Isadora：硬件设计的自动信息流属性生成
Isadora: Automated Information Flow Property Generation for Hardware Designs
摘要：
Isadora是一种用于创建硬件设计的信息流规范的方法。该方法结合了信息流跟踪和规范挖掘，以产生一组信息流属性，这些属性适合在安全验证过程中使用，并支持更好地理解设计的安全态势。Isadora完全自动化;用户仅提供所考虑的设计和测试台，而不需要提供威胁模型或安全规范。我们在RISC-V处理器上评估了Isadora，以及两个与SoC访问控制相关的设计。Isadora生成的安全属性与常见弱点枚举（CWE）建议的安全属性一致，并且在SoC设计的情况下，与安全专家手动编写的属性一致。
英文摘要：
Isadora is a methodology for creating information flow specifications of hardware designs. The methodology combines information flow tracking and specification mining to produce a set of information flow properties that are suitable for use during the security validation process, and which support a better understanding of the security posture of the design. Isadora is fully automated; the user provides only the design under consideration and a testbench and need not supply a threat model nor security specifications. We evaluate Isadora on a RISC-V processor plus two designs related to SoC access control. Isadora generates security properties that align with those suggested by the Common Weakness Enumerations (CWEs), and in the case of the SoC designs, align with the properties written manually by security experts.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
