CAREER: An Integrative and Scalable Approach to Embedded Hardware Protection

该项目探讨了嵌入式硬件安全的综合方法，其中高效的设计解决方案补充了适当的测试/验证步骤和安全分析。它创造了一种技术，可以在生命周期的不同阶段保护嵌入式系统免受硬件知识产权（IP）盗版和逆向工程，不受信任的设计和制造设施中的硬件特洛伊木马攻击以及恶意修改硬件IP。研究了一种基于可扩展的基于密钥的硬件混淆的设计方法，以保护硬件IP免受非法使用和恶意修改。该设计技术与基于“自引用”的验证方法相结合，该方法将芯片的侧通道签名与其本身进行比较-以空间和时间的方式，以可靠地检测硬件木马。进行安全分析，以衡量所提出的框架使用适当的信任度量的有效性，并确定新出现的安全威胁。使用软件自动化工具和自定义硬件仿真平台的方法进行验证。该研究提高了对嵌入式硬件安全相关技术问题的理解，并将以低成本实现安全和可靠的硬件技术。该项目通过使用实践实验培训学生硬件安全的各个方面，使本科生和高中生参与研究，并向当地学校和同行研究社区传播研究成果、课程模块、软件工具和硬件测试平台，从而整合了教育。它将通过PI在Facebook上创建的“硬件安全”小组以及通过在主要IEEE/ACM会议上组织特别会议来提高对安全问题和对策的认识。

This project explores an integrative approach to embedded hardware security, where efficient design solutions complement appropriate test/validation steps and security analysis. It creates technology to protect embedded systems at different stages of life-cycle against hardware intellectual property (IP) piracy and reverse engineering, hardware Trojan attacks in untrusted design and fabrication facilities, and malicious modifications of hardware IP. It investigates a design approach based on scalable key-based hardware obfuscation to protect hardware IP from illegal usage and malicious modifications. The design technique is combined with a "self-referencing" based validation approach, which compares side-channel signature of a chip with itself - in both spatial and temporal manner, to reliably detect hardware Trojans. Security analysis is performed to measure effectiveness of the proposed framework using appropriate trust metrics and to identify emerging security threats. The approaches are validated using software automation tools and a custom hardware emulation platform. The research improves understanding of technological issues related to embedded hardware security and will enable technologies for secure and trustworthy hardware at low cost. The project integrates education through training students various aspects of hardware security using hands-on experiments, involving undergraduate and high-school students in research, and disseminating research results, course modules, software tools and the hardware test bed to local schools and peer research community. It will create awareness about the security issues and countermeasures through the "Hardware Security" group in Facebook created by the PI and through organizing special sessions in major IEEE/ACM conferences.