4.11 Analytical Review of Basic Techniques for Detection of
Hardware Trojans in Microchips . . . . . . . . . . . . . . . . . . . . . . . . 412
4.11.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 412
4.11.2 Basic Trojan Detection Techniques in IC After Being
Manufactured in Mass Production . . . . . . . . . . . . . . . . . 417
4.11.3 Presilicon Trojan Detection Techniques . . . . . . . . . . . . . 418
4.11.4 Determination of Trojan Attack Models . . . . . . . . . . . . . 423
4.11.5 Hardware Trojan Detection Techniques for
Commercial Chips . . . . . . . . . . . . . . . . . . . . . . . . . . . . 430
4.11.6 Prospects for the Development of Trojan Detection
Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433
References . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 436
5 Methods of Detecting Hardware Trojans in Microcircuits . . . . . . . . 453
5.1 Brief Review of Basic Techniques for Detection of Hardware
Trojans in Critical Microchips . . . . . . . . . . . . . . . . . . . . . . . . . . 454
5.1.1 Introduction to the Problem . . . . . . . . . . . . . . . . . . . . . 454
5.1.2 Analysis Using Third-Party Channels . . . . . . . . . . . . . . 456
5.1.3 Malicious Computer Systems . . . . . . . . . . . . . . . . . . . . 457
5.1.4 Methods of Increasing Probability of Trojan
Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457
5.1.5 Methods of Characterization of Logical Elements
for Detecting Trojans . . . . . . . . . . . . . . . . . . . . . . . . . . 458
5.1.6 Data Transmission Using Silent Trojans . . . . . . . . . . . . 458
5.1.7 Using Special Bus Architectures Protected from
Trojans . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459
5.1.8 Detection of Trojans in Multi-core Architectures . . . . . . 459
5.1.9 Methods of Identification and Software Isolation
of Introduced Trojans . . . . . . . . . . . . . . . . . . . . . . . . . . 459
5.1.10 Application of an Additional Scan Chain . . . . . . . . . . . . 460
5.1.11 Improved Side-Channel Analysis Methods . . . . . . . . . . . 461
5.1.12 Thermal Conditioning Methods . . . . . . . . . . . . . . . . . . . 461
5.1.13 Methods of Preventing Data Leakage Through Hidden
Channels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462
5.1.14 Using Combined Methods of Side-Channel Analysis . . . 462
5.1.15 Increasing the Probability of Trojan Activation Due
to Additional Triggers . . . . . . . . . . . . . . . . . . . . . . . . . 463
5.1.16 Methods of Neutralizing Trojans Introduced into
Microcircuits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464
5.1.17 Using Ring Oscillators for Detecting Trojans . . . . . . . . . 465
5.1.18 Models of Multi-level Trojan Attacks . . . . . . . . . . . . . . 465
5.2 Methods of Detecting Hardware Trojans in Microcircuits Based
on the Analysis of Electromagnetic Radiation Spectrum . . . . . . . 466
5.2.1 Retrospective Review of Alternative Techniques
for Detection of Hardware Trojans in Microcircuits . . . . 466
xviii
Contents