SBIR Phase II: A Software Platform for Assessment of Untrusted Electronics

SBIR 第二阶段：用于评估不可信电子产品的软件平台

基本信息

批准号：
2304533
负责人：
Raj Gautam Dutta
金额：
$ 90.78万
依托单位：
SILICON ASSURANCE LLC
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2023
资助国家：
美国
起止时间：
2023-09-01 至 2025-08-31
项目状态：
未结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=2304533&HistoricalAwards=false
关键词：
SBIR Phase II Software Platform

项目摘要

The broader/commercial impact of this Small Business Innovation Research (SBIR) Phase II project is to address hardware security and trust issues that are threatening the semiconductor supply chain. Various threats exist from the design stage till the end of the life of chips, such as malicious logic insertion, intellectual property (IP) theft, reverse engineering, backdoor insertion, and information leakage from fabricated chips. Ensuring the security of the supply chain necessitates enhancing chip integrity through proactive measures starting from the design stage to distribution. With security concerns increasingly gaining prominence in specific market segments, such as automotive, defense, and healthcare, various stakeholders, such as device manufacturers, system integrators, end users, and governments are voicing the need for a trusted semiconductor supply chain. Using the proposed software platform, stakeholders of the chip industry will be able to address security challenges at a low cost, without needing trained experts. Furthermore, the team's tools will contribute to minimizing electronic waste generated from refabricating flawed chips and developing software patches that reduce the performance of insecure systems. The proposed technologies will drive chip designers to prioritize enhancing chip security, ensuring competitiveness in environments where secure systems are essential.This Small Business Innovation Research (SBIR) Phase II project seeks to address the challenge of commercial deployment of hardware security software to detect, assess, and mitigate hardware security vulnerabilities in system-on-chip (SoC) designs. By utilizing a novel methodology, the tool converts Common Weakness Enumerations (CWEs) into a formal description of security properties, which the platform's remaining tools can interpret to identify commonly occurring errors and vulnerabilities in hardware designs. The software seamlessly integrates with major commercial electronic design automation (EDA) tool flow, enhancing the deployment of hardware security software. The toolsets detect security issues in SoCs, including access control violations, asset leakage, and malicious logic or backdoors. The software considers security concerns in the global electronic supply chain involving untrusted entities. The team will collaborate with industry leaders to ensure widespread accessibility. Partnerships with several design companies will demonstrate the unique capabilities of the tool to analyze large designs, e.g., RISC-V processors, and detect a wide array of security vulnerabilities. The utilization of the product will significantly enhance the technology readiness level (TRL) and drive widespread adoption.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

这项小型企业创新研究（SBIR）II期项目的更广泛/商业影响是解决威胁半导体供应链的硬件安全和信任问题。从设计阶段到筹码生命的结束，都存在各种威胁，例如恶意逻辑插入，知识产权（IP）盗窃，反向工程，后门插入以及造成的芯片信息泄漏。确保供应链的安全性必须通过从设计阶段到分销开始的积极措施来增强CHIP完整性。随着安全问题越来越多地在特定市场领域（例如汽车，国防和医疗保健）中获得突出，各种利益相关者，例如设备制造商，系统集成商，最终用户和政府，都表明需要值得信赖的半导体供应链。使用拟议的软件平台，芯片行业的利益相关者将能够以低成本解决安全挑战，而无需训练有素的专家。此外，该团队的工具将有助于最大程度地减少通过重新制作有缺陷的芯片和开发软件补丁而产生的电子废物，从而降低不安全系统的性能。拟议的技术将驱动芯片设计人员优先提高芯片安全性，确保在安全系统必不可少的环境中进行竞争力。本小型企业创新研究（SBIR）II阶段项目旨在应对硬件安全软件的商业部署挑战，以检测，评估和减轻Systems-Chip（SOC Chip）（SOC）设计的硬件安全性。通过利用一种新颖的方法，该工具将共同的弱点（CWES）转换为对安全性属性的正式描述，该平台的其余工具可以解释，以确定硬件设计中常见的错误和漏洞。该软件与主要的商业电子设计自动化（EDA）工具流无缝集成，从而增强了硬件安全软件的部署。这些工具集检测到SOC中的安全问题，包括访问控制违规，资产泄漏以及恶意逻辑或后门。该软件考虑了涉及不受信任实体的全球电子供应链中的安全问题。该团队将与行业领导者合作，以确保广泛的可及性。与多家设计公司的合作伙伴关系将展示该工具分析大型设计的独特功能，例如RISC-V处理器，并检测到广泛的安全漏洞。该产品的利用将显着提高技术准备水平（TRL）并推动广泛采用。该奖项反映了NSF的法定任务，并且使用基金会的知识分子优点和更广泛的影响评估标准，被认为值得通过评估来获得支持。