Hardware-Based Trusted Computing Architectures for Isolation and Attestation

Maene, Pieter; Götzfried, Johannes; Clercq, Ruan de; Müller, Tilo; Freiling, Felix C.; Verbauwhede, Ingrid

doi:10.1109/tc.2017.2647955

Cited by 115 publications

(72 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Trojans are likely introduced by untrustworthy third-party IP, adversarial designers, or through "hacking" of design tools [66], or, arguably even more likely, during distribution and deployment of ICs [67]. 2 Defense schemes can be classified into (i) Trojan detection during design and manufacturing time and (ii) Trojan mitigation at runtime. The former relies on testing, verification, et cetera [68][69][70][71][72][73][74][75], whereas the latter relies on dedicated security features for testability and self-authentication [76], monitoring and detection of malicious activities [77][78][79][80][81], etc.…”

Section: Trojanmentioning

confidence: 99%

Hardware Security For and Beyond CMOS Technology

Knechtel¹

2020

Proceedings of the 2020 International Symposium on Physical Design

View full text Add to dashboard Cite

As with most aspects of electronic systems and integrated circuits, hardware security has traditionally evolved around the dominant CMOS technology. However, with the rise of various emerging technologies, whose main purpose is to overcome the fundamental limitations for scaling and power consumption of CMOS technology, unique opportunities arise also to advance the notion of hardware security. In this paper, I first provide an overview on hardware security in general. Next, I review selected emerging technologies, namely (i) spintronics, (ii) memristors, (iii) carbon nanotubes and related transistors, (iv) nanowires and related transistors, and (v) 3D and 2.5D integration. I then discuss their application to advance hardware security and also outline related challenges. CCS CONCEPTS• Security and privacy → Security in hardware; • Hardware → Emerging technologies.

show abstract

Section: Trojanmentioning

confidence: 99%

Hardware Security For and Beyond CMOS Technology

Knechtel¹

2020

Proceedings of the 2020 International Symposium on Physical Design

View full text Add to dashboard Cite

show abstract

“…Maene et al [28] evaluated 14 hardware-based trusted computing architectures, including the above-mentioned four lightweight architectures with respect to different security properties. SIA provides five of the seven security properties considered by Maene et al [28], namely isolation, attestation, dynamic root of trust, code confidentiality, and protection against software side-channels targeting memory access patterns. Additionally, SIA provides support for secure intermittent computing of virtually any application and its security properties hold in the intermittent computing model.…”

Section: Related Workmentioning

confidence: 99%

“…The core idea of many security architectures is to enforce some form of software isolation. Depending on how software isolation is enforced, a trusted computing architecture can be based on hardware, software, or hardware/software codesign [28]. A security architecture may provide local or remote attestation.…”

Section: Introductionmentioning

confidence: 99%

SIA: Secure Intermittent Architecture for Off-the-Shelf Resource-Constrained Microcontrollers

Dinu¹,

Krishnan²,

Schaumont³

2019

EasyChair Preprints

View full text Add to dashboard Cite

Recent advancements in energy-harvesting techniques provide an alternative to batteries for resourceconstrained IoT devices and lead to a new computing paradigm, the intermittent computing model. In this model, a software module continues its execution from where it left off when an energy shortage occurred. Enforcing security of an intermittent software module is challenging because its power-off state has to be protected from a malicious adversary in addition to its power-on state, while the security mechanisms put in place must have a low overhead on the performance, resource consumption, and cost of a device.In this paper, we propose SIA (Secure Intermittent Architecture), a security architecture for resource-constrained IoT devices. SIA leverages low-cost security features available in commercial off-the-shelf microcontrollers to protect both the power-on and power-off state of an intermittent software module. Therefore, SIA enables a host of secure intermittent computing applications such as self-attestation, remote attestation, and secure communication. Moreover, our architecture provides confidentiality and integrity guarantees to an intermittent computing module at no cost compared to previous approaches in the literature that impose significant overheads. The salient characteristic of SIA is that it does not require any hardware modifications, and hence, it can be directly applied to existing IoT devices.We implemented and evaluated SIA on a resource-constrained IoT device based on an MSP430 processor. Besides being secure, SIA is simple and efficient. We confirm the feasibility of SIA for resource-constrained IoT devices with experimental results of several intermittent computing applications. Our prototype implementation outperforms by two to three orders of magnitude the secure intermittent computing solution of Suslowicz et al. presented at IGSC 2018.Index Terms-secure intermittent architecture, resourceconstrained microcontroller, energy harvesting, intermittent computing.

show abstract

“…In order to combat this tendency, the researchers make a preliminary probe into two types of defense methods: deviceoriented and network-oriented cases. In the device-oriented cases, trusted computing for industrial embedded devices [16] is a burgeoning security technology to provide system integrity check and data confidentiality protection. In the network-oriented cases, industrial firewall [11,17] and intrusion detection [15,18,19] are the typical applications in industrial control networks to improve the communication security.…”

Section: Security and Communication Networkmentioning

confidence: 99%

Function-Aware Anomaly Detection Based on Wavelet Neural Network for Industrial Control Communication

Wan

Song

Yuan

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

Function control, which is an essential link in industrial automation, is undergoing a growing integration with ICTs (Information Communication Technologies) because of the flexible manufacturing and convenient interoperability in CPSs (Cyber-Physical Systems). However, it has also brought the increasing dangers of cyberattacks caused by malicious or intentional industrial process control exploitations. In order to effectively detect these cyber intrusions and anomalies, this paper proposes a function-aware anomaly detection approach based on WNN (Wavelet Neural Network), which perceives the abnormal function control changes in industrial control communication. By appropriately extracting the time-related function control characteristics from industrial communication packets, this approach builds an optimized wavelet neural network to model the normal function control behaviors and calculates the detection threshold to differentiate the aberrant industrial process control activities. Additionally, a real-world control system, whose communication protocol is Modbus/TCP, is simulated to furnish the analyzed function control data. According to the experimental results, we fully demonstrate this approach has the fine detection accuracy and adequate real-time capability.

show abstract

Hardware-Based Trusted Computing Architectures for Isolation and Attestation

Cited by 115 publications

References 26 publications

Hardware Security For and Beyond CMOS Technology

Hardware Security For and Beyond CMOS Technology

SIA: Secure Intermittent Architecture for Off-the-Shelf Resource-Constrained Microcontrollers

Function-Aware Anomaly Detection Based on Wavelet Neural Network for Industrial Control Communication

Contact Info

Product

Resources

About