Security through Obscurity: Layout Obfuscation of Digital Integrated Circuits using Don't Care Conditions

Contemporary integrated circuits are designed and manufactured in a globalized environment leading to concerns of piracy, overproduction and counterfeiting. One class of techniques to combat these threats is circuit obfuscation which seeks to modify the gate-level (or structural) description of a circuit without affecting its functionality in order to increase the complexity and cost of reverse engineering. Most of the existing circuit obfuscation methods are based on the insertion of additional logic (called “key gates”) or camouflaging existing gates in order to make it difficult for a malicious user to get the complete layout information without extensive computations to determine key-gate values. However, when the netlist or the circuit layout, although camouflaged, is available to the attacker, he/she can use advanced logic analysis and circuit simulation tools and Boolean SAT solvers to reveal the unknown gate-level information without exhaustively trying all the input vectors, thus bringing down the complexity of reverse engineering. To counter this problem, some ‘provably secure’ logic encryption algorithms that emphasize methodical selection of camouflaged gates have been proposed previously in literature [1,2,3]. The contribution of this paper is the creation and simulation of a new layout obfuscation method that uses don't care conditions. We also present proof-of-concept of a new functional or logic obfuscation technique that not only conceals, but modifies the circuit functionality in addition to the gate-level description, and can be implemented automatically during the design process. Our layout obfuscation technique utilizes don’t care conditions (namely, Observability and Satisfiability Don’t Cares) inherent in the circuit to camouflage selected gates and modify sub-circuit functionality while meeting the overall circuit specification. Here, camouflaging or obfuscating a gate means replacing the candidate gate by a 4X1 Multiplexer which can be configured to perform all possible 2-input/ 1-output functions as proposed by Bao et al. [4]. It is important to emphasize that our approach not only obfuscates but alters sub-circuit level functionality in an attempt to make IP piracy difficult. The choice of gates to obfuscate determines the effort required to reverse engineer or brute force the design. As such, we propose a method of camouflaged gate selection based on the intersection of output logic cones. By choosing these candidate gates methodically, the complexity of reverse engineering can be made exponential, thus making it computationally very expensive to determine the true circuit functionality. We propose several heuristic algorithms to maximize the RE complexity based on don’t care based obfuscation and methodical gate selection. Thus, the goal of protecting the design IP from malicious end-users is achieved. It also makes it significantly harder for rogue elements in the supply chain to use, copy or replicate the same design with a different logic. We analyze the reverse engineering complexity by applying our obfuscation algorithm on ISCAS-85 benchmarks. Our experimental results indicate that significant reverse engineering complexity can be achieved at minimal design overhead (average area overhead for the proposed layout obfuscation methods is 5.51% and average delay overhead is about 7.732%). We discuss the strengths and limitations of our approach and suggest directions that may lead to improved logic encryption algorithms in the future. References: [1] R. Chakraborty and S. Bhunia, “HARPOON: An Obfuscation-Based SoC Design Methodology for Hardware Protection,” IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, vol. 28, no. 10, pp. 1493–1502, 2009. [2] J. A. Roy, F. Koushanfar, and I. L. Markov, “EPIC: Ending Piracy of Integrated Circuits,” in 2008 Design, Automation and Test in Europe, 2008, pp. 1069–1074. [3] J. Rajendran, M. Sam, O. Sinanoglu, and R. Karri, “Security Analysis of Integrated Circuit Camouflaging,” ACM Conference on Computer Communications and Security, 2013. [4] Bao Liu, Wang, B., "Embedded reconfigurable logic for ASIC design obfuscation against supply chain attacks,"Design, Automation and Test in Europe Conference and Exhibition (DATE), 2014 , vol., no., pp.1,6, 24-28 March 2014.

