By turning computer circuits into unsolvable puzzles, a University of Michigan team aims to create an unhackable computer with a new $3.6 million grant from the Defense Advanced Research Projects Agency.
Todd Austin, U-M professor of computer science and engineering, leads the project, called MORPHEUS. Its cybersecurity approach is dramatically different from today’s, which relies on software—specifically software patches to vulnerabilities that have already been identified. It’s been called the “patch and pray” model, and it’s not ideal.
This spring, DARPA announced a $50 million program in search of cybersecurity solutions that would be baked into hardware.
“Instead of relying on software Band-Aids to hardware-based security issues, we are aiming to remove those hardware vulnerabilities in ways that will disarm a large proportion of today’s software attacks,” said Linton Salmon, manager of DARPA’s System Security Integrated Through Hardware and Firmware program.
The U-M grant is one of nine that DARPA has recently funded through SSITH.
MORPHEUS outlines a new way to design hardware so that information is rapidly and randomly moved and destroyed. The technology works to elude attackers from the critical information they need to construct a successful attack. It could protect both hardware and software.
“We are making the computer an unsolvable puzzle,” Austin said. “It’s like if you’re solving a Rubik’s Cube and every time you blink, I rearrange it.”
In this way, MORPHEUS could protect against future threats that have yet to be identified, a dreaded vulnerability that the security industry called a “zero day exploit.”
“What’s incredibly exciting about the project is that it will fix tomorrow’s vulnerabilities,” Austin said. “I’ve never known any security system that could be future proof.”
Austin said his approach could have protected against the Heartbleed bug discovered in 2014. Heartbleed allowed attackers to read the passwords and other critical information on machines.
“Typically, the location of this data never changes, so once attackers solve the puzzle of where the bug is and where to find the data, it’s ‘game over,'” Austin said.
Under MORPHEUS, the location of the bug would constantly change and the location of the passwords would change, he said. And even if an attacker were quick enough to locate the data, secondary defenses in the form of encryption and domain enforcement would throw up additional roadblocks. The bug would still be there, but it wouldn’t matter. The attacker won’t have the time or the resources to exploit it.
“These protections don’t exist today because they are too expensive to implement in software, but with DARPA’s support we can take the offensive against attackers with new defenses in hardware and implement then with virtually no impact to software,” Austin said.
More than 40 percent of the “software doors” that hackers have available to them today would be closed if researchers could eliminate seven classes of hardware weaknesses, according to DARPA. The hardware weakness classes have been identified by a crowd-source listing of security vulnerabilities called the Common Weakness Enumeration. The classes are: permissions and privileges, buffer errors, resource management, information leakage, numeric errors, crypto errors, and code injection.
DARPA is aiming to render these attacks impossible within five years. If developed, MORPHEUS could do it now, Austin said.
While the complexity required might sound expensive, Austin said he’s confident his team can make it possible at low cost.
The Latest on: Unhackable computer
[google_news title=”” keyword=”unhackable computer” num_posts=”10″ blurb_length=”0″ show_thumb=”left”]
- Computer Network Architecton February 28, 2024 at 3:59 pm
Computer network architects design, build and maintain a variety of data communication networks, from expansive cloud infrastructures to smaller intranets. Along with a host of technical skills ...
- Computer Support Specialiston February 28, 2024 at 3:59 pm
Computer support specialists help with log-in difficulties, operating system and software malfunctions and some even need to pull out a screwdriver to open up a laptop or PC. Considering the ...
- Best PC computer deals: Top picks from desktops to all-in-oneson February 28, 2024 at 7:27 am
The team at PCWorld sort through all of the daily computer sales and put together a curated list of the best deals available. But not all deals are really deals, so we only choose those offered by ...
- A promising leap towards computers with light-speed capabilitieson February 28, 2024 at 7:17 am
"Our design makes the quantum photonic quantum computer more efficient in terms of light losses ... Other potential advances included improved data transmission capabilities for "unhackable" ...
- Department of Computer Science and Software Engineeringon February 25, 2024 at 6:24 am
Today, computers are in everything, everywhere. This fact is making computer scientists and software engineers indispensable. They are the ones leading the way in developing the next generation ...
- Best computer speakers 2024: Boost your desktop soundon February 20, 2024 at 10:15 am
The best computer speakers can improve the audio experience from your desktop setup. Can't hear the converstaion clearly from your Teams meetings? A pair of the best computer speakers can help that.
- “Unhackable” Computer Chip Works on Lighton February 18, 2024 at 4:00 am
Researchers from the University of Pennsylvania developed a new computer chip that uses light instead of electricity, which can improve AI model training by improving the speed of data transfer and ...
- New computer chip enables AI computing at the speed of lighton February 16, 2024 at 1:17 pm
Engineers have introduced a novel computer chip that could redefine the landscape of artificial intelligence (AI) development.
- US researchers develop 'unhackable' computer chip that works on lighton February 16, 2024 at 2:00 am
Researchers at the University of Pennsylvania have developed a new computer chip that uses light instead of electricity. This could improve the training of artificial intelligence (AI) models by ...
- The “Quantum Internet” Is Just a Decade Away. Here’s What You Need to Know.on February 5, 2024 at 12:58 am
The word "quantum" sounds so advanced and complex that people tend to get hyped up about anything attached to it. While not every quantum breakthrough elicits a positive response, in the case of ...
via Google News and Bing News