692
7 Countermeasures Against Hardware Trojans
– Kaspersky Lab has applied the Safe Environment technology in its products, which
allows running suspicious applications in the sandbox, starting from version KIS
2013 and CRYSTAL 2.0 Safe Browser, Safe Environment, and Safe Desktop.
– Comodo Internet Security uses sandbox technologies to launch suspicious applications. Starting from CIS version 6.0, full-scale virtual environment Virtual Kiosk
has also been used.
– The avast! company included sandboxes in certain antivirus protection packages;
these sandboxes allow launching potentially undesirable programs without danger
for the system.
– SafenSoft, developer of the SafenSoft SysWatch products, applies its own D.S.E.
(Dynamic Sandbox Execution) technology, which makes it possible to launch
suspicious applications or open any suspicious files in such limited execution
environments.
– Panda Security provides users with safe access to the Internet with the help of the
web browser launched in a sandbox.
– Google uses the sandbox technology in its brand-name browser—Google Chrome;
– Adobe Flash Player and Adobe Reader by Adobe also include a sandbox to reduce
the risk of infecting the computer with malware;
– PHP in the runkit module [90];
– In the core of the operating system Mac OS X [95].
There are also separate utilities providing such functionality, such as Sandboxie.
7.5.3 Analysis of Similar Directions for Solving the SoC
Design Safety Problem
In addition to the information presented above in Chaps. 4–6 of this book, an interested reader may refer to the overview mentioned above [91]. According to it, protection and countermeasures can be implemented during three different stages: during
designing, during testing (before commissioning), and during practical operation of
the system. Approaches used during designing usually solve the problem of hardware
Trojans by hiding either functional or structural properties of the IP from potential
intruders using these Trojans by means of special modification (changing modes) of
operation of IPs and integrated circuits [96] in order to prevent intruders from introducing Trojans into the IP. It is suggested that additional and side channel required
to introduce Trojans and monitor the conditions of their activation will have a significant effect on the physical properties of IC, such as the character of variation in
the consumption power [97], physical environment [98], temperature profile [99],
temporal delays of signal passage [100], or a combination of many other characteristics and controlled physical parameters [101]. Deviation from the behavior of the
golden reference model, which knowingly contains no Trojans, is interpreted here
as a sign of activity (activation) of embedded hardware Trojans. All known variants
of verification methods are usually used solely to ensure precision of determining
7 Countermeasures Against Hardware Trojans
– Kaspersky Lab has applied the Safe Environment technology in its products, which
allows running suspicious applications in the sandbox, starting from version KIS
2013 and CRYSTAL 2.0 Safe Browser, Safe Environment, and Safe Desktop.
– Comodo Internet Security uses sandbox technologies to launch suspicious applications. Starting from CIS version 6.0, full-scale virtual environment Virtual Kiosk
has also been used.
– The avast! company included sandboxes in certain antivirus protection packages;
these sandboxes allow launching potentially undesirable programs without danger
for the system.
– SafenSoft, developer of the SafenSoft SysWatch products, applies its own D.S.E.
(Dynamic Sandbox Execution) technology, which makes it possible to launch
suspicious applications or open any suspicious files in such limited execution
environments.
– Panda Security provides users with safe access to the Internet with the help of the
web browser launched in a sandbox.
– Google uses the sandbox technology in its brand-name browser—Google Chrome;
– Adobe Flash Player and Adobe Reader by Adobe also include a sandbox to reduce
the risk of infecting the computer with malware;
– PHP in the runkit module [90];
– In the core of the operating system Mac OS X [95].
There are also separate utilities providing such functionality, such as Sandboxie.
7.5.3 Analysis of Similar Directions for Solving the SoC
Design Safety Problem
In addition to the information presented above in Chaps. 4–6 of this book, an interested reader may refer to the overview mentioned above [91]. According to it, protection and countermeasures can be implemented during three different stages: during
designing, during testing (before commissioning), and during practical operation of
the system. Approaches used during designing usually solve the problem of hardware
Trojans by hiding either functional or structural properties of the IP from potential
intruders using these Trojans by means of special modification (changing modes) of
operation of IPs and integrated circuits [96] in order to prevent intruders from introducing Trojans into the IP. It is suggested that additional and side channel required
to introduce Trojans and monitor the conditions of their activation will have a significant effect on the physical properties of IC, such as the character of variation in
the consumption power [97], physical environment [98], temperature profile [99],
temporal delays of signal passage [100], or a combination of many other characteristics and controlled physical parameters [101]. Deviation from the behavior of the
golden reference model, which knowingly contains no Trojans, is interpreted here
as a sign of activity (activation) of embedded hardware Trojans. All known variants
of verification methods are usually used solely to ensure precision of determining