In this lesson,
we will learn about hardware assurance.
Hardware assurance ensures that physical components
are secure, reliable,
and free from malicious alterations or defects.
Hardware assurance concepts
include the certification and validation process.
The certification process is a formal evaluation
that verifies hardware components
meet specific security standards and operate as expected.
Validation is the ongoing process
of testing and verifying
that hardware meets its design standards,
especially when updates or changes are made.
Let's learn more about hardware certification
and validation processes.
First, we have certification.
Certification is the formal process
of evaluating hardware components
to ensure they meet specific security standards
and operate as expected.
A widely recognized framework for hardware certification
is the Common Criteria, or CC.
The common criteria is used to assess
how well a product can defend
against defined security threats.
The depth of the evaluation,
known as the Evaluation Assurance Level, or EAL,
varies based on how critical the system or product is.
EAL levels vary from EAL 1, functionally tested,
to EAL 7, formally verified design and tested.
Higher levels of certification such as EAL 7
require more rigorous testing
and may be used to certify
classified government or defense systems.
For example, if a manufacturer designs a new chip,
they might submit the chip
for evaluation under the Common Criteria
to obtain certification.
The certification process
ensures the chip meets strict security requirements
laid out through Protection Profiles and Security Targets.
A Protection Profile describes potential threats
and countermeasures for evaluation.
For instance, a chip's Protection Profile
might require protection against physical tampering,
the use of strong encryption to safeguard data,
and a secure boot process.
Next, a Security Target would describe
how the product will meet the security requirements
defined in the Protection Profile.
For instance, the chip's Security Target
may specify the implementation of tamper resistance
to protect against physical tampering,
strong encryption mechanisms to safeguard the data,
and a secure boot process
to ensure that only verified, trusted software is executed.
Additionally, a Security Target
might detail features like access control
to ensure that only authorized users
can interact with critical components of the chip.
Common Criteria certification is particularly valuable
in high-security sectors such as national defense,
government systems, and critical infrastructure,
where hardware vulnerabilities
could have severe consequences.
Another key initiative for hardware security
is the Trusted Foundry Program.
The Trusted Foundry Program
is part of the U.S. Department of Defense's efforts
to secure the manufacturing of critical hardware components.
The program was established
to address a significant concern:
the risk that malicious components or backdoors
could be inserted during the manufacturing process.
Such vulnerabilities could be exploited later,
potentially compromising the security of devices
and posing serious risks to defense systems
and sensitive government infrastructure.
So, to mitigate this risk, the Trusted Foundry Program
certifies manufacturing facilities
that adhere to stringent security protocols.
These protocols include access control,
ensuring only authorized personnel
handle sensitive hardware,
supply chain security, which requires components
to be sourced from trusted suppliers,
and data and communication security
where sensitive information is protected through encryption.
Certified facilities also undergo
regular audits and inspections
to ensure compliance with these protocols.
As a result, only Trusted Foundry-certified facilities
are authorized to produce specific microelectronics
and hardware components vital to national security.
This certification provides a high level of assurance
that products have not been tampered with
or compromised during production.
Now, let's explore validation.
Validation is the ongoing process
of testing and verifying that hardware continues to meet
its design and security standards,
especially after updates or changes.
This ensures that even after initial certification,
hardware remains secure and reliable.
One critical framework for validation
is the National Institute of Standards and Technology,
or NIST,
800-161 publication.
This publication focuses on supply chain risk management
for information and communication technology systems.
This standard provides guidance
to federal agencies and contractors
to identify, assess, and manage risks
throughout the information
and communication technology supply chain.
NIST 800-161 also emphasizes the need
for continuous validation
by putting in place checks and controls
at each stage of the hardware's development,
manufacturing, and delivery.
Similarly, NIST 800-171
sets guidelines for protecting sensitive information,
specifically Controlled Unclassified Information, or CUI,
in non-federal systems and organizations.
This is particularly important
for contractors working with the federal government.
For instance, if a contractor
is building hardware components for a government project,
NIST 800-171 outlines how to safeguard CUI,
both during the development
and throughout the lifecycle of the hardware.
This validation process
ensures that sensitive data is protected
and ensures the hardware is not just physically secure,
but also capable of handling sensitive information
without compromise.
Finally, the Internet of Things, or IoT,
Cybersecurity Improvement Act of 2020
establishes cybersecurity requirements for IoT devices
used by the federal government.
The act mandates that IoT devices,
including their hardware components,
meet specific security standards,
such as vulnerability management, patching,
and authentication.
If a company is developing an IoT sensor or device
for government use,
they must validate that it complies with these standards
from development to deployment
and throughout the device's operational lifecycle.
So remember, hardware assurance ensures
that physical components are secure, reliable,
and free from tampering and defects.
This involves two key processes,
certification and validation.
Certification is the formal evaluation process.
Certification verifies
that hardware meets specific security standards.
An example of a certification framework
is the Common Criteria.
The Common Criteria assesses
how well a product defends against security threats.
Next, validation is the ongoing process
of testing and verifying
that hardware continues to meet these standards over time,
especially after updates or changes.
Frameworks like NIST 800-161 and NIST 800-171
provide guidelines for managing supply chain risks
and protecting sensitive information,
ensuring hardware remains secure throughout its lifecycle.
Finally, the Internet of Things, or IoT,
Cybersecurity Improvement Act of 2020
sets cybersecurity standards
for IoT devices used by the federal government.
It requires devices to meet strict security measures,
like vulnerability management and authentication.
This act ensures IoT devices remain secure
throughout their lifecycle,
protecting government systems
from risks posed by IoT devices.