基于GSCPN的硬件木马攻击建模与安全性分析

梅波; 郭威; 曹志鹏; 李沛杰; 张文博

doi:10.11959/j.issn.2096-109x.2024054

您当前的位置：

首页 >

文章列表页 >

基于GSCPN的硬件木马攻击建模与安全性分析

学术论文

- 基于GSCPN的硬件木马攻击建模与安全性分析
- Modeling and security analysis of hardware trojan attack based on GSCPN
- 网络与信息安全学报 2024年10卷第4期页码：72-84
- 作者机构：
  
  信息工程大学，河南郑州 450001
- 作者简介：
  
  [ "梅波（1998-），男，安徽宣城人，信息工程大学博士生，主要研究方向为内生安全、硬件木马防御。" ]
  [ "郭威（1990-），男，北京人，博士，信息工程大学副研究员，主要研究方向为计算机体系结构、人工智能与大数据、内生安全。" ]
  [ "曹志鹏（1996-），男，陕西西安人，信息工程大学博士生，主要研究方向为晶上系统互连网络、计算机体系结构设计。" ]
  [ "李沛杰（1999-），男，山西襄汾人，信息工程大学博士生，助理研究员，主要研究方向为硬件安全、软件定义晶上系统、软件定义互连。" ]
  [ "张文博（1999-），男，河南汝州人，信息工程大学博士生，主要研究方向为硬件安全、硬件木马。" ]
- 基金信息：
  
  国家重点研发计划(2022YFB4401401)
- DOI：10.11959/j.issn.2096-109x.2024054
  中图分类号： TP309
- 收稿：2024-03-10，
  
  修回：2024-08-09，
  
  纸质出版：2024-08-25
- 稿件说明：
移动端阅览
梅波, 郭威, 曹志鹏, 等. 基于GSCPN的硬件木马攻击建模与安全性分析[J]. 网络与信息安全学报, 2024, 10(4): 72-84.

Format: MEI B, GUO W, CAO Z P, et al. Modeling and security analysis of hardware trojan attack based on GSCPN[J]. Chinese Journal of Network and Information Security, 2024, 10(4): 72-84.
梅波, 郭威, 曹志鹏, 等. 基于GSCPN的硬件木马攻击建模与安全性分析[J]. 网络与信息安全学报, 2024, 10(4): 72-84. DOI： 10.11959/j.issn.2096-109x.2024054.

Format: MEI B, GUO W, CAO Z P, et al. Modeling and security analysis of hardware trojan attack based on GSCPN[J]. Chinese Journal of Network and Information Security, 2024, 10(4): 72-84. DOI： 10.11959/j.issn.2096-109x.2024054.

摘要

针对硬件木马（hardware trojan，HT）的研究主要集中在HT设计和防御的具体策略，缺乏面向HT攻击的系统安全性量化评估模型的问题，提出了基于广义随机着色petri网（generalized stochastic coloring petri net，GSCPN）的HT攻击和安全评估模型。基于单个基本单元的HT攻击行为和状态之间的时序关系，构建了单个基本单元的HT攻击GSCPN模型，根据系统工作状态下基本单元的通信依赖关系，给出了构建系统HT攻击GSCPN模型的通用方法。求解了与GSCPN模型同构的马尔可夫链的解析解，以及采用蒙特卡罗模拟方法的仿真解，二者的误差仅为0.001 83，验证了所提方法建模的准确性。通过案例分析了不同场景下系统的安全性，实验结果表明，木马攻击强度、木马恢复时间和任务执行时间均对安全性有不同程度的影响。

Abstract

Addressing the issue that research on hardware Trojan (HT) has predominantly focused on specific strategies of HT design and defense

with a deficiency in quantitative evaluation models for system security in the context of HT attacks

a HT attack and security assessment model based on the generalized stochastic coloring Petri net (GSCPN) was proposed. The GSCPN model representing the HT attack of a single basic unit was constructed

founded on the temporal relationship between HT attack behaviors and the states of a single basic unit. A general method for constructing the GSCPN model of HT attack for the entire system was provided

based on the communication dependency relationships between the basic units during the system’s operational state. The analytical solution of the Markov chain isomorphous to the GSCPN model was derived

alongside the simulation solution achieved using the Monte Carlo simulation method. The discrepancy between the two methods was a mere 0.00183

which verified the precision of the modeling approach. The security of the system under various scenarios was analyzed through a straightforward case study. The experimental results indicate that the intensity of the HT attack

HT recovery time

and task execution time all exert varying degrees of influence on system security.

