공급망 위협에 대응하기 위한 암호모듈의 안전한 부팅 보안 요구사항 제안
Secure Boot Security Requirements for Cryptographic Modules against Supply Chain Threats
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
공급망 위협에 대응하기 위해 Secure Boot 등의 소프트웨어 위변조 방지 기술 및 SBOM(Software Bill of Materials) 등의 관리체계 개발 연구가 활발하게 이루어지고 있다. 특히 TCG(Trusted Computing Group)에서는 신뢰할 수 있고 안전한 컴퓨팅 부팅 환경을 제공할 수 있는 TPM(Trusted Platform Module) 표준을 제시하고 있다. 본 논문에서는 암호모듈이 공급망 위협에도 안전하고, 신뢰할 수 있는 기능을 제공할 수 있도록 암호모듈을 위한 안전한 부팅 기술 도입 필요성을 설명한다. 또한, ISO/IEC 19790 표준으로 검증된 암호모듈의 취약점을 분석하고, 취약점에 대응할 수 있도록 암호모듈의 안전한 부팅을 위한 보안 요구사항을 제안한다.
Abstract
In order to respond to supply chain threats, active research and development efforts are underway for software tamper prevention technologies such as Secure Boot and management systems like Software Bill of Materials(SBOM). Particularly, the Trusted Computing Group (TCG) is introducing standards for Trusted Platform Module(TPM) to provide a secure and trustworthy computing boot environment. This paper emphasizes the need for introducing secure booting technology for cryptographic modules to ensure that they remain safe and provide reliable functionality even in the face of supply chain threats. Furthermore, it analyzes vulnerabilities in cryptographic modules verified by the ISO/IEC 19790 standard and proposes security requirements for secure booting of cryptographic modules to address these vulnerabilities.
참고문헌 (19)
- Daewon Kim, "Trends in Supply-Chain Security Technologies", Electronics and Telecommunications Trends, 35(4), pp.149~157 (2020)
- Yunseong Choi, "Trends in Software Supply chain Security Polices in USA : : A focus on SBOM", KIISC, 32(5), pp.7~14 (2022)
- "Secure Software Development Attestation Form Instructions" (2023)[URL]
- "Cisco Trustworthy Technologies Data Sheet" (2023)[URL]
- J. Frazelle, "Securing the Boot Process : The hardware root of trust", ACM Queue, 17(6), pp.5~21 (2019)
- "OpenTitan" (2023)[URL]
- Intel Information Technology Cybersecurity, "IntelⓇ Hardware Shield-Below-the-OS Security", White Paper, ~ (2021)
- R. Wilkins, "UEFI Secure Boot in Modern Computer Security Solutions" (2013)
- ISO, "IEC 19790", Information technology -Security techniques-Security requirements for cryptographic modules, 2012
- ISO, "IEC 24759", Information technology –Security techniques-Test requirements for cryptographic modules, 2017
- Graham Costa, "ISO 19790 : 2024 and 24759 : 2024 – How is progress and what has changed?", International Cryptographic Module Conference 2023 (2023)
- K. Schaffer, "CMVP Approved Authentication Mechanisms", NIST SP 800-140E, ~ (2020)
- GlobalPlatform Technology, "Root of Trust Definitions and Requirements Version 1.1.1", ~ (2022)
- Rui Wang, "A Survey of Secure Boot Schmes for Embedded Deivces", International Conference on Advanced Communications Technology(ICACT), pp.224~227 (2022)
- Sara Zimmo, "Trusted Boot for Embedded Systems Using Hypothesis Testing Benchmark", 2020 IEEE Conference on Electrical and Computer Engineering(CCECE) (2020)
- Andres Meza, "Security Verification of the Open Titan Hardware Root of Trust", IEEE Security & Privacy, 21, pp.27~36 (2023)
- 김진우, "TPM을 활용한 임베디드 시스템 환경의 보안 부팅 구현", 정보보호학회논문지, 29(5), pp.949~960 (2019), 한국정보보호학회[DOI]
- V. Mattila, "Hardware Root of Trust Based TPM : The Inherent of 5irechain Security", International Journal of Social Sciences and Management Review, 5(3), pp.248~258 (2022)
- Promila, "TPM Based Secure Boot in Embedded Systems", 2023 Third International Conference on Secure Computing and Communication(ICSCCC), pp.786~790 (2023)