标题： 现代硬件安全：攻击与对策综述 显示英文标题

标题： Modern Hardware Security: A Review of Attacks and Countermeasures

摘要： 随着云服务、智能设备和物联网设备的使用指数级增长，高级网络攻击变得越来越复杂且普遍。此外，计算架构和内存技术的快速发展，使得理解和解决硬件安全漏洞变得尤为迫切。在本文中，我们回顾了当代计算系统中的漏洞和缓解策略。我们讨论了缓存侧信道攻击（包括Spectre和Meltdown）、电源侧信道攻击（如简单电源分析、差分电源分析、相关电源分析和模板攻击），以及电压故障攻击和电磁分析等高级技术，以帮助理解并构建强大的网络安全防御系统，并指导进一步的研究。我们还研究了内存加密，重点在于保密性、粒度、密钥管理、掩码和重新密钥策略。此外，我们还涵盖了密码指令集架构、安全启动、信任根机制、物理不可克隆函数和硬件故障注入技术。本文最后分析了RISC-V架构的独特安全挑战。本文提供的全面分析对于构建能够抵御日益严峻的安全环境中当前和新兴威胁的弹性硬件安全解决方案至关重要。 显示英文摘要

摘要： With the exponential rise in the use of cloud services, smart devices, and IoT devices, advanced cyber attacks have become increasingly sophisticated and ubiquitous. Furthermore, the rapid evolution of computing architectures and memory technologies has created an urgent need to understand and address hardware security vulnerabilities. In this paper, we review the current state of vulnerabilities and mitigation strategies in contemporary computing systems. We discuss cache side-channel attacks (including Spectre and Meltdown), power side-channel attacks (such as Simple Power Analysis, Differential Power Analysis, Correlation Power Analysis, and Template Attacks), and advanced techniques like Voltage Glitching and Electromagnetic Analysis to help understand and build robust cybersecurity defense systems and guide further research. We also examine memory encryption, focusing on confidentiality, granularity, key management, masking, and re-keying strategies. Additionally, we cover Cryptographic Instruction Set Architectures, Secure Boot, Root of Trust mechanisms, Physical Unclonable Functions, and hardware fault injection techniques. The paper concludes with an analysis of the RISC-V architecture's unique security challenges. The comprehensive analysis presented in this paper is essential for building resilient hardware security solutions that can protect against both current and emerging threats in an increasingly challenging security landscape.