Abstract:Due to the escalating complexity of chip design and the exorbitant cost of building cutting-edge manufacturing facilities, outsourcing the fabrication of Integrated Circuits (ICs) is prevalent in modern semiconductor industry. However, significant security risks may arise because untrustworthy foundries can conduct insidious attacks without close supervision. Since prior works show the feasibility of implementing practical foundry-level Trojan attacks that circumvent post-fabrication detection, IC designers should protect their IC layouts before sending them to a third-party foundry, and such protections are known as design-time defenses. To this end, security metrics for layout vulnerability assessment are crucial to test the effectiveness of the proposed defenses. However, existing metrics are geometric-only and Trojan-oblivious, failing to capture the fundamental aspects of foundry-level Trojan insertion and the associated side effects.To bridge the gap between real attacks and threat prediction, we present SiliconCritic, a simulation-based, extensible framework that leverages design-time techniques to simulate the blackbox foundry-level Trojan attacks and post-fabrication analysis. SiliconCritic encodes the difficulty of inserting a specific Trojan into a finalized physical layout by measuring the variation of side-channel parameters (timing, power) after the simulated Trojan insertion, where larger deviations denote better detectability and thus enhanced security. SiliconCritic allows IC designers to interactively refine defensive strategies against the objective Trojan based on the feedback of side-channel analysis. Through evaluations on real-world ASIC designs and reported hardware Trojans, SiliconCritic demonstrates the limitations of existing layout-level defenses and highlights the influence of Trojan properties on defensive efficacy. Our work refreshes the understanding of Trojan prevention and suggests future directions for defenses against untrustworthy foundries.

Design of Monitor and Protect Circuits against FIB Attack on Chip Security

A Secure Scan Method for Crypto Chips

Fringing Electric Field Sensors for Anti-Attack at System-Level Protection

Physical Attack Protection Techniques for IC Chip Level Hardware Security

A Hardware Security-Monitoring Architecture Based on Data Integrity and Control Flow Integrity for Embedded Systems

A Design of Security Module to Protect Program Execution in Embedded System

Rethinking IC Layout Vulnerability: Simulation-Based Hardware Trojan Threat Assessment with High Fidelity

The Design and Implementation of Embedded Security Cpu Based on Multi-Strategy

An IC-level countermeasure against laser fault injection attack by information leakage sensing based on laser-induced opto-electric bulk current density

Design of Security Detection Digital Sensor System Based on FPGA

AES Design Improvements Towards Information Security Considering Scan Attack

Design and FPGA Implementation of 3DES Against Power Analysis Attacks for IC Bankcard

A Hardware-assisted Instruction Security Monitoring Design in Embedded System

Hardware-Assisted Security Monitoring Unit for Real-Time Ensuring Secure Instruction Execution and Data Processing in Embedded Systems

Reverse engineering attack on minterm-camouflaged circuit

Emerging Technology-Based Design of Primitives for Hardware Security

A New Countermeasure Against Scan-Based Side-Channel Attacks

Security Against Hardware Trojan Attacks Through a Novel Chaos FSM and Delay Chains Array PUF Based Design Obfuscation Scheme.

Hardware-Assisted Monitoring For Instruction Security In Embedded System

Security Assessment of Interposer-based Chiplet Integration

Efficient Countermeasures against Fault Attacks for 3DES Crypto Engine in Bank IC Card