Security graphs model attacks, defenses, mitigations, and vulnerabilities on computer networks and systems. With proper attributes, they provide security metrics using standard graph algorithms. A hyperflow graph is a register-transfer level (RTL) hardware security graph that facilitates security verification. A hyperflow graph models information flows and is annotated with attributes that allow security metrics to measure flow paths, flow conditions, and flow rates. Hyperflow graphs enable the understanding of hardware vulnerabilities related to confidentiality, integrity, and availability, as shown on the OpenTitan hardware root of trust under several threat models.
翻译:安全图对计算机网络和系统中的攻击、防御、缓解措施和漏洞进行建模。通过适当的属性,它们利用标准图算法提供安全度量。超流图是一种寄存器传输级(RTL)硬件安全图,可促进安全验证。超流图对信息流进行建模,并附有属性,使安全度量能够衡量流路径、流条件和流速率。如OpenTitan硬件信任根在多种威胁模型下的应用所示,超流图有助于理解与机密性、完整性和可用性相关的硬件漏洞。