标准和保证。ML系统也有类似的问题，因为模型是基于来自不同作者的无数不同软件包。这种外包带来了安全风险。硬件/软件的自动安全分析系统可以通过使制造商更容易测试他们的产品来缓解这个问题，并允许使用这些供应商的公司测试各个组件达到必要的安全标准。我们建议使用分层强化学习架构来解决从“两端”发现漏洞的问题。也就是说，底层层次结构将负责发现和利用低级别的漏洞和错误（如缓冲区溢出，或释放后使用易受影响的代码块），而顶层层次结构将尝试将这些链接在一起以创建更复杂的利用。