Ensuring Network-on-Chip (NoC) security is crucial to design trustworthy NoC-based System-on-Chip (SoC) architectures. While there are various threats that exploit on-chip communication vulnerabilities, eavesdropping attacks via malicious nodes are among the most common and stealthy. Although encryption can secure packets for confidentiality, it may introduce unacceptable overhead for resource-constrained SoCs. In this paper, we propose a lightweight confidentiality-preserving framework that utilizes a quasi-group based All-Or-Nothing Transform (AONT) combined with secure multi-path routing in NoC-based SoCs. By applying AONT to each packet and distributing its transformed blocks across multiple non-overlapping routes, we ensure that no intermediate router can reconstruct the original data without all blocks. Extensive experimental evaluation demonstrates that our method effectively mitigates eavesdropping attacks by malicious routers with negligible area and performance overhead. Our results also reveal that AONT-based multi-path routing can provide 7.3x reduction in overhead compared to traditional encryption for securing against eavesdropping attacks.

翻译：确保片上网络（NoC）的安全性对于构建可信赖的基于NoC的片上系统（SoC）架构至关重要。尽管存在多种利用片上通信漏洞的威胁，但通过恶意节点实施的窃听攻击是最常见且隐蔽的攻击方式之一。虽然加密技术可以保障数据包的机密性，但它可能为资源受限的SoC带来难以承受的开销。本文提出一种轻量级的保密性保护框架，该框架结合了基于拟群的全或无变换（AONT）与片上网络SoC中的安全多路径路由技术。通过对每个数据包应用AONT，并将其变换后的数据块通过多条非重叠路由路径分发，我们确保任何中间路由器在未获得全部数据块的情况下均无法重构原始数据。大量实验评估表明，该方法能以可忽略的面积和性能开销有效抵御来自恶意路由器的窃听攻击。我们的结果还显示，与传统的加密方法相比，基于AONT的多路径路由在防御窃听攻击时可将开销降低7.3倍。