arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1901.07299cs.CRcs.LGstat.ML
收藏

SIMCom:用于运行时间硬件木马检测的模块间通信统计嗅探

SIMCom: Statistical Sniffing of Inter-Module Communications for Run-time Hardware Trojan Detection

Technische Universität Wien (TU Wien)(维也纳工业大学(TU Wien));Tennessee Tech University(田纳西理工大学);National University of Sciences and Technology (NUST)(国立科技大学(NUST))

Faiq Khalid, Syed Rafay Hasan, Osman Hasan, Muhammad Shafique

摘要:

及时检测硬件木马(HT)已成为安全集成电路的主要挑战。我们提出了一个运行时间的HT检测方法,采用了多参数的统计流量建模的通信信道在一个给定的片上系统(SoC),命名为SIMCom。其主要思想是使用多个侧信道信息(如Hurst指数、注入分布的标准偏差和跳数分布)对通信进行建模,以准确识别基于HT的在线异常(影响通信而不影响协议或控制信号)。在设计时,我们的方法采用了“属性规约语言“来定义和嵌入断言的RTL,指定一个给定的SoC的正确的通信行为。在运行时间,它监视异常的通信行为,通过检查这些断言的执行模式。为了说明,我们评估了三个SoC的SIMCom,即,SoC 1(4个单核MC 8051和MCU模块)、SoC 2(4个单核MC 8051、AES、以太网、memcable、BasicRSA、RS232模块)和SoC 3(4个单核LEON 3相互连接和AES、以太网、memcable、BasicRSA、RS 23 s模块微控制器)。实验结果表明,SIMCom能够以小于1%的面积和功耗开销检测出所有基准木马(可在trust-hub上使用)。

英文摘要:

Timely detection of Hardware Trojans (HTs) has become a major challenge for secure integrated circuits. We present a run-time methodology for HT detection that employs a multi-parameter statistical traffic modeling of the communication channel in a given System-on-Chip (SoC), named as SIMCom. The main idea is to model the communication using multiple side-channel information like the Hurst exponent, the standard deviation of the injection distribution, and the hop distribution jointly to accurately identify HT-based online anomalies (that affects the communication without affecting the protocols or control signals). At design time, our methodology employs a "property specification language" to define and embed assertions in the RTL, specifying the correct communication behavior of a given SoC. At run-time, it monitors the anomalies in the communication behavior by checking the execution patterns against these assertions. For illustration, we evaluate SIMCom for three SoCs, i.e., SoC1 ( four single-core MC8051 and UART modules), SoC2 (four single-core MC8051, AES, ethernet, memctrl, BasicRSA, RS232 modules), and SoC3 (four single-core LEON3 connected with each other and AES, ethernet, memctrl, BasicRSA, RS23s modules microcontrollers). The experimental results show that with the combined analysis of multiple statistical parameters, SIMCom is able to detect all the benchmark Trojans (available on trust-hub) with less than 1% area and power overhead.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