Moats and Drawbridges: An Isolation Primitive for Reconfigurable Hardware Based Systems
Huffmire, T.
Brotherton, B.
Gang Wang
Sherwood, T.
Kastner, R.
Levin, T.
Nguyen, T.
Irvine, C.
Dept. of Comput. Sci., Univ. of California, Santa Barbara, Santa Barbara, CA;
This paper appears in: Security and Privacy, 2007. SP '07. IEEE Symposium on
Publication Date: 20-23 May 2007
On page(s): 281-295
Location: Berkeley, CA,
ISSN: 1081-6011
ISBN: 0-7695-2848-1
INSPEC Accession Number: 10286355
Digital Object Identifier: 10.1109/SP.2007.28
Current Version Published: 2007-06-04
Abstract
Blurring the line between software and hardware, reconfigurable devices strike a balance between the raw high speed of custom silicon and the post-fabrication flexibility of general-purpose processors. While this flexibility is a boon for embedded system developers, who can now rapidly prototype and deploy solutions with performance approaching custom designs, this results in a system development methodology where functionality is stitched together from a variety of "soft IP cores," often provided by multiple vendors with different levels of trust. Unlike traditional software where resources are managed by an operating system, soft IP cores necessarily have very fine grain control over the underlying hardware. To address this problem, the embedded systems community requires novel security primitives which address the realities of modern reconfigurable hardware. We propose an isolation primitive, moats and drawbridges, that are built around four design properties: logical isolation, interconnect traceability, secure reconfigurable broadcast, and configuration scrubbing. Each of these is a fundamental operation with easily understood formal properties, yet maps cleanly and efficiently to a wide variety of reconfigurable devices. We carefully quantify the required overheads on real FPGAs and demonstrate the utility of our methods by applying them to the practical problem of memory protection.
Index
Terms
Available to subscribers and IEEE members.
References
Available to subscribers and IEEE members.
Citing Documents
Available to subscribers and IEEE members.
Cart
