用神经网络实时检测AXI协议违规,提升SoC安全防护能力
IMS: Intelligent Hardware Monitoring System for Secure SoCs
- 采用量化优化神经网络实现协议语义实时分析
- 98.7%检测准确率,延迟增加≤3%,每秒处理超250万次推理
- 轻量级硬件部署,适合资源受限的边缘安全场景
现代片上系统(SoC)中的高级可扩展接口(AXI)协议存在安全漏洞,可能通过协议违规攻击导致部分或完全拒绝服务。现有防护措施缺乏专用的实时协议语义分析能力,难以有效执行协议合规检查。本文提出一种智能硬件监控系统(IMS),用于实时检测AXI协议违规行为。IMS为硬件模块,利用神经网络实现高精度检测。训练中通过篡改头部字段和系统性恶意操作发起拒服攻击,记录AXI事务构建训练数据集。随后部署量化优化的神经网络,在保证≤3%延迟开销的前提下实现98.7%检测准确率,吞吐量超过250万次/秒。将IMS集成至RISC-V SoC作为内存映射IP核心,监控其AXI总线。为验证可行性并评估后续ASIC集成潜力,我们在AMD Zynq UltraScale+ MPSoC ZCU104板上实现该系统,结果显示硬件开销极小(仅占用9.04% LUT、0.23% DSP切片、0.70%触发器),对整体设计频率影响可忽略。证明了在资源受限边缘环境中实现轻量级安全监控的可行性。
原文摘要 · Abstract (English)
In the modern Systems-on-Chip (SoC), the Advanced eXtensible Interface (AXI) protocol exhibits security vulnerabilities, enabling partial or complete denial-of-service (DoS) through protocol-violation attacks. The recent countermeasures lack a dedicated real-time protocol semantic analysis and evade protocol compliance checks. This paper tackles this AXI vulnerability issue and presents an intelligent hardware monitoring system (IMS) for real-time detection of AXI protocol violations. IMS is a hardware module leveraging neural networks to achieve high detection accuracy. For model training, we perform DoS attacks through header-field manipulation and systematic malicious operations, while recording AXI transactions to build a training dataset. We then deploy a quantization-optimized neural network, achieving 98.7% detection accuracy with <=3% latency overhead, and throughput of >2.5 million inferences/s. We subsequently integrate this IMS into a RISC-V SoC as a memory-mapped IP core to monitor its AXI bus. For demonstration and initial assessment for later ASIC integration, we implemented this IMS on an AMD Zynq UltraScale+ MPSoC ZCU104 board, showing an overall small hardware footprint (9.04% look-up-tables (LUTs), 0.23% DSP slices, and 0.70% flip-flops) and negligible impact on the overall design's achievable frequency. This demonstrates the feasibility of lightweight, security monitoring for resource-constrained edge environments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。