UltraSoC announces Bare Metal Security

“UltraSoC has proven success in accelerating SoC development,” said Rupert Baines, CEO, UltraSoC. “Today we move up a gear, and address another of the semiconductor industry’s most pressing problems – security. Our Bare Metal Security tools complement traditional security mechanisms, adding protection against both malicious attacks and against inadvertent malfunctions. Better still, the same gates provide all of the established benefits of developing with UltraSoC; a vendor-independent infrastructure that allows faster, more cost-efficient debug and performance optimisation capabilities that are beyond the reach of conventional technologies.”

Bare Metal Security functionality uses the UltraSoC monitors to watch for unexpected behaviors such as suspicious memory accesses or processor activity, at hardware speed and non-intrusively, with minimal silicon overhead. Because it is an orthogonal on-chip hardware infrastructure independent of the main system functionality and software, there is no negative impact on system performance and it is very difficult for an attacker to subvert or tamper with.

Although it functions below and outside of the operating system, the technology also provides a means of communicating with software on the device as part of a holistic security system, if this is necessary. Bare-Metal Security features also provide visibility of the whole system, making it extremely difficult to camouflage or hide an attack.

“People increasingly appreciate the urgency of addressing security,” said Caroline Gabriel, Research Director, Rethink Research. “However, robust security cannot be bolted-on as an afterthought: it must be designed-in from the beginning. UltraSoc’s Bare Metal Security provides an attractive addition to the options available for a system developer. By providing an independent mechanism for raising an alarm or putting the system into a safe mode, this delivers an additional layer of security, especially useful as we move to the IoT age, where ‘everything’ is connected.”

Haydn Povey, CEO, Secure.Thingz, commented: “We’re seeing increasing interest in building security into SoCs at the hardware level. In fact, a number of recent announcements have promised just that. UltraSoC’s technology goes further: an independent on-chip security infrastructure, as a complement to other access-control mechanisms. Because it is versatile and scalable it has applications from IoT, through to enterprise applications, making it an attractive option for many SoC design teams.”

By offering resource-efficient and highly effective protection against malicious attack and malfunction, the UltraSoC on-chip analytics and monitoring system provides both development support and functionality enhancement from the same on-chip blocks. Teams which are already using UltraSoC to accelerate the debug, silicon validation and bring-up process can therefore utilise the same infrastructure for security processing; while designers who need Bare Metal Security features get the development benefits of a vendor-independent on-chip debug infrastructure at zero additional cost.

Bare Metal Security features will typically serve as a complement to, rather than a substitute for, conventional security measures. In other cases they offer a robust level of protection unattainable using conventional security architectures, within the resource constraints of lightweight embedded devices such as those expected to make up the majority of the emerging IoT market.

Although originally developed for debug and silicon validation, UltraSoC’s IP also enables a broad range of value-added functionality in-service, of which security is just one example. Other applications include in-field monitoring, performance optimisation, reducing power utilisation and SLA enforcement.

Today’s announcement from UltraSoC coincides with the inaugural conference of the IoT Security Foundation in London. The Foundation, of which UltraSoC is an active member, aims to maximise the benefits of the IoT by promoting knowledge and best practice in excellent, appropriate security to those who specify, make and use IoT products and systems.