Farimah Farahmandi
University of Florida, USA
New frontiers in Security Verification: Fuzzing and Penetration Testing
Abstract
Modern Systems-on-Chips (SoCs) integrate numerous insecure intellectual properties to meet design-cost and time-to-market constraints. Incorporating these SoCs into security-critical systems severely threatens users’ privacy. Traditional formal/simulation-based verification techniques detect vulnerabilities to some extent. However, these approaches face challenges in detecting unknown vulnerabilities and suffer from significant manual efforts, false alarms, low coverage, and scalability. Fuzzing and penetration techniques should be developed to mitigate pre-silicon hardware verification limitations. Nevertheless, these techniques suffer from major challenges such as slow simulation platforms, extensive design knowledge requirements, and lacking consideration of untrusted inter-module communications. In this talk, I will present an emulation-based hybrid framework by combining formal verification and fuzz/penetration testing, leveraging their own benefits to effectively detect security vulnerabilities in large SoCs.
Biography
If you wish to modify any information or update your photo, please contact Web Chair Hiroki Matsutani.