Publications

@conference{9424291,

title = {Analysis of Attack Surfaces and Practical Attack Examples in Open Source FPGA CAD Tools},

author = {Sandeep Sunkavilli and Zhiming Zhang and Qiaoyan Yu},

doi = {10.1109/ISQED51717.2021.9424291},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 22nd International Symposium on Quality Electronic Design (ISQED)},

pages = {504-509},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{10.1145/3453688.3461508,

title = {Assessing Correlation Power Analysis (CPA) Attack Resilience of Transistor-Level Logic Locking},

author = {Zhiming Zhang and Ivan Miketic and Emre Salman and Qiaoyan Yu},

url = {https://doi.org/10.1145/3453688.3461508},

doi = {10.1145/3453688.3461508},

isbn = {9781450383936},

year  = {2021},

date = {2021-01-01},

booktitle = {Proceedings of the 2021 on Great Lakes Symposium on VLSI},

pages = {415-420},

publisher = {Association for Computing Machinery},

address = {New York, NY, USA},

organization = {Association for Computing Machinery},

series = {GLSVLSI ’21},

abstract = {Logic locking has demonstrated its potential to protect the intellectual property of integrated circuits (ICs). The security strength of logic locking is typically evaluated through functional and structural analysis-based attacks. There is limited work analyzing logic locking techniques’ resilience against power-based side-channel attacks. To fill this gap, we propose an attack flow for the correlation power analysis (CPA) attack on the circuits encrypted with transistor-level logic locking. Our case studies indicate that CPA attacks outperform DPA attacks in terms of key recovery rate (KRR). To improve the CPA attack resilience of an existing transistor-level logic locking technique, we propose a logic-cone conjunction (LCC) method to enlarge the key space and reduce the correlation between the locking key and the power consumption of locked circuits. The experimental results show that the LCC method successfully reduces the KRR from 100% to 0% by using cyclic logic structures. The FPGA emulation indicates that the proposed method incurs 2.6% more delay and 1.5% more power consumption than the baseline.},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{10.1145/3453483.3454068,

title = {Boosting SMT Solver Performance on Mixed-Bitwise-Arithmetic Expressions},

author = {Dongpeng Xu and Binbin Liu and Weijie Feng and Jiang Ming and Qilong Zheng and Jing Li and Qiaoyan Yu},

url = {https://doi.org/10.1145/3453483.3454068},

doi = {10.1145/3453483.3454068},

isbn = {9781450383912},

year  = {2021},

date = {2021-01-01},

booktitle = {Proceedings of the 42nd ACM SIGPLAN International Conference on Programming Language Design and Implementation},

pages = {651–664},

publisher = {Association for Computing Machinery},

address = {New York, NY, USA},

organization = {Association for Computing Machinery},

series = {PLDI 2021},

abstract = {Satisfiability Modulo Theories (SMT) solvers have been widely applied in automated software analysis to reason about the queries that encode the essence of program semantics, relieving the heavy burden of manual analysis. Many SMT solving techniques rely on solving Boolean satisfiability problem (SAT), which is an NP-complete problem, so they use heuristic search strategies to seek possible solutions, especially when no known theorem can efficiently reduce the problem. An emerging challenge, named Mixed-Bitwise-Arithmetic (MBA) obfuscation, impedes SMT solving by constructing identity equations with both bitwise operations (and, or, negate) and arithmetic computation (add, minus, multiply). Common math theorems for bitwise or arithmetic computation are inapplicable to simplifying MBA equations, leading to performance bottlenecks in SMT solving. In this paper, we first scrutinize solvers’ performance on solving different categories of MBA expressions: linear, polynomial, and non-polynomial. We observe that solvers can handle simple linear MBA expressions, but facing a severe performance slowdown when solving complex linear and non-linear MBA expressions. The root cause is that complex MBA expressions break the reduction laws for pure arithmetic or bitwise computation. To boost solvers’ performance, we propose a semantic-preserving transformation to reduce the mixing degree of bitwise and arithmetic operations. We first calculate a signature vector based on the truth table extracted from an MBA expression, which captures the complete MBA semantics. Next, we generate a simpler MBA expression from the signature vector. Our large-scale evaluation on 3000 complex MBA equations shows that our technique significantly boost modern SMT solvers’ performance on solving MBA formulas.},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{9516786,

title = {Towards Enhancing Power-Analysis Attack Resilience for Logic Locking Techniques},

author = {Zhiming Zhang and Ivan Miketic and Emre Salman and Qiaoyan Yu},

doi = {10.1109/ISVLSI51109.2021.00034},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IEEE Computer Society Annual Symposium on VLSI (ISVLSI)},

