ECE 598DN-S07 : Hardware-based Computer Security

Spring 2007
Time and Location 2:00 - 3:20 p.m. Monday, Wednesday
105 Talbot
Staff Prof. David M. Nicol
457 Coordinated Science Lab
office: 244-1925
nicol at iti.uiuc.edu

Office Hours Nicol 9:00-10:00 Tuesday, Thursday or by appointment. 457 CSL.

Text Readings from the literature
Course Content Topics related to the provisioning and use of hardware that provides security to a computer system. Examples include secure coprocessors, secure bootstrap loading, secure memory managment, alternative architectures, the Trusted Platform Module specification and use,LaGrande, use of FPGAs to support security.
Assessment For each paper we read, write a 250 word synapsis of the paper, highlighting its key features. Due 1 week after the paper is completed. Homework Late Policy : Don't turn in late homework.
Reading

Access from readings directory.
  • "Dyad: A System for Using Physically Secure Coprocessors", Tygar and Yee. tygar91dyad.pdf
  • "Building the IBM 4758 Secure Coprocessor", Dyer, Lindemann, Perez, Sailer, van Doorn, Smith. BuildingIBM4758.pdf .
  • "Outbound Authentication for Programmable Secure Coprocessors", Smith. outbound-authentication.pdf A journal version is named oa05.pdf
  • "Secure Coprocessing Applications and Research Issues", Smith. lanl.pdf
  • "Strongbox: A System for Self-Securing Programs", Tygar and Yee. strongbox.pdf
  • "A Secure and Reliable Bootstrap Architecture", Arbaugh, Farber, and Smith. secure-bootstrap.pdf
  • "TCG Specification Architecture Overview", TCG_Architecture.pdf
  • "Secure Computing Architecture : A Survey on Recent Proposals and Industry Direction", Kwan. secure-computing-architecture.pdf
  • "AEGIS: A Single-Chip Secure Processor", Suh, O'Donnell, Devadas. aegis.pdf
  • "Architecture for Protecting Critical Secrets in Microprocessors", Lee, Kwan, McGregor, Dwoskin, Wang. protecting-critical-secrets.pdf . A similar paper with more details is aegis_physical_random_functions.pdf .
  • "Keeping Secrets in Hardware..." Huang. xbox.pdf . Also "Side-channel Issues for Designing Secure Hardware Implementations", Batina, Mentens, Verbauwhede. side_channel_issues.pdf
  • "Cryptographic Processors -- A survey", Anderson, Bond, Clulow, Skorobagatov. cryptographic_processors_survey.pdf
  • "Caches and Merke Trees for Efficient Memory Authentication", Gassend, Suh, Clarke, van Dijk, Devadas. merkle-trees.pdf . Also, "Towards Constant Bandwidth Overhead Integrity Checking of Untrusted Data", same authors, treelog.pdf
  • "Security on FPGAs: State of the Art Implementations and Attacks", Wollinger, Guajardo, and Paar Security-on-FPGAs.pdf .
  • "Dynamically Configurable Security for SRAM FPGA Bitstreams", Bossuet, Gogniat, Burleson, FPGA-bitstreams.pdf
  • (for 3/28) "Biometric identification systems", biometrics-identification.pdf . ALSO "Biometric Recognition : Security and Privacy Concerns", biometrics-acm-comm.pdf
  • (for 4/2) "Reliability and Security Engine", rse-dsn-04.pdf
  • (for 4/4) "The Internet Motion Sensor", 2005-bc-ndss.pdf
  • (for 4/9) "An FPGA-based network intrusion detection system with on-chip network interfaces", fpga-network-intrusion.pdf
  • (for 4/11) "A Reconfigurable Approach to TCP/IP Packet Filtering" packet-filtering.pdf
  • (for 4/16) "Towards a Theory of Software Protection and Simulation by Oblivious RAM", ObliviousRAM.pdf
  • (for 4/18) "Private Information Storage with Logarithmic-space Secure Hardware", private-information.pdf
  • (for 4/23) "Terra: A Virtual Machine-Based Platform for Trusted Computing", sosp03-terra.pdf
  • (for 4/25) "SAFE-OPS : An Approach to Embedded Software Security", SafeOps.pdf
  • (for 4/30 and beyond) "Intel Trusted Execution Technology", Intel-trusted-execution.pdf