SaTC: STARSS: Collaborative: IPTrust: A Comprehensive Framework for IP Integrity Validation

SaTC：STARSS：协作：IPTrust：IP 完整性验证的综合框架

• 批准号: 1441667
• 负责人: Prabhat Mishra
• 金额: $ 13万
• 依托单位: University of Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-10-01 至 2018-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1441667&HistoricalAwards=false
• 关键词: SaTC; STARSS; Collaborative; IPTrust; Comprehensive

To reduce production cost while meeting time-to-market constraints, semiconductor companies usually design hardware systems with reusable hardware modules, popularly known as Intellectual Property (IP) blocks. Growing reliance on these hardware IPs, often gathered from untrusted third-party vendors, severely affects the security and trustworthiness of the final system. The hardware IPs acquired from external sources may come with deliberate malicious implants, undocumented interfaces working as hidden backdoor, or other integrity issues. Tampered hardware IPs can lead to security and privacy concerns (e.g., when used in handheld devices) as well as life-threatening consequences (e.g., when used in safety-critical systems). It is extremely difficult to verify the integrity and trustworthiness of hardware IPs due to incomplete functional specifications and lack of golden reference models. To address this critical need, in this project, we develop a comprehensive and scalable framework for IP trust analysis and verification. We evaluate IPs of diverse types and forms and develop threat models, taxonomy and instances of IP trust/integrity issues. We investigate an integrative IP trust validation framework that combines the complementary abilities of functional, structural and parametric verification. We employ both statistical as well as judicious directed tests to sensitize rarely triggered malicious changes and observe their effects. The unified validation framework is flexible to detect diverse tampering efforts, scalable to large designs, and eliminates the need for a golden model. A platform for IP trust validation, threat analysis, and trust metrics would provide enabling technology to future designers to implement secure and trusted systems for diverse applications.

为了在满足市场上的限制时降低生产成本，半导体公司通常会设计具有可重复使用的硬件模块的硬件系统，通常称为知识产权（IP）块。越来越多地依赖这些硬件IP，通常是从不受信任的第三方供应商那里收集的，严重影响了最终系统的安全性和可信赖性。从外部来源获得的硬件IP可能带有故意恶意植入物，无证界面作为隐藏后门工作或其他完整性问题。篡改的硬件IP可以导致安全和隐私问题（例如，在手持设备中使用）以及威胁生命的后果（例如，在安全至关重要的系统中使用时）。由于功能规范不完整和缺乏黄金参考模型，因此很难验证硬件IP的完整性和可信度。为了满足这个关键需求，在这个项目中，我们为IP信任分析和验证开发了一个全面，可扩展的框架。我们评估不同类型和形式的IP，并开发威胁模型，分类法和IP信任/完整性问题的实例。我们研究了一个集成的IP信任验证框架，该框架结合了功能，结构和参数验证的互补能力。我们同时采用统计和明智的定向测试来使很少触发恶意变化并观察其影响。统一的验证框架可以灵活地检测各种篡改工作，可扩展到大型设计，并消除了对黄金模型的需求。 IP信托验证，威胁分析和信任指标的平台将为未来的设计师提供促进技术，以实施安全和值得信赖的系统来为不同的应用程序。