Integrated Circuits (ICs) are the target of diverse attacks during their lifetime. Fabrication-time attacks, such as the insertion of Hardware Trojans, can give an adversary access to privileged data and/or the means to corrupt the IC's internal computation. Post-fabrication attacks, where the end-user takes a malicious role, also attempt to obtain privileged information through means such as fault injection and probing. Taking these threats into account and at the same time, this paper proposes a methodology for Security-Aware Layout Synthesis (SALSy), such that ICs can be designed with security in mind in the same manner as power-performance-area (PPA) metrics are considered today, a concept known as security closure. Furthermore, the trade-offs between PPA and security are considered and a chip is fabricated in a 65nm CMOS commercial technology for validation purposes - a feature not seen in previous research on security closure. Measurements on the fabricated ICs indicate that SALSy promotes a modest increase in power in order to achieve significantly improved security metrics.
翻译:集成电路(IC)在其生命周期中面临多种攻击。制造阶段攻击(如硬件木马植入)可使攻击者获取特权数据和/或破坏IC内部计算能力。封装后攻击(终端用户充当恶意角色)则试图通过故障注入和探针探测等手段获取特权信息。针对这些威胁,本文提出了一种安全感知版图综合(SALSy)方法,使得IC能够像当前考虑功耗-性能-面积(PPA)指标那样进行安全设计,这一概念称为安全收敛。此外,本文还权衡了PPA与安全性之间的折中,并采用65nm商用CMOS工艺制造了验证芯片——这一特性在以往安全收敛研究中未曾出现。对制造IC的测量结果表明,SALSy在实现显著提升安全指标的同时,仅适度增加功耗。