US 2021/0004499 A1 · METHOD AND DATA PROCESSING SYSTEM FOR DETECTING A MALICIOUS COMPONENT ON AN INTEGRATED CIRCUIT

Abstract

A method and data processing system are provided for detecting a malicious component in a data processing system. The malicious component may be of any type, such as a hardware trojan, malware, or ransomware. In the method, a plurality of counters is used to count events in the data processing system during operation, where each event has a counter associated therewith. A machine learning model is trained a normal pattern of behavior of the data processing system using the event counts. After training, an operation of the data processing system is monitored using the machine learning model. Current occurrences of events in the data processing system are compared to the normal pattern of behavior. If a different pattern of behavior is detected, an indication, such as a flag, of the different pattern of behavior is provided.

Claims20

Dependent claims

A data processing system comprising:

a processor for executing instructions;
a bus coupled to the processor;
and
a malicious component detection block coupled to the bus, the malicious circuit detection block comprising:
a plurality of event counters for counting events in the data processing system;
and
a machine learning model coupled to the plurality of event counters, wherein a normal pattern of behavior of the data processing system is determined using the plurality of event counters, and wherein during operation of the data processing system an internal state of the data processing system is monitored, and in response to detecting a pattern of behavior that is different from the normal pattern of behavior, the malicious component detection block providing an indication.

4 more elements

Dependencies are inferred from the claim text.

Method and data processing system for detecting a malicious component on an integrated circuit

Life of this patent

Method and data processing system for detecting a malicious component on an integrated circuit

Life of this patent

Abstract

Claims20