pages = {132-137},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{9516726,

title = {New Security Threats on FPGAs: From FPGA Design Tools Perspective},

author = {Sandeep Sunkavilli and Zhiming Zhang and Qiaoyan Yu},

doi = {10.1109/ISVLSI51109.2021.00058},

year  = {2021},

date = {2021-01-01},

booktitle = {2021 IEEE Computer Society Annual Symposium on VLSI (ISVLSI)},

pages = {278-283},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{21987,

title = {New Replay Attacks on Zigbee Devices for Internet-of-Things (IoT) Applications},

author = {Mohammad Shafeul Wara and Qiaoyan Yu},

year  = {2020},

date = {2020-01-01},

booktitle = {16th IEEE International Conference on Embedded Software and Systems (ICESS’20)},

publisher = {IEEE},

address = {Online},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{21980,

title = {FTAI: Frequency-based Trojan-Activity Identification Method for 3D Integrated Circuits},

author = {Zhiming Zhang and Qiaoyan Yu},

url = {https://ieeexplore.ieee.org/document/9184506},

year  = {2020},

date = {2020-01-01},

booktitle = {IEEE International Midwest Symposium on Circuits and Systems (MWSCAS’20)},

pages = {281-284},

publisher = {IEEE},

address = {Springfield, MA, USA},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{21977,

title = {ADobf: Obfuscated Detection Method againstAnalog Trojans on I2C Master-Slave Interface},

url = {https://ieeexplore.ieee.org/abstract/document/9184680},

year  = {2020},

date = {2020-01-01},

booktitle = {IEEE International Midwest Symposium on Circuits and Systems (MWSCAS’20)},

pages = {1064-1067},

publisher = {IEEE},

address = {Springfield, MA, USA},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{21975,

title = {Blurring Boundaries: A New Way to Secure Approximate Computing Systems},

url = {https://doi.org/10.1145/3386263.3407593},

year  = {2020},

date = {2020-01-01},

booktitle = {Great Lakes Symposium on VLSI (GLSVLSI’20)},

publisher = {ACM},

address = {Beijing, China},

organization = {ACM},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{11175,

title = {Security Threats and Countermeasures for Approximate Arithmetic Computing},

author = {Pruthvy Yellu and Mohammad Monjur and Timothy B Kammerer and Dongpeng Xu and Qiaoyan Yu},

year  = {2020},

date = {2020-01-01},

booktitle = {ASP-DAC 2020},

pages = {259-264},

publisher = {IEEE},

address = {Beijing, China},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{12130,

title = {An Orthogonal Algorithm for Key Management in Hardware Obfuscation},

author = {Jiawei Wang and Yuejun Zhang and Pengjun Wang and Luan Zhicun and Xiaoyong Xue and Xiaoyong Zeng and Qiaoyan Yu},

url = {http://asianhost.org/2019/},

year  = {2019},

date = {2019-01-01},

booktitle = {AsianHOST’19},

address = {Xi’an, China},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{11173,

title = {Emerging Applications of 3D Integration and Approximate Computing in High-Performance Computing Systems: Unique Security Vulnerabilities},

author = {Pruthvy Yellu and Zhiming Zhang and Mohammad Mezanur Rahman Monjur and Ranuli Abeysinghe and Qiaoyan Yu},

url = {https://ieeexplore.ieee.org/document/8916503},

year  = {2019},

date = {2019-01-01},

booktitle = {2019 IEEE High Performance Extreme Computing Conference (HPEC ‘19)},

publisher = {IEEE},

address = {Waltham, MA, USA},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{9457,

title = {Security Threats in Approximate Computing Systems},

author = {Pruthvy Yellu and Novak Boskov and Michel A. Kinsy and Qiaoyan Yu},

url = {https://dl.acm.org/citation.cfm?id=3319453},

year  = {2019},

date = {2019-01-01},

booktitle = {The ACM Great Lakes Symposium on VLSI (GLSVLSI), 2019},

pages = {387-392},

address = {Tysons Corner, VA, USA},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{9456,

title = {Modeling Hardware Trojans in 3D ICs},

author = {Zhiming Zhang and Qiaoyan Yu},

year  = {2019},

date = {2019-01-01},

booktitle = {IEEE Symposium on VLSI (ISVLSI) 2019},

pages = {483-488},

address = {Miami, FL},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{8429399,

title = {Exploiting Principle of Moving Target Defense to Secure FPGA Systems},

author = {Z. Zhang and Q. Yu},

doi = {10.1109/ISVLSI.2018.00078},

issn = {2159-3477},

year  = {2018},

date = {2018-07-01},

booktitle = {2018 IEEE Computer Society Annual Symposium on VLSI (ISVLSI)},

pages = {393-398},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{8429350,

title = {Investigating Reliability and Security of Integrated Circuits and Systems},

