SaTC: STARSS: FAME: Fault-attack Awareness using Microprocessor Enhancements

随着嵌入式和普及平台上敏感和安全关键处理的巨大增长，安全电子产品的威胁模型正在从软件扩展到硬件。该项目的主要成果是FAME，这是微处理器体系结构检测这些故障注入攻击的硬件技术的集合，并通过软件中的适当响应来缓解故障分析。FAME处理器既是一种体系结构概念，也是一种芯片原型，它采用了微处理器硬件故障检测与软件应用故障响应相结合的故障对策。硬件中的故障检测使用静态(设计时)和动态(运行时)技术进行现场故障检测。这些故障检测硬件扩展针对功率和成本进行了优化，并且可以从软件应用程序启用它们。这种灵活性使FAME能够在充分发挥微处理器性能的同时支持非关键应用程序，同时仍然为安全关键应用程序提供全面的故障对策。FAME处理器芯片展示了这些技术，以及随着FAME的发展而研究的新形式的故障分析。该项目的影响是更安全、更值得信赖的微处理器，它们知道自己的物理环境及其对内部处理构成的威胁。这样的微处理器为既能处理逻辑威胁又能处理物理威胁的网络安全应用程序提供了基础。

With the tremendous growth of sensitive and security-critical processing on embedded and pervasive platforms, the threat model for secure electronics is expanding from software into hardware. A wide range of fault attacks, based on physical manipulation of the electronics operating environment, is now available to the adversary.The major outcome of this project is FAME, a collection of hardware techniques for microprocessor architectures to detect these fault injection attacks, and to mitigate fault analysis through an appropriate response in software. The FAME processor is developed both as an architecture concept as well as a chip prototype.The FAME processor uses fault countermeasures that combine fault detection in microprocessor hardware with fault response in the software application. The fault detection in hardware uses static (design-time) and dynamic (runtime) techniques for in-situ fault detection. These fault-detecting hardware extensions are optimized for power and cost, and they can be enabled from the software application. This flexibility allows FAME to support non-critical applications at full microprocessor performance, while still offering full fault countermeasures for security-critical applications. The FAME processor chip demonstrates these techniques, as well as novel forms of fault analysis that are investigated in tandem with the development of FAME.The impacts of this project are safer, more trustworthy microprocessors that are aware of their physical environment and the threats it poses to their internal processing. Such microprocessors offer the basis for cyber-security applications that can handle both logical as well as physical threats.