DoS Attack Detection and Path Collision Localization in NoC-Based MPSoC Architectures

Denial of Service (DoS) attacks are an increasing threat for Multiprocessor System-on-Chip (MPSoC) architectures. By exploiting the shared resources on the chip, an attacker is able to prevent completion or degrade the performance of a task. This is extremely dangerous for MPSoCs used in critical ap...

Full description

Bibliographic Details
Main Authors: Cesar Giovanni Chaves, Siavoosh Payandeh Azad, Thomas Hollstein, Johanna Sepúlveda
Format: Article
Language:English
Published: MDPI AG 2019-02-01
Series:Journal of Low Power Electronics and Applications
Subjects:
Online Access:https://www.mdpi.com/2079-9268/9/1/7
id doaj-d3740ddfe8754d3785a6e74fd7fbe99c
record_format Article
spelling doaj-d3740ddfe8754d3785a6e74fd7fbe99c2020-11-24T20:45:18ZengMDPI AGJournal of Low Power Electronics and Applications2079-92682019-02-0191710.3390/jlpea9010007jlpea9010007DoS Attack Detection and Path Collision Localization in NoC-Based MPSoC ArchitecturesCesar Giovanni Chaves0Siavoosh Payandeh Azad1Thomas Hollstein2Johanna Sepúlveda3Faculty 2: Computer Science and Engineering, Frankfurt University of Applied Sciences, 60318 Frankfurt am Main, GermanyDepartment of Computer Engineering, Tallinn University of Technology, 12618 Tallinn, EstoniaFaculty 2: Computer Science and Engineering, Frankfurt University of Applied Sciences, 60318 Frankfurt am Main, GermanyDepartment of Electrical and Computer Engineering, Technical University of Munich, 80333 Munich, GermanyDenial of Service (DoS) attacks are an increasing threat for Multiprocessor System-on-Chip (MPSoC) architectures. By exploiting the shared resources on the chip, an attacker is able to prevent completion or degrade the performance of a task. This is extremely dangerous for MPSoCs used in critical applications. The Network-on-Chip (NoC), as a central MPSoC infrastructure, is exposed to this attack. In order to maintain communication availability, NoCs should be enhanced with an effective and precise attack detection mechanism that allows the triggering of effective attack mitigation mechanisms. Previous research works demonstrate DoS attacks on NoCs and propose detection methods being implemented in NoC routers. These countermeasures typically led to a significantly increased router complexity and to a high degradation of the MPSoC’s performance. To this end, we present two contributions. First, we provide an analysis of information that helps to narrow down the location of the attacker in the MPSoC, achieving up to a 69% search space reduction for locating the attacker. Second, we propose a low cost mechanism for detecting the location and direction of the interference, by enhancing the communication packet structure and placing communication degradation monitors in the NoC routers. Our experiments show that our NoC router architecture detects single-source DoS attacks and determines, with high precision, the location and direction of the collision, while incurring a low area and power overhead.https://www.mdpi.com/2079-9268/9/1/7denial of service attacksnetwork-on-chipdistributed online monitoringmulti-processor system-on-chipsecurity
collection DOAJ
language English
format Article
sources DOAJ
author Cesar Giovanni Chaves
Siavoosh Payandeh Azad
Thomas Hollstein
Johanna Sepúlveda
spellingShingle Cesar Giovanni Chaves
Siavoosh Payandeh Azad
Thomas Hollstein
Johanna Sepúlveda
DoS Attack Detection and Path Collision Localization in NoC-Based MPSoC Architectures
Journal of Low Power Electronics and Applications
denial of service attacks
network-on-chip
distributed online monitoring
multi-processor system-on-chip
security
author_facet Cesar Giovanni Chaves
Siavoosh Payandeh Azad
Thomas Hollstein
Johanna Sepúlveda
author_sort Cesar Giovanni Chaves
title DoS Attack Detection and Path Collision Localization in NoC-Based MPSoC Architectures
title_short DoS Attack Detection and Path Collision Localization in NoC-Based MPSoC Architectures
title_full DoS Attack Detection and Path Collision Localization in NoC-Based MPSoC Architectures
title_fullStr DoS Attack Detection and Path Collision Localization in NoC-Based MPSoC Architectures
title_full_unstemmed DoS Attack Detection and Path Collision Localization in NoC-Based MPSoC Architectures
title_sort dos attack detection and path collision localization in noc-based mpsoc architectures
publisher MDPI AG
series Journal of Low Power Electronics and Applications
issn 2079-9268
publishDate 2019-02-01
description Denial of Service (DoS) attacks are an increasing threat for Multiprocessor System-on-Chip (MPSoC) architectures. By exploiting the shared resources on the chip, an attacker is able to prevent completion or degrade the performance of a task. This is extremely dangerous for MPSoCs used in critical applications. The Network-on-Chip (NoC), as a central MPSoC infrastructure, is exposed to this attack. In order to maintain communication availability, NoCs should be enhanced with an effective and precise attack detection mechanism that allows the triggering of effective attack mitigation mechanisms. Previous research works demonstrate DoS attacks on NoCs and propose detection methods being implemented in NoC routers. These countermeasures typically led to a significantly increased router complexity and to a high degradation of the MPSoC’s performance. To this end, we present two contributions. First, we provide an analysis of information that helps to narrow down the location of the attacker in the MPSoC, achieving up to a 69% search space reduction for locating the attacker. Second, we propose a low cost mechanism for detecting the location and direction of the interference, by enhancing the communication packet structure and placing communication degradation monitors in the NoC routers. Our experiments show that our NoC router architecture detects single-source DoS attacks and determines, with high precision, the location and direction of the collision, while incurring a low area and power overhead.
topic denial of service attacks
network-on-chip
distributed online monitoring
multi-processor system-on-chip
security
url https://www.mdpi.com/2079-9268/9/1/7
work_keys_str_mv AT cesargiovannichaves dosattackdetectionandpathcollisionlocalizationinnocbasedmpsocarchitectures
AT siavooshpayandehazad dosattackdetectionandpathcollisionlocalizationinnocbasedmpsocarchitectures
AT thomashollstein dosattackdetectionandpathcollisionlocalizationinnocbasedmpsocarchitectures
AT johannasepulveda dosattackdetectionandpathcollisionlocalizationinnocbasedmpsocarchitectures
_version_ 1716814771407290368