Overcoming an untrusted computing base: Detecting and removing malicious hardware automatically

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2010, Pages 159-172

  Hicks, Matthew ^a   Finnicum, Murph ^a   King, Samuel T ^a   Martin, Milo M K ^b   Smith, Jonathan M ^b  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CIRCUIT IDENTIFICATION; DEFENSIVE STRATEGIES; DESIGN PROCESS; DESIGN VERIFICATION; EXCEPTION HANDLERS; HARDWARE ATTACK; HARDWARE COMPLEXITY; HARDWARE/SOFTWARE; RUNTIME OVERHEADS; RUNTIMES; SECURITY THREATS; SOFTWARE SYSTEMS; TIME COMPONENTS;

COMPUTER SOFTWARE SELECTION AND EVALUATION; DESIGN; HARDWARE; NETWORK SECURITY;

COMPUTER HARDWARE;

EID: 77955218749     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2010.18     Document Type: Conference Paper

References (29)

1. Maxtor basics personal storage 3200. http: // www.Seagate.com/www/en-us/ support/downloads/personal-storage/ps3200-sw.
2. Intel Itanium Processor Firmware Specifications, http: //www.intel.com/design/itanium/firmware.htm, March 2010.
3. D. Agrawal, S. Baktir, D. Karakoyunlu, P. Rohatgi, and B. Sunar. Trojan detection using IC fingerprinting. In Proceedings of the 2007 IEEE Symposium on Security and Privacy, May 2007.
4. Apple Computer Inc. Small Number of Video iPods Shipped With Windows Virus. 2006. http://www. apple.com/support/windowsvirus/.
5. P. Bannon and J. Keller. Internal architecture of Alpha 21164 microprocessor, compcon, 00:79, 1995.
6. A. Biere, A. Cimatti, E. Clarke, M. Fujita, and Y. Zhu. Symbolic model checking using SAT procedures instead of BDDs. In Proc. ACM/IEEE Annual Design Automation Conference, pages 317-320, 1999.
7. Bob Colwell. Personal communication, March 2009.
8. BugTraq Mailing List. Irssi 0.8.4 backdoor, May 2002. http://archives.neohapsis.com/archives/ bugtraq/2002-05/0222.html.
9. C. Cadar, D. Dunbar, and D. R. Engler. Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Proceedings of the 2008 USENIX Symposium on Operating Systems Design and Implementation, December 2008.
10. C. Cadar, V. Ganesh, P. M. Pawlowski, D. L. Dill, and D. R. Engler. Exe: automatically generating inputs of death. In CCS '06: Proceedings of the 13th ACM Conference on Computer and Communications Security, pages 322-335, New York, NY, USA, 2006. ACM.
11. CERT. Cert advisory ca-2002-24 trojan horse openssh distribution. Technical report, CERT Coordination Center, 2002. http://www.cert.org/ advisories/CA-2002-24.html.
12. CERT. Cert advisory ca-2002-28 trojan horse sendmail distribution. Technical report, CERT Coordination Center, 2002. http://www.cert.org/ advisories/CA-2002-28.html.
13. H. Chen, D. Dean, and D. Wagner. Model checking one million lines of C code. In Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS), pages 171-185, 2004.
14. J. C. Dehnert, B. K. Grant, J. P. Banning, R. Johnson, T. K. A. Klaiber, and J. Mattson. The transmeta code morphing software: Using speculation, recovery, and adapative retranslation to address real-life challenges. In Proceedings of the 1st IEEE/ACM Symposium of Code Generation and Optimization, Mar 2003.
15. Gaisler Research. Leon3 synthesizable processor. http://www.gaisler.com.
16. B. Gassend, D. Clarke, M. van Dijk, and S. Devadas. Silicon physical random functions. In Proceedings of the 9th ACM Conference on Computer and Communications Security, pages 148-160, New York, NY, USA, 2002. ACM Press.
17. I. Hadžić, S. Udani, and J. M. Smith. FPGA Viruses. In Proceedings of 9th International Workshop on FieldProgrammable Logic and Applications, FPL'99, LNCS. Springer, August 1999.
18. L. C. Heller and M. S. Farrell. Millicode in an IBM zSeries processor. IBM J. Res. Dev., 48(3-4):425-434, 2004.
19. T. Huff mire, B. Brotherton, G. Wang, T. Sherwood, R. Kastner, T. Levin, T. Nguyen, and C. Irvine. Moats and drawbridges: An isolation primitive for reconfigurable hardware based systems. In Proceedings of the 2007 IEEE Symposium on Security and Privacy, pages 281-295, Washington, DC, USA, 2007. IEEE Computer Society.
20. P. A. Karger and R. R. Schell. Multics Security Evaluation: Vulnerability Analysis. Technical Report ESDTR-74-192, HQ Electronic Systems Division: Hanscom AFB, June 1974.
21. P. A. Karger and R. R. Schell. Thirty Years Later: Lessons from the Multics Security Evaluation. In ACSAC '02: Proceedings of the 18th Annual Computer Security Applications Conference, page 119. IEEE Computer Society, 2002.
22. S. T. King, J. Tucek, A. Cozzie, C. Grier, W. Jiang, and Y. Zhou. Designing and implementing malicious hardware. In Proceedings of the First USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), April 2008.
23. A. C. Myers and B. Liskov. A Decentralized Model for Information Flow Control. In Proceedings of the 1997 Symposium on Operating Systems Principles, October 1997.
24. SPARC International Inc. SPARC v8 processor. http://www.sparc.org.
25. B. Sullivan. Digital picture frames infected with virus, January 2008. http://redtape.msnbc.com/2008/01/digital-picture.html.
26. K. Thompson. Reflections on trusting trust. Commun. ACM, 27(8):761-763, 1984.
27. United States Department of Defense. Mission impact of foreign influence on DoD software. September 2007.
28. J. Yang, P. Twohey, D. Engler, and M. Musuvathi. Using model checking to find serious file system errors. In OSDI'04: Proceedings of the 6th Symposium on Operating Systems Design & Implementation, pages 273-288, Berkeley, CA, USA, 2004. USENIX Association.
29. S. Zdancewic, L. Zheng, N. Nystrom, and A. C. Myers. Untrusted hosts and confidentiality: secure program partitioning. In Proceedings of the 2001 Symposium on Operating Systems Principles, October 2001.