运行时含木马电路IP核的定位与替换

近年来,由集成电路(IC)供应链的全球化带来的硬件木马电路威胁引发了广泛的关注。现有运行阶段针对不可信第三方知识产权核(3PIP)的木马电路检测技术没有考虑到检测到木马电路时被感染IP核的定位和替换问题,使得系统时间性能开销增加、可靠性下降。为了解决该问题,基于IP核多样性和现有的木马电路检测和出错恢复架构,提出了一个面向开销优化的被感染IP核定位和替换的解决方案。定位技术通过检测阶段存储结果和恢复阶段运行结果的实时比较实现,并在理论上证明了定位的准确性;替换技术通过可编程逻辑实现,能够最小程度地影响系统下次的正常运行。实验表明,在检测到木马电路时,被感染IP核的定位技术相比于已有的木马电路检测和恢复技术能够平均提升25%的系统时间开销。提出的定位和替换方案对于使用不可信单元建立可信计算系统,以及加强系统的安全性具有一定的指导意义。

Locating and Replacing the Hardware Trojan-Infected IP Core at Run Time

In recent years,the globalization of IC development processes raises serious concerns on hardware Trojans (HTs).Existing run-time hardware Trojan detection techniques for untrustworthy third party intellectual property cores (3PIPs) do not consider localization and replacement of infected IP cores,which results in large performance overhead and unreliability of the underlying system.To solve this problem,an overhead-aware solution to locate and replace the HT-infected IP cores based on IP core diversities and the existing HT detection and recovery architecture is proposed.The localization technique is implemented by comparing the results of detection and recovery nodes in real time,and it has been proven to be accurate.The replacement technique is realized through programmable logic,which can minimize the impact on the next normal operation of the system.The experimental results show that the infected IP core localization process improves the system performance by an average of 25% compared with the existing HT detection and recovery techniques when HTs are detected.The proposed scheme has certain guiding significance for establishing trustworthy computing systems using untrusted elements and enhancing the security of the system.