Examkin

Question

Difficulty: HardHardware and Embedded Systems Security

An aerospace security architecture team is designing a satellite communications (SATCOM) avionics gateway for autonomous aircraft. The gateway will operate in environments susceptible to physical interception, probe attacks, and firmware tampering. To meet stringent safety standards, the hardware must establish an immutable boot verification chain and prevent physical extraction of secret keys stored in memory. Which TWO of the following hardware security controls should the team implement to satisfy these architecture requirements? (Select TWO)

  1. Integrating a hardware Root of Trust (RoT) backed by a Trusted Platform Module (TPM) to validate cryptographic measurements during every stage of the boot sequence.Answer
  2. Leveraging Physically Unclonable Functions (PUFs) to dynamically derive cryptographic keys from silicon micro-structure variations rather than storing static key material in non-volatile memory.Answer
  3. C
    Configuring kernel-level Mandatory Access Control (MAC) policies within the operating system to prevent unauthorized processes from modifying system binaries.
  4. D
    Deploying an inline hardware Intrusion Prevention System (IPS) module on the internal communication bus to filter malicious memory packets.

Answer

The correct controls to implement are integrating a hardware Root of Trust backed by a Trusted Platform Module (TPM) for boot validation and leveraging Physically Unclonable Functions (PUFs) for tamper-resistant key generation.
Establishing a hardware Root of Trust (RoT) using a cryptoprocessor such as a Trusted Platform Module (TPM) ensures that every stage of boot firmware is verified against cryptographically secure measurement hashes before execution. Furthermore, Physically Unclonable Functions (PUFs) leverage unique semiconductor manufacturing variations to generate cryptographic keys dynamically, preventing attackers from physically extracting static keys from non-volatile memory via chip decapsulation or microprobing.

Step-by-Step Solution

1
Identify the core security requirements established in the scenario.
The requirements are establishing an immutable boot verification chain and protecting cryptographic keys from physical memory extraction and reverse engineering.
Hardware security architecture requires aligning specific physical mechanisms with their corresponding threat vectors.
2
Evaluate mechanisms for establishing an immutable boot verification chain.
A Trusted Platform Module (TPM) providing a hardware Root of Trust (RoT) measures and validates each stage of the boot sequence (Secure Boot / Measured Boot).
Hardware-level cryptoprocessors enforce trust starting at power-on before any untrusted software runs.
3
Evaluate mechanisms for securing cryptographic key storage against physical extraction.
Physically Unclonable Functions (PUFs) generate unique cryptographic keys on the fly using tiny manufacturing variations in the silicon chip, eliminating the need to store static keys in flash or EEPROM memory.
If physical keys are never stored at rest in memory circuits, physical probing or decap attacks cannot extract them.

Key Concept

Hardware Root of Trust & Silicon-Level Key Protection
Estimated Time:2m 0s
Rate this question

Topics

Hardware and Embedded Systems Security

More questions from this topic