标题： 针对供应链攻击的异构安全原语的安全飞地架构 显示英文标题

标题： Security Enclave Architecture for Heterogeneous Security Primitives for Supply-Chain Attacks

摘要： 设计用于片上系统（SoC）平台的安全架构是一项高度复杂且耗时的任务，通常需要数月的开发和细致的验证。 即使是最小的架构疏忽也可能导致关键漏洞，从而削弱整个芯片的安全性。 为应对这一挑战，我们引入了CITADEL，这是一个模块化的安全框架，旨在简化SoC强大安全架构的创建。 CITADEL提供了一个可配置的即插即用子系统，由定制的知识产权（IP）模块组成，使能够构建针对特定威胁的多样化安全机制。 作为具体演示，我们将CITADEL实例化以抵御供应链威胁，说明该框架如何适应硬件安全中最紧迫的问题之一。 本文探讨了在构建能够应对多种攻击向量的统一安全架构时遇到的各种障碍，并介绍了CITADEL克服这些障碍的策略。 通过多个实际案例研究，我们展示了CITADEL的实际应用，并全面评估了其在各种ASIC技术中的硅面积和功耗影响。 结果表明，CITADEL仅引入了最小的资源开销，使其成为增强SoC安全性的实用解决方案。 显示英文摘要

摘要： Designing secure architectures for system-on-chip (SoC) platforms is a highly intricate and time-intensive task, often requiring months of development and meticulous verification. Even minor architectural oversights can lead to critical vulnerabilities that undermine the security of the entire chip. In response to this challenge, we introduce CITADEL, a modular security framework aimed at streamlining the creation of robust security architectures for SoCs. CITADEL offers a configurable, plug-and-play subsystem composed of custom intellectual property (IP) blocks, enabling the construction of diverse security mechanisms tailored to specific threats. As a concrete demonstration, we instantiate CITADEL to defend against supply-chain threats, illustrating how the framework adapts to one of the most pressing concerns in hardware security. This paper explores the range of obstacles encountered when building a unified security architecture capable of addressing multiple attack vectors and presents CITADEL's strategies for overcoming them. Through several real-world case studies, we showcase the practical implementation of CITADEL and present a thorough evaluation of its impact on silicon area and power consumption across various ASIC technologies. Results indicate that CITADEL introduces only minimal resource overhead, making it a practical solution for enhancing SoC security.