Abstract:Digital hardware lies in the heart of systems deployed in finance, medical care, basic infrastructure and national defense systems. However, due to the lack of effective security verification tools, hardware designs may contain security vulnerabilities resulting from performance optimizations, side channels, insecure debug ports and hardware Trojans, which provide attackers low level access to critical resources and effective attack surface to compromise a system. To address these security threats, we propose a theorem proof based gate level information flow tracking (GLIFT) method for formal verification of security properties and identifying security vulnerabilities that cause security property violations. Our method integrates a precise information flow tracking (IFT) model with the Coq theorem proof environment, inheriting the accuracy of GLIFT and the scalability of theorem proving based formal verification. We formalize semantic circuits and security theorems for proving security properties in order to detect security violations. The proposed method has been demonstrated on an OpenRISC development interface core and an RSA implementation both from OpenCores as well as several Trojan benchmarks from Trust-HUB. Experimental results show that the proposed method detects insecure debug port, timing channel and hardware Trojans that cause violation of important security properties such as confidentiality, integrity and isolation and also derives the trigger condition of hardware Trojans.

Crafting Verifiably Secure Architecture Through Gate Level Information Flow Analysis

A Secure Scan Method for Crypto Chips

Secure Hardware Design Through Bit-Tight Information Flow Control

Generating Optimized Gate Level Information Flow Tracking Logic for Enforcing Multilevel Security

Arbitrary Precision and Complexity Tradeoffs for Gate-Level Information Flow Tracking

Property Specific Information Flow Analysis for Hardware Security Verification.

Hardware/software Security Co-Verification and Vulnerability Detection: an Information Flow Perspective

On the Complexity of Generating Gate Level Information Flow Tracking Logic

Theorem Proof Based Gate Level Information Flow Tracking for Hardware Security Verification

Towards Quantified Data Analysis Of Information Flow Tracking For Secure System Design

A Hardware-assisted Instruction Security Monitoring Design in Embedded System

A Hardware Security-Monitoring Architecture Based on Data Integrity and Control Flow Integrity for Embedded Systems

A Formal Methodology for Verifying Side-Channel Vulnerabilities in Cache Architectures

Detecting Hardware Trojans with Gate-Level Information-Flow Tracking.

SoftFlow: Automated HW-SW Confidentiality Verification for Embedded Processors

Security Path Verification Through Joint Information Flow Analysis

Hardware-Assisted Monitoring For Instruction Security In Embedded System

Gate-Level Information Flow Tracking for Security Lattices

An Architectural-Enhanced Secure Design in Embedded System

Enforcing Information Flow Guarantees in Reconfigurable Systems with Mix-trusted IP

A Unified Model for Gate Level Propagation Analysis