Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. Imprecise Security: Quality and Complexity Tradeoffs for Hardware Information Flow Tracking
 
conference paper

Imprecise Security: Quality and Complexity Tradeoffs for Hardware Information Flow Tracking

Hu, Wei
•
Becker, Andrew
•
Ardeshiricham, Armita
Show more
2016
2016 Ieee/Acm International Conference On Computer-Aided Design (Iccad)
35th IEEE/ACM International Conference on Computer-Aided Design (ICCAD)

Secure hardware design is a challenging task that goes far beyond ensuring functional correctness. Important design properties such as non-interference cannot be verified on functional circuit models due to the lack of essential information (e.g., sensitivity level) for reasoning about security. Hardware information flow tracking (IFT) techniques associate data objects in the hardware design with sensitivity labels for modeling security-related behaviors. They allow the designer to test and verify security properties related to confidentiality, integrity, and logical side channels. However, precisely accounting for each bit of information flow at the hardware level can be expensive. In this work, we focus on the precision of the IFT logic. The key idea is to selectively introduce only one sided errors ( false positives); these provide a conservative and safe information flow response while reducing the complexity of the security logic. We investigate the effect of logic synthesis on the quality and complexity of hardware IFT and reveal how different logic synthesis optimizations affect the amount of false positives and design overheads of IFT logic. We propose novel techniques to further simplify the IFT logic while adding no, or only a minimum number of, false positives. Additionally, we provide a solution to quantitatively introduce false positives in order to accelerate information flow security verification. Experimental results using IWLS benchmarks show that our method can reduce complexity of GLIFT by 14.47% while adding 0.20% of false positives on average. By quantitatively introducing false positives, we can achieve up to a 55.72% speedup in verification time.

  • Details
  • Metrics
Type
conference paper
DOI
10.1145/2966986.2967046
Web of Science ID

WOS:000390297800095

Author(s)
Hu, Wei
Becker, Andrew
Ardeshiricham, Armita
Tai, Yu
Ienne, Paolo  
Mu, Dejun
Kastner, Ryan
Date Issued

2016

Publisher

Assoc Computing Machinery

Publisher place

New York

Published in
2016 Ieee/Acm International Conference On Computer-Aided Design (Iccad)
ISBN of the book

978-1-4503-4466-1

Total of pages

8

Series title/Series vol.

ICCAD-IEEE ACM International Conference on Computer-Aided Design

Editorial or Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
LAP  
Event nameEvent placeEvent date
35th IEEE/ACM International Conference on Computer-Aided Design (ICCAD)

Austin, TX

NOV 07-10, 2016

Available on Infoscience
January 24, 2017
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/133889
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés