Examkin

Soru

Zorluk: OrtaHardware and Embedded Systems Security

An organization is establishing hardware security specifications for edge computing appliances deployed in remote, physically untrusted locations. The security architect must ensure cryptographic keys stored on hardware cannot be extracted via physical chip probing, and device identities cannot be duplicated onto unauthorized hardware. Which of the following hardware security controls should be implemented to meet these specific requirements? (Select TWO.)

  1. Physically Unclonable Functions (PUF) to generate unique cryptographic keys derived from semiconductor manufacturing variationsCevap
  2. Cryptographic co-processor with active physical tamper detection integrated to trigger key zeroization upon enclosure breachCevap
  3. C
    Host-based Intrusion Prevention System (HIPS) to monitor raw memory addresses and restrict physical bus read requests
  4. D
    Unprotected non-volatile flash storage configured with high-speed symmetric AES key tables for boot acceleration

Cevap

Implementing Physically Unclonable Functions (PUF) to derive unique key material from silicon manufacturing variations, and deploying active tamper-detection mechanisms integrated with cryptoprocessors to zeroize keys upon physical breach.
Physically Unclonable Functions (PUF) utilize unique manufacturing variations in semiconductor silicon to generate distinct cryptographic key material that cannot be cloned across devices. Active tamper detection mechanisms paired with cryptoprocessors provide physical protection by detecting enclosure compromises and immediately zeroizing sensitive keys to prevent extraction via physical probing.

Adım Adım Çözüm

1
Identify the threat vectors described in the scenario.
The primary threat vectors are physical chip probing (key extraction) and hardware cloning (device duplication) in unmonitored locations.
Security controls must specifically target physical and silicon-level protection mechanisms rather than software-based controls.
2
Evaluate hardware mechanism for anti-cloning and unique identity.
Physically Unclonable Functions (PUF) leverage unique sub-micron physical variations in silicon to construct un-clonable key material.
Because no two chips have identical micro-structural variations, PUF prevents hardware cloning and physical key extraction.
3
Evaluate hardware mechanism for physical intrusion protection.
Active tamper detection circuits connected to secure cryptoprocessors perform automated key zeroization when physical breach occurs.
Zeroization ensures sensitive cryptographic material is completely wiped before an adversary can probe memory chips.

Anahtar Kavram

Hardware-Based Key Protection and Anti-Tamper Mechanisms
Bu soruyu puanla

Konular

Hardware and Embedded Systems Security

Bu konudan daha fazla soru