Analyzing the Vulnerabilities of External SDRAM on System-on-Chip Field Programmable Gate Array Devices
- 22 March 2024
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Very Large Scale Integration (VLSI) Systems
- Vol. 32 (6) , 1124-1135
Abstract
System-on-chip (SoC) field programmable gate array (FPGA) devices are becoming increasingly prominent in a vast range of applications. The fusion of the FPGA’s unmatched parallel computing capacity and flexibility with a full-bore processing system makes these devices extremely powerful. With recent technological progress, SoC FPGA devices are implemented in increasingly complex systems where security and safety are often issues of concern. To cater to these concerns, these devices are commonly fit with encryption and authentication capabilities to ensure the confidentiality and authenticity of externally stored bitstreams, firmware, and bootloaders. However, while much effort is placed into securing these partitions when stored in external memory, little attention seems to be paid to the security of this data once it is decrypted for execution. This article investigates how vulnerable systems are to attacks that target decrypted data during execution. We demonstrate that data stored in external synchronous dynamic random access memory (SDRAM) can provide access to trusted and secured interfaces of SoC FPGA devices even with diligently applied security features.Keywords
Funding Information
- Thales Research and Technology Canada, Prompt Innov, and Canada's Natural Sciences and Engineering Research Council
This publication has 15 references indexed in Scilit:
- Malicious Routing: Circumventing Bitstream-level Verification for FPGAs2021
- High-Speed Printed Circuit Boards: A TutorialIEEE Circuits and Systems Magazine, 2020
- RAMBleed: Reading Bits in Memory Without Accessing Them2020
- Insights into the mind of a trojan designer2019
- Thwarting Security Threats From Malicious FPGA Tools With Novel FPGA-Oriented Moving Target DefenseIEEE Transactions on Very Large Scale Integration (VLSI) Systems, 2018
- How to Break Secure Boot on FPGA SoCs Through Malicious Hardware2017
- Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript2016
- Lest we rememberCommunications of the ACM, 2009
- Using Address Independent Seed Encryption and Bonsai Merkle Trees to Make Secure Processors OS- and Performance-Friendly2007
- CryptoPage: An Efficient Secure Architecture with Memory Encryption, Integrity and Information Leakage ProtectionTwenty-Third Annual Computer Security Applications Conference (ACSAC 2007), 2006