Abstract:Intellectual property (IP) protection is one of the hardcore problems in hardware security. Semiconductor industry still lacks effective and proactive defense to shield IPs from reverse engineering (RE) based attacks. Integrated circuit (IC) camouflaging technique fills this gap by replacing some conventional logic gates in the IPs with specially designed logic cells (called camouflaged gates) without changing the functions of the IPs. The camouflaged gates can perform different logic functions while maintaining an identical look to RE attackers, thus preventing them from obtaining the layout information of the IP directly from RE tools. Since it was first proposed in 2012, circuit camouflaging has become one of the hottest research topics in hardware security focusing on two fundamental problems. How to choose the types of camouflaged gates and decide where to insert them in order to simultaneously minimize the performance overhead and optimize the RE complexity? How can an attacker de-camouflage a camouflaged circuit and complete the RE attack? In this article, we review the evolution of circuit camouflaging through this spear and shield race. First, we introduce the design methods of four different kinds of camouflaged cells based on true/dummy contacts, static random access memory (SRAM), doping, and emerging devices, respectively. Then we elaborate four representative de-camouflaging attacks: brute force attack, IC testing based attack, satisfiability-based (SAT-based) attack, and the circuit partition based attack, and the corresponding countermeasures: clique-based camouflaging, CamoPerturb, AND-tree camouflaging, and equivalent class based camouflaging, respectively. We argue that the current research efforts should be on reducing overhead introduced by circuit camouflaging and defeating de-camouflaging attacks. We point out that exploring features of emerging devices could be a promising direction. Finally, as a complement to circuit camouflaging, we conclude with a brief review of other state-of-the-art IP protection techniques.

Physical Attack Protection Techniques for IC Chip Level Hardware Security

A Secure Scan Method for Crypto Chips

Fringing Electric Field Sensors for Anti-Attack at System-Level Protection

Hardware Trojans in Chips: A Survey for Detection and Prevention

Design of Monitor and Protect Circuits against FIB Attack on Chip Security

Physical Attack Countermeasures for Reconfigurable Cryptographic Processors

Protect Your Chip Design Intellectual Property: An Overview

High-Level Approaches to Hardware Security: A Tutorial

Power Side Channels in Security ICs: Hardware Countermeasures

Exploring Fault Injection Attack Resilience of Secure IC Chips : Invited Paper

Era of Sentinel Tech: Charting Hardware Security Landscapes Through Post-Silicon Innovation, Threat Mitigation and Future Trajectories

Spear and Shield: Evolution of Integrated Circuit Camouflaging

SoC It to EM: ElectroMagnetic Side-Channel Attacks on a Complex System-on-Chip

Emerging Technology-Based Design of Primitives for Hardware Security

Refined Analytical EM Model of IC-Internal Shielding for Hardware-Security and Intra-Device Simulative Framework

Survey of hardware protection of design data for integrated circuits and intellectual properties

An Extensible Framework for Quantifying the Coverage of Defenses Against Untrusted Foundries

A Modern Approach to IP Protection and Trojan Prevention: Split Manufacturing for 3D ICs and Obfuscation of Vertical Interconnects

An IC-level countermeasure against laser fault injection attack by information leakage sensing based on laser-induced opto-electric bulk current density

SoK: A Security Architect's View of Printed Circuit Board Attacks

Lightweight Countermeasures Against Static Power Side-Channel Attacks