security issues in ickoreatest.or.kr/sub08/sub09_data/양준성.pdf · 2014-10-20 · security...

Security Issues in IC

Joon-Sung Yang

DATES(Design and Test for Systems) Lab

Sungkyunkwan University

DATES Lab

Security

<source : http://www.goophone.net>

DATES Lab

Copycat

Ex) Goophone

Security

<source : http://www.gizchina.com/2013/10/13/goophone-open-international-webstore/>

DATES Lab

Smartphone

Penetration by Country

IC Market

DATES Lab

Smartphone

Increasing Market

IC Market

DATES Lab

What is this?

Smartphone

<source : http://www.donga.com>

DATES Lab

Copycat

Smartphone


DATES Lab

Specification

Smartphone


DATES Lab

Past..

Counterfeit

Examples

Deliberately Misrepresented Part Its Identity (e.g. manufacturer, part number, date code, lot code)

Copied (reverse engineered) Part

Used Parts Sold as New

Defective Parts Sold as New or Working Used Parts

Fake Parts

Security

<source : http://www.kozio.com>

DATES Lab

Mission Critical Applications

Military Defense Systems

Fighter Jet Case : Jet Failure at High Altitude (Temperature Issue)

Medical Systems

Health & Safety Issues

Security

<source : http://www.kozio.com/blog/scripting-a-counterfeit-ic-detection-strategy>

DATES Lab

Economic Impact

Expecting

Semiconductor Industry Revenue Loss (2011)

– 7.5 Billion Dollars

– 11,000 US Job Positions

Security

DATES Lab

General Counterfeit Detection Process

Security

DATES Lab

How to Avoid Unauthentic ICs Use?

Can We Monitor them?

H/W Metering

Need for IP Owner to Track Manufacture Chips

Ways to Enable IP Owners Accessing ICs at Post-Si

Methods to Uniquely Tag Each Chip for Tracing Them

Hardware Metering

DATES Lab

Authentication Flow

Authentication

DATES Lab

Traditional Method

Embed Unique Secret Key in NVM

Challenge -> Response

Limitation

Side Channel Attacks on NVM

Resource Intensive Cryptography

Authentication

DATES Lab

Physically Unclonable Function (PUF)

Find Something Unique per Chip

Process Variation

– Arbiter PUF

ID Generation

DATES Lab



Process Variation

– Ring Oscillator PUF

ID Generation

DATES Lab



Process Variation

– SRAM PUF

ID Generation

DATES Lab



Process Variation

– SCAN PUF

ID Generation

DATES Lab

Authentication Flow

PUF

DATES Lab

Pros & Cons

Pros

No Need to Store NVM based Key (ID)

Random and Vast Number or Challenge-Response Pairs

Cons

Non-Deterministic

– Multiple Iteration Required

Process Variation Affected by Aging

Need to Enhance Determinism

PUF

DATES Lab

Trojan Virus – S/W

Illegal S/W Download

Computers, Smart Phones

Erase Memory, Send Password & Credit Card Information

Another Security Issue

DATES Lab

H/W Trojan? (HTH : Hardware Trojan Horse)

Business Model Shift

Fabless Company

Threat Holes

Another Security Issue

IP Vendor

System

Integrator Manufacturer

Trusty?

Trusty? Trusty?

DATES Lab

Threat Holes

HTH Inserted IC to Customer

Possible Damage

H/W Performance Degradation

Authentication Flow Incapacitation

Secret Data Leak.. Backdoor.

IC Destruction

HTH : Hardware Trojan Horse

DATES Lab

How It Works..

Time Bomb

HTH Insertion

<source : Y. Alkabani and F. Koushanfar, “Extended Abstract : Designer’s Hardware Trojan Horse”, Proc. IEEE Int’l Workshop Hardware-Oriented Security and Trust>

DATES Lab

Action

UK, US, Canada, New Zealand and Australia

Use & Import Ban due to Backdoor Vulnerability

HTH : Hardware Trojan Horse

<source : http://www.theregister.co.uk/2013/07/29/lenovo_accused_backdoors_intel_ban>

DATES Lab

Classification

HTH

<source : X. Wang, M. Tehranipoor, and J. Plusquellic, “Detecting Malicious Inclusions in Secure Hardware: Challenges and Solutions”, IEEE HOST, 2008>

DATES Lab

How Hard is it to Find HTHs?

A Number of IPs Integrated in SoC

Soft, Firm and Hard IP, Hidden Small HTH

Almost Impossible Physical Detection in Nanometer Technology

Too Much Effort for Reverse Engineering

Conditional Activation

Activated in Special Case (Test Will Not Cover)

HTH

DATES Lab

HTH Detection Approaches

Side-Channel Analysis

Using Power, Delay, Electromagnetic Wave, Thermal Emission, etc.

Analysis Flow

– 1) Selecting Chips

– 2) Iterative I/O Test -> Capturing Side-Channel Characteristics

– 3) Building Finger Print

– 4) Perform 2) and 3) for Golden Chip (Reference Chip)

– 5) Compare Finger Prints

HTH

DATES Lab



Power Analysis Example

– Green Lines : Golden Chip

– Blue Lines : HTH Inserted Chip

HTH

<source : X. Wang, M. Tehranipoor, and J. Plusquellic, “Detecting Malicious Inclusions in Secure Hardware: Challenges and Solutions”, IEEE HOST, 2008>

DATES Lab



Advantage

– Can Check Different Characteristics (Power, Delay, Thermal Diagram, etc.)

– No Need to Intentionally Activate HTH (Iterative Stress Test and HTHs Activated Always)

Disadvantage

– Very Susceptible to Noise

– Hard to Distinguish between HTH and Process Variation

– Cannot Detect Conditionally Activating HTHs

HTH

DATES Lab


Test Vector based Analysis

Trying to Activate HTHs

– Region Free Method

– Region Aware Method

HTH

DATES Lab



Region Free Method

– Try to Active HTH Without Knowing CKT Information

– Applying Test Patterns

– Not Effective

HTH

DATES Lab



Region Aware Method

– Try to Active HTH With Knowing CKT Information

– Flow

o 1) Partition CKT to Sub-CKTs (Clustering)

o 2) Generate Patterns for Sub-CKTs : Try to Increase Switching Activity, Power ONLY IN SELECTED Sub-CKT and Reduce Activity in Other Sub-CKTs

o 3) Perform 2) for Each Sub-CKT

HTH

DATES Lab



Region Aware Method Example

– ISCAS Benchmark s3271 Switching Activity

– Blue Line : Golden Chip

– Red Line : HTH Inserted Chip

HTH

DATES Lab

IoT (Internet of Things)

Security

Data Acquisition

Data Aggregation

Data Analysis

DATES Lab

IoT (Internet of Things)

Security

<source : http://www.digikey.com/en/articles/techzone/2014/jan/short-range-low-power-wireless-devices-and-internet-of-things-iot>

DATES Lab

Security Concerns

Need for Design for Security (DFS)

Secure Authentication

Supporting Side-Channel Analysis by CAD Tools

CKT Obfuscation : IP Protection

Test vs. Security

Security

security issues in ickoreatest.or.kr/sub08/sub09_data/양준성.pdf · 2014-10-20 · security...

Documents