片上网络防火墙:对抗有缺陷和恶意的片上系统硬件
Network-on-Chip Firewall: Countering Defective and Malicious System-on-Chip Hardware
摘要:
移动设备的应用程序和数据的完整性和机密性至关重要。它们通常包含片上系统(SoC),它集成了微处理器和通过片上网络(NoC)连接的外围知识产权(IP)。恶意IP或软件可能会危及关键数据。可以通过使用存储管理单元(MMU)和其他访问控制机制来控制NoC上的数据传输来阻止某些类型的攻击。然而,商用处理器不提供关于这种机制的正确性的强有力的保证,并且验证系统中的所有访问控制机制都被正确配置是具有挑战性的。我们提出了一个片上网络防火墙(NoCF),提供了一个单一的控制点,并服从正式的分析。我们展示了其抵抗畸形NoC命令的能力的初步分析,我们认为这是第一次努力来检测错误或恶意IP违反NoC协议所产生的漏洞。
英文摘要:
Mobile devices are in roles where the integrity and confidentiality of their apps and data are of paramount importance. They usually contain a System-on-Chip (SoC), which integrates microprocessors and peripheral Intellectual Property (IP) connected by a Network-on-Chip (NoC). Malicious IP or software could compromise critical data. Some types of attacks can be blocked by controlling data transfers on the NoC using Memory Management Units (MMUs) and other access control mechanisms. However, commodity processors do not provide strong assurances regarding the correctness of such mechanisms, and it is challenging to verify that all access control mechanisms in the system are correctly configured. We propose a NoC Firewall (NoCF) that provides a single locus of control and is amenable to formal analysis. We demonstrate an initial analysis of its ability to resist malformed NoC commands, which we believe is the first effort to detect vulnerabilities that arise from NoC protocol violations perpetrated by erroneous or malicious IP.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。