Knechtel, Johann

Eslami, Mohammad

Zou, Peng

Wei, Min

Tong, Xingyu

Qiu, Binggang

Cai, Zhijie

Chen, Guohao

Zhu, Benchao

Pagliarini, Samuel Nascimento

Johann Knechtel, Mohammad Eslami, Peng Zou, Min Wei, Xingyu Tong, Binggang Qiu, Zhijie Cai, Guohao Chen, Benchao Zhu, Jiawei Li, Jun Yu, Jianli Chen, Chun-Wei Chiu, Min-Feng Hsieh, Chia-Hsiu Ou, Ting-Chi Wang, Bangqi Fu, Qijing Wang, Yang Sun, Qin Luo, Anthony W. H. Lau, Fangzhou Wang, Evangeline F. Y. Young., Shunyang Bi, Guangxin Guo, Haonan Wu, Zhengguang Tang, Hailong You, Cong Li, Ramesh Karri, Ozgur Sinanoglu, Samuel Pagliarini

IACR transactions on cryptographic hardware and embedded systems

Ruhr-Universität Bochum

vol. 1

2025

p. 37-77 : ill

https://doi.org/10.46586/tches.v2025.i1.37-77

https://eprint.iacr.org/2024/1440

riistvara

turvalisus

integraallülitused

disain

hardware security

IC design

Red-versus-Blue Teaming

Trojans

2569-2925

Hardware Trojans (HTs) are a longstanding threat to secure computation. Among different threat models, it is the fabrication-time insertion of additional malicious logic directly into the layout of integrated circuits (ICs) that constitutes the most versatile, yet challenging scenario, for both attackers and defenders.Here, we present a large-scale, first-of-its-kind community effort through red-versus-blue teaming that thoroughly explores this threat. Four independently competing blue teams of 23 IC designers in total had to analyze and fix vulnerabilities of representative IC layouts at the pre-silicon stage, whereas a red team of 3 experts in hardware security and IC design continuously pushed the boundaries of these defense efforts through different HTs and novel insertion techniques. Importantly, we find that, despite the blue teams’ commendable design efforts, even highly-optimized layouts retained at least some exploitable vulnerabilities.Our effort follows a real-world setting for a modern 7nm technology node and industrygrade tooling for IC design, all embedded into a fully-automated and extensible benchmarking framework. To ensure the relevance of this work, strict rules that adhere to real-world requirements for IC design and manufacturing were postulated by the organizers. For example, not a single violation for timing and design-rule checks were allowed for defense techniques. Besides, in an advancement over prior art, neither red nor blue teams were allowed to use any so-called fillers and spares for trivial attack or defense approaches.Finally, we release all methods and artifacts: the representative IC layouts and HTs, the devised attack and defense techniques, the evaluation metrics and setup, the technology setup and commercial-grade reference flow for IC design, the encompassing benchmarking framework, and all best results. This full release enables the community to continue exploring this important challenge for hardware security, in particular to focus on the urgent need for further advancements in defense strategies.

Bibliogr.: 85 ref

Open Access

teaduspublikatsioon

1.1

https://www.scopus.com/sourceid/21101064700

https://www.scopus.com/pages/publications/85215387340?origin=resultslist

Computer science

Arvutiteadus

Computer science. Computer graphics and computer-aided design

Arvutiteadus. Arvutigraafika ja arvutipõhine disain

Computer science. Signal processing

Arvutiteadus. Signaalitöötlus

Computer science. Computer networks and communications

Arvutiteadus. Arvutivõrgud ja side

Computer science. Artificial intelligence

Arvutiteadus. Tehisintellekt

Computer science. Hardware and architecture

Arvutiteadus. Riistvara ja arhitektuur

Computer Science. Software

Arvutiteadus. Tarkvara

arvutisüsteemide instituut

Department of Computer Systems

English

Inglise