The Big Hack Explained: Detection and Prevention of PCB Supply Chain Implants

被引:40
作者
Mehta, Dhwani [1 ]
Lu, Hangwei [1 ]
Paradis, Olivia P. [1 ]
Azhagan, Mukhil M. S. [1 ]
Rahman, M. Tanjidur [1 ]
Iskander, Yousef [2 ]
Chawla, Praveen [3 ]
Woodard, Damon L. [1 ]
Tehranipoor, Mark [1 ]
Asadizanjani, Navid [1 ]
机构
[1] Univ Florida, Florida Inst Cybersecur FICS Res, 601 Gale Lemerand Dr, Gainesville, FL USA
[2] CISCO Syst, San Jose, CA USA
[3] Edapt Comp Inc, Dayton, OH USA
关键词
Emerging attacks; PCB testing; imaging modalities; machine learning; bill of materials; BOARDS;
D O I
10.1145/3401980
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Over the past two decades, globalized outsourcing in the semiconductor supply chain has lowered manufacturing costs and shortened the time-to-market for original equipment manufacturers (OEMs). However, such outsourcing has rendered the printed circuit boards (PCBs) vulnerable to malicious activities and alterations on a global scale. In this article, we take an in-depth look into one such attack, called the "Big I lack," that was recently reported by Bloomberg Buisnessweek. The article provides background on the Big Hack from three perspectives: an attacker, a security investigator, and the societal impacts. This study provides details on vulnerabilities in the modem PCB supply chain, the possible attacks, and the existing and emerging countermeasures. The necessity for novel visual inspection techniques for PCB assurance is emphasized throughout the article. Further, a review of various imaging modalities, image analysis algorithms, and open research challenges are provided for automated visual inspection.
引用
收藏
页数:25
相关论文
共 63 条
[1]  
Adam Cort, 2002, FUNCTIONAL TESTING P
[2]  
Aksu Akin, 1976, U.S. Patent, Patent No. [3,970,934, 3970934]
[3]  
Anderson IS., 2009, Springer Science+ Business Media, V200, P987, DOI DOI 10.1007/978-0-387-78693-3
[4]  
[Anonymous], 2007, THESIS
[5]  
[Anonymous], 2016, FORTUNE MAGAZINES
[6]  
[Anonymous], 2019, ARXIV190708863
[7]  
[Anonymous], 2015, COUNTERFEIT INTEGRAT
[8]  
[Anonymous], 2018, BLOOMBERG BUSINESSWE
[9]  
[Anonymous], 2011, INTRO HARDWARE SECUR
[10]  
Asadizanjani Navid, 2015, 41st International symposium for testing and failure analysis, ASM, P1