论文标题
片上的系统安全主张
System-on-Chip Security Assertions
论文作者
论文摘要
断言广泛用于功能验证以及软件和硬件设计的覆盖范围分析。断言实现运行时错误检测以及错误的定位速度。尽管有有关监视功能场景的软件和硬件主张的大量文献,但在利用断言来监视芯片上的系统(SOC)安全漏洞方面的努力有限。在本文中,我们通过分析设计来确定常见的SOC安全漏洞。为了监视这些漏洞,我们定义了几类断言,以实现安全漏洞的运行时检查。我们的实验结果表明,我们所提出的方法产生的安全性断言可以检测所有插入的漏洞,而最先进的断言生成技术产生的功能性断言无法检测到其中的大多数。
Assertions are widely used for functional validation as well as coverage analysis for both software and hardware designs. Assertions enable runtime error detection as well as faster localization of errors. While there is a vast literature on both software and hardware assertions for monitoring functional scenarios, there is limited effort in utilizing assertions to monitor System-on-Chip (SoC) security vulnerabilities. In this paper, we identify common SoC security vulnerabilities by analyzing the design. To monitor these vulnerabilities, we define several classes of assertions to enable runtime checking of security vulnerabilities. Our experimental results demonstrate that the security assertions generated by our proposed approach can detect all the inserted vulnerabilities while the functional assertions generated by state-of-the-art assertion generation techniques fail to detect most of them.