English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

The hardware security community has made significant advances in detectingHardware Trojan vulnerabilities using software fuzzing-inspired automatedanalysis. However, the Electronic Design Automation (EDA) code base itselfremains under-examined by the same techniques. Our experiments in fuzzing EDAtools demonstrate that, indeed, they are prone to software bugs. As aconsequence, this paper unveils HeisenTrojan attacks, a new hardware attackthat does not generate harmful hardware, but rather, exploits softwarevulnerabilities in the EDA tools themselves. A key feature of HeisenTrojanattacks is that they are capable of deploying a malicious payload on the systemhosting the EDA tools without triggering verification tools becauseHeisenTrojan attacks do not rely on superfluous or malicious hardware thatwould otherwise be noticeable. The aim of a HeisenTrojan attack is to executearbitrary code on the system on which the vulnerable EDA tool is hosted,thereby establishing a permanent presence and providing a beachhead forintrusion into that system. Our analysis reveals 83% of the EDA tools analyzedhave exploitable bugs. In what follows, we demonstrate an end- to-end attackand provide analysis on the existing capabilities of fuzzers to findHeisenTrojan attacks in order to emphasize their practicality and the need tosecure EDA tools against them.

HeisenTrojans: They Are Not There Until They Are Triggered