Communication Dans Un Congrès Année : 2025

Microarchitectural signals analysis platform for the implementation of Hardware Security Counters

Résumé

Detecting malicious software or hardware behavior during the operation of a computer system requires observables from one or more abstraction layers of the system. This abstraction, however, tends to limit the ability to detect behavioral deviations, especially for attack classes that exploit vulnerabilities very close to the target hardware. Conversely, too low a level of abstraction tends to significantly increase the complexity of the system model, and therefore poses a number of difficulties for the extraction and selection of relevant observables for a given class of attack. Hardware performance counters in particular have been used as an indirect means of observing micro-architecture behavior and detecting software attempting to exploit hardware vulnerabilities. In order to improve the various detection methods, we propose the construction of hardware metrics designed from the outset for security, by studying the correlation between signals from the micro-architecture and the various classes of attack in the literature, targeting both conventional IT and industrial OT systems. By extension, this work aims to detect attacks originating from hardware Trojans, the latter having the effect of changing the behavior of a given micro-architecture.

Fichier non déposé

Dates et versions

hal-05242277 , version 1 (05-09-2025)

Identifiants

  • HAL Id : hal-05242277 , version 1

Citer

Lucas Georget, Vincent Migliore, Vincent Nicomette, Frédéric Silvi, Arthur Villard. Microarchitectural signals analysis platform for the implementation of Hardware Security Counters. RISC-V Summit Europe 2025, May 2025, Paris, France. ⟨hal-05242277⟩
73 Consultations
0 Téléchargements

Partager

  • More