author = {Q. Yu and Z. Zhang and J. Dofe},

doi = {10.1109/ISVLSI.2018.00029},

issn = {2159-3477},

year  = {2018},

date = {2018-07-01},

booktitle = {2018 IEEE Computer Society Annual Symposium on VLSI (ISVLSI)},

pages = {106-111},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{8383907,

title = {FPGA-oriented moving target defense against security threats from malicious FPGA tools},

author = {Z. Zhang and Q. Yu and L. Njilla and C. Kamhoua},

doi = {10.1109/HST.2018.8383907},

year  = {2018},

date = {2018-04-01},

booktitle = {2018 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)},

pages = {163-166},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{8357320,

title = {Securing FPGA-based obsolete component replacement for legacy systems},

author = {Z. Zhang and L. Njilla and C. Kamhoua and K. Kwiat and Q. Yu},

doi = {10.1109/ISQED.2018.8357320},

year  = {2018},

date = {2018-03-01},

booktitle = {2018 19th International Symposium on Quality Electronic Design (ISQED)},

pages = {401-406},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{Dofe:2018:EPN:3225209.3225212,

title = {Exploiting PDN Noise to Thwart Correlation Power Analysis Attacks in 3D ICs},

author = {Jaya Dofe and Qiaoyan Yu},

url = {http://doi.acm.org/10.1145/3225209.3225212},

doi = {10.1145/3225209.3225212},

isbn = {978-1-4503-5900-9},

year  = {2018},

date = {2018-01-01},

booktitle = {Proceedings of the 20th System Level Interconnect Prediction Workshop},

pages = {6:1–6:6},

publisher = {ACM},

address = {New York, NY, USA},

organization = {ACM},

series = {SLIP ’18},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{8053049,

title = {Exploiting hardware obfuscation methods to prevent and detect hardware Trojans},

author = {Q. Yu and J. Dofe and Z. Zhang},

doi = {10.1109/MWSCAS.2017.8053049},

issn = {1558-3899},

year  = {2017},

date = {2017-08-01},

booktitle = {2017 IEEE 60th International Midwest Symposium on Circuits and Systems (MWSCAS)},

pages = {819-822},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7951820,

title = {Analyzing security vulnerabilities of three-dimensional integrated circuits},

author = {J. Dofe and Q. Yu},

doi = {10.1109/HST.2017.7951820},

year  = {2017},

date = {2017-05-01},

booktitle = {2017 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)},

pages = {156-156},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{8050833,

title = {A low-cost masquerade and replay attack detection method for CAN in automobiles},

author = {M. R. Ansari and W. T. Miller and C. She and Q. Yu},

doi = {10.1109/ISCAS.2017.8050833},

issn = {2379-447X},

year  = {2017},

date = {2017-05-01},

booktitle = {2017 IEEE International Symposium on Circuits and Systems (ISCAS)},

pages = {1-4},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{Dofe:2017:IPD:3060403.3060501,

title = {Impact of Power Distribution Network on Power Analysis Attacks in Three-Dimensional Integrated Circuits},

author = {Jaya Dofe and Zhiming Zhang and Qiaoyan Yu and Chen Yan and Emre Salman},

url = {http://doi.acm.org/10.1145/3060403.3060501},

doi = {10.1145/3060403.3060501},

isbn = {978-1-4503-4972-7},

year  = {2017},

date = {2017-01-01},

booktitle = {Proceedings of the on Great Lakes Symposium on VLSI 2017},

pages = {327–332},

publisher = {ACM},

address = {New York, NY, USA},

organization = {ACM},

series = {GLSVLSI ’17},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{Kramer:2017:MCF:3060403.3060433,

title = {Mitigating Control Flow Attacks in Embedded Systems with Novel Built-in Secure Register Bank},

author = {Sean Kramer and Zhiming Zhang and Jaya Dofe and Qiaoyan Yu},

url = {http://doi.acm.org/10.1145/3060403.3060433},

doi = {10.1145/3060403.3060433},

isbn = {978-1-4503-4972-7},

year  = {2017},

date = {2017-01-01},

booktitle = {Proceedings of the on Great Lakes Symposium on VLSI 2017},

pages = {483–486},

publisher = {ACM},

address = {New York, NY, USA},

organization = {ACM},

series = {GLSVLSI ’17},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{Dofe:2017:STC:3060403.3060500,

title = {Security Threats and Countermeasures in Three-Dimensional Integrated Circuits},

author = {Jaya Dofe and Peng Gu and Dylan Stow and Qiaoyan Yu and Eren Kursun and Yuan Xie},

