Project Grant 2304533

SBIR PHASE II: A SOFTWARE PLATFORM FOR ASSESSMENT OF UNTRUSTED ELECTRONICS -THE BROADER/COMMERCIAL IMPACT OF THIS SMALL BUSINESS INNOVATION RESEARCH (SBIR) PHASE II PROJECT IS TO ADDRESS HARDWARE SECURITY AND TRUST ISSUES THAT ARE THREATENING THE SEMICONDUCTOR SUPPLY CHAIN. VARIOUS THREATS EXIST FROM THE DESIGN STAGE TILL THE END OF THE LIFE OF CHIPS, SUCH AS MALICIOUS LOGIC INSERTION, INTELLECTUAL PROPERTY (IP) THEFT, REVERSE ENGINEERING, BACKDOOR INSERTION, AND INFORMATION LEAKAGE FROM FABRICATED CHIPS. ENSURING THE SECURITY OF THE SUPPLY CHAIN NECESSITATES ENHANCING CHIP INTEGRITY THROUGH PROACTIVE MEASURES STARTING FROM THE DESIGN STAGE TO DISTRIBUTION. WITH SECURITY CONCERNS INCREASINGLY GAINING PROMINENCE IN SPECIFIC MARKET SEGMENTS, SUCH AS AUTOMOTIVE, DEFENSE, AND HEALTHCARE, VARIOUS STAKEHOLDERS, SUCH AS DEVICE MANUFACTURERS, SYSTEM INTEGRATORS, END USERS, AND GOVERNMENTS ARE VOICING THE NEED FOR A TRUSTED SEMICONDUCTOR SUPPLY CHAIN. USING THE PROPOSED SOFTWARE PLATFORM, STAKEHOLDERS OF THE CHIP INDUSTRY WILL BE ABLE TO ADDRESS SECURITY CHALLENGES AT A LOW COST, WITHOUT NEEDING TRAINED EXPERTS. FURTHERMORE, THE TEAM'S TOOLS WILL CONTRIBUTE TO MINIMIZING ELECTRONIC WASTE GENERATED FROM REFABRICATING FLAWED CHIPS AND DEVELOPING SOFTWARE PATCHES THAT REDUCE THE PERFORMANCE OF INSECURE SYSTEMS. THE PROPOSED TECHNOLOGIES WILL DRIVE CHIP DESIGNERS TO PRIORITIZE ENHANCING CHIP SECURITY, ENSURING COMPETITIVENESS IN ENVIRONMENTS WHERE SECURE SYSTEMS ARE ESSENTIAL. THIS SMALL BUSINESS INNOVATION RESEARCH (SBIR) PHASE II PROJECT SEEKS TO ADDRESS THE CHALLENGE OF COMMERCIAL DEPLOYMENT OF HARDWARE SECURITY SOFTWARE TO DETECT, ASSESS, AND MITIGATE HARDWARE SECURITY VULNERABILITIES IN SYSTEM-ON-CHIP (SOC) DESIGNS. BY UTILIZING A NOVEL METHODOLOGY, THE TOOL CONVERTS COMMON WEAKNESS ENUMERATIONS (CWES) INTO A FORMAL DESCRIPTION OF SECURITY PROPERTIES, WHICH THE PLATFORM'S REMAINING TOOLS CAN INTERPRET TO IDENTIFY COMMONLY OCCURRING ERRORS AND VULNERABILITIES IN HARDWARE DESIGNS. THE SOFTWARE SEAMLESSLY INTEGRATES WITH MAJOR COMMERCIAL ELECTRONIC DESIGN AUTOMATION (EDA) TOOL FLOW, ENHANCING THE DEPLOYMENT OF HARDWARE SECURITY SOFTWARE. THE TOOLSETS DETECT SECURITY ISSUES IN SOCS, INCLUDING ACCESS CONTROL VIOLATIONS, ASSET LEAKAGE, AND MALICIOUS LOGIC OR BACKDOORS. THE SOFTWARE CONSIDERS SECURITY CONCERNS IN THE GLOBAL ELECTRONIC SUPPLY CHAIN INVOLVING UNTRUSTED ENTITIES. THE TEAM WILL COLLABORATE WITH INDUSTRY LEADERS TO ENSURE WIDESPREAD ACCESSIBILITY. PARTNERSHIPS WITH SEVERAL DESIGN COMPANIES WILL DEMONSTRATE THE UNIQUE CAPABILITIES OF THE TOOL TO ANALYZE LARGE DESIGNS, E.G., RISC-V PROCESSORS, AND DETECT A WIDE ARRAY OF SECURITY VULNERABILITIES. THE UTILIZATION OF THE PRODUCT WILL SIGNIFICANTLY ENHANCE THE TECHNOLOGY READINESS LEVEL (TRL) AND DRIVE WIDESPREAD ADOPTION. THIS AWARD REFLECTS NSF'S STATUTORY MISSION AND HAS BEEN DEEMED WORTHY OF SUPPORT THROUGH EVALUATION USING THE FOUNDATION'S INTELLECTUAL MERIT AND BROADER IMPACTS REVIEW CRITERIA.- SUBAWARDS ARE PLANNED FOR THIS AWARD.