面向可重构扫描网络的锁定隔离安全结构

为使可重构扫描网络免受未经授权的访问、恶意仪器对传输数据的窜改和嗅探3种安全攻击的影响,提出了锁定隔离安全结构.该结构首先把彼此不具有安全威胁的仪器分成一组,通过控制隔离信号实现组与组之间的单独访问,以防止恶意仪器对传输数据的窜改和嗅探.然后通过使用锁段插入位保护关键的仪器,只有扫描网络中处于特定位置的多个键值被设置成特定值(0,1序列)时锁段插入位才能打开,能加大未经授权访问的难度.此外,为解决仪器分组多导致硬件开销大和布线困难的问题,提出了仪器分组算法,根据仪器间的安全关系构建无向图,然后对无向图求极大独立集,能有效地减少仪器分组数.在ITC 02基准电路上的实验结果表明,与国际上同类方法相比,所提的安全结构打开锁段插入位所需要的时间增大了7倍,在面积、功耗和布线上的平均减少百分比分别为3.81%,9.02%和4.55%.

Lock Isolation Security Architecture for Reconfigurable Scanning Networks

To protect the reconfigurable scanning network from the influence of unauthorized access,tampering of transmitted data by malicious instruments and sniffing,a lock isolation security structure is proposed.Firstly,the presented structure divides the instruments without security threat to each other into one group,and the groups can be accessed one by one via the isolated signals,which can prevent malicious instruments tampering and sniffing transmitted data.Secondly,the key instruments are protected by the lock segment insertion bit.The lock segment insertion bit can only be opened when multiple key values at specific positions are set to specific values(0,1 sequence),which can increase the difficulty of unauthorized access.Besides,to reduce the hardware overhead,and the difficulty of place and route caused by excessive instrument groups,instrument grouping algorithm is proposed.The proposed algorithm firstly constructs an undirected graph based on the security relationship among instruments.Then the maximal independent sets of the undirected are obtained.In this way,the number of instrument groups is reduced greatly.Compared to other similar methodologies,the experimental results conducted on ITC 02 benchmark circuits show that the time consumption for opening the locking segment insertion bit of the proposed security structure increased by 7 times,and the average percentage reduction of area,power consumption and wire length is 3.81%,9.02%and 4.55%,respectively.