url = {http://doi.acm.org/10.1145/3060403.3060500},

doi = {10.1145/3060403.3060500},

isbn = {978-1-4503-4972-7},

year  = {2017},

date = {2017-01-01},

booktitle = {Proceedings of the on Great Lakes Symposium on VLSI 2017},

pages = {321–326},

publisher = {ACM},

address = {New York, NY, USA},

organization = {ACM},

series = {GLSVLSI ’17},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7835570,

title = {Transistor-level camouflaged logic locking method for monolithic 3D IC security},

author = {J. Dofe and Chen Yan and S. Kontak and E. Salman and Q. Yu},

doi = {10.1109/AsianHOST.2016.7835570},

year  = {2016},

date = {2016-12-01},

booktitle = {2016 IEEE Asian Hardware-Oriented Security and Trust (AsianHOST)},

pages = {1-6},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7560259,

title = {DSD: A Dynamic State-Deflection Method for Gate-Level Netlist Obfuscation},

author = {J. Dofe and Y. Zhang and Q. Yu},

doi = {10.1109/ISVLSI.2016.90},

issn = {2159-3477},

year  = {2016},

date = {2016-07-01},

booktitle = {2016 IEEE Computer Society Annual Symposium on VLSI (ISVLSI)},

pages = {565-570},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7538981,

title = {Hardware security assurance in emerging IoT applications},

author = {J. Dofe and J. Frey and Q. Yu},

doi = {10.1109/ISCAS.2016.7538981},

issn = {2379-447X},

year  = {2016},

date = {2016-05-01},

booktitle = {2016 IEEE International Symposium on Circuits and Systems (ISCAS)},

pages = {2050-2053},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7428087,

title = {Assessing CPA resistance of AES with different fault tolerance mechanisms},

author = {H. Pahlevanzadeh and J. Dofe and Q. Yu},

doi = {10.1109/ASPDAC.2016.7428087},

issn = {2153-697X},

year  = {2016},

date = {2016-01-01},

booktitle = {2016 21st Asia and South Pacific Design Automation Conference (ASP-DAC)},

pages = {661-666},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{Dofe:2016:HST:2902961.2903014,

title = {Hardware Security Threats and Potential Countermeasures in Emerging 3D ICs},

author = {Jaya Dofe and Qiaoyan Yu and Hailang Wang and Emre Salman},

url = {http://doi.acm.org/10.1145/2902961.2903014},

doi = {10.1145/2902961.2903014},

isbn = {978-1-4503-4274-2},

year  = {2016},

date = {2016-01-01},

booktitle = {Proceedings of the 26th Edition on Great Lakes Symposium on VLSI},

pages = {69–74},

publisher = {ACM},

address = {New York, NY, USA},

organization = {ACM},

series = {GLSVLSI ’16},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7315168,

title = {IntelliCAN: Attack-resilient Controller Area Network (CAN) for secure automobiles},

author = {M. R. Ansari and S. Yu and Q. Yu},

doi = {10.1109/DFT.2015.7315168},

issn = {1550-5774},

year  = {2015},

date = {2015-10-01},

booktitle = {2015 IEEE International Symposium on Defect and Fault Tolerance in VLSI and Nanotechnology Systems (DFTS)},

pages = {233-236},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7282167,

title = {Exploiting state obfuscation to detect hardware trojans in NoC network interfaces},

author = {J. Frey and Qiaoyan Yu},

doi = {10.1109/MWSCAS.2015.7282167},

issn = {1548-3746},

year  = {2015},

date = {2015-08-01},

booktitle = {2015 IEEE 58th International Midwest Symposium on Circuits and Systems (MWSCAS)},

pages = {1-4},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7282128,

title = {Investigating power characteristics of memristor-based logic gates and their applications in a security primitive},

author = {J. Dofe and J. Frey and P. Nsengiyumva and Q. Yu},

doi = {10.1109/MWSCAS.2015.7282128},

issn = {1548-3746},

year  = {2015},

date = {2015-08-01},

booktitle = {2015 IEEE 58th International Midwest Symposium on Circuits and Systems (MWSCAS)},

pages = {1-4},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}

@conference{7168759,

title = {Investigation of single-event upsets in dynamic logic based flip-flops},

author = {P. Nsengiyumva and Q. Yu},

doi = {10.1109/ISCAS.2015.7168759},

issn = {0271-4302},

year  = {2015},

date = {2015-05-01},

booktitle = {2015 IEEE International Symposium on Circuits and Systems (ISCAS)},

pages = {818-821},

keywords = {},

pubstate = {published},

tppubtype = {conference}

}