hardware trojan detection & prevention for health-care ... ece day.pdf · hardware trojan...
TRANSCRIPT
![Page 1: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/1.jpg)
Hardware Trojan Detection & Prevention for Health-care
Computer SystemsHoward University
April 9, 2015
1
Jonnetta Bratcher, Naja Green, Jonathan Lopera, Justin Powell, Candace RossSkander Charouchi (Grad)Dr. Hassan Salmani (Advisor)
![Page 2: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/2.jpg)
Agenda
Project Overview
User Case
Design Selection
Implementation, Test and Evaluation
Resources, Cost and Wrap up
2
![Page 3: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/3.jpg)
Project Overview
3
![Page 4: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/4.jpg)
Background● Medical security is important
○ Computers increasingly being used in security
● Begin with security primitives○ Confidentiality○ Integrity○ Authentication
4
![Page 5: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/5.jpg)
Problem Statement
How can we develop a system to detect and
prevent hardware Trojans?
5
A hardware Trojan is…A malicious program disguised to modify the circuitry of an integrated circuit.
![Page 6: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/6.jpg)
Design Requirements (1)
● Size efficiento Appropriate for hospital
environment● Quick response time● User-friendly interface / Ease
of use● Security primitives
6
![Page 7: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/7.jpg)
Design Requirements (2)Two Prong Detection & Prevention System
7
Intel GalileoAuthenticates user
Sends authentication bit
FPGADecrypts command
Receives authentication bit
Command is sent to medical device
+=
![Page 8: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/8.jpg)
Current Status of ArtPersonal Health Records (PHR) Systems contain highly sensitive health information that discloses the patient’s identity.
Tethered Untethered
Organization based Web or Cloud based
Care Provider friendly• Kiaser Permante
Patient friendly• WebMD
8
![Page 9: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/9.jpg)
User Case
9
![Page 10: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/10.jpg)
Consider…
● Busy hospital● Both doctors and patients have
physical access to health care computer system
● Someone attempts to gather information about a patient and maliciously alter their medicine dosage
10
![Page 11: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/11.jpg)
Assumptions● No protective security measures in place● Medical device controlled using keyboard and monitor● Open user environment in hospital setting
○ Allows for both authorized and unauthorized physical access
11
![Page 12: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/12.jpg)
Final Schematic
12
![Page 13: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/13.jpg)
Design Selection
13
![Page 14: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/14.jpg)
Conceptual DesignPhysical Transmitter :Remote vs. Smartphone
Means of Communication: Bluetooth vs. IR
Cryptographic Algorithm:RSA vs. RC4
14
![Page 15: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/15.jpg)
Conceptual Design:Physical Transmitter
15
Time
Cost
Resources
Longevity
Winner:
Remote
![Page 16: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/16.jpg)
Conceptual Design:Means of Communication
16
IR
Time
Cost
Resources
Longevity
Winner:
Infrared
![Page 17: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/17.jpg)
17
RSA RC4
Time
Cost
Resources
LongevityWinner:
RSA
Conceptual Design:Cryptographic Algorithm
![Page 18: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/18.jpg)
DE2i-150 Board
Final Top Design
18
LaptopLaptop Intel Galileo Board
Intel Galileo Board
Remote Transmitter
Remote Transmitter IR ReceiverIR Receiver RSA
CryptosystemRSA
Cryptosystem
Simulated Medical Device
Simulated Medical Device
![Page 19: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/19.jpg)
Implementation, Test and Evaluation
19
![Page 20: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/20.jpg)
The IR Transmitter & Receiver
● Language: VHDL● Pass output of receiver module to 7-segment display● Verify transmitter command is correct
20
![Page 21: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/21.jpg)
The RSA Algorithm
● Language: VHDL● Adjust source code to fit project scope● Simulate in Xilinx ● Send various registers & outputs to LEDs to make sure
data is correctrsa simulation capture
21
![Page 22: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/22.jpg)
Connecting IR and RSA
● Language: Verilog● Connect modules in Quartus II● Send various registers & outputs to LEDs and 7-
segment display to make sure data is correct
22
![Page 23: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/23.jpg)
Connecting IR and RSA
23
Buttons pressed on transmitter:1, 4, 7
![Page 24: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/24.jpg)
The Patient Database & Interface
● Language: C● Arduino● Input accurate information
& confirm access● Input inaccurate
information & confirm denied access
24
![Page 25: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/25.jpg)
Communication to FPGA via Galileo
25
● Arduino used to code database○ Interface: Serial Monitor
● General Purpose Input Output (GPIO) pin connections
● Connect modules in Quartus II
![Page 26: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/26.jpg)
The Medical Device
● Dosing pump● Controlled via Galileo● Connect to board to receive commands● Update accurately according to commands
26
![Page 27: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/27.jpg)
Full Demo
27
![Page 28: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/28.jpg)
Resources, Cost& Wrap-Up
28
![Page 29: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/29.jpg)
Resources & Budget● Resources
o DE2i-150, Intel Galileo boardso Quartus II 13.1o Xilinx ISE Design Studioo Arduino softwareo Dosing Pump (Abdulaziz Alghamdi)o Power supply (12V)
● Budget?29
![Page 30: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/30.jpg)
Conclusions1. Secured communication in a simulated hospital
environment to ensure the following security primitives:o Confidentialityo Integrityo Authentication
2. Preventiono RSA Cryptosystemo Authentication via interface
3. Secured Personal Health Record Systemo Tethered 30
![Page 31: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/31.jpg)
Future WorksContinuing the VIP (Vertically Integrated Project) approach:● Attack system with hardware Trojan● Use smartphone to transmit commands● Use of Bluetooth● Medical device compatibility (For real time simulation)● Internet connectivity for
instant updates to patientdatabase
31
![Page 32: Hardware Trojan Detection & Prevention for Health-care ... ECE Day.pdf · Hardware Trojan Detection & Prevention for Health-care ... Design Selection Implementation, ... VHDL Pass](https://reader030.vdocuments.us/reader030/viewer/2022021704/5b3c5c197f8b9a1a678f8a24/html5/thumbnails/32.jpg)
Questions
32