Hardware Trojan Detection Using Changepoint-Based Anomaly Detection Techniques
Hardware Trojan Detection Using Changepoint-Based Anomaly Detection Techniques
复制标题
DOI：
10.1109/tvlsi.2019.2925807
复制
发表时间：
2019-12-01
影响因子：
2.8
通讯作者：
Tahoori, Mehdi B.
中科院分区：
文献类型：
--
作者：
Elnaggar, Rana;Chakrabarty, Krishnendu;Tahoori, Mehdi B.
近年来，将半导体设计和制造流程的各个方面外包给遍布全球的各方的趋势日益增长。这种外包增加了攻击者在原始设计中添加恶意逻辑（称为硬件木马）的风险。现代微处理器的复杂性增加了在设计和制造的早期阶段检测硬件木马的难度。因此，需要运行时检测技术来捕获在这些阶段逃避检测的木马。本文介绍了一种基于机器学习的微处理器内核运行时硬件木马检测方法。这种方法使用基于变更点的异常检测算法来检测木马的激活，这些木马会在从性能计数器获得的数据流中引入异常模式。它不修改原来的微处理器设计来集成片上监控传感器。我们通过检测导致拒绝服务、系统性能下降和微处理器核心功能变化的木马程序的激活来评估我们的方法。使用OpenSPARC T1内核和现场可编程门阵列（FPGA）原型框架获得的结果表明，大多数实现的木马激活检测的真阳性率超过99%，假阳性率为0%。
There has been a growing trend in recent years to outsource various aspects of the semiconductor design and manufacturing flow to different parties spread across the globe. Such outsourcing increases the risk of adversaries adding malicious logic, referred to as hardware Trojans, to the original design. The increased complexity of modern microprocessors increases the difficulty in detecting hardware Trojans at early stages of design and manufacturing. Therefore, there is a need for run-time detection techniques to capture Trojans that escape detection at these stages. In this paper, we introduce a machine learning-based run-time hardware Trojan detection method for microprocessor cores. This approach uses changepoint-based anomaly detection algorithm to detect the activation of Trojans that introduce abnormal patterns in the data streams obtained from performance counters. It does not modify the original microprocessor design to integrate on-chip monitoring sensors. We evaluate our method by detecting the activation of Trojans that cause denial-of-service, the degradation of system performance, and change in functionality of a microprocessor core. Results obtained using the OpenSPARC T1 core and an field-programmable gate array (FPGA) prototyping framework show that the Trojan activation is detected with a true positive rate of above 99% and a false positive rate of 0% for most of the implemented Trojans.