Trojan Placement Analysis Using Contributory Operation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for detecting and preventing hardware trojans in electronic systems are inadequate, as they often fail to identify all trojans within a system and can be outsmarted by malicious actors who hide trojans in complex locations, making it difficult to anticipate and defend against potential attacks effectively.
Innovation Solution
A method involving contributory operation analysis, which includes developing a target operation vector, creating a hierarchical module map, inserting an operative monitor, and using a vulnerability heuristics database to identify and simulate trojan placement, allowing for the insertion of instruments to detect anomalies and anticipate potential attack locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If comprehensive trojan detection methods are applied to identify all potential trojans in electronic systems, then detection coverage is improved, but analysis complexity and computational resources required increase significantly
Solution Approach 1:
The patent segments the electronic system into hierarchical modules and further divides analysis into contributory operation analysis and non-contributory operation analysis. By focusing detection efforts only on contributory modules that actually participate in target operations, the method reduces the search space from the entire system to only relevant portions, thereby maintaining high detection coverage while reducing analysis complexity.
Solution Approach 2:
The patent applies different analysis strategies to different parts of the system based on their contributory status. Contributory modules receive detailed operability analysis with comprehensive trojan detection, while non-contributory modules are excluded from intensive analysis. This localized approach ensures thorough detection where needed while avoiding unnecessary complexity in irrelevant areas.
2Reliability
If detection instruments are placed throughout the electronic system to monitor all potential attack locations, then trojan detection capability is improved, but system overhead and resource consumption increase
Solution Approach 1:
The patent performs contributory operation analysis before placing detection instruments, identifying which modules are actually involved in target operations. This preliminary analysis determines the optimal locations for instrument placement, ensuring that detectors are positioned only where they can detect actual threats rather than being placed throughout the entire system unnecessarily.
Solution Approach 2:
Instead of placing detection instruments in all possible locations (excessive action), the patent places instruments only in contributory modules that are operationally relevant (partial action). This selective approach provides sufficient detection capability for actual attack vectors while minimizing system overhead from unnecessary monitoring infrastructure.
3Ease of manufacture
If traditional trojan detection methods are used, then implementation simplicity is maintained, but detection accuracy decreases due to inability to identify hidden trojans in complex locations
Solution Approach 1:
The patent introduces contributory operation analysis as an intermediary step between traditional detection methods and actual trojan identification. This intermediary analysis filters and prioritizes modules based on their operational relevance, making the subsequent detection process more accurate by focusing on likely attack locations while maintaining a systematic, implementable workflow.
Data Source
AI summary
A method and system for analysis of a facility may include providing an emulation host system, first generating a golden circuit model on the emulation host system, first inserting a first hardware trojan model, first emulating operation of the golden circuit model, and second emulating operation of the first hardware trojan model. The method includes the application of operative vectors to a golden model in simulation or emulation with support of embedded activity monitors to identify which modules contribute to a given functional operation as a method to identify where trojan attacks can be placed.