System Self-Protection and Autonomic Response for Hardware Based Software Protection

SHIELD is a defense-in-depth multi-layered architecture that is suitable for a GIG end-node based upon COTS technology. The architecture contains the following layers: 1. A set of application software and data protection techniques, which utilize an out-of-band secure coprocessor and its reconfigurable hardware. 2. An in-band kernel module that detects host subversion and cooperates with secure coprocessor to protect critical data and software. 3. An autonomous secure coprocessor that has autonomic self healing and protection capabilities. The coprocessor also protects system secrets and provides a shielded environment for the execution of code. 4. A hardened system enclosure to enhance the architecture’s ability to resist, detect and to respond to a physical as well as a logical attack. The proposed end-node architecture facilitates the coordination of activities between the protected application, the in-band kernel module, and the secure coprocessor. When the protected application is invoked the in-band kernel module is notified. The module then requests the coprocessor to validate and prepare the application for execution on the host. Edge nodes will be fortified with a hardened system enclosure that has the ability to detect, resist, report and respond to a physical attack.