arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1908.00289cs.AR
收藏

容错片上网络中丢包攻击的抑制

Runtime Mitigation of Packet Drop Attacks in Fault-tolerant Networks-on-Chip

N Prasad, Navonil Chatterjee, Santanu Chattopadhyay, Indrajit Chakrabarti

摘要:

片上网络(Networks-on-Chip,NoCs)中的容错路由(Fault-tolerant routing,FTR)已经成为维持多核系统性能的一种常见做法。另一方面,第三方知识产权块的使用使安全性成为现代设计中的主要关注点。针对采用FTR算法的片上网络中硬件木马(HTs)可能导致的丢包攻击,提出了一种防御机制。与外部终止开关相关联的HT被有条件地触发以启用攻击场景。安全模块,如认证单元,缓冲区洗牌,和控制单元,已被提出来挫败在运行时的攻击,并恢复在NoC中的安全数据包流。这些单元一起工作,作为一个盾牌,以保护数据包从前进到输出端口与故障链路。综合结果表明,所提出的安全FT路由器,与基线FT路由器相比,面积和功率开销最多分别为4.04%和0.90%。性能评估表明,与基准FT路由器相比,在运行真实基准以及合成流量时,SeFaR在执行时间、能耗、平均数据包延迟和功率延迟乘积度量方面具有可接受的开销。此外,一个全面的安全路由器的可能的设计已经提出,以解决和减轻多种攻击,可以出现在NoC路由器。

英文摘要:

Fault-tolerant routing (FTR) in Networks-on-Chip (NoCs) has become a common practice to sustain the performance of multi-core systems with an increasing number of faults on a chip. On the other hand, usage of third-party intellectual property blocks has made security a primary concern in modern day designs. This article presents a mechanism to mitigate a denial-of-service attack, namely packet drop attack, which may arise due to the hardware Trojans (HTs) in NoCs that adopt FTR algorithms. HTs, associated with external kill switches, are conditionally triggered to enable the attack scenario. Security modules, such as authentication unit, buffer shuffler, and control unit, have been proposed to thwart the attack in runtime and restore secure packet flow in the NoC. These units work together as a shield to safeguard the packets from proceeding towards the output ports with faulty links. Synthesis results show that the proposed secure FT router, when compared with a baseline FT router, has area and power overheads of at most 4.04% and 0.90%, respectively. Performance evaluation shows that SeFaR has acceptable overheads in the execution time, energy consumption, average packet latency, and power-latency product metrics when compared with a baseline FT router while running real benchmarks, as well as synthetic traffic. Further, a possible design of a comprehensive secure router has been presented with a view to addressing and mitigating multiple attacks that can arise in the NoC routers.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