关键词

Keywords

references

AGRAWAL D , BAKTIR S , KARAKOYUNLU D , et al . Trojan detection using IC fingerprinting [C ] // Proceedings of the 2007 IEEE Symposium on Security and Privacy , Piscataway : IEEE Press , 2007 : 296 - 310 .

CHEN Z , ZHOU P Q , HO T Y , et al . How secure is split manufacturing in preventing hardware Trojan? [C ] // Proceedings of the 2016 IEEE Asian Hardware-Oriented Security and Trust (AsianHOST) . Piscataway : IEEE Press , 2016 : 1 - 6 .

KHAN M S M , XI C J , KHAN A A , et al . Secure interposer-based heterogeneous integration [J ] . IEEE Design & Test , 2022 , 39 ( 6 ): 156 - 164 .

HU X , ZHAO Y , DENG L , et al . Practical attacks on deep neural networks by memory trojaning [J ] . IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems , 2021 , 40 ( 6 ): 1230 - 1243 .

YASAEI R , FAEZI S , AL FARUQUE M A . Golden reference-free hardware trojan localization using graph convolutional network [J ] . IEEE Transactions on Very Large Scale Integration (VLSI) Systems , 2022 , 30 ( 10 ): 1401 - 1411 .

YANG S , CHAKRABORTY P , SLPSK P , et al . Trusted electronic systems with untrusted COTS [C ] // Proceedings of the 2021 22nd International Symposium on Quality Electronic Design (ISQED) . Piscataway : IEEE Press , 2021 : 198 - 203 .

PATNAIK S , ASHRAF M , SINANOGLU O , et al . A modern approach to IP protection and trojan prevention: split manufacturing for 3D ICs and obfuscation of vertical interconnects [J ] . IEEE Transactions on Emerging Topics in Computing , 2021 , 9 ( 4 ): 1815 - 1834 .

SAFARI Y , AGHANOURY P , IYER S S , et al . Hybrid obfuscation of chiplet-based systems [C ] // Proceedings of the 2023 60th ACM/IEEE Design Automation Conference (DAC) . Piscataway : IEEE Press , 2023 : 1 - 6 .

GUIMARÃES L A , BASTOS R P , FESQUET L . Detection of layout-level trojans by monitoring substrate with preexisting built-in sensors [C ] // Proceedings of the 2017 IEEE Computer Society Annual Symposium on VLSI (ISVLSI) . Piscataway : IEEE Press , 2017 : 290 - 295 .

DONG Z J , CHEN L , LI Y . A multi-level architecture for hardware Trojan and vulnerability runtime detection and response towards cryptographic IP [J ] . IEICE Electronics Express , 2022 , 19 ( 11 ): 20220167 .

CASSANO L , IAMUNDO M , LOPEZ T A , et al . DETON: DEfeating hardware Trojan horses in microprocessors through software obfuscation [J ] . Journal of Systems Architecture , 2022 , 129 : 102592 .

CHAKRABORTY R S , NARASIMHAN S , BHUNIA S . Hardware trojan: threats and emerging solutions [C ] // Proceedings of the 2009 IEEE International High Level Design Validation and Test Workshop . Piscataway : IEEE Press , 2009 : 166 - 171 .

RAJENDRAN J J , SINANOGLU O , KARRI R . Building trustworthy systems using untrusted components: a high-level synthesis approach [J ] . IEEE Transactions on Very Large Scale Integration (VLSI) Systems , 2016 , 24 ( 9 ): 2946 - 2959 .

