Abstract:In this paper, we take a deep dive into microarchitectural security from a hardware designer's perspective by reviewing the existing approaches to detect hardware vulnerabilities during the design phase. We show that a protection gap currently exists in practice that leaves chip designs vulnerable to software-based attacks. In particular, existing verification approaches fail to detect specific classes of vulnerabilities, which we call HardFails: these bugs evade detection by current verification techniques while being exploitable from software. We demonstrate such vulnerabilities in real-world SoCs using RISC-V to showcase and analyze concrete instantiations of HardFails. Patching these hardware bugs may not always be possible and can potentially result in a product recall. We base our findings on two extensive case studies: the recent Hack@DAC 2018 hardware security competition, where 54 independent teams of researchers competed world-wide over a period of 12 weeks to catch inserted security bugs in SoC RTL designs, and an in-depth systematic evaluation of state-of-the-art verification approaches. Our findings indicate that even combinations of techniques will miss high-impact bugs due to the large number of modules with complex interdependencies and fundamental limitations of current detection approaches. We also craft a real-world software attack that exploits one of the RTL bugs from Hack@DAC that evaded detection and discuss novel approaches to mitigate the growing problem of cross-layer bugs at design time.

A Failure to Communicate: Security Vulnerabilities in the GridStreamX Edgeware Application

Ensuring secure and robust grid applications – from a formal method point of view

Vulnerability Detection For Smart Grid Devices Via Static Analysis

A Generic UVM Verification Framework Based on Two-Stage Comparison for Protocol-Agnostic Data Streams in Digital Designs

Design and FPGA Verification of a Novel Reliable Real-Time Data Transfer System

Functional Verification of EPA Chip

Detecting Buffer-Overflow Vulnerabilities in Smart Grid Devices via Automatic Static Analysis

THE IMPLEMENTATION OF FAULTS DEBUGGING AND DETECTION BASED ON VXWORKS

A Functional Verification Framework For Dsps With Vliw Architecture Based On A Random Program Generator

The implementation method about verifying to VLIW DSP

Design of a Random Test Platform for DSP Serials Used in Embedded Systems

Demo Abstract: A HIL Emulator-Based Cyber Security Testbed for DC Microgrids

A Deep Research on the Chip Verification Platform Based on Network

Using Genetic Evolutionary Software Application Testing to Verify a DSP SoC

When a Patch is Not Enough - HardFails: Software-Exploitable Hardware Bugs

A Dynamic Random Instruction And Stimulus Generation For Functional Verification Of Embedded Processor

Verification Strategy for DSP in VLIW Architecture

Design and Implementation of Random Test Program Generator

Implementation of High-Speed Verification Platform Based on Emulator for Redsp and Remap

Hardware security and reliability verification based on fault propagation model

SoftFlow: Automated HW-SW Confidentiality Verification for Embedded Processors