Improving DPA and DFA resistance of circuits using asynchronous logic

International audience

Numerical Analysis and Redesign of a High Speed Linear Cascade Wind Tunnel for Aircraft Gas Turbine Engines Testing

Linear cascade testing serves a fundamental role in the research, development, and design of turbomachines as it is a simple yet very effective way to compute the performance of a generic blade geometry. These kinds of experiments are usually carried out in specialized wind tunnel facilities. This thesis deals with the numerical characterization and subsequent partial redesign of the S-1/C Continuous High Speed Wind Tunnel of the Von Karman Institute for Fluid Dynamics. The current facility is powered by a 13-stage axial compressor that is not powerful enough to balance the energy loss experienced when testing low turning airfoils. In order to address this issue a performance assessment of the wind tunnel was performed under several flow regimes via numerical simulations. After that, a redesign proposal aimed at reducing the pressure loss was investigated. This consists of a linear cascade of turning blades to be placed downstream of the test section and designed specifically for the type of linear cascade being tested. An automatic design procedure was created taking as input parameters those measured at the outlet of the cascade. The parametrization method employed Bézier curves to produce an airfoil geometry that could be imported into a CAD software so that a cascade could be designed. The proposal was simulated via CFD analysis and proved to be effective in reducing pressure losses up to 41%. The same tool developed in this thesis could be adopted to design similar apparatuses and could also be optimized and specialized for the design of turbomachines components.

Hypothalamic Inflammation And The Central Nervous System Control Of Energy Homeostasis.

The control of energy homeostasis relies on robust neuronal circuits that regulate food intake and energy expenditure. Although the physiology of these circuits is well understood, the molecular and cellular response of this program to chronic diseases is still largely unclear. Hypothalamic inflammation has emerged as a major driver of energy homeostasis dysfunction in both obesity and anorexia. Importantly, this inflammation disrupts the action of metabolic signals promoting anabolism or supporting catabolism. In this review, we address the evidence that favors hypothalamic inflammation as a factor that resets energy homeostasis in pathological states.

Two mistletoes are too many?: Interspecific occurrence of mistletoes on the same host tree

Mistletoe can have a major impact on the fitness of the host plant. If there is more than one species of mistletoe on the same host tree, the overall impact might be amplified. We report the occurrence of more than one species of mistletoe on the same host tree. Although it is not a rule in the field, to our knowledge, there have been no studies of this topic. In most cases, two species of mistletoe were recorded on the same host tree, although we recorded three species of mistletoe on one occasion. This demonstrates that different species of mistletoe can be compatible with the same host species. Therefore, compatibility (structural and physiological) might be an important factor for the occurrence of mistletoe. Recent studies have shown that if the mistletoe does not recognize the host species, the deposited seeds will germinate but the haustorium will not penetrate the host branch. This is probably the primary mechanism in the establishment of more than one species of mistletoe on the same host, which can trigger a cascade of harmful effects for the host species.

Damage assessment of the equine sperm membranes by fluorimetric technique

To validate a practical technique of simultaneous evaluation of the plasma, acrosomal and mitochondrial membranes in equine spermatozoa three fluorescent probes (PI, FITC-PSA and MITO) were associated. Four ejaculates from three stallions (n=12) were diluted in TALP medium and split into 2 aliquots, 1 aliquot was flash frozen in liquid nitrogen to induce damage in cellular membranes. Three treatments were prepared with the following fixed ratios of fresh semen: flash frozen semen: 100:0 (T100), 50:50 (T50), and 0:100 (T0). A 150-µL aliquot of diluted semen of each treatment was added of 2 µL of PI, 2 µL of MITO and 80 µL of FITC-PSA; incubated at 38.5ºC/8 min, and sperm cells were evaluated by epifluorescent microscopy. Based in regression analysis, this could be an efficient and practical technique to assess damage in equine spermatozoa, as it was able to determine the sperm percentage more representative of the potential to fertilize the oocyte.

Fully Connected PLL Networks: How Filter Determines the Number of Nodes

Synchronization plays an important role in telecommunication systems, integrated circuits, and automation systems. Formerly, the masterslave synchronization strategy was used in the great majority of cases due to its reliability and simplicity. Recently, with the wireless networks development, and with the increase of the operation frequency of integrated circuits, the decentralized clock distribution strategies are gaining importance. Consequently, fully connected clock distribution systems with nodes composed of phase-locked loops (PLLs) appear as a convenient engineering solution. In this work, the stability of the synchronous state of these networks is studied in two relevant situations: when the node filters are first-order lag-lead low-pass or when the node filters are second-order low-pass. For first-order filters, the synchronous state of the network shows to be stable for any number of nodes. For second-order filter, there is a superior limit for the number of nodes, depending on the PLL parameters. Copyright (C) 2009 Atila Madureira Bueno et al.

