Modeling and security analysis of hardware trojan attack based on GSCPN

MEI Bo; GUO Wei; CAO Zhipeng; LI Peijie; ZHANG Wenbo

doi:10.11959/j.issn.2096-109x.2024054

您当前的位置：

首页 >

文章列表页 >

Modeling and security analysis of hardware trojan attack based on GSCPN

Papers

- Modeling and security analysis of hardware trojan attack based on GSCPN
- Chinese Journal of Network and Information Security Vol. 10, Issue 4, Pages: 72-84(2024)
- 作者机构：
  
  信息工程大学，河南郑州 450001
- 作者简介：
- 基金信息：
  
  The National Key Research and Development Program(2022YFB4401401)
- DOI：10.11959/j.issn.2096-109x.2024054
  CLC： TP309
- Received：10 March 2024，
  
  Revised：2024-08-09，
  
  Published：25 August 2024
- 稿件说明：
移动端阅览
梅波, 郭威, 曹志鹏, 等. 基于GSCPN的硬件木马攻击建模与安全性分析[J]. 网络与信息安全学报, 2024, 10(4): 72-84.

Format: MEI B, GUO W, CAO Z P, et al. Modeling and security analysis of hardware trojan attack based on GSCPN[J]. Chinese Journal of Network and Information Security, 2024, 10(4): 72-84.
梅波, 郭威, 曹志鹏, 等. 基于GSCPN的硬件木马攻击建模与安全性分析[J]. 网络与信息安全学报, 2024, 10(4): 72-84. DOI： 10.11959/j.issn.2096-109x.2024054.

Format: MEI B, GUO W, CAO Z P, et al. Modeling and security analysis of hardware trojan attack based on GSCPN[J]. Chinese Journal of Network and Information Security, 2024, 10(4): 72-84. DOI： 10.11959/j.issn.2096-109x.2024054.

摘要

针对硬件木马（hardware trojan，HT）的研究主要集中在HT设计和防御的具体策略，缺乏面向HT攻击的系统安全性量化评估模型的问题，提出了基于广义随机着色petri网（generalized stochastic coloring petri net，GSCPN）的HT攻击和安全评估模型。基于单个基本单元的HT攻击行为和状态之间的时序关系，构建了单个基本单元的HT攻击GSCPN模型，根据系统工作状态下基本单元的通信依赖关系，给出了构建系统HT攻击GSCPN模型的通用方法。求解了与GSCPN模型同构的马尔可夫链的解析解，以及采用蒙特卡罗模拟方法的仿真解，二者的误差仅为0.001 83，验证了所提方法建模的准确性。通过案例分析了不同场景下系统的安全性，实验结果表明，木马攻击强度、木马恢复时间和任务执行时间均对安全性有不同程度的影响。

Abstract

Addressing the issue that research on hardware Trojan (HT) has predominantly focused on specific strategies of HT design and defense

with a deficiency in quantitative evaluation models for system security in the context of HT attacks

a HT attack and security assessment model based on the generalized stochastic coloring Petri net (GSCPN) was proposed. The GSCPN model representing the HT attack of a single basic unit was constructed

founded on the temporal relationship between HT attack behaviors and the states of a single basic unit. A general method for constructing the GSCPN model of HT attack for the entire system was provided

based on the communication dependency relationships between the basic units during the system’s operational state. The analytical solution of the Markov chain isomorphous to the GSCPN model was derived

alongside the simulation solution achieved using the Monte Carlo simulation method. The discrepancy between the two methods was a mere 0.00183

which verified the precision of the modeling approach. The security of the system under various scenarios was analyzed through a straightforward case study. The experimental results indicate that the intensity of the HT attack

HT recovery time

and task execution time all exert varying degrees of influence on system security.

关键词

Keywords

references

AGRAWAL D , BAKTIR S , KARAKOYUNLU D , et al . Trojan detection using IC fingerprinting [C ] // Proceedings of the 2007 IEEE Symposium on Security and Privacy , Piscataway : IEEE Press , 2007 : 296 - 310 .

CHEN Z , ZHOU P Q , HO T Y , et al . How secure is split manufacturing in preventing hardware Trojan? [C ] // Proceedings of the 2016 IEEE Asian Hardware-Oriented Security and Trust (AsianHOST) . Piscataway : IEEE Press , 2016 : 1 - 6 .

KHAN M S M , XI C J , KHAN A A , et al . Secure interposer-based heterogeneous integration [J ] . IEEE Design & Test , 2022 , 39 ( 6 ): 156 - 164 .

HU X , ZHAO Y , DENG L , et al . Practical attacks on deep neural networks by memory trojaning [J ] . IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems , 2021 , 40 ( 6 ): 1230 - 1243 .

YASAEI R , FAEZI S , AL FARUQUE M A . Golden reference-free hardware trojan localization using graph convolutional network [J ] . IEEE Transactions on Very Large Scale Integration (VLSI) Systems , 2022 , 30 ( 10 ): 1401 - 1411 .

YANG S , CHAKRABORTY P , SLPSK P , et al . Trusted electronic systems with untrusted COTS [C ] // Proceedings of the 2021 22nd International Symposium on Quality Electronic Design (ISQED) . Piscataway : IEEE Press , 2021 : 198 - 203 .

PATNAIK S , ASHRAF M , SINANOGLU O , et al . A modern approach to IP protection and trojan prevention: split manufacturing for 3D ICs and obfuscation of vertical interconnects [J ] . IEEE Transactions on Emerging Topics in Computing , 2021 , 9 ( 4 ): 1815 - 1834 .

