Cyber Supply Chain Risk Management

One of the most important aspects in managing the risks in the cyber supply chain is being able to verify the integrity of the different hardware and software modules, as they are vulnerable to cyber attacks at all level of the execution stack and throughout their life cycle. A novel integrity assessment and intrusion detection approach called power fingerprinting (PFP) is capable of extremely accurate and reliable detection of malicious intrusions, unauthorized modifications, and tampering in critical embedded systems. This revolutionary approach monitors the power consumption of digital systems to assess its execution status and detect, with extreme accuracy, when an unauthorized execution has managed to disrupt the normal operation of critical embedded systems. The objective of Phase II is to further validate the ability of PFP to perform integrity analysis in different ICT components to support cyber supply chain risk management. To achieve this objective we will develop automatic tools to facilitate module characterization and will extend the reach of PFP to enable it to detect counterfeit components, in addition to malicious software and hardware Trojans.