Abstract:Due to the escalating complexity of chip design and the exorbitant cost of building cutting-edge manufacturing facilities, outsourcing the fabrication of Integrated Circuits (ICs) is prevalent in modern semiconductor industry. However, significant security risks may arise because untrustworthy foundries can conduct insidious attacks without close supervision. Since prior works show the feasibility of implementing practical foundry-level Trojan attacks that circumvent post-fabrication detection, IC designers should protect their IC layouts before sending them to a third-party foundry, and such protections are known as design-time defenses. To this end, security metrics for layout vulnerability assessment are crucial to test the effectiveness of the proposed defenses. However, existing metrics are geometric-only and Trojan-oblivious, failing to capture the fundamental aspects of foundry-level Trojan insertion and the associated side effects.To bridge the gap between real attacks and threat prediction, we present SiliconCritic, a simulation-based, extensible framework that leverages design-time techniques to simulate the blackbox foundry-level Trojan attacks and post-fabrication analysis. SiliconCritic encodes the difficulty of inserting a specific Trojan into a finalized physical layout by measuring the variation of side-channel parameters (timing, power) after the simulated Trojan insertion, where larger deviations denote better detectability and thus enhanced security. SiliconCritic allows IC designers to interactively refine defensive strategies against the objective Trojan based on the feedback of side-channel analysis. Through evaluations on real-world ASIC designs and reported hardware Trojans, SiliconCritic demonstrates the limitations of existing layout-level defenses and highlights the influence of Trojan properties on defensive efficacy. Our work refreshes the understanding of Trojan prevention and suggests future directions for defenses against untrustworthy foundries.

Attack graph-based stochastic modeling approach for enabling cybersecure semiconductor wafer fabrication

Graph-Theoretic Approach for Manufacturing Cybersecurity Risk Modeling and Assessment

Adaptive Event-Driven Control for Continuous Positive Stochastic Jump Models with Cyber Attacks

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Fortify Your Defenses: Strategic Budget Allocation to Enhance Power Grid Cybersecurity

An Extensible Framework for Quantifying the Coverage of Defenses Against Untrusted Foundries

Probabilistic models for evaluating network edge's resistance against scan and foothold attack

Optimal security hardening over a probabilistic attack graph: a case study of an industrial control system using the CySecTool tool

Rethinking IC Layout Vulnerability: Simulation-Based Hardware Trojan Threat Assessment with High Fidelity

A Stochastic Model for Quantitative Security Analyses of Networked Systems.

Incomplete Information Stochastic Game Theoretic Vulnerability Management for Wide-Area Damping Control Against Cyber Attacks

Predictive Cyber-security Analytics Framework: A non-homogenous Markov model for Security Quantification

A Predictive Framework for Cyber Security Analytics using Attack Graphs

Multistage Attack–Defense Graph Game Analysis for Protection Resources Allocation Optimization Against Cyber Attacks Considering Rationality Evolution

Left of Fab: Securing Design and Collaboration in the Semiconductor Value Chain

Modeling of Intrusion and Defense for Assessment of Cyber Security at Power Substations.

Modeling an Attack-Mitigation Dynamic Game-Theoretic Scheme for Security Vulnerability Analysis in a Cyber-Physical Power System

A Modern Approach to IP Protection and Trojan Prevention: Split Manufacturing for 3D ICs and Obfuscation of Vertical Interconnects

Heuristic Approach Towards Countermeasure Selection using Attack Graphs

Robust Substation Enhancement Strategy for Allocating the Defensive Resource Against the Cyber-Attacks on IEDs

Best of Both Worlds: Integration of Split Manufacturing and Camouflaging into a Security-Driven CAD Flow for 3D ICs