Caspase-1 is involved in the genesis of inflammatory hypernociception by contributing to peripheral IL-1 beta maturation

Background: Caspase-1 is a cysteine protease responsible for the processing and secretion of IL-1 beta and IL-18, which are closely related to the induction of inflammation. However, limited evidence addresses the participation of caspase-1 in inflammatory pain. Here, we investigated the role of caspase-1 in inflammatory hypernociception (a decrease in the nociceptive threshold) using caspase-1 deficient mice (casp1-/-). Results: Mechanical inflammatory hypernociception was evaluated using an electronic version of the von Frey test. The production of cytokines, PGE(2) and neutrophil migration were evaluated by ELISA, radioimmunoassay and myeloperoxidase activity, respectively. The interleukin (IL)-1 beta and cyclooxygenase (COX)-2 protein expression were evaluated by western blotting. The mechanical hypernociception induced by intraplantar injection of carrageenin, tumour necrosis factor (TNF)alpha and CXCL1/KC was reduced in casp1-/- mice compared with WT mice. However, the hypernociception induced by IL-1 beta and PGE(2) did not differ in WT and casp1-/- mice. Carrageenin-induced TNF-alpha and CXCL1/KC production and neutrophil recruitment in the paws of WT mice were not different from casp1-/- mice, while the maturation of IL-1 beta was reduced in casp1-/- mice. Furthermore, carrageenin induced an increase in the expression of COX-2 and PGE(2) production in the paw of WT mice, but was reduced in casp1-/- mice. Conclusion: These results suggest that caspase-1 plays a critical role in the cascade of events involved in the genesis of inflammatory hypernociception by promoting IL-1 beta maturation. Because caspase-1 is involved in the induction of COX-2 expression and PGE(2) production, our data support the assertion that caspase-1 is a key target to control inflammatory pain.

High-p(T) pi(0) production with respect to the reaction plane in Au plus Au collisions at s(NN)=200 GeV

Measurements of the azimuthal anisotropy of high-p(T) neutral pion (pi(0)) production in Au+Au collisions at s(NN)=200 GeV by the PHENIX experiment are presented. The data included in this article were collected during the 2004 Relativistic Heavy Ion Collider running period and represent approximately an order of magnitude increase in the number of analyzed events relative to previously published results. Azimuthal angle distributions of pi(0) mesons detected in the PHENIX electromagnetic calorimeters are measured relative to the reaction plane determined event-by-event using the forward and backward beam-beam counters. Amplitudes of the second Fourier component (v(2)) of the angular distributions are presented as a function of pi(0) transverse momentum (p(T)) for different bins in collision centrality. Measured reaction plane dependent pi(0) yields are used to determine the azimuthal dependence of the pi(0) suppression as a function of p(T), R(AA)(Delta phi,p(T)). A jet-quenching motivated geometric analysis is presented that attempts to simultaneously describe the centrality dependence and reaction plane angle dependence of the pi(0) suppression in terms of the path lengths of hypothetical parent partons in the medium. This set of results allows for a detailed examination of the influence of geometry in the collision region and of the interplay between collective flow and jet-quenching effects along the azimuthal axis.

