CAREER: An Integrative and Scalable Approach to Embedded Hardware Protection

该项目探索了一种嵌入式硬件安全的综合方法，其中高效的设计解决方案补充了适当的测试/验证步骤和安全分析。它创造的技术可以在生命周期的不同阶段保护嵌入式系统免受硬件知识产权(IP)盗版和反向工程、不可信设计和制造设施中的硬件特洛伊木马攻击以及对硬件IP的恶意修改。研究了一种基于可扩展密钥的硬件混淆的设计方法，以防止硬件IP的非法使用和恶意修改。该设计技术与基于“自引用”的验证方法相结合，该方法在空间和时间上将芯片的侧通道签名与自身进行比较，以可靠地检测硬件特洛伊木马。执行安全分析，以使用适当的信任度量来衡量提议框架的有效性，并识别新出现的安全威胁。使用软件自动化工具和定制的硬件仿真平台对这些方法进行了验证。这项研究提高了对与嵌入式硬件安全相关的技术问题的理解，并将使安全和可信的硬件技术能够以低成本实现。该项目通过使用动手实验培训学生硬件安全的各个方面，让本科生和高中生参与研究，并将研究成果、课程模块、软件工具和硬件试验台传播到当地学校和同行研究社区，从而整合了教育。它将通过由国际和平协会在Facebook创建的“硬件安全”小组以及通过在IEEE/ACM主要会议上组织特别会议来提高对安全问题和对策的认识。

This project explores an integrative approach to embedded hardware security, where efficient design solutions complement appropriate test/validation steps and security analysis. It creates technology to protect embedded systems at different stages of life-cycle against hardware intellectual property (IP) piracy and reverse engineering, hardware Trojan attacks in untrusted design and fabrication facilities, and malicious modifications of hardware IP. It investigates a design approach based on scalable key-based hardware obfuscation to protect hardware IP from illegal usage and malicious modifications. The design technique is combined with a "self-referencing" based validation approach, which compares side-channel signature of a chip with itself - in both spatial and temporal manner, to reliably detect hardware Trojans. Security analysis is performed to measure effectiveness of the proposed framework using appropriate trust metrics and to identify emerging security threats. The approaches are validated using software automation tools and a custom hardware emulation platform. The research improves understanding of technological issues related to embedded hardware security and will enable technologies for secure and trustworthy hardware at low cost. The project integrates education through training students various aspects of hardware security using hands-on experiments, involving undergraduate and high-school students in research, and disseminating research results, course modules, software tools and the hardware test bed to local schools and peer research community. It will create awareness about the security issues and countermeasures through the "Hardware Security" group in Facebook created by the PI and through organizing special sessions in major IEEE/ACM conferences.