{"id":351,"date":"2023-07-20T12:05:32","date_gmt":"2023-07-20T16:05:32","guid":{"rendered":"https:\/\/mooney.gatech.edu\/security\/?page_id=351"},"modified":"2024-10-23T11:33:50","modified_gmt":"2024-10-23T15:33:50","slug":"gridtrust","status":"publish","type":"page","link":"https:\/\/mooney.gatech.edu\/security\/gridtrust\/","title":{"rendered":"GridTrust: Electricity Grid Root-of-Trust Decentralized Supply Chain Cyber-Security"},"content":{"rendered":"\r\n

GridTrust: Electricity Grid Root-of-Trust Decentralized Supply Chain Cyber-Security<\/span><\/strong><\/h1>\r\n
\r\n
\"\"<\/a>\r\n
Figure 1: Standard software update process for a device in a substation<\/figcaption>\r\n<\/figure>\r\n<\/div>\r\n\r\n\r\n

Hardware\/software co-designed systems are increasingly prevalent due to trends such as the adoption of hardware accelerators and the availability of heterogeneous system-on-chip (SoC) architectures. A potential security concern arising from hardware\/software interaction in heterogeneous computing architectures is the possibility of software-based attacks on reconfigurable hardware, and vice versa. This is especially important when considering remote updates of the software, hardware, or both combined. In this work, we have created a remote update scheme that relies on a physical unclonable function (PUF) and multiple updating parties to deliver hardware\/software updates in a secure fashion. The scheme, GridTrust, provides a high level of assurance that the system only accepts updates from approved entities while also preventing common remote attacks from compromising the security of the update process.\u00a0 As shown above, an attacker has multiple opportunities to attack. GridTrust’s protection features help to prevent any single attack from the locations shown in Figure 1 from succeeding.<\/p>\r\n

The GridTrust scheme follows a few key tenets; (1) the usage of auditable open-source software, (2) software update authorization via two distinct entities, (3) and device authentication via a hardware fingerprinting technique known as a PUF. Used together, these techniques harden cybersecurity defenses in the electric grid supply chain against both a third-party actor and a malicious lone-wolf insider.<\/p>\r\n

 <\/p>\r\n

Implementing GridTrust<\/span><\/a><\/strong><\/p>\r\n

Collaborators<\/h2>\r\n