Functional characterization of the Aspergillus fumigatus PHO80 homologue

Phosphate is an ion that is essential for fungal growth. The systems for inorganic phosphate (Pi) acquisition in eukaryotic cells (PHO) have been characterized as a low-affinity (that assures a supply of Pi at normal or high external Pi concentrations) and a high-affinity (activated in response to Pi starvation). Here, as an initial step to understand the PHO pathway in Aspergillus fumigatus, we characterized the PH080 homologue, PhoB(PHO80). We show that the Delta phoB(PHO80) mutant has a polar growth defect (i.e., a delayed germ tube emergence) and, by phenotypic and phosphate uptake analyses, establish a link between PhoB(PHO80), calcineurin and calcium metabolism. Microarray hybridizations carried out with RNA obtained from wild-type and Delta phoB(PHO80) mutant cells identify Afu4g03610 (phoD(PHO84)), Afu7g06350 (phoE(PHO89)), Afu4g06020 (phoC(PHO81)), and Afu2g09040 (vacuolar transporter Vtc4) as more expressed both in the Delta phoB(PHO80) mutant background and under phosphate-limiting conditions of 0.1 mM P-i. Epifluorescence microscopy revealed accumulation of poly-phosphate in Delta phoB(PHO80) vacuoles, which was independent of extracellular phosphate concentration. Surprisingly, a phoD(PHO84) deletion mutant is indistinguishable phenotypically from the corresponding wild-type strain. mRNA analyses suggest that protein kinase A absence supports the expression of PHO genes in A. fumigatus. Furthermore, Delta phoB(PHO80) and Delta phoD(PHO84) mutant are fully virulent in a murine low dose model for invasive aspergillosis. (C) 2008 Elsevier Inc. All rights reserved.

Synthesis of indole derivatives by domino hydroformylation/indolization of 2-nitrocinnamaldehydes

The present work furnishes an innovative preparation of substituted indoles based on tandem hydroformylation, where the chemo- and the regio-selectivities are good, so the yield of the reaction. The novelty has been established in the four-step transformation of substituted alpha nitrocinnamaldehydes into desired indoles in a one-pot reaction. Under hydroformylation reaction conditions we have been able to trigger off a cascade of reactions, which gave substituted indoles in high yields. Useful intermediates are prepared by using this technique for the synthesis of well-known biologically active molecules. (C) 2008 Elsevier B.V. All rights reserved.

Influence of Mg content on the microstructure and solid solution chemistry of Al-7%Si-Mg casting alloys during solution treatment

The solution treatment stage of the T6 heat-treatment of Al-7%Si-Mg foundry alloys influences microstructural features such as Mg2Si dissolution, and eutectic silicon spheroidisation and coarsening. Microstructural and microanalytical studies have been conducted across a range of Sr-modified Al-7%Si alloys, with an Fe content of 0.12% and Mg contents ranging from 0.3-0.7wt%. Qualitative and quantitative metallography have shown that, in addition to the above changes, solution treatment also results in changes to the relative proportions of iron-containing intermetallic particles and that these changes are composition-dependent. While solution treatment causes a substantial transformation of pi phase to beta phase in low Mg alloys (0.3-0.4%), this change is not readily apparent at higher Mg levels (0.6-0.7%). The pi to beta transformation is accompanied by a release of Mg into the aluminum matrix over and above that which arises from the rapid dissolution of Mg2Si. Since the level of matrix Mg retained after quenching controls an alloy's subsequent precipitation hardening response, a proper understanding of this phase transformation is crucial if tensile properties are to be maximised.

Metabolic and kinetic analysis of poly(3-hydroxybutyrate) production by recombinant Escherichia coli

A quantitatively repeatable protocol was developed for poly(3-hydroxybutyrate) (PHB) production by Escherichia coli XL1-Blue (pSYL107). Two constant-glucose fed-batch fermentations of duration 25 h were carried out in a 5-L bioreactor, with the measured oxygen volumetric mass-transfer coefficient (k(L)a) held constant at 1.1 min(-1). All major consumption and production rates were quantified. The intracellular concentration profiles of acetyl-CoA (300 to 600 mug.g RCM-1) and 3-hydroxy-butyryl-CoA (20 to 40 mug.g RCM-1) were measured, which is the first time this has been performed for E. coli during PHB production. The kinetics of PHB production were examined and likely ranges were established for polyhydroxyalkanoate (PHA) enzyme activity and the concentration of pathway metabolites. These measured and estimated values are quite similar to the available literature estimates for the native PHB producer Ralstonia eutropha. Metabolic control analysis performed on the PHB metabolic pathway showed that the PHB flux was highly sensitive to acetyl-CoA/CoA ratio (response coefficient 0.8), total acetyl-CoA + CoA concentration (response coefficient 0.7), and pH (response coefficient -1.25). It was less sensitive (response coefficient 0.25) to NADPH/NADP ratio. NADP(H) concentration (NADPH + NADP) had a negligible effect. No single enzyme had a dominant flux control coefficient under the experimental conditions examined (0.6, 0.25, and 0.15 for 3-ketoacyl-CoA reductase, PHA synthase, and 3-ketothiolase, respectively). In conjunction with metabolic flux analysis, kinetic analysis was used to provide a metabolic explanation for the observed fermentation profile. In particular, the rapid onset of PHB production was shown to be caused by oxygen limitation, which initiated a cascade of secondary metabolic events, including cessation of TCA cycle flux and an increase in acetyl-CoA/CoA ratio. (C) 2001 John Wiley & Sons. Inc. Biotechnol Bioeng 74: 70-80, 2001.

