Abstract:Due to the escalating complexity of chip design and the exorbitant cost of building cutting-edge manufacturing facilities, outsourcing the fabrication of Integrated Circuits (ICs) is prevalent in modern semiconductor industry. However, significant security risks may arise because untrustworthy foundries can conduct insidious attacks without close supervision. Since prior works show the feasibility of implementing practical foundry-level Trojan attacks that circumvent post-fabrication detection, IC designers should protect their IC layouts before sending them to a third-party foundry, and such protections are known as design-time defenses. To this end, security metrics for layout vulnerability assessment are crucial to test the effectiveness of the proposed defenses. However, existing metrics are geometric-only and Trojan-oblivious, failing to capture the fundamental aspects of foundry-level Trojan insertion and the associated side effects.To bridge the gap between real attacks and threat prediction, we present SiliconCritic, a simulation-based, extensible framework that leverages design-time techniques to simulate the blackbox foundry-level Trojan attacks and post-fabrication analysis. SiliconCritic encodes the difficulty of inserting a specific Trojan into a finalized physical layout by measuring the variation of side-channel parameters (timing, power) after the simulated Trojan insertion, where larger deviations denote better detectability and thus enhanced security. SiliconCritic allows IC designers to interactively refine defensive strategies against the objective Trojan based on the feedback of side-channel analysis. Through evaluations on real-world ASIC designs and reported hardware Trojans, SiliconCritic demonstrates the limitations of existing layout-level defenses and highlights the influence of Trojan properties on defensive efficacy. Our work refreshes the understanding of Trojan prevention and suggests future directions for defenses against untrustworthy foundries.

On Trojan Side Channel Design and Identification.

A Novel Trojan Side Channel for Attacking Masking

Side-Channel Hardware Trojan for Provably-Secure SCA-Protected Implementations

A Survey Report on Hardware Trojan Detection by Multiple-Parameter Side-Channel Analysis

Hardware Trojans in Chips: A Survey for Detection and Prevention

An anti-trojans design approach based on activation probability analysis

Power Side Channels in Security ICs: Hardware Countermeasures

An AI-Enabled Side Channel Power Analysis Based Hardware Trojan Detection Method for Securing the Integrated Circuits in Cyber-Physical Systems

A General Hardware Trojan Technique Targeted on Lightweight Cryptography with Bit-Serial Structure

Software Hardware Co-design for Side-Channel Analysis Platform on Security Chips.

Hardware Trojan Detection Combines with Machine Learning: an Isolation Forest-based Detection Method

TPAD: Hardware Trojan Prevention and Detection for Trusted Integrated Circuits

A security method of hardware Trojan detection using path tracking algorithm

Low-cost Design of Stealthy Hardware Trojan for Bit-Level Fault Attacks on Block Ciphers

Stealthy Trojan Detection Based on Feature Analysis of Circuit Structure

Hardware Trojan Detection Combine with Machine Learning: an SVM-based Detection Approach

TrojanZero: Switching Activity-Aware Design of Undetectable Hardware Trojans with Zero Power and Area Footprint

Analog hardware trojan design and detection in OFDM based wireless cryptographic ICs

Rethinking IC Layout Vulnerability: Simulation-Based Hardware Trojan Threat Assessment with High Fidelity

A signature based architecture for Trojan detection

Optimized Lightweight Hardware Trojan-Based Fault Attack on DES