Abstract:Electronic Design Automation (EDA) industry heavily reuses third party IP cores. These IP cores are vulnerable to insertion of Hardware Trojans (HTs) at design time by third party IP core providers or by malicious insiders in the design team. State of the art research has shown that existing HT detection techniques, which claim to detect all publicly available HT benchmarks, can still be defeated by carefully designing new sophisticated HTs. The reason being that these techniques consider the HT landscape to be limited only to the publicly known HT benchmarks, or other similar (simple) HTs. However the adversary is not limited to these HTs and may devise new HT design principles to bypass these countermeasures. In this paper, we discover certain crucial properties of HTs which lead to the definition of an exponentially large class of Deterministic Hardware Trojans $H_D$ that an adversary can (but is not limited to) design. The discovered properties serve as HT design principles, based on which we design a new HT called 'XOR-LFSR' and present it as a 'proof-of-concept' example from the class $H_D$. These design principles help us understand the tremendous ways an adversary has to design a HT, and show that the existing publicly known HT benchmarks are just the tip of the iceberg on this huge landscape. This work, therefore, stresses that instead of guaranteeing a certain (low) false negative rate for a small constant set of publicly known HTs, a rigorous HT detection tool should take into account these newly discovered HT design principles and hence guarantee the detection of an exponentially large class (exponential in number of wires in IP core) of HTs with negligible false negative rate.

Real-Time Protection Architecture Against Hardware Trojan Attacks

Hardware Trojans in Chips: A Survey for Detection and Prevention

TPAD: Hardware Trojan Prevention and Detection for Trusted Integrated Circuits

The State-of-the-art in EDA tools: the Hardware Trojan Confrontation Framework

A Multi-Level Architecture for Hardware Trojan and Vulnerability Runtime Detection and Response Towards Cryptographic IP.

Survey of Hardware Trojan Horse Detection on Chip

R2D2: Runtime Reassurance and Detection of A2 Trojan

A signature based architecture for Trojan detection

Advancing the State-of-the-Art in Hardware Trojans Design

Toward FPGA Security in IoT: A New Detection Technique for Hardware Trojans.

On-Chip Analog Trojan Detection Framework for Microprocessor Trustworthiness

Dynamic FPGA Detection and Protection of Hardware Trojan: A Comparative Analysis

Preventing Hardware Trojans in Switch Chip Based on Payload Decoupling

Experiences in Hardware Trojan design and implementation

Hardware Trojan Detection Combines with Machine Learning: an Isolation Forest-based Detection Method

Securing IoT Space Via Hardware Trojan Detection.

Side-Channel Hardware Trojan for Provably-Secure SCA-Protected Implementations

Design for Assurance: Employing Functional Verification Tools for Thwarting Hardware Trojan Threat in 3PIPs

Overview of the Detection and Prevention Study of Hardware Trojans

Optimized Lightweight Hardware Trojan-Based Fault Attack on DES

Hardware Trojan Detection in Third-Party Digital Intellectual Property Cores by Multilevel Feature Analysis