Solvent Effects in Optical Spectra of ortho-Aminobenzoic Acid Derivatives

We investigated three amino derivatives of ortho-aminobenzoic or anthranilic acid (o-Abz): a) 2-Amino-benzamide (AbzNH(2)); b) 2-Amino-N-methyl-benzamide (AbzNHCH(3)) and c) 2-Amino-N-N`-dimethyl-bezamide (AbzNH(CH(3))(2)), see Scheme 1. We describe the results of ab-initio calculations on the structural characteristics of the compounds and experimental studies about solvent effects in their absorption and steady-state and time-resolved emission properties. Ab-initio calculations showed higher stability for the rotameric conformation in which the oxygen of carbonyl is near to the nitrogen of ortho-amino group. The derivatives present decrease in the delocalization of pi electron, and absorption bands are blue shifted compared to the parent compound absorption, the extent of the effect increasing from to Abz-NH(2) to Abz-NHCH(3) Abz-NH(CH(3))(2). Measurements performed in several solvents have shown that the the dependence of Stokes shift of the derivatives with the orientational polarizability follows the Onsager-Lippert model for general effects of solvent. However deviation occurred in solvents with properties of Bronsted acids, or electron acceptor characteristics, so that hydrogen bonds formed with protic solvents predominates over intramolecular hydrogen bond. In most solvents the fluorescence decay of AbzNH(2) and AbzNHCH(3) was fitted to a single exponential with lifetimes around 7.0 ns and no correlation with polarity of the solvent was observed. The fluorescence decay of AbzN(CH(3))(2) showed lifetimes around 2.0 ns, consistent with low quantum yield of the compound. The spectroscopic properties of the monoamino derivative AbzNHCH(3) are representative of the properties presented by Abz labelled peptides and fatty acids previously studied.

Changes of somatomotor and parietal regions produced by different amounts of electrical stimulation

Our study aims to investigate changes in electrocortical activity by observing the variations in absolute theta power in the primary somatomotor and parietal regions of the brain under three different electrical stimulation conditions: control group (without stimulation), group 24 (24 trials of stimulation) and group 36 (36 trials of stimulation). Thus, our hypothesis is that the application of different patterns of electrical stimulation will promote different states of habituation in these regions. The sample was composed of 24 healthy (absence of mental and physical impairments) students (14 male and 10 female), with ages varying from 25 to 40 years old (32.5 +/- 7.5), who are right-handed (Edinburgh Inventory). The subjects were randomly distributed into three groups: control (n = 8), G24 (n = 8) and G36 (n = 8). We use the Functional electrical stimulation (FES) equipment (NeuroCompact-2462) to stimulate the right index finger extensor muscle, while the electroencephalographic signal was simultaneously recorded. We found an interaction between condition and block factors for the C3 and P3 electrode, a condition and block main effects for the C4 electrode, and a condition main effect for the P4 electrode. Our results support the hypothesis that electrical stimulation promotes neurophysiological changes. It appears that stimulus adaptation (accommodation) of specific circuits can strengthen the brain`s ability to distinguish between and respond to such stimuli over time. (C) 2009 Elsevier Ireland Ltd. All rights reserved.