TY - JOUR
T1 - CAD-base
T2 - An attack vector into the electronics supply chain
AU - Basu, Kanad
AU - Saeed, Samah Mohamed
AU - Pilato, Christian
AU - Ashraf, Mohammed
AU - Nabeel, Mohammed Thari
AU - Chakrabarty, Krishnendu
AU - Karri, Ramesh
N1 - Funding Information:
This work is partially supported by NSF award 1526405. Authors’ addresses: K. Basu, New York University, 2, MetroTech Center, Brooklyn, NY, 11201, USA; email: kb150@nyu.edu; S. M. Saeed, City University of New York, USA; email: samahsaeed88@hotmail.com; C. Pilato, Politecnico di Milano, Italy; email: christian.pilato@polimi.it; M. Ashraf and M. T. Nabeel, New York University, Abu Dhabi, UAE; emails: {mohammed.ashraf, mohammed.nabeel}@nyu.edu; K. Chakrabarty, Duke University, USA; email: krish@duke.edu; R. Karri, New York University, USA; email: rkarri@nyu.edu. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from permissions@acm.org. © 2019 Association for Computing Machinery. 1084-4309/2019/04-ART38 $15.00 https://doi.org/10.1145/3315574
Publisher Copyright:
© 2019 Association for Computing Machinery.
PY - 2019
Y1 - 2019
N2 - Fabless semiconductor companies design system-on-chips (SoC) by using third-party intellectual property (IP) cores and fabricate them in offshore, potentially untrustworthy foundries. Owing to the globally distributed electronics supply chain, security has emerged as a serious concern. In this article, we explore electronics computer-aided design (CAD) software as a threat vector that can be exploited to introduce vulnerabilities into the SoC. We show that all electronics CAD tools-high-level synthesis, logic synthesis, physical design, verification, test, and post-silicon validation-are potential threat vectors to different degrees. We have demonstrated CAD-based attacks on several benchmarks, including the commercial ARM Cortex M0 processor [1].
AB - Fabless semiconductor companies design system-on-chips (SoC) by using third-party intellectual property (IP) cores and fabricate them in offshore, potentially untrustworthy foundries. Owing to the globally distributed electronics supply chain, security has emerged as a serious concern. In this article, we explore electronics computer-aided design (CAD) software as a threat vector that can be exploited to introduce vulnerabilities into the SoC. We show that all electronics CAD tools-high-level synthesis, logic synthesis, physical design, verification, test, and post-silicon validation-are potential threat vectors to different degrees. We have demonstrated CAD-based attacks on several benchmarks, including the commercial ARM Cortex M0 processor [1].
KW - Computer-aided design
KW - Electronic design automation
KW - Hardware security
UR - http://www.scopus.com/inward/record.url?scp=85065613918&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85065613918&partnerID=8YFLogxK
U2 - 10.1145/3315574
DO - 10.1145/3315574
M3 - Article
AN - SCOPUS:85065613918
SN - 1084-4309
VL - 24
JO - ACM Transactions on Design Automation of Electronic Systems
JF - ACM Transactions on Design Automation of Electronic Systems
IS - 4
M1 - 38
ER -