SAFARI Y , AGHANOURY P , IYER S S , et al . Hybrid obfuscation of chiplet-based systems [C ] // Proceedings of the 2023 60th ACM/IEEE Design Automation Conference (DAC) . Piscataway : IEEE Press , 2023 : 1 - 6 .

GUIMARÃES L A , BASTOS R P , FESQUET L . Detection of layout-level trojans by monitoring substrate with preexisting built-in sensors [C ] // Proceedings of the 2017 IEEE Computer Society Annual Symposium on VLSI (ISVLSI) . Piscataway : IEEE Press , 2017 : 290 - 295 .

DONG Z J , CHEN L , LI Y . A multi-level architecture for hardware Trojan and vulnerability runtime detection and response towards cryptographic IP [J ] . IEICE Electronics Express , 2022 , 19 ( 11 ): 20220167 .

CASSANO L , IAMUNDO M , LOPEZ T A , et al . DETON: DEfeating hardware Trojan horses in microprocessors through software obfuscation [J ] . Journal of Systems Architecture , 2022 , 129 : 102592 .

CHAKRABORTY R S , NARASIMHAN S , BHUNIA S . Hardware trojan: threats and emerging solutions [C ] // Proceedings of the 2009 IEEE International High Level Design Validation and Test Workshop . Piscataway : IEEE Press , 2009 : 166 - 171 .

RAJENDRAN J J , SINANOGLU O , KARRI R . Building trustworthy systems using untrusted components: a high-level synthesis approach [J ] . IEEE Transactions on Very Large Scale Integration (VLSI) Systems , 2016 , 24 ( 9 ): 2946 - 2959 .

SUN Y D , JIANG G Y , LAM S K , et al . Designing energy-efficient MPSoC with untrustworthy 3PIP cores [J ] . IEEE Transactions on Parallel and Distributed Systems , 2020 , 31 ( 1 ): 51 - 63 .

RAO V V , SASAN A , SAVIDIS I . Analysis of the security vulnerabilities of 2.5-D and 3-D integrated circuits [C ] // Proceedings of the 2022 23rd International Symposium on Quality Electronic Design (ISQED) . Piscataway : IEEE Press , 2022 : 1 - 7 .

SLPSK P , RAY S , BHUNIA S . Treehouse: a secure asset management infrastructure for protecting 3DIC designs [J ] . IEEE Transactions on Computers , 2023 , 72 ( 8 ): 2306 - 2320 .

TEN C W , MANIMARAN G , LIU C C . Cybersecurity for critical infrastructures: attack and defense modeling [J ] . IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans , 2010 , 40 ( 4 ): 853 - 865 .

YU L , CHEN K L , CHANG Y , et al . A new correlation model of IoT attack based on attack tree [C ] // Proceedings of the 2021 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) . Piscataway : IEEE Press , 2021 : 930 - 935 .

王赛娥 , 刘彩霞 , 刘树新 , 等 . 一种基于攻击树的4G网络安全风险评估方法 [J ] . 计算机工程 , 2021 , 47 ( 3 ): 139 - 146, 154 .

WANG S E , LIU C X , LIU S X , et al . A method of 4G network security risk assessment based on attack tree [J ] . Computer Engineering , 2021 , 47 ( 3 ): 139 - 146, 154 .

PHILLIPS C , SWILER L P . A graph-based system for network-vulnerability analysis [C ] // Proceedings of the 1998 Workshop on New Security Paradigms . New York : ACM , 1998 : 71 - 79 .

胡浩 , 刘玉岭 , 张玉臣 , 等 . 基于攻击图的网络安全度量研究综述 [J ] . 网络与信息安全学报 , 2018 , 4 ( 9 ): 1 - 16 .

HU H , LIU Y L , ZHANG Y C , et al . Survey of attack graph based network security metric [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 9 ): 1 - 16 .

原菊梅 , 侯朝桢 , 高琳 , 等 . 基于有色Petri网的复杂武器系统任务可靠性建模及估计 [J ] . 系统仿真学报 , 2007 , 19 ( 11 ): 2563 - 2566 .

YUAN J M , HOU C Z , GAO L , et al . Based on color petri-net modeling and estimate for task reliability of complex weapon system [J ] . Journal of System Simulation , 2007 , 19 ( 11 ): 2563 - 2566 .

ALMUTAIRI L M , SHETTY S . Generalized stochastic Petri Net model based security risk assessment of software defined networks [C ] // Proceedings of the MILCOM 2017 IEEE Military Communications Conference (MILCOM) . Piscataway : IEEE Press , 2017 : 545 - 550 .

TANG S Y , HU X Y , ZHAO L . Modeling and security analysis of IEEE 802.1AS using hierarchical colored petri nets [C ] // Proceedings of the GLOBECOM 2020 - 2020 IEEE Global Communications Conference . Piscataway : IEEE Press , 2020 : 1 - 6 .

BALBO G , CHIOLA G , FRANCESCHINIS G , et al . Generalized stochastic Petri nets for the performance evaluation of FMS [C ] // Proceedings of 1987 IEEE International Conference on Robotics and Automation . Piscataway : IEEE Press , 1987 : 1013 - 1018 .

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Cyber-physical coordinated attack: a review of analysis, modeling and defense strategies in next-generation power systems

Survey on generalized safety and security technology for system on wafer

Survey on model checking based hardware Trojan detection technology

Design and detection of hardware Trojan based on satisfiability don't cares

Research on hardware Trojan defense

Related Author

CHEN Haowen

WU Qianqiong

GENG Yangyang

WEI Qiang

HUANG Huihui

MEI Bo

CAO Zhipeng

SHEN Jianliang

Related Institution

School of Cyberspace Security, Information Engineering University

School of Cybersecurity, Northwestern Polytechnical University

College of Informatics, Huazhong Agricultural University

⁰