安全实时的片上网络路由随机化抗侧信道攻击
Side-Channel Attack Resilience through Route Randomisation in Secure Real-Time Networks-on-Chip
摘要：
安全性可以被视为NoC资源管理中的优化目标，因此会对其他目标（如实时的【形】可扩展性）进行权衡。在本文中，我们将展示如何增加NoC的弹性对一个具体类型的安全攻击，命名为侧信道攻击，利用特定的非功能属性（如数据包延迟和路由，在NoC的情况下）之间的相关性来推断安全应用程序的功能行为。例如，通过NoC的给定链路传输数据包可能会提示缓存未命中，攻击者可以使用该缓存未命中来猜测秘密加密密钥的特定部分，从而有效地削弱它。因此，我们提出了分组路由随机化作为一种机制来增加NoC对侧信道攻击的弹性，特别关注这种方法对硬实时的【形】系统的潜在影响，其中可互换性是至关重要的设计要求。使用进化优化方法，我们展示了如何有效地应用路由随机化，以这样一种方式，它可以增加片上网络的安全性，同时控制其对硬实时的【形】性能保证的影响。基于分析和模拟模型的大量实验证据支持我们的研究结果。
英文摘要：
Security can be seen as an optimisation objective in NoC resource management, and as such poses trade-offs against other objectives such as real-time schedulability. In this paper, we show how to increase NoC resilience against a concrete type of security attack, named side-channel attack, which exploit the correlation between specific non-functional properties (such as packet latencies and routes, in the case of NoCs) to infer the functional behaviour of secure applications. For instance, the transmission of a packet over a given link of the NoC may hint on a cache miss, which can be used by an attacker to guess specific parts of a secret cryptographic key, effectively weakening it. We therefore propose packet route randomisation as a mechanism to increase NoC resilience against side-channel attacks, focusing specifically on the potential impact of such an approach upon hard real-time systems, where schedulability is a vital design requirement. Using an evolutionary optimisation approach, we show how to effectively apply route randomisation in such a way that it can increase NoC security while controlling its impact on hard real-time performance guarantees. Extensive experimental evidence based on analytical and simulation models supports our findings.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
