David Tietz EEL 6935 Spring 2009 Embedded Systems
![David Tietz EEL 6935 Spring 2009 Embedded Systems Presentation David Tietz EEL 6935 Spring 2009 Embedded Systems Presentation](https://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-1.jpg)
David Tietz EEL 6935 Spring 2009 Embedded Systems Presentation
![Paper Selected: � By Ian Mc. Loughlin � Published in IEEE � 2004 Paper Selected: � By Ian Mc. Loughlin � Published in IEEE � 2004](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-2.jpg)
Paper Selected: � By Ian Mc. Loughlin � Published in IEEE � 2004
![Reverse Engineering (RE) • What is it? • Purpose: To Gain A Better Understanding Reverse Engineering (RE) • What is it? • Purpose: To Gain A Better Understanding](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-3.jpg)
Reverse Engineering (RE) • What is it? • Purpose: To Gain A Better Understanding For Design Piracy
![Methods of Piracy • Network attacks • Insider attacks • Head-hunters • Full on Methods of Piracy • Network attacks • Insider attacks • Head-hunters • Full on](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-4.jpg)
Methods of Piracy • Network attacks • Insider attacks • Head-hunters • Full on RE process
![Creating A Product • A company spends time and money in development of a Creating A Product • A company spends time and money in development of a](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-5.jpg)
Creating A Product • A company spends time and money in development of a product • The company releases the product • The company benefits from sales • In time, competition enters the market Which helps to improve the original design.
![Why RE is bad economics • A company spends time and money in development Why RE is bad economics • A company spends time and money in development](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-6.jpg)
Why RE is bad economics • A company spends time and money in development of a product • The company releases the product • A competitor cheaply and rapidly reverse engineers the pioneering design Can greatly undercut the selling price • Hinders risk-taking
![Economic Analysis • Foiling RE takes money and time • Best outcome: You stop Economic Analysis • Foiling RE takes money and time • Best outcome: You stop](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-7.jpg)
Economic Analysis • Foiling RE takes money and time • Best outcome: You stop them You never see the benefit Competitors break into the market anyhow • Difficult to sell a strategy • Even more difficult to gauge success
![Bad for Embedded Systems • By nature, they are generally small, portable, widely available Bad for Embedded Systems • By nature, they are generally small, portable, widely available](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-8.jpg)
Bad for Embedded Systems • By nature, they are generally small, portable, widely available devices • They tend to embody valuable intellectual property designs
![Goal • Maximize reverse engineering cost • Keep increased development cost low Goal • Maximize reverse engineering cost • Keep increased development cost low](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-9.jpg)
Goal • Maximize reverse engineering cost • Keep increased development cost low
![Reverse Engineering Process • Functionality • Physical Structure • Bill of Materials • System Reverse Engineering Process • Functionality • Physical Structure • Bill of Materials • System](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-10.jpg)
Reverse Engineering Process • Functionality • Physical Structure • Bill of Materials • System Architecture • Detailed Physical Layout • Schematic of Electrical Connectivity • Software
![How to Increase RE Costs 1. Additional time taken to reverse engineer the system How to Increase RE Costs 1. Additional time taken to reverse engineer the system](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-11.jpg)
How to Increase RE Costs 1. Additional time taken to reverse engineer the system 2. Greater levels of expertise required 3. The need for specialized equipment
![RE Mitigation • Not possible to completely prevent it • Two Methods: Passive Active RE Mitigation • Not possible to completely prevent it • Two Methods: Passive Active](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-12.jpg)
RE Mitigation • Not possible to completely prevent it • Two Methods: Passive Active
![RE Mitigation Costs • Increases NRE Costs • Increase in BOM • Delay in RE Mitigation Costs • Increases NRE Costs • Increase in BOM • Delay in](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-13.jpg)
RE Mitigation Costs • Increases NRE Costs • Increase in BOM • Delay in time to market
![Low Cost Mitigation Techniques • Protecting documentation • Monitor and limit information that employees Low Cost Mitigation Techniques • Protecting documentation • Monitor and limit information that employees](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-14.jpg)
Low Cost Mitigation Techniques • Protecting documentation • Monitor and limit information that employees may inadvertently provide • Custom casings • Missing silk screen • Wiring unused pins • Leaving unused planes on layers of the PCB
![RE Mitigation of Programmable Devices • Custom Silicon • Ball Grid Array (BGA) Packaging RE Mitigation of Programmable Devices • Custom Silicon • Ball Grid Array (BGA) Packaging](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-15.jpg)
RE Mitigation of Programmable Devices • Custom Silicon • Ball Grid Array (BGA) Packaging • Back to Back BGA Layout
![RE Mitigation of Programmable Devices • Don’t build ports onto PCB (jtag, etc) • RE Mitigation of Programmable Devices • Don’t build ports onto PCB (jtag, etc) •](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-16.jpg)
RE Mitigation of Programmable Devices • Don’t build ports onto PCB (jtag, etc) • Some provide security setting prevent readout of programmed bit stream • Use mesh overlays in custom ASICs
![RE Mitigation of Programmable Devices FPGAs: • Use Antifuse devices • Use encryption for RE Mitigation of Programmable Devices FPGAs: • Use Antifuse devices • Use encryption for](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-17.jpg)
RE Mitigation of Programmable Devices FPGAs: • Use Antifuse devices • Use encryption for flashing Flash: • Fill Unused space • Encrypt
![Costs of Anti Reverse Engineering Costs of Anti Reverse Engineering](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-18.jpg)
Costs of Anti Reverse Engineering
![Questions? Questions?](http://slidetodoc.com/presentation_image_h2/61d62e3969e72c80f161476e03b3f01a/image-19.jpg)
Questions?
- Slides: 19