SUN Y D , JIANG G Y , LAM S K , et al . Designing energy-efficient MPSoC with untrustworthy 3PIP cores [J ] . IEEE Transactions on Parallel and Distributed Systems , 2020 , 31 ( 1 ): 51 - 63 .

RAO V V , SASAN A , SAVIDIS I . Analysis of the security vulnerabilities of 2.5-D and 3-D integrated circuits [C ] // Proceedings of the 2022 23rd International Symposium on Quality Electronic Design (ISQED) . Piscataway : IEEE Press , 2022 : 1 - 7 .

SLPSK P , RAY S , BHUNIA S . Treehouse: a secure asset management infrastructure for protecting 3DIC designs [J ] . IEEE Transactions on Computers , 2023 , 72 ( 8 ): 2306 - 2320 .

TEN C W , MANIMARAN G , LIU C C . Cybersecurity for critical infrastructures: attack and defense modeling [J ] . IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans , 2010 , 40 ( 4 ): 853 - 865 .

YU L , CHEN K L , CHANG Y , et al . A new correlation model of IoT attack based on attack tree [C ] // Proceedings of the 2021 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) . Piscataway : IEEE Press , 2021 : 930 - 935 .

王赛娥 , 刘彩霞 , 刘树新 , 等 . 一种基于攻击树的4G网络安全风险评估方法 [J ] . 计算机工程 , 2021 , 47 ( 3 ): 139 - 146, 154 .

WANG S E , LIU C X , LIU S X , et al . A method of 4G network security risk assessment based on attack tree [J ] . Computer Engineering , 2021 , 47 ( 3 ): 139 - 146, 154 .

PHILLIPS C , SWILER L P . A graph-based system for network-vulnerability analysis [C ] // Proceedings of the 1998 Workshop on New Security Paradigms . New York : ACM , 1998 : 71 - 79 .

胡浩 , 刘玉岭 , 张玉臣 , 等 . 基于攻击图的网络安全度量研究综述 [J ] . 网络与信息安全学报 , 2018 , 4 ( 9 ): 1 - 16 .

HU H , LIU Y L , ZHANG Y C , et al . Survey of attack graph based network security metric [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 9 ): 1 - 16 .

原菊梅 , 侯朝桢 , 高琳 , 等 . 基于有色Petri网的复杂武器系统任务可靠性建模及估计 [J ] . 系统仿真学报 , 2007 , 19 ( 11 ): 2563 - 2566 .

YUAN J M , HOU C Z , GAO L , et al . Based on color petri-net modeling and estimate for task reliability of complex weapon system [J ] . Journal of System Simulation , 2007 , 19 ( 11 ): 2563 - 2566 .

ALMUTAIRI L M , SHETTY S . Generalized stochastic Petri Net model based security risk assessment of software defined networks [C ] // Proceedings of the MILCOM 2017 IEEE Military Communications Conference (MILCOM) . Piscataway : IEEE Press , 2017 : 545 - 550 .

TANG S Y , HU X Y , ZHAO L . Modeling and security analysis of IEEE 802.1AS using hierarchical colored petri nets [C ] // Proceedings of the GLOBECOM 2020 - 2020 IEEE Global Communications Conference . Piscataway : IEEE Press , 2020 : 1 - 6 .

BALBO G , CHIOLA G , FRANCESCHINIS G , et al . Generalized stochastic Petri nets for the performance evaluation of FMS [C ] // Proceedings of 1987 IEEE International Conference on Robotics and Automation . Piscataway : IEEE Press , 1987 : 1013 - 1018 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

信息物理协同攻击在新型电力系统中的分析、建模与防御策略综述

晶上系统广义功能安全技术研究综述

基于模型检测的硬件木马检测技术研究

基于可满足性无关项的硬件木马设计与检测

硬件木马防护技术研究