Abstract:In this paper, we take a deep dive into microarchitectural security from a hardware designer's perspective by reviewing the existing approaches to detect hardware vulnerabilities during the design phase. We show that a protection gap currently exists in practice that leaves chip designs vulnerable to software-based attacks. In particular, existing verification approaches fail to detect specific classes of vulnerabilities, which we call HardFails: these bugs evade detection by current verification techniques while being exploitable from software. We demonstrate such vulnerabilities in real-world SoCs using RISC-V to showcase and analyze concrete instantiations of HardFails. Patching these hardware bugs may not always be possible and can potentially result in a product recall. We base our findings on two extensive case studies: the recent Hack@DAC 2018 hardware security competition, where 54 independent teams of researchers competed world-wide over a period of 12 weeks to catch inserted security bugs in SoC RTL designs, and an in-depth systematic evaluation of state-of-the-art verification approaches. Our findings indicate that even combinations of techniques will miss high-impact bugs due to the large number of modules with complex interdependencies and fundamental limitations of current detection approaches. We also craft a real-world software attack that exploits one of the RTL bugs from Hack@DAC that evaded detection and discuss novel approaches to mitigate the growing problem of cross-layer bugs at design time.

Special Issue on the 2021 Workshop on Top Picks in Hardware and Embedded Security

Introduction to the Special Issue on Design for Testability and Reliability of Security-aware Hardware

Hardware Trojans in Chips: A Survey for Detection and Prevention

Trusted Integrated Circuits: the Problem and Challenges

High-Level Approaches to Hardware Security: A Tutorial

A Look at the Dark Side of Hardware Reverse Engineering -- A Case Study

Survey of hardware protection of design data for integrated circuits and intellectual properties

Left of Fab: Securing Design and Collaboration in the Semiconductor Value Chain

A case study in hardware Trojan design and implementation

Protect Your Chip Design Intellectual Property: An Overview

TroLLoc: Logic Locking and Layout Hardening for IC Security Closure against Hardware Trojans

Threats on Logic Locking: A Decade Later

Emerging Technology-Based Design of Primitives for Hardware Security

Era of Sentinel Tech: Charting Hardware Security Landscapes Through Post-Silicon Innovation, Threat Mitigation and Future Trajectories

Hardware IP Security and Trust

IP Protection and Supply Chain Security through Logic Obfuscation

Efficient and secure intellectual property (IP) design with split fabrication

When a Patch is Not Enough - HardFails: Software-Exploitable Hardware Bugs

Supply Chain Security of IC Chips: Problems and Solutions for Authenticity under Threat

The State-of-the-art in EDA tools: the Hardware Trojan Confrontation Framework

IP Protection and Supply Chain Security Through Logic Obfuscation: A Systematic Overview