TWC: Small: Employing Information Theoretic Metrics to Quantify and Enhance the Security of Hardware Designs

TWC：小型：采用信息论指标来量化和增强硬件设计的安全性

• 批准号: 1527631
• 负责人: Ryan Kastner
• 金额: $ 51.6万
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1527631&HistoricalAwards=false
• 关键词: TWC; Small; Employing; Information; Theoretic; TWC; Small; Employing; Information; Theoretic

Computing devices control much of the world around us. They power smart phones, kitchen appliances, cars, power grids, medical devices, and many of the other objects that we rely upon in our everyday lives. The foundation of these systems is the hardware, which are complex multi-billion transistor chips. Gaining control of the hardware provides unfettered access to every part of the system. This makes it a highly attractive target for attackers. Compromised hardware allows unauthorized users to obtain personal information, and can be used to force the device into unsafe and potentially life threatening scenarios. Thus, it is paramount to develop techniques to enable secure hardware design.Creating secure hardware requires the designer to assess potential vulnerabilities. Currently it is hard to concretely say anything about the security (or lack thereof) of the hardware. This project is developing quantitative hardware security metrics that enable designers to precisely evaluate the security of the system. The team is attempting this by employing statistical measures on the amount of uncertainty and information flow that is present across different portions of the hardware. These metrics are oblivious to the types of variables under consideration. Thus, the team can assess both functional security properties related to confidentiality and integrity as well as covert channels. These metrics enable the characterization of portions of the system that are potentially vulnerable to attacks. And they determine the effectiveness of mitigation techniques on the overall security of the system. The end result is more secure hardware, which leads to safer and more secure computing devices.

计算设备控制着我们周围的大部分世界。他们为我们在日常生活中依赖的其他许多物体提供动力智能手机，厨房用具，汽车，电网，医疗设备。这些系统的基础是硬件，这是复杂的数十亿个晶体管芯片。获得对硬件的控制提供了对系统每个部分的不受限制访问。这使其成为攻击者的极具吸引力的目标。受损的硬件允许未经授权的用户获取个人信息，并可以将设备迫使该设备进入不安全且潜在的威胁生命的情况。因此，开发技术以实现安全硬件设计至关重要。创建安全的硬件需要设计人员评估潜在的脆弱性。目前，很难具体说明硬件的安全性（或缺乏安全性）。该项目正在开发定量硬件安全指标，使设计人员能够精确评估系统的安全性。该团队正在尝试通过对硬件不同部分的不确定性和信息流的量进行统计措施来尝试这一点。这些指标忽略了正在考虑的变量的类型。因此，团队可以评估与机密性和完整性以及秘密渠道相关的功能安全属性。这些指标使系统的某些部分可能容易受到攻击。他们决定了缓解技术对系统整体安全性的有效性。最终结果是更安全的硬件，这会导致更安全，更安全的计算设备。