Workshop: An Introduction to the Emerging IP Security Assurance Standard
Presented at DVCon U.S. 2020 on March 2, 2020
A System on Chip (SoC) or Application Specific Integrated Circuit (ASIC) is comprised of multiple components referred to as Intellectual Property (IP) blocks or just IP. These blocks come from multiple sources such as internal development teams, IP suppliers, tool-generated IP, etc. Typically, the SoC/ASIC owner integrates multiple IPs from multiple sources, which raises concerns about the security risk. How much risk is the Silicon owner (i.e., Integrator) inheriting? What potential security concerns exist that the Integrator must address to ensure the security objectives of the SoC/ASIC are upheld? This workshop introduces an emerging new standard called IP Security Assurance (IPSA) to address these concerns in a manner that is low-overhead, non-disruptive, and scalable across IP families. The standard specifies an approach to highlight IP assets and associated known security weakness entries in a knowledge base for the mitigation implementer to address.
The workshop focuses on the following and is based on the IP Security Assurance Standard whitepaper published on September 4, 2019:
- Methodology that details the overall concept and workflow along with the individual components, dependencies, and assumptions.
- Security weakness knowledge base that highlights potential IP security concerns.
- OpenCores examples to demonstrate how the methodology applies to real IP cores.
- Summary and outlook that detail the road map and expectations moving forward. This includes integrator's obligations when integrating IPSA-ready IP and suppliers' obligations to sustaining assurance with IPSA-ready IP.
The workshop is divided into four parts:
- Part 1: Introduction -- Mike Borza, Synopsys, Inc.
- Part 2: Methodology & Workflow -- Ambar Sarkar, NVIDIA Corp.
- Part 3: Capturing Security Concerns Knowledge in the Accellera IPSA Standard -- Brent Sherman (in spirit), Intel Corp.
- Part 4: Suppliers and Integrators’ Obligations In Context of Emerging IPSA Standard -- Adam Sherer, Cadence Design Systems, Inc.