Abstract:The globalization of the Integrated Circuit (IC) supply chain, driven by time-to-market and cost considerations, has made ICs vulnerable to hardware Trojans (HTs). Against this threat, a promising approach is to use Machine Learning (ML)-based side-channel analysis, which has the advantage of being a non-intrusive method, along with efficiently detecting HTs under golden chip-free settings. In this paper, we question the trustworthiness of ML-based HT detection via side-channel analysis. We introduce a HT obfuscation (HTO) approach to allow HTs to bypass this detection method. Rather than theoretically misleading the model by simulated adversarial traces, a key aspect of our approach is the design and implementation of adversarial noise as part of the circuitry, alongside the HT. We detail HTO methodologies for ASICs and FPGAs, and evaluate our approach using TrustHub benchmark. Interestingly, we found that HTO can be implemented with only a single transistor for ASIC designs to generate adversarial power traces that can fool the defense with 100% efficiency. We also efficiently implemented our approach on a Spartan 6 Xilinx FPGA using 2 different variants: (i) DSP slices-based, and (ii) ring-oscillator-based design. Additionally, we assess the efficiency of countermeasures like spectral domain analysis, and we show that an adaptive attacker can still design evasive HTOs by constraining the design with a spectral noise budget. In addition, while adversarial training (AT) offers higher protection against evasive HTs, AT models suffer from a considerable utility loss, potentially rendering them unsuitable for such security application. We believe this research represents a significant step in understanding and exploiting ML vulnerabilities in a hardware security context, and we make all resources and designs openly available online:

HIT: A Hidden Instruction Trojan Model for Processors.

Hardware Trojans in Chips: A Survey for Detection and Prevention

Hardware Trojan Designs Based on High-Low Probability and Partitioned Combinational Logic With a Malicious Reset Signal

R2D2: Runtime Reassurance and Detection of A2 Trojan

Evasive Hardware Trojan through Adversarial Power Trace

TPAD: Hardware Trojan Prevention and Detection for Trusted Integrated Circuits

On-Chip Analog Trojan Detection Framework for Microprocessor Trustworthiness

Design and Insertion of Hardware Trojan Based on Finite State Machine

Hardware Trojans based on two-dimensional memtransistors

Stealthy Hardware Trojan Based Algebraic Fault Analysis of HIGHT Block Cipher.

HLIFT: A High-Level Information Flow Tracking Method for Detecting Hardware Trojans

Thermal Maps Based HT Detection Using Spatial Projection Transformation.

Trojan playground: a reinforcement learning framework for hardware Trojan insertion and detection

Heckler: Breaking Confidential VMs with Malicious Interrupts

Two Countermeasures Against Hardware Trojans Exploiting Non-Zero Aliasing Probability of BIST

Mitigating Code-Reuse Attacks On Cisc Architectures In A Hardware Approach

On a Consistency Testing Model and Strategy for Revealing RISC Processor's Dark Instructions and Vulnerabilities

A Hardware-Trojans Detection Approach Based on eXtreme Gradient Boosting

The Undetectable Clock Cycle Sensitive Hardware Trojan

Overtake: Achieving Meltdown-type Attacks with One Instruction

Hardware Trojan design based on combination